SCIM Driver 1.0.1.0200 Readme

Overview

The System for Cross-domain Identity Management (SCIM) Driver specification is designed to manage users and groups in cloud-based applications. This update is applicable for SCIM drivers running Identity Manager 4.7.4 or Identity Manager 4.8.1, or later. The driver version will be changed to 1.0.1.0200 after the patch is applied.

This Readme comprises the following sections:

• System Requirements
• Upgrading the Driver
• Technical Support Information

System Requirements

Identity Manager 4.7.4, or later

Identity Manager 4.8.1, or later

Upgrading the Driver

The driver upgrade process involves the following tasks:

• Upgrading the Driver Packages
• Upgrading the Driver Files

Upgrading the Driver Packages

1. Download the following packages:

   Name	Package Name	Version	Build Date	Build Number
   SCIM Base Configuration	NETQSCIMBASE	1.0.1	20211223	151032
   SCIM Entitlements Configuration (optional for SCIM 1.0.1.0200)	NETQSCIMENT	1.0.1	20211223	151040



2. Open the project in Designer to deploy the driver.


3. Navigate to Help menu and select Check for Package Updates. Install the above SCIM packages.


4. Drag the driver from Designer Pallet > Tools.


5. Configure the driver as mention in SCIM Implementation Guide.


6. To verify driver configuration and packages, right click the connector line and navigate to Properties > Packages.

Upgrading the Driver Files

1. Download and unzip the contents of the IDM_SCIM_1.0.1_P2.zip file to a temporary location on your computer.


2. To install the driver files as a root user:
   
   
   • For IDM 4.7.4 and above:
   
   
   1. Login as root on the server where you want apply the driver jar file.
   
   
   2. Navigate to the extracted IDM_SCIM_1.0.1_P2.zip directory and perform one of the following actions for your platform:
   
   
   • For Linux: Install the new netiq-DXMLscim.rpm in your driver installation directory by running one of the following command in a terminal window:
     
     
     • If you are installing the binary, run the command: rpm -Uvh (binaries-path)/netiq-DXMLscim.rpm
   
   
   • For Windows: Copy the SCIMShim.jar and SCIMUtils.jar files to your driver installation folder. For example, \NetIQ\IdentityManager\NDS (local installation) or \Novell\RemoteLoader\64bit (remote installation).
   
   


3. (Conditional) To update the driver files as a non-root user:
   
   
   1. Verify that /rpm directory exists and contains _db.* file.
   
   The _db.* file is created during a non-root installation of the Identity Manager engine. The absence of this file might indicate that Identity Manager is not properly installed. You must reinstall the Identity Manager to correctly place the file in the directory.
   
   
   2. To set the root directory to the location of non-root Identity Vault, enter the command ROOTDIR=non-root eDirectory location in the command prompt.
      
      This will set the environmental variables to the directory where Identity Vault is installed as a non-root user.
      
      
   3. To install the driver files, enter the following command:
      
      For example, to install the SCIM driver RPM, use this command:
      
      rpm --dbpath $ROOTDIR/rpm -Uvh --relocate=/usr=$ROOTDIR/opt/novell/eDirectory --relocate=/etc=$ROOTDIR/etc --relocate=/opt/novell/eDirectory=$ROOTDIR/opt/novell/eDirectory --relocate=/opt/novell/dirxml=$ROOTDIR/opt/novell/dirxml --relocate=/var=$ROOTDIR/var --badreloc --nodeps --replacefiles /home/user/netiq-DXMLscim.rpm
      

      Note: In the above command /opt/novell/eDirectory is the location where nonroot Identity Vault is installed, and /home/user/ is the home directory of the non-root user.

   4. (Conditional) If the driver is running locally, start the Identity Vault and the driver instance.
   
   
   5. (Conditional) If the driver is running with a Remote Loader instance, start the Remote Loader instance and the driver instance.

Technical Support Information

Issues Fixed in this Release (Version 1.0.1.0200)

• Defect 414229 - SCIM Driver - Event ID mismatch in Response with respect to Request
• Defect 414377 - SCIM driver returns error ChannelException when updating roles for a user
• Defect 432117 - SCIM Driver| ID Parameter source-name should be changed from "SCIMAccountValue" to "SCIMValue" in User Account Entitlement.
• Defect 434112 - SCIM Driver | The Global Configuration Value "Connected Application's Name" should be mandatory.

Issues fixed in Previous Release (Version 1.0.1.0100)

• ALM 321561 - SCIM Driver Matching policies generate query error against AWS.
• ALM 322127 - Group Member not synchronizing to connected SCIM system.
• ALM 322128 - Login Disabled setting not synchronizing to SCIM User, so New User is disabled upon creation.
• ALM 328104 - SCIM driver shuts down when remote SCIM API returns a "forbidden" HTTP status code 403.
• ALM 356046 - SCIM Driver - query fails with internal server error.