Description

This tutorial covers the End-User Self Service features that are part of the Sun Identity Manager product.

Top

Learning Objectives

After completing this tutorial, the following topics should be understood.

How to enable the self-registration feature of Identity Manager
Account creation using Self Registration
Editing User's Profile
Request a new Role
Change User's Password

Top

Prerequisites

The following items must be completed before starting this tutorial.

Complete the Identity Manager Configuration Tutorial

Top

Setup

The following steps need to performed to enable the demonstration.

Section 1: Enable Self Registration

Identity Manager provides a Self Registration option for the End-User interface. This feature is NOT enabled by default. Access the default End-User interface to verify that this feature is not available.

Open the End-User interface: `http://localhost:8080/idm/user` Notice there are no registration links below the Login Button
Access the Admin Interface `http://localhost:8080/idm` and log in as: configurator / configurator Select the Configuration Tab (far right side) Select the User Interface sub-Tab Locate the Anonymous Enrollment Section Check the Enable CheckBox (should be un-checked, by default) Click the Save Button
Open the End-User interface (again): `http://localhost:8080/idm/user` Notice there is a registration links Request Account below the Login Button

Top

Demonstration

After completing the setup above, the following steps should be performed to complete this tutorial.

Section 1: Request a new account

Access the End-User interface: http://localhost:8080/idm/user
Click the Request Account link
Fill out the Form: First Name, Last Name, Employee ID, Click Next

Enter a value for Password and Confirm Password, use Passw0rd for the value, Click Register

You will see a summary page, Click OK
The request is waiting to be approved.

Access the Admin Interface http://localhost:8080/idm and log in as: configurator / configurator
Select the Work Items tab, Select Approvals sub-tab, Click on the link to View / Approve the request.

An approval form is shown. Enter a Comment and Click Approve
The user will now be created in Identity Manager.

Find the created User
Select the Accounts tab
select the Find Users sub-tab
Select First Name from the Drop Down List
Select starts with from the Drop Down List
Enter part/all of the user's First Name in the Text Field
Click the Search Button

Select the User from the search results to view the details.

You can use this Form to edit the user's information. Each Tab on the Form contains different information. Select Cancel when you are done.

Warning

You MUST select either Save or Cancel when you are done with a User's account. If you go to another web-age without selecting one of these, the User's account will remain locked and not accessible to other users / processes.

Log out of Identity Manager

Section 2: Editing the User's Profile

We will use the Account created in the previous step.

Access the End-User interface: `http://localhost:8080/idm/user` Enter the User ID and Password previously created Click the Login Button
Select the Profile tab, select the Account Attributes sub-tab. This Form will contain read-only information and fields that the user can update. If you want, change the email address and click Save, else click Cancel Log out of Identity Manager

Section 3: User Requests a Role

Access the End-User interface: `http://localhost:8080/idm/user` Enter the User ID and Password previously created Click the Login Button
Select the Requests tab, select the Launch Request sub-tab Check the Box in front of the Employee Role Select Submit A confirmation page is displayed, click OK
Select the Requests tab, select the View sub-tab Notice that the requests have finished. Log out of Identity Manager

Section 4: Change Password

Access the End-User interface: `http://localhost:8080/idm/user` Enter the User ID and Password previously created Click the Login Button
Select the Profile tab, select the Change Password sub-tab Enter a new Password and Confirm Password Click the Save Button
Identity Manager is configured, by default, to have the User enter their existing password. This is a security feature. Enter the user's existing (old) Password Click OK A confirmation page is displayed, click OK Log out of Identity Manager