New Driver Configuration and Identity Manager Password Synchronization

If you are not using Password Synchronization 1.0, and you are creating a new driver or replacing an existing driver's configuration with the Identity Manager configuration, follow the instructions in "New Driver Configuration and Identity Manager Password Synchronization" in Novell Nsure Identity Manager 2.0.1 Administration Guide.

In addition, do the following:

• Set up SSL, if necessary. See Addressing Security Issues.

  The ability of the driver to set a password in Active Directory (Subscriber channel) requires a secure connection provided by one of the following conditions:

  • The machine running the driver is the same machine as the domain controller.
  • The machine running the driver is in the same domain as the domain controller.
  • The machine not in the domain requires the Simple method and SSL set up between it and the domain controller. Bidirectional password synchronization is available only when using the negotiate authentication mechanism.

    Refer to Microsoft documentation for instructions, such as Configuring Digital Certificates on Domain Controllers.

• Install new Password Synchronization filters and configure them if you want the connected system to provide user passwords to Identity Manager. See Setting Up Password Synchronization Filters.
• Set up the scenario for Password Synchronization that you want to use, using the Password Policies and the Password Synchronization settings for the driver. See "Implementing Password Synchronization" in the Novell Nsure Identity Manager 2.0.1 Administration Guide.