Transcript
of the new implemented feature. I will keep that short, especially because the walkthrough will show us a lot of these features then in detail and in the system. First the overview. If you easily can see, we have reviewed the operation support portal pretty hard. You can now find configuration parameters in the overview support portal. You can have templates there and these templates can be configured in a very easy way on the basis of selectable predefined values. You can also see and edit schedules. You can deal with authentication modules and see messages. If you like to get access to the operation support portal, I like to remember that it is necessary to become a member of the one identity application role, basic roles, operation support system administrators. From a feature perspective, additionally to the overview, the configuration parameters are available. You will see that in my demo a little bit later. We have, of course, the schedule management, something other else pretty nice, and we'll talk about that. You can edit, delete, create schedules in the web portal like you can do it in standard frontends. Even bulk operations are possible. The templates I was talking about is now the capability just to select predefined templates to be used as templates for very specific often changed templates in the identity manager. Too many templates in this sentence, I know. What I mean is that instead of editing code, it is now possible to predefined select something and to use that if you are happy. This will not, of course, remove the functionality that you can go into the on-prem designer and change vb.net code if you like to write more high sophisticated scripts. This is possible as well. You can manage authentication modules, which mainly means that you can just enable or disable them, and you can assign them to applications. And you can, of course, just add, edit, and delete the message definitions. And you can, of course, perform bulk operations, which should ease the life a lot. In case of OAuth and OpenID wizards, they are implemented as well, and you can connect to different target systems wizard-based. It is easier to enter the right parameters, and as we have learned in the past, also the selectable items are now based on your configuration and will ease to configure these connections on the basis of what is available. A lot of UX is going just into these tools, and you will see that the usage of them partially is a little bit easier than, for example, similar tools in the on-premise world. However, by supporting custom filters, view settings, and process parameters, this is a big step forward just to bring all the functionality of admin tools into the web. The complete handling of process history and processes pages are new as well. Filtering is possible there. The display is easier to see. The overview is great, and you can also go into error messages, if you can see that in the screenshot. This is all much easier and much better to get older information as well. The same happens, by the way, for the access to archive processes. You can now drill into that as well. You can look into them. You can pre-filter, or you can just go into the different entries, see there the complete parameters and, of course, error messages if errors happen. We will see the synchronization operations a little bit later. You are now able just to look into running synchronizations. You can see reports there. You can configure the easy parts of a synchronization. For example, you can work on schedules, start synchronization, etc. You can also manage variable sets and variables. You can have a look at enabled or disabled workflow steps, and so on. That means not the full functionality of the synchronization editor is available yet, but it is possible just to do the typical operations tasks with these operation settings. Last but not least, a new functionality is also to show the license report. The license report was seen in License Meter before. Now it is integrated in the Operation Support Portal. Nothing very special from a technical perspective, especially because License Report is only used for exactly that, just figuring out what the next costs for the next year of the Identity Manager will be. Statistics was also completely moved in the Operation Support Portal. Here we started with database statistics. There will be some more in the future. The overview of the Support Portal was also reviewed. We will see that then in the demo. At the end, it is now possible to search and to get quick access to the different tiles. The menu Web Applications has been removed. The functionality is now just moved to Configuration, Base Data, Security Settings, Web Applications. This is to ensure that the functionality is in the same way reachable, like, for example, in the Designer. That helps at the end to limit confusion. Very nice, the Job Server Overview page as well. On the Job Server Overview page, you can get information about installed machine roles or server functions, and you see all your queues that are configured. Nearly everything new in the Operations Support Portal. And I like to show you the Operations Support Portal and its total, and you can then decide what is new or what not. To know a little bit more detail about it, you have seen the slide before where I was talking about the new sections in the Operations Support Portal. Operations Support Portal, here it is. First of all, we are on the home page, and on the home page, there is an overview with a lot of interesting information, starting with notifications. Currently, there is no notification yet, so you can't see something. If we go into the section Service Issues, then you can see inactive job servers. If I click in that, I will see a lot of inactive job servers beside one. That is not a problem because server two to server five here, these are just queues and not really servers, and because of that, they can't be reached. Another one here is that one here. This is my production service. That can't be reached for another reason. There is a communication issue between tools and the service web page currently. That is something that needs to be solved, but currently, I only see that for all of these, of course, software update is deactivated, which means auto-update is turned off. If I then just go to the detail page, I can see here machine roles, of course, and server functions, which is for each job server then described. In my case, a lot of them, especially because this is my only job server in the whole environment. If I then step back to the homepage, I can directly go to unresolved references. This is something you will see a little bit later if we talk about synchronization, where the whole thing came again, and we have synchronization issues. If I go into synchronization issues, I see just one issue. I can easily download the report. This is only possible if reporting is turned on for