| theme | {"label":"solarized_dark","value":"solarized_dark"} |
|---|
| contentByMode | {"html":"<doctype html></doctype><!doctype html>\r\n<link href=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css\" rel=\"stylesheet\" integrity=\"sha384-EVSTQN3/azprG1Anm3QDgpJLIm9Nao0Yz1ztcQTwFspd3yD65VohhpuuCOmLASjC\" crossorigin=\"anonymous\">\r\n<script src=\"https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js\" integrity=\"sha384-MrcW6ZMFYlzcLA8Nl+NtUVF0sA7MsXsP1UyJoMp4YLEuNSfAP+JcXn/tWtIaxVXM\" crossorigin=\"anonymous\"></script>\r\n<div class =\"bd-example\">\r\n<div class=\"accordion\" id=\"accordionExample\">\r\n <div class=\"accordion-item\">\r\n <h2 class=\"accordion-header\" id=\"headingOne\">\r\n <button class=\"accordion-button\" type=\"button\" data-bs-toggle=\"collapse\" data-bs-target=\"#collapseOne\" aria-expanded=\"true\" aria-controls=\"collapseOne\">\r\n Using EmpowerID for AuthenticationResources Members Eligible to Request (As Actor)\r\n </button>\r\n </h2>\r\n <div id=\"collapseOne\" class=\"accordion-collapse collapse show\" aria-labelledby=\"headingOne\" data-bs-parent=\"#accordionExample\">\r\n <div class=\"accordion-body\">\r\n <p>Use <p>Add this option when hosting the microservice outside of Azurerule when you want to give members of the group the ability to shop for access to the resources you add here.</p>\r\n <ul><ol>\r\n <li><b>Name</b> - Enter a name for your account store<<li>Click the <b>Add</b> button in the grid header.</li>\n <li><b>Base DN</b> - Enter the root OU of the LDAP system, such as, \n <code><mark>dc=example,dc=com</mark></code></li>\n <li><b>SCIM Base URL</b> - Enter the URL for the SCIM app service. The base URL should include the \n version and look similar to the following: <br /><code><mark>http://192.168.87.106:8080/empoweridisam/scim/v2/</mark></code></li>\n <li><b>Use EmpowerID Authentication</b> - Select this option when using EmpowerID for authentication</li>\n <li><b>OAuth Application GUID</b> - Enter the GUID of the OAuth application you created for IBM Security Verify Access in EmpowerID.</li>\n <li><b>URL For Access Token</b> - Enter the URL to your EmpowerID environment, such as <code><mark>https://sso.empoweriam.com</mark></code>, where <code><mark>sso.empoweriam.com</mark></code>\n is the FQDN of your EmpowerID front-end server.</li>\n <li><b>Is Remote (Requires Cloud Gateway)</b> - This setting appears for account stores with local directories, such as Active Directory, LDAP, SAP, etc. When enabled, this tells EmpowerID to use the Cloud Gateway Connection for that account store. The Cloud Gateway Connection must be installed on an on-premise machine. For installation information, \n please see <a href=\"https://dotnetworkflow.jira.com/wiki/spaces/EAGV21/pages/2276065995/Install+the+Cloud+Gateway+Client\">Installing the EmpowerID Cloud Gateway Client</a>.</li>\n <li><b>Check For Deleted Objects</b> - Select this option to sync deleted objects. If this is not set to true,\n the connector will not disable deleted objects.</li>\n <li><b>Check For Deleted Objects Interval Minutes</b> - Specify the interval in minutes that EmpowerID should check for deleted objects.</li>\n </ul>\n </div>\n </div>\n </div>r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/eligibility-resourcesmemberseligibletorequestasactor-addnewbtn.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n <li>Fill in the fields of the Assignment Information pane:\r\n <ul>\r\n <li><b>Assignment Type</b> – Select <b>Direct</b> or <b>Location</b>.</li>\r\n <li><b>Eligibility Type</b> – Select <b>Eligible</b>, <b>PreApproved</b>, or <b>Suggested</b>.</li>\r\n <li><b>Resource Type</b> – Search for and select the type of resource corresponding to the resource for which you are granting eligibility. For example, if you want to grant eligibility for a specific Management Role, you select <em>Management Role</em> as the resource type.</li>\r\n <li><b>Enter a ⟨Resource Type⟩Name to Search</b> – for and select the specific resource to which members of the group are eligible to request. The resource must match the resource type or it will not appear when searching. For example, if you select <em>Management Role</em> as the <em>resource type</em>, you can only search for Management Roles.</li>\r\n </ul>\r\n <li>After entering your information, click <b>Save</b>.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/Eligibility-AssignmentPaneSubmit-Group.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n <li>Repeat steps 2 and 3 to add other eligibility assignments as needed.</li>\r\n <li>When ready, close the Assignment Information pane and click <b>Submit</b>.