9.2 Integrating with Identity Manager

Privileged Account Manager can communicate with Identity Manager by using the Identity Manager driver for Privileged Account Manager. An Identity Manager driver is an interface between the NetIQ Identity Manager and the connected application. Here, the connected application is Privileged Account Manager. For more information about Identity Manager, see Identity Manager documentation page.

The Privileged Account Manager driver is a Java program running in Identity Manager. This driver communicates with the Privileged Account Manager application using Java JSON API library provided by Privileged Account Manager. This communication happens over HTTPS channel.

To view the high level architecture diagram of how Privileged Account Manager is integrated with the Identity Manager, see Figure 9-1. For more information about the driver, see NetIQ Identity Manager® Driver for NetIQ Privileged Account Manager Implementation Guide.

Figure 9-1 Integrating Privileged Account Manager with Identity manager

From Privileged Account Manager 3.0.1 onwards, the Privileged Account Manager driver creates a channel from Identity Manager to Privileged Account Manager to synchronize the password that is changed through the password check-in process. The Privileged Account Manager driver checks for any changes performed on the Privileged Account Manager credential object. When a user checks-in the password, the driver generates a random password through Identity Manager and the same password gets reset on the application/ database through the driver for the respective application/ database.