synchronization. I can then go into the report, and you see there are some error situations a little bit down below. There is a little bit more about the error situation, and I can search for the error message, and you see it. Error connecting system SAP R3 connector says me exactly what it is. There is no SAP ecosystem currently connected to my environment. It was in the past. That's the reason why this provisioning step could be targeted or could be started, but it could not reach the SAP system because that is disconnected, and because of that, this is not a report should harm me. Close it, go to the homepage again, and talk about the next thing. System information, 12 thresholds, that is something I can see differently. That is something I can see in another part of the tool. Currently, there is no URL implemented yet, and I can go to status report. This status report shows me exactly the same services list with the difference that there is now a check job server button. I can hit that. That will not really lead to an effect, especially of the communication problem, but that is the difference between the first and the second view. If I have a lot of job servers, of course, then I have here a filter button, and easily to see this is the new filter wizard. In this filter wizard, I can just create very high sophisticated data filters if I like to. Now we go to the process menu. In the process menu, everything about processes exists, and the first thing is that you can differ between processes. This is what currently is in the job queue. Process history. This is what is in job history, and process archive. That is archived stuff. We can also see the performance, and we can search for processes based on a process ID I need to know. Let's start with processes. Currently, no processes in the queue. You can refresh if you like to. You can also have a look in the process graph. There is nothing to see currently, and you can filter if there are many of these processes available. The gear itself says then you can save the current view if you like to so that you can easily reset that later on. By the way, there are often these eyes in the meantime implemented, and these are then just giving you a little bit more information and much more important, of course, the link to the manual that helps you to find a lot of more help than just a little bit text here. We go from processes to process history. This time, I see a lot. These are processes, and you see many of them happened. I can click on them, and of course, then I start become a list. Yeah, okay, for 160,000, this is a lot. Here we are. These are then all the history or historized processes, a SQL step that was executed here, and it was finished. You can also have a look into the details of that if you want to see, and in this case, yeah, dashboard content was just deleted shortly in front of getting new calculator or something like that. If we close that again and go back to the process history, then we see here, of course, that there are some other processes as well. I don't want to bother you with too many of them. Let's find something a little bit more helpful, recalculating of stuff. We have here time zone updates. That's not really interesting. Something more businesslike. It's a good idea, for example. Here, for example, an email gets sent out. It can go into one of these, and you see there's an email that was sent out, and you can see that that email was a rich email, and you can see as well the properties. At the end, what you see there is more or less what the process history table shows you, and it looks a little bit like somebody has taken the log of the service and was just putting them into columns, what exactly the job history is. Job history, by the way, it's another name for process history. This is the old version of that name, so process history is, of course, the modern name. Then let's look into the process archive. This is the process archive. You see that a lot of processes was executed, and you can see the count. If you want to go into them, then you will see as well the date when that happened. We go then to the performance, and if you look into the performance, then we see all the tasks that was executed, and you see also how many steps per minute were executed. GetConfig, for example, 9,000, so nearly 10,000 of these tasks can be done per minute. This is the average of the execution time of all of these process tasks getting executed, of course. You can also search in that, and you can do that per server or per queue. In this case, that makes no sense. We have just one server. If we go to another queue, you will see exactly the same performance, just for different jobs. The reason for it is all the same server, and then we have here, of course, the filter that will as well help us to high sophisticated create filters and filter the big list of different things. Let's go to process and operations per process ID, and there we are at the end because now I need a process ID. Process ID can be, for example, copied out of logs, and then you can search for that very specific process ID, and you will then get more information. Let's step to configuration. This is a complete new section. We have on the one hand side navigation. We have on the other hand side favorites. This is something you can build on your own. There is the three dot button here where you can do something else. You can also expand the view, and you can, of course, search for something. Currently, not too much stuff in there. You see here customization and base data, and if we go into customization, you mainly see templates. This is something completely new. You see specific templates, which was built with the help of a wizard. Remember, any identity manager templates are typically .NET code, but there is now a new opportunity for, I like to say, very common fields like, for example, the central user account just to build these templates with the help of a graphical editor. For example, here you are. You see you can then select from a predefined list of different ways to calculate that very specific value something here. You can also look into more. You see then a reload button and properties and whatever, but what you can't do here is, as I see it, you can't just enter code. Therefore, you need then, of course, the designer. The one or the other will now say, great, that is exactly something I expected during the last years. I personally, who knows the templates very well and, of course, know VB.NET, feel with all of this wonderful selectable templates a little bit helpless because I can't implement what I like. But however, I think for the majority of people, this type could speed up things a lot. However, if your specific template is not part of these defaults here, then you can easily use the old way. And that means do some coding, which is, of course, much more fun from my perspective. However, these templates are