10.2 Integrating with Identity Manager

Privileged Access Manager can communicate with Identity Manager by using the Identity Manager driver for Privileged Access Manager. An Identity Manager driver is an interface between the NetIQ Identity Manager and the connected application. Here, the connected application is Privileged Access Manager. For more information about Identity Manager, see Identity Manager documentation page.

The Privileged Access Manager driver is a Java program running in Identity Manager. This driver communicates with the Privileged Access Manager application using Java JSON API library provided by Privileged Access Manager. This communication happens over HTTPS channel.

To view the high level architecture diagram of how Privileged Access Manager is integrated with the Identity Manager, see Figure 10-1. For more information about the driver, see NetIQ Identity Manager® Driver for NetIQ Privileged Access Manager Implementation Guide.

Figure 10-1 Integrating Privileged Access Manager with Identity manager

The Privileged Access Manager driver creates a channel from Identity Manager to Privileged Access Manager to synchronize the password that is changed through the password check-in process. The Privileged Access Manager driver checks for any changes performed on the Privileged Access Manager credential object. When a user checks-in the password, the driver generates a random password through Identity Manager and the same password gets reset on the application/ database through the driver for the respective application/ database.