Only a partial course catalog displayed. Please click here to log in to see the complete catalog.
Identity Governance Courses (38):
IBM Identity Governance and
Intelligence version 5.2.4 introduces some enhancements, and a new look
and feel, to the user interface.
This video demonstrates the new functionalities on the Service Center, available to a Business User.
- Updates in the Service Center User Interface
- Customization of the login and logout pages
- Column customization in Access Certification
- Signoff updates in Access Certification
- Password synchronization
- Feedback survey
Overview: This course demonstrates how to use IBM Identity Governance and Intelligence to manage user accounts and support data, such as Groups, Folders, and Secrets on the Secret Server solution.
The first part of the video focuses on creating and configuring an Enterprise Connector between IGI and Secret Server, while the second part demonstrates some relevant integration features, like user account creation, entitlement management, groups, folders, and secret shares management.
Overview: The Identity Governance and Intelligence, or IGI, Rules Development Toolkit is a project for the Eclipse Java IDE, designed to assist the IGI administrator in developing and troubleshooting Java rules for IGI.
This video demonstrates how to download, install, execute and use the IGI Rules Development Toolkit.
IBM Security Identity Manager (ISIM) product experts answered client questions about identity and governance during this Security Learning Academy Live session at Think 2018, 19 March 2018.
This Open Mic session was broadcast live from Think on 19-Mar-2018
Chris Weber from the IBM Support team delivered the "IBM Security Identity Governance and Administration Data Integrator (ISIGADI) Tips and Troubleshooting" Open Mic LIVE at the 2018 Think conference.
- Logs and logging settings
- IGI SDK
- Creating new IGI admin ID
- Verify assembly line
- ISIGtoISIM assembly line
- Delta assembly line
- Validate assembly line
- ISIM person attribute mapping
IBM Security Identity Governance and Intelligence Performance and Tuning Guide 5.2.3 covers the following topics.
- Statistics Enablement for the Database
- Tuning the Rule Engine Scan Rate
- Tuning the Rule Engine Cache
- Task Planner
- Improving Rule Engine Concurrency
- Reducing I/O Wait Time
- Bulk Load
- Collecting Java Core Dumps
- PostgreSQL Database
- Embedded PostgreSQL Database
- NFS Mounted PostgreSQL Database
- User Interface Dashboards
- Improving Access Request Module Response Time
- The Internal Security Directory Integrator
- System Hierarchy Refresh
- Enabling FIPS and SSL
- Clearing the Event Queues
- Enabling SNMP for Performance Monitoring
- DB Connection Pool
- Multi-threaded Enterprise Connector
- Tuning the Directory Server
- General Tips
IBM Identity Governance and Intelligence is unique among identity governance tools in basing access recertification and SoD detection on conflicting business activities rather than application permissions.
The business activities approach uses plain English rather than arcane IT terminology to make sure the requester, approver and risk managers easily understand the access being requested and the risk it implies.
This course demonstrates how to use IBM Identity Governance and Intelligence to manage users, and user accounts, on the CyberArk Privileged Account Security server.
The first part of the course focuses on installing the adapter and configuring a connection with a CyberArk server, while the second part demonstrates some relevant adapter features, like user and account creation, entitlement management, account suspension, password change, and finally, user deletion.
This video explains the whys and wherefores of Identity Governance, starting with the "pain chain" of the gaps between auditors, business managers and IT when it comes to answering the question, "does employee Jane Doe have the proper access privileges (and no more) to perform her duties per our company's policy?"
The video continues on to explain key capabilities such as access certification, role mining and modeling, separation of duties and access risk analytics. These capabilities (and more) are provided by IBM Security Identity Governance (formerly CrossIdeas IDEAS).
The video concludes with a role play of a company that's failed an audit and must address that failure within a 6 month window, applying the capabilities described in the first half of the video.
This Identity Governance Clustering and High Availability Open Mic webcast was broadcast on 14-July-2017
- Overview and Architecture
- Virtual Appliance setup and configuration
- Front-end: Web Load Balancer
- Back-end: DB2
- Back-end: IBM Security Directory Server
- Provide guidelines about how to set up clustering and high availability in IBM Identity Governance and Intelligence, presenting a sample solution by Virtual Appliance, front-end and back-end points of view.
Certification campaigns are a formal process that automates the periodic review of a given relationship. They enable critical access decisions by nontechnical line of business managers.
IGI supports five different certification campaign types.
- User assignment - Review individual user entitlements
- Organization unit assignment - Assess where entitlements are visible
- Risk violation mitigation - Review unmitigated risk violations
- Entitlement - Examine the contents of each entitlement
- Account - Review account access for target applications under management
Certification campaigns are created and configured by the IGI Administrator in Access Governance Core, and then executed by reviewers, using the Service Center.
This lab lets you practice a complete and fully functional user assignment certification campaign.
An IBM Certified Associate - Security Identity Governance V5.1 is an individual with entry level knowledge and experience with IBM Security Identity Governance V5.1 . This individual is knowledgeable about the fundamental concepts of IBM Security Identity Governance V5.1 through hands on experience. The associate should have an in-depth knowledge of the basic to intermediate tasks required in day-to-day use of IBM Security Identity Governance V5.1 . The individual should be able to complete these tasks with little to not assistance from documentation, peers or support.