really helpful. For example, if I'm looking here into the full name, you will easily see that there are more templates available, which gives you a lot of different things. If we think about, for example, an identity and access governance project, you can remember that the first thing was always to change things like the full name, like user account name, something else. Central user account is a good example as well. However, I think especially for the initial configuration and making things pretty fast, that is helpful. Think about that the customization button here, of course, is the first try. There will be some more configurations in the past. Let's see what we have under the three dots. Add to favorites, short deferred operations, clear what it is. Add to favorites will take my favorites, my favorite things directly into the favorite. That is for a big list of things, currently not that big. And then we see short deferred operations. These are operations which are just delayed. That is something you can see here as well. In the base data section, we see some more. This is now a part you typically see also in designer, but this is a subset. And if we look into general, then, of course, you can just work with configuration parameters. Configuration parameters are the standard identity manager configuration parameters, not the configuration parameters from the web portal, therefore exists the configuration portal. We can remember that. These are the standard configuration parameters for the complete tool. If I go, for example, into QBM, then I can see here some basic configuration. For example, for the API server, I can see defaults. And then I can see what the same site cookie configuration is. And here I see it is LAX. That is the standard always set. There might be some other configuration parameters a little bit more speaking to us. Let's look into the QR model here at the station, for example. And then you can see here the auto-close is an active person value, or you can drill deeper into it and see the initial approval state. And then you see how it is configured and you see also the description. This is exactly the same you see in the designer, but now it could be set in the web portal. Same for schedules. Schedules was completely reviewed in identity manager 10. Here now you see the new look and feel of the web portal just to show these different schedules. And yes, you can just select one of these schedules. You can go to the edit tab and you can then start to drill into it and start changing the configuration. And as you easily can see, even for a standard object, it is possible just to reconfigure, for example, the schedule when and how often something happened and when it gets started. You can also delete schedules if you like to. There are many ways to handle that and everything possible from here. Same for change labels. Change labels are used just to transport a lot from one database to another, could always be seen there. And then the typical business task is to lock one of these change labels. And that is now something you can also do here in the edit way. You can also delete change labels if you want to get rid of them, of course. In the security section, you see the authentication modules always available, and you can maybe enter and activate them or deactivate them. Let's have a look into them here. For example, select in frontends, enable it, will then enable the dynamic ADS authentication, which is Jurassic. Typically, nobody needs that. Same then for programs. Here you see the different programs, for example, the manager, which is not the web manager. This is, of course, our local installed on-premise manager. And you can look into that manager, and you see also that there is an overview or there is a configuration of authentication modules. This is one of the things you typically want to do in operations. You want to assign possible authentication modules to a specific tool. For the manager, as we easily can see, is the HTTP header authentication currently selected as the only authentication. Web service configuration, you see the different portal URLs. Web application, you see the different applications already exist. Connection data, you see the connection data that already exists. You can also go into that, and you can then directly start, for example, set new passwords for the Microsoft SQL Server connection. Here is the OAuth 2.0 configuration. That will be fun for a lot of people. You can here see what is configured for specific OAuth 2.0 things for one login, for example. As you easily can see, there are these properties just here in that specific tool stored in the identity manager and can be changed if this is necessary. With that, the configuration or reconfiguration of another OAuth 2.0 provider or something else gets much more easier. You see also there are many other tabs available. It is exactly the same functionality you will have in the standard local tool. If we go to password policies, you see all password policies. And yes, you can also edit password policies. And that is great from my perspective because that moves the password policies out of the manager, and you can now just do something here for specifics. There is no password policy yet in this case. You can add one if you like to and then start just building the complete password policy from the scratch. There are also the dropdowns and whatever else other stuff available. I will cancel that out, especially because I don't want to do here something. Password exclusion list. There could be an exclusion list created if you like to. Enough in the Internet. You can download them from there and then you can start to build your own password exclusion list. These are typically passwords that contains the company name or something else or quarts or whatever else or qwerty or whatever else passwords you like to avoid. Let's go into the installation section. There are the job servers again. All job server entries can be just selected and can be configured. It is also possible here to go into them like it is in the designer. You see now here the complete configuration of the job servers. You can change the one or the other. There is the network configuration. There's the service configuration. You see then, of course, the service configuration itself, for example, the connection configuration. You can set different values. Everything what is possible in the designer is possible here as well. And you can, of course, as well assign server functions if you want to add more server functions. Let's go to the advanced. In the advanced tab at the end, we find then operating systems. This is the list of current operating systems. I think it's a while ago that there was just some created. Could be done. And there is then a little bit more important, the C messaging definitions. We talked about C messaging or we will talk about them a little bit later. But however, here