NetIQ® Identity Manager Driver for Active Directory Implementation Guide March 2018 Legal Notice For information about NetIQ trademarks, see https://www.netiq.com/company/legal/. Copyright (C) 2018 NetIQ Corporation. All rights reserved. 2 Contents About this Book and the Library 7 About NetIQ Corporation 9 1 Understanding the Active Directory Driver 11 Key Terms . 11 Identity Manager . 11 Connected System. 11 Identity Vault. 11 Identity Manager Engine . 12 Active Directory Driver . 12 Driver Shim . 12 Remote Loader . 12 Data Transfers Between Systems. 13 Key Driver Features . 13 Local Platforms . 13 Remote Platforms . 14 Password Synchronization Support . 14 Data Synchronization Support . 14 Default Driver Configuration . 14 User Object Name Mapping. 14 Data Flow . 15 2 Preparing Active Directory 19 Driver Prerequisites . 19 Where to Install the Active Directory Driver. 20 Local Installation . 20 Remote Installation on Windows Server Only . 20 Remote Installation on Windows and Other Platforms. 21 Remote Installation on a Windows Member Server . 21 Addressing Security Issues. 22 Authentication Methods . 22 Encryption Using SSL . 22 Creating an Administrative Account . 26 Configuring System Permissions . 27 Becoming Familiar with Driver Features . 27 Multivalue Attributes . 27 Using Custom Boolean Attributes to Manage Account Settings. 28 Provisioning Exchange Mailboxes . 29 Expiring Accounts in Active Directory. 29 Retaining eDirectory Objects When You Restore Active Directory Objects . 29 3 Installing the Driver Files 31 Installing the Driver Files. 31 Installing the Active Directory Discovery Tool . 31 4 Creating a New Driver 33 Gathering Configuration Information. 33 Contents 3 Creating the Driver in Designer. 34 Importing the Current Driver Packages . 35 Installing the Driver Packages . 35 Configuring the Driver . 39 Deploying the Driver. 39 Starting the Driver . 40 Activating the Driver . 40 Adding Packages to an Existing Driver. 41 5 Upgrading an Existing Driver 43 What’s New . 43 What’s New in Version 4.1.2.0 . 43 What’s New in Version 4.1.1.0 . 43 What’s New in Version 4.1.0.0 . 43 Upgrading the Driver . 43 . .Upgrading the Installed Packages . 43 Applying the Driver Patch. 44 6 Synchronizing Passwords 47 Securing Driver Connections . 47 Setting Up Password Synchronization Filters . 47 Allowing Remote Access to the Registry . 48 Not Allowing Remote Access to the Registry . .52 Retrying Synchronization after a Failure. ..