Key Areas of Competency
- IBM Security Identity Governance UI from an admin and end user perspective
- Identify the key IGI features
- Understand the benefits of using IGI for identity and access governance.
Password synchronization is the process through which a user maintains a single password across
multiple applications. Administrators can associate account configurations with a password sync
group and then define password policies to manage password synchronization for the password sync
This video shows how to provision and manage temporary accounts in IBM Identity Governance and Intelligence.
Identity Governance and Intelligence enforces segregation of duties (SoD) checks, based on relationships established between the Business Activities (BA) layer and the Role-Based Access Control (RBAC) model.
Companies invest in roles to better model “who-can-do-what”, while auditors do not trust roles; they trust user permissions and assignments. Except for simple scenarios, the number of permission and role combinations to review becomes unmanageable quickly. In this scenario, it is difficult to conduct SoD analysis using roles.
This video and lab demonstrate how Identity Governance and Intelligence enforces segregation of duties (SoD) checks, based on relationships established between the Business Activities (BA) layer and the Role-Based Access Control (RBAC) model.
IGI leverages on the Enterprise Connectors application to align its data with the peripheral target systems.
This course demonstrates how to achieve data alignment between the centralized database of IBM Security Identity Governance, and peripheral target systems. The first part of the video focuses on configuring a connection with a peripheral target system, while the second part demonstrates account creation and removal on a remote Active Directory domain.
IBM Identity Governance and Intelligence (IGI) is a network appliance-based integrated identity governance solution. This solution employs business-centric rules, activities, and processes. It empowers line-of-business managers, auditors, and risk managers to govern access and evaluate regulatory compliance across enterprise applications and services.
IGI has a robust and intuitive user interface, divided into two areas. Administration Console is reserved for administrators. Service Center is where the applications for business users are contained.
This lab provides a brief tour of the available applications to help you become familiar with the IGI user interface. Feel free to explore each of the applications in depth and work with the data in any way you like. This is a live and fully functional copy of IGI with more than 2300 sample user records.
This video and hands-on lab provide a real business user experience by guiding you through tasks typically performed by a line-of-business manager who uses BM Identity Governance and Intelligence (IGI) to manage accesses for his team members.
This Open Mic web seminar was originally broadcast on 16-May-2017
- Support Files contents
- Accessing different logs and other files through the IGI appliance interface
- Changing logging levels
- Logging statements in rule code
- Miscellaneous issues
In the IBM Identity Governance (IGI) and Intelligence data model, an entitlement identifies a structured set of permissions. Permissions grant to users accesses the resources of an organization. Permissions often have obscure names that make it difficult to understand what they really represent. For these reasons, permissions are grouped into named roles in IGI.
IBM Identity Governance and Intelligence offers a number of approaches for role management, role definition, role consolidation and role mining.
In the role definition approach, the administrator defines a role upon existing knowledge of what that role should contain, simply by adding permissions and other roles. In a role consolidation, you replace a set of common entitlements with a more easily understood role. In role mining, you search for prospect roles in the business organization by seeing what entitlements have already been assigned to users in similar roles leveraging the advanced role mining features of Identity Governance and Intelligence.
This video and lab guides you to discovering the approaches that IGI offers for role management.
This is the first video from Amrin Maria Khan from her IGI 5.2.3 series. She will discuss the Firmware Upgrade of IBM Security Identity Governance and Intelligence Virtual Appliance from V5.2.2 to V5.2.3 using firmware update transfer utility.
This video describes the whys and wherefores of Identity Governance, starting with the "pain chain" of the gaps between auditors, business managers and IT when it comes to answering the question, "does an employee have the proper access privileges to perform duties per our company's policy?" The video explains key capabilities such as access certification, role mining and modeling, separation of duties and access risk analytics. These capabilities are provided by IBM Identity Governance. The video concludes with a role play of a company that's failed an audit and must address that failure within a 6 month window.
This video discuses configuring an IBM DB/2 database for IBM Security Identity Governance V5.2.3. This includes providing pre-requisites for DB2 configuration and installation and configuration of the DB2 Server.
This video shows you how to change the default password in Identity Governance and Intelligence.The default password across the IGI database schema is “ideas”. It is always recommended to change the password before the IGI database configuration.
IBM Identity Governance and Intelligence version 5.2.3 delivers enhancements in the virtual appliance deployment, product and security integration, and in the technical foundation.
New features include:
- Support for US FIPS 140-2 (Federal Information Processing Standard)
- Improved account management
- Converged Target Administration with Enterprise Connectors module
- Fulfilment status visible in the user interface (a.k.a. What is and what should be)
- Password management via custom rules
- SSH session timeout
- Option for authenticating users from an external user registry to the Local Management interface
- Usability improvements
- Additional language support, bidirectional support
This video demonstrates how to configure and use the main new features and improvements of IGI 5.2.3.
This video shows how to configure Enterprise Connectors to import user identities via a CSV (Comma Separated Value) file, as the student exercise in Unit 3 - Exercise 2 of the TW400G IBM Identity Governance and Intelligence Foundations class. This video does not include audio. It is intended that the instructor provides narration for the students.
