Enabling registries to participate in lookup operations and to use policy associations

 

EIM allows you to control how each registry participates in EIM. Because a policy association can have a large scale effect within an enterprise, you can control whether a registry can be affected by policy associations. Also, you can control whether a registry can participate in mapping lookup operations at all. To use policy associations for a registry, enable their use for that registry as well as enable that registry to participate in lookup operations.

To enable registries to use policy associations and participate in lookup operations, complete these steps:

To enable the MYCO.COM registry to participate in mapping lookup operations, follow these steps:

  1. In iSeries™ Navigator, expand System A > Network > Enterprise Identity Mapping > Domain Management > MyCoEimDomain > User registries.

  2. Right-click the MYCO.COM registry and select Mapping Policy....

  3. On the General page, select Enable mapping lookups for registry MYCO.COM, and click OK.

To enable the SYSTEMA.MYCO.COM registry to participate in mapping lookup operations and to use policy associations, follow these steps:

  1. In iSeries Navigator, expand System A > Network > Enterprise Identity Mapping > Domain Management > MyCoEimDomain > User registries.

  2. Right-click the SYSTEMA.MYCO.COM registry and select Mapping Policy....

  3. On the General page, select Enable mapping lookups for registry SYSTEMA.MYCO.COM, select Use policy associations, and click OK.

Repeat these steps to enable the SYSTEMB.MYCO.COM registry to participate in mapping lookup operations and to use policy associations, but on the General page, select Enable mapping lookups for registry SYSTEMB.MYCO.COM, select Use policy associations, and click OK.

Now that you have completed the EIM configuration for your registries and users, you should test the resulting mappings to ensure that they work as planned.

 

Parent topic:

Scenario: Enabling single signon for i5/OS
Previous topic: Creating default registry policy associations