Integrating SailPoint with IBM Tivoli Directory Server

This document is designed to give specific information about the requirements and field definitions needed to get a working instance of an IBM Tivoli Directory Server connector in SailPoint.

If you have user accounts in IBM Tivoli Directory Server that you want to load into SailPoint, you can create a direct connect source for IBM Tivoli Directory Server and load that data into your system. To manage that data, either create an identity profile based on the source, or verify that the accounts you load are correlated to an existing identity.

Note

To view the latest features, enhancements, and fixes for all SaaS connectors, refer to the SaaS Release Notes page.

For more information on SailPoint features, refer to Source Features.

Supported Features

The IBM Tivoli Directory Server connector supports the following features:

Note

Before you can use any item marked with an asterisk (*), SailPoint must activate the feature for your site.

Load IBM Tivoli Directory Server accounts
*Provision IBM Tivoli Directory Server accounts
*Access Certifications (certification of entitlements connected to accounts)
*Password Management
Delete Accounts
Account Move and Rename

Unlock Account - Add the UNLOCK attribute to the source XML file. Add the appropriate values for lock/unlock attributes:

Lock Feature

<entry key="lockAttr" value="Depend on LDAP type OR any custom attributes set in customer env for lock"/>

Unlock Feature

<entry key="unlockAttr" value="Depend on LDAP type OR any custom attributes set in customer env for unlock">

Password Management

If Password Management is enabled for your organization, you can change the password for a user of the source. After enabling password management on the source, be aware of the following:

The password policy defined in SailPoint applies to accounts on this source.
If you change the password for an application connected to this source, the change will automatically be made to the source itself.

For more information on configuring password management, refer to Password Management Overview.

Supported Managed Versions

The IBM Tivoli Directory Server connector supports the following managed systems:

IBM Security Directory Server version 6.4

Prerequisites

Configure at least one virtual appliance cluster and successfully test the connection. For instructions, refer to the Virtual Appliance Reference Guide.
Create a service account on the IBM Tivoli Directory Server with the required permissions.

Required Permissions

The administrator account acting as the service account for the source must have the read/write privileges over the directory information tree to manage the IBM Tivoli Directory Server data.

The IBM Tivoli Directory Server connector requires that the service account must be the administrator account and that the directory server has administrator credentials.

Upgrade Considerations

This page provides information you need to consider when using different versions of SailPoint.

2024

February

The IBM Tivoli Directory Server connector will fetch changed values on the managed system as part of delta aggregation. For sources created after Feb 27, 2024 this change is included in the updated connector. If you have existing sources you must enable this fix by adding the following to your source XML using the REST APIs:

PATCH https://{orgName}.api.identitynow.com/v3/sources/{source ID}

Note

For more information on SailPoint's REST APIs, refer to Best Practices: REST API Authentication and REST API - Update Source (Partial) in the SailPoint Developer Community.

In the body of the PATCH, use the form-data as follows:

[
    {
        "op": "add",
        "path": "/connectorAttributes/supportsDeltaAgg",
        "value": "true"
    }
]

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.