are now these specific messages available can be changed. And like before, you can directly type into that and can start editing values. Even translations, by the way, are possible to be made. So this is the configuration section. From my perspective, a really rich and cool configuration section. Start growing. Yeah, that is the first approach. There will be, of course, some more stuff in the future available. Please stay tuned. That could be fun. So let's go to synchronization. We can have first a pending synchronization configuration. Currently, my system is idle. You see that's just all synchronization filtered by pending. If I just delete the pending, then I see pending provisioning processes at all. Nothing in there currently. Unsolved references. Here are the unsolved references we have seen from the first tab. You see each unsolved reference there. You can also select them. And we see that the majority of unsolved references are here for Unix system. Not really something surprising us, especially because this system is also disconnected. And whatever happens there might change something in the identity manager, but of course not in a not connected target system. Let's go to the outstanding objects. Outstanding objects are objects which were failed during synchronization and can synchronize or can be handled afterwards. In this case, we have a few target systems real connected, for example, Active Directory. So just let's search for Active Directory objects. And as object type, we can use user accounts or assignments. I will start with the accounts. And there is just one of these Active Directory accounts outstanding. I can now handle these outstanding objects, of course, by letting them delete or reset or add them to the target system. This is what I can do with these specific accounts. For example, I can say, just add that to the target system, please. And with that, this outstanding object is handled. Now we can think about to see them here in the processes list, for example. But if you easily can see there is a bulk processing, that means it is activated and will handle them together and not just at once. Let's do something for Active Directory again. And therefore, we will look into the Active Directory user accounts and groups assignments. And we see here two groups assignment failed in the past, cannot be deleted, maybe because they already did not exist any longer. We will try to do that again. So I select these both and say then add to the target system. And then we will see if this will happen or not. And if not, then we can remove them with the next round. Let's look into synchronization itself. Synchronization shows me all synchronization project exists in this very specific database. This, for example, is a synchronization project that is already active. And you can see now here the log information and all the reports to all of these different synchronization runs that happens during the last time. A refresh is also possible. If we go then from synchronization to the synchronization projects, then I can see all the existing synchronization project configurations. And I can take that form for the same Active Directory again and open this here to see then the synchronization project. No, this is not the synchronization editor with all of its capabilities. This is something like a synchronization editor light. What you can do here in this very specific synchronization editor are the common things. For example, you can configure for the database configuration or for the target system configuration the complete logging information, which is often one to see. You can also set the connection is read only if you like to. You can look into the workflows and see what the workflows are doing. They are then described here in that very specific thing. And you can then as well look into the variables and set new parameters or passwords if there are variables available you want to deal with. Specialized variable sets could also be seen and configured. And you can go to the startup configuration and, of course, start synchronization if you like. Or you can change a specific schedule or create one if necessary. If you just take one for the example, the initial synchronization, you can just start the initial synchronization like in the tool before. However, we talked about synchronization. We have talked about synchronization projects. We have here just outlining startup sequences. This is if you have startup sequences just configured. This is something you will do if you have a lot of synchronization projects. And then you can here define in which sequence and row the different things will happen, for example, on a day. So database, you can look into the DBQ if you like to. There are now some calculations available because we are just doing a lot of calculation in the job queue. Typically, then, a lot of calculations in the DBQ are happening as well, not every time but often. And you see here now all of these different calculations. You can also refresh and see that all the stuff is getting done. Statistics. In statistics, currently, not too much to see. Currently, a little bit data statistics. You will then here see, of course, some of these wonderful statistic items. More to come in the future. Last but not least, the system menu. Let's look into the system status. You see DBQ job queue is running. Database is up and running and up to date. And you see a license report. This is a new functionality now in the operations portal as well. What you will see there is the typical license report. Typically, the license meter tool is creating. With that, license meter is not necessary any longer. You can directly get that license report there. And with that, you will then, of course, can go to the next sales rep of OneIdentity and get information about what your system costs for this current year will be. However, let's close that report again, go back to system, and have a look at the database log. These are database log messages. You can look into them and figure out what problems exist here and sometimes see error messages or warnings. The same thing happened, of course, with the operations history. You can also look in the operations history if you like to, this time for a very specific username. And you see for that very specific user, currently, there are no operations planned. However, this is in a very, very fast overview, the complete OneIdentity manager operations support web portal. You see much more functionality than before. From my perspective, a big step into the right direction. And I'm very interested to see what will happen in the next version of the identity manager. I personally think that especially together with the increasing functionality of the web manager, even the operations portal will get more and more functionality because more and more technology is just ported from the on-prem tools of the identity manager to the web tools.
