Compliance Support › Compliance Support in CA Identity Manager

Compliance Support in CA Identity Manager

Compliance is a corporate governance that includes a wide range of procedures that ensure a company and its employees comply with business policies. These compliance procedures often involve documenting, automating, and auditing the allocation of entitlements to applications and systems.

CA Identity Manager includes the following features, which support compliance management:

• Smart Provisioning--When CA Identity Manager integrates with CA Identity Governance, you can configure additional functionality that allows you to use role and compliance information, which is available in an RCM role model, to support day-to-day identity management operations.

  This functionality includes:

  • Suggested Provisioning Roles

    CA Identity Manager can provide administrators with a list of provisioning roles that may be appropriate to assign to a user. The list of provisioning roles is determined by CA Identity Governance, based on criteria entered by the administrator.

    Suggested provisioning roles ensure that users have the correct privileges, while maintaining a company's role model.

  • Policy Validations

    CA Identity Manager administrators can validate proposed changes against a role model in CA Identity Governance before committing changes. Validating changes before they are committed helps companies maintain the role model that they have defined for their operations.

    Users can validate proposed changes to provisioning roles (assigning or removing them), and changes to user attributes.

• Identity policies--You can create a compliance policy, a type of identity policy, which prohibits users from having certain privileges if they have other privileges. For example, you can prohibit users who can approve checks from issuing checks.

  Compliance policies enforce a segregation of duties in your environment.

• Compliance reports--CA Identity Managerincludes sample reports that display the compliance status for users in your environment. Using this report, you can see which users are not compliant with your business policies.

More information:

Identity Policies

Reports