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/eligibilityassignmentssubmit.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n </ol>\r\n </div>\r\n </div>\r\n </div>\r\n <div class=\"accordion-item\">\r\n <h2 class=\"accordion-header\" id=\"headingTwo\">\r\n <button class=\"accordion-button collapsed\" type=\"button\" data-bs-toggle=\"collapse\" data-bs-target=\"#collapseTwo\" aria-expanded=\"false\" aria-controls=\"collapseTwo\">\r\n Resources Members May Not Request (As Actor)\r\n </button>\r\n </h2>\r\n <div id=\"collapseTwo\" class=\"accordion-collapse collapse\" aria-labelledby=\"headingTwo\" data-bs-parent=\"#accordionExample\">\r\n <div class=\"accordion-body\">\r\n <p>Add this rule when you want to explicitly restrict members of the group from having access to certain resources. Keep in mind that users restricted from resources will not be able to request those resources <em>even if they have another assignment that that grants them eligibility</em>.</p>\r\n <ol>\r\n <li>Click the <b>Add</b> button in the grid header.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/Eligibility-ResourcesMembersMayNotRequest-AsActor.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n <li>Fill in the fields of the Assignment Information pane:\r\n <ul>\r\n <li><b>Mode</b> – Select <b>Direct</b> or <b>Location</b>.</li>\r\n <li><b>Eligibility Type</b> – Select <b>Eligible</b>, <b>PreApproved</b>, or <b>Suggested</b>.</li>\r\n <li><b>Resource Type</b> – Search for and select the type of resource corresponding to the resource for which you are granting eligibility. For example, if you want to grant eligibility for a specific group, you select <em>Group</em> as the resource type.</li>\r\n <li><b>Enter a ⟨Resource Type⟩Name to Search</b> – for and select the specific resource to which members of the group are eligible to request. The resource must match the resource type or it will not appear when searching. For example, if you select <em>Group</em> as the <em>resource type</em>, you can only search for groups.</li>\r\n </ul>\r\n <li>After entering your information, click <b>Save</b>.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/Eligibility-AssignmentPaneSubmit-Group.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n <li>Repeat steps 2 and 3 to add other eligibility assignments as needed.</li>\r\n <li>When ready, close the Assignment Information pane and click <b>Submit</b>.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/eligibilityassignmentssubmit.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n </ol>\r\n </div>\r\n </div>\r\n </div>\r\n <div class=\"accordion-item\">\r\n <h2 class=\"accordion-header\" id=\"headingTwoheadingThree\">\r\n <button class=\"accordion-button collapsed\" type=\"button\" data-bs-toggle=\"collapse\" data-bs-target=\"#collapseTwo#collapseThree\" aria-expanded=\"false\" aria-controls=\"collapseTwocollapseThree\">\n Using Azure AD for Authentication\r\n Who is Eligible to Request (As Resource)\r\n </button>\r\n </h2>\r\n <div id=\"collapseTwocollapseThree\" class=\"accordion-collapse collapse\" aria-labelledby=\"headingTwoheadingThree\" data-bs-parent=\"#accordionExample\">\r\n <div class=\"accordion-body\">\r\n <p>Use <p>Add this option when hosting the microservice in Azurerule when you want to give users the ability to shop for membership in the group from the IT Shop.</p>\r\n <ul><ol>\r\n <li><b>Name</b> - Enter a name for your account store<<li>Click the <b>Add</b> button in the grid header.</li>\n <li><b>Base DN</b> - Enter the root OU of the LDAP system, such as, <code><mark>dc=example,dc=com</mark></code></li>\n <li><b>SCIM Base URL</b> - Enter the URL for the SCIM app service. The base URL should include the \n version and look similar to the following: <br /><code><mark>http://192.168.87.106:8080/empoweridisam/scim/v2/</mark></code></li>\n <li><b>Application ID</b> - Enter the Client ID of the service principal application you registered in Azure for EmpowerID.</li>\n <li><b>Tenant ID</b> - Enter the Tenant ID for your Azure tenant hosting the app service.</li>\n <li><b>Is Remote (Requires Cloud Gateway)</b> - This setting appears for account stores with local directories, such as Active Directory, LDAP, SAP, etc. When enabled, this tells EmpowerID to use the Cloud Gateway Connection for that account store. The Cloud Gateway Connection must be installed on an on-premise machine. For installation information, \n please see <a href=\"https://dotnetworkflow.jira.com/wiki/spaces/EAGV21/pages/2276065995/Install+the+Cloud+Gateway+Client\">Installing the EmpowerID Cloud Gateway Client</a>.