Overview
Application onboarding is the process of integrating IGA to a company’s databases in a secure manner. IGA uses the ForgeRock Open Identity Connector Framework (ICF) to connect to an external systems' native protocols, Java connection libraries, and database drivers to access identity and application data.
To simplify the application onboarding process, IGA provides application templates for the different types of data sources. These templates provide a simple, consistent, and pre-defined method for configuring and onboarding your applications. The templates
You can onboard multiple applications and activate as many as required to access the resources.
Application Onboarding Templates
Each application has different connection settings for onboarding. IGA’s templates provide an easy-to-use method to set up these connection properties.
The following templates are available:
-
Salesforce. Connect to your Salesforce customer relationship management (CRM) application.
-
Office365. Connect to your Office 365 productivity application.
-
Workday. Connect to your WorkDay HR application.
-
Native/SPA. Connect to a single-page application (SPA) using a scripted REST connector.
-
Web. Connect to a web application using a scripted REST connector, which is implemented as Groovy scripts.
-
Service. Connect to a service application using a scripted REST connector, which is implemented as Groovy scripts.
-
Scripted SQL Connector. Connect to any SQL database using a scripted REST connector, which is implemented as Groovy scripts.
-
Google Workplace. Connect to your Google Workspace collaboration application.
-
Active Directory. Connect to your Active Directory LDAP application.
-
ADP. Connect to your ADP HR application.
-
LDAP. Connect to your generic LDAP (LDAPv3-compliant) directory server.
Application Reconciliations Types
Application onboarding also includes a reconciliation process that ensures that data is consistent between a source system and a target system. Properties that differ between the source and target systems are mapped in IGA.
IGA recognizes two types of reconciliations within its system:
-
Authoritative. Authoritative involves reconciling data between the IGA-IDM system and an application that is designated as a trusted source or authoritative source for accounts, identities, and organizational data. Typically, these applications are human resources applications like ADP and Workday, and LDAP directories, like ForgeRock Directory Services (DS), Microsoft Active Directory (AD), and others. If a change is made on the one of these applications, the change is immediately reflected on the IGA system after a reconciliation as it comes from a trusted source.
-
Target. Target involves reconciling data between the IGA-IDM system and an application that is designated as a non-authoritative source for accounts and identities. These applications require some type of property mappings, or correlation settings, that can be configured in IGA.