Configuration Parameters

The following are the configuration parameters for SailPoint IdentityIQ Windows Local connector:

Note
Attributes marked with an asterisk (*) are mandatory.

Important

This instance of IQService is configured to listen on a TLS port by default to improve security and safeguard your environment. To establish a secure connection, ensure to follow the following steps:

  • Enable the TLS configuration flag in your application.

  • Refer to the Configuring TLS and Client Authentication for IQService page for detailed instructions on configuring TLS for IQService, including client authentication.

Ensuring proper TLS configuration is crucial for maintaining the security of your IQService deployment.

FQDN/IP of the system where IQService is installed.

The TCP/IP port on which IQService is listening for requests.

If Use TLS is enabled, then ensure you configure a corresponding IQService TLS port.

User name of the account with administrator rights on the managed system

The syntax is computerName\userName or userName.

For domain users the syntax is domainName\userName.

Password of the user account entered in the UserName field.

Host name or IP address of the Windows computer to be managed.

Indicates whether aggregated objects must not be prefixed with server name.

Defaults to false. If set to true, then aggregated objects will not be prefixed with the server name.

Number of objects to fetch in a single request.

Default value is 1000

User registered with IQService for Client Authentication.

Password of the registered user for Client Authentication.

Indicates whether TLS encryption is used between IdentityIQ and IQService .

If Use TLS for IQService is enabled, the IQService User and IQService Password attributes are mandatory.

For more information on enabling Client Authentication and TLS encryption, refer to IQService.

Additional Configuration Parameters

Additional configuration parameter of SailPoint IdentityIQ Windows Local Connector:

Set this parameter to false to read the non-local (domain users/groups) group membership of local groups. Run IQService from any domain member server to read non-local group membership. The connector does not support provisioning of non-local group membership.

Default value is true.

Note

  • Windows Local connector (via. IQService) can aggregate non-local(domain) or cross-domain objects of the same domain only when IQService resides on the same Windows Local host or is part of the same domain to which Windows Local belongs.