Open Identity SummitOpen Identity Summit

OpenIDM Hands-On

Anders Askåsen, Product Manageranders.askasen@forgerock.comForgeRock Inc.

Open Identity Summit Change to Partner logo/presenter

Overview Get the OpenIDM Binaries and Install

Start/stop OpenIDM

Start OpenIDM with a sample configuration

Use the OpenIDM UI

This hand-on aims to familiarize you with the OpenIDM UI and some commonly used functionality like: create user, use self-registration and password reset.

Open Identity Summit Change to Partner logo/presenter

Some requirements… JDK 1.6 update 24 or higher

CURL

Open Identity Summit Change to Partner logo/presenter

Lets get the binaries first… Latest supported release:

http://go.forgerock.com/Download-OpenIDM.html

ForgeRock also provides nightly builds:

http://forgerock.org/openidm.html

Open Identity Summit Change to Partner logo/presenter

Installation Copy the zip-archive to appropriate location and unzip

# cp openidm-2.1.zip /opt

# unzip openidm-2.1.zip

OpenIDM

Open Identity Summit Change to Partner logo/presenter

Lets start OpenIDM$ cd /opt/openidm

$ ./startup.sh

./startup.sh

Using OPENIDM_HOME: /opt/openidm

Using OPENIDM_OPTS: -Xmx1024m

Using LOGGING_CONFIG: -Djava.util.logging.config.file=/opt/openidm/conf/logging.properties

Using boot properties at /usr/local/openidm/conf/boot/boot.properties

OpenIDM version "2.1.0" (revision: 1952)

-> OpenIDM ready

Open Identity Summit Change to Partner logo/presenter

Self-registration & Passwd Reset Point your browser to the OpenIDM end user dashboard:

http://localhost:8080/openidmui

Edit /opt/openidm/conf/ui-configuration.json and turn on:

"selfRegistration" : true,

"securityQuestions" : true,

Refresh browser!

Open Identity Summit Change to Partner logo/presenter

Try out the Administrative UI

Point your browser to the OpenIDM end user dashboard:http://localhost:8080/openidmui

Login with user: openidm-admin and password: openidm-admin

Create a user

Open Identity Summit Change to Partner logo/presenter

Lets stop OpenIDM To stop OpenIDM go to the terminal window where it was started

and where the Felix console prompt should be. Stop OpenIDM with the “shutdown command as follows:

->

-> OpenIDM ready

shutdown

->

Open Identity Summit Change to Partner logo/presenter

Start with a sample… $ cd /opt/openidm

$ ./startup.sh -p samples/workflow

./startup.sh

Using OPENIDM_HOME: /usr/local/openidm

Using OPENIDM_OPTS: -Xmx1024m

Using LOGGING_CONFIG: -Djava.util.logging.config.file=/usr/local/openidm/conf/logging.properties

Using boot properties at /opt/openidm/conf/boot/boot.properties

Using boot properties at /opt/openidm/samples/workflow/conf/boot/boot.properties

OpenIDM version "2.1.0" (revision: 1952)

->OpenIDM ready

Open Identity Summit Change to Partner logo/presenter

Sample overview

XML File

Open Identity Summit Change to Partner logo/presenter

Reconcile with XML-File Lets study /opt/openidm/sample/workflow/conf/sync.json

curl -u "openidm-admin:openidm-admin" -X POST "http://localhost:8080/openidm/recon?_action=recon&mapping=systemXmlfileAccounts_managedUser"

Open Identity Summit Change to Partner logo/presenter

Request create contractor Start a request to create a contractor as an employee

Log in to OpenIDM as a regular employee and apply for the creation of a new account for one of your contractors.

Now log in to the OpenIDM UI at the URL:

http://localhost:8080/openidmui/index.html#login/

Use:

Login: user1

Password: Welcome1

Open Identity Summit Change to Partner logo/presenter

Approval as a manager Now log in to the OpenIDM UI at the URL:

http://localhost:8080/openidmui/index.html#login/

Use:

Login: manager1

Password: Welcome1

Assign approval to manager1 and accept the contractor!

Open Identity Summit Change to Partner logo/presenter

Test the contractor.. Now log in to the OpenIDM UI at the URL:

http://localhost:8080/openidmui/index.html#login/

Use:

Login: <your selected contractor name>

Password: <your password>

Open Identity Summit Change to Partner logo/presenter

Some additional resources… Join the OpenIDM community mailing list!

http://openidm.forgerock.org

Try out the various samples found in the /samples directory! The provides valuable solutions to various use-cases!

Q & AQ & A