</li>\n <li><b>Azure App Certificate Thumbprint</b> - Enter the thumbprint of the certificate you uploaded to Azure for the service principal application</li>\n <li><b>Check For Deleted Objects</b> - Select this option to sync deleted objects. If this is not set to true,\n the connector will not disable deleted objects.</li>\n <li><b>Check For Deleted Objects Interval Minutes</b> - Specify the interval in minutes that EmpowerID should check for deleted objects.</li>\n </ul>\n </div>\n </div>\n </div>\n </div>\n <br />\n <ol start=\"5\">\n <li>When ready, r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/Eligibility-WhoIsEligibleToRequestAsResource-NewBtn.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n <li>Fill in the fields of the Assignment Information pane:\r\n <ul>\r\n <li><b>Mode</b> – Select <b>Direct</b> or <b>Location</b>.</li>\r\n <li><b>Eligibility Type</b> – Select <b>Eligible</b>, <b>PreApproved</b>, or <b>Suggested</b>.</li>\r\n <li><b>Which Type of Assignee for this Policy</b> – Search for and select the type of resource corresponding to the resource for which you are granting eligibility. For example, if you want to grant all members of a specific group eligibility, you select <em>Group</em> as the resource type.</li>\r\n <li><b>Select ⟨Resource Type⟩ Name to Search</b> – Search for and select the specific assignee eligible for access to the group. The assignee must match the assignee type or it will not appear when searching. For example, if you select <em>Group</em> as the assignee type, you can only search for groups.</li>\r\n </ul>\r\n <li>After entering your information, click <b>Save</b>.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/Eligibility-AssignmentPaneSubmit-Group.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n <li>Repeat steps 2 and 3 to add other eligibility assignments as needed.</li>\r\n <li>When ready, close the Assignment Information pane and click <b>Submit</b>.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/eligibilityassignmentssubmit.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n </ol>\r\n </div>\r\n </div>\r\n </div>\r\n <div class=\"accordion-item\">\r\n <h2 class=\"accordion-header\" id=\"headingFour\">\r\n <button class=\"accordion-button collapsed\" type=\"button\" data-bs-toggle=\"collapse\" data-bs-target=\"#collapseFour\" aria-expanded=\"false\" aria-controls=\"collapseFour\">\r\n Who is Excluded from Requesting (As Resource)\r\n </button>\r\n </h2>\r\n <div id=\"collapseFour\" class=\"accordion-collapse collapse\" aria-labelledby=\"headingFour\" data-bs-parent=\"#accordionExample\">\r\n <div class=\"accordion-body\">\r\n <p>Add this rule when you want to explicitly restrict members of the group from having access to certain resources. Keep in mind that users restricted from resources will not be able to request those resources <em>even if they have another assignment that that grants them eligibility</em>.</p>\r\n <ol>\r\n <li>Click the <b>Add</b> button in the grid header.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/Eligibility-WhoIsExcludedFromRequestingAsResource-AddNewBtn.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n <li>Fill in the fields of the Assignment Information pane:\r\n <ul>\r\n <li><b>Mode</b> – Select <b>Direct</b> or <b>Location</b>.</li>\r\n <li><b>Eligibility Type</b> – Select <b>Eligible</b>, <b>PreApproved</b>, or <b>Suggested</b>.</li>\r\n <li><b>Which Type of Assignee for this Policy</b> – Search for and select the type of resource corresponding to the resource for which you are granting eligibility. For example, if you want to grant all members of a specific group eligibility, you select <em>Group</em> as the resource type.</li>\r\n <li><b>Select ⟨Resource Type⟩ Name to Search</b> – Search for and select the specific assignee eligible for access to the group. The assignee must match the assignee type or it will not appear when searching. For example, if you select <em>Group</em> as the assignee type, you can only search for groups.</li>\r\n </ul>\r\n <li>After entering your information, click <b>Save</b>.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/Eligibility-AssignmentPaneSubmit-Group.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n <li>Repeat steps 2 and 3 to add other eligibility assignments as needed.</li>\r\n <li>When ready, close the Assignment Information pane and click <b>Submit</b>.</li>\r\n <p><img src=\"https://docs.empowerID.com/assets/img/confluence/eligibilityassignmentssubmit.png\" style=\"padding: 10px;max-height: 600px\"/></p>\r\n </ol>\n</div>\r\n </div>\r\n </div>\r\n </div> \r\n </div>\r\n </div>\r\n ","javascript":"","css":""} |
|---|
|