IBM Identity Governance and Intelligence is an advanced identity governance system. This course provides the foundational skills necessary to operate, administer, and accomplish the major business functions and analyses provided by Identity Governance and Intelligence. This course provides instruction and hands-on labs for managing the import of data and data exchange with target applications, managing the lifecycle role, modeling access risk control, running certification campaigns, designing workflow processes, and designing and administering reports.
|View enrollment options|
This is the Instructor Demonstration of the Virtual Appliance Command Line Interface and Virtual Appliance console as in the TW400G IBM Identity Governance and Intelligence Foundations class - Unit 1 - Lesson 2. This video does not include audio. It is intended that the instructor provides narration for the students.
IBM Identity Governance and Intelligence version 5.2.4 introduces some enhancements, and a new look and feel, to the user interface.
This video demonstrates three scenarios with some of the new user interface functionalities available to a line of business manager.
Closed captioned in English, Italian and Spanish
Governance & Intelligence Free 45-Day Trial
This roadmap is designed to guide an IGI trial user through key administration and business user tasks such as role lifecycle management, managing SoD and other risks, running access certification campaigns and managing reports.
Make sure to register for the free 45-day trial of Identity Governance & Intelligence on the product marketplace page.
The IGI Business User badge focuses on the skills required of the IGI business user as detailed on the IGI Business User roadmap
To earn the IGI Business User badge, you must complete each of the 7 required courses and pass a 35 question quiz with a score of 80% or higher.
Items listed in the Additional Resources section are optional and there for your assistance only.
All courses are free of cost and can be found on the Security Learning Academy in the Identity, Access and Governance > Identity Governance category.
This video shows how to find, run, download, and customize reports. The video also demonstrates how to assign report entitlements to manage access to the sensitive data often contained in IGI reports.
Note: This video was recorded during the IGI v5.2.0 Train-the-Trainer session (August 2016).
Certification campaigns automate the periodic review of relationships in IBM Identity Governance and Intelligence, or simply IGI.
IGI supports five different certification campaign types: User Assignment, Organization Unit Assignment, risk Violation Mitigation, Entitlement, and Account certification.
This video demonstrates how the campaign reviewers and campaign supervisors operate and interact during a certification campaign.
Refer to the video Configuring certification campaigns for details on how to create, configure and launch a certification campaign; or take the Certificate Campaigns eLab that will let you practice a complete and fully functional user assignment certification campaign.
This video is an overview of the IBM Identity Governance and Intelligence Virtual Appliance, and demonstrates how configure the main appliance parameters using the Command Line Interface and the Virtual Appliance console.
The Command Line Interface is particularly useful during the early stages of an installation, when the application has not been deployed yet, or to troubleshoot any condition that prevents you from accessing the graphical Virtual Appliance console. In the first part of the video we demonstrate how to use the Command Line Interface to move across menus, work with Virtual Appliance partitions, check fix packs installed, configure the main network parameters, and test the main connection parameters.
We also demonstrate how to use the Virtual Appliance graphical console for the initial configuration and basic maintenance. We show how to configure the connection to an external database server, install a fix pack, and configure the NTP protocol to synchronize time among all components of the Identity Governance solution.
The IBM Identity Governance and Intelligence Virtual Appliance is an appliance-based solution that delivers the Identity Governance and Intelligence application.
This video demonstrates how you can install the Identity Governance and Intelligence Virtual Appliance, and perform the initial configurations.
This video shows how you can monitor the main resources of the IBM Identity Governance and Intelligence (IGI) Virtual Appliance, and demonstrates how you can investigate and troubleshoot issues.
The first part of the video demonstrates the usage of the widgets on the main Virtual Appliance Dashboard, and the Monitoring menu facilities that you can use to monitor the memory, CPU, and storage used by the IGI Virtual Appliance. The video also shows how you can monitor the IGI Virtual Appliance remotely from any SNMP monitoring application, accessing to hundreds of status variables.
The second part of the video demonstrates how you can configure an appropriate log level to capture enough logging messages and access specific log files. The video then demonstrates how we can create and download the Support File, a single package that captures all the log files at once, after an issue occurred or after having successfully recreated an issue to troubleshoot. The Support Files captures logs from both the Virtual Appliance and the Identity Governance application, and it is ultimately required and used by IBM Support to assist in troubleshooting issues.
Bulk Data Load allows the administrator to add a large quantity of data to the AG Core database. This method is suitable for large quantities of data that do not change over
time. Bulk Data Load is therefore appropriate for the initial data load following a new installation and when important changes are in the AG Core database.
Note: This video was recorded during the IGI v5.2.0 Train-the-Trainer session (August 2016).
This video describes the initial loading of data into IGI from external sources as well as the exchange of data between IGI and authoritative data sources and target applications, using the Identity Brokerage Adapters and the Enterprise Connectors mechanisms.
Identity Brokerage Adapters allow managements of targets, where a
target represents a user repository for a resource, such as an operating
system, a database application, or another application that IGI
manages. For example, a managed resource might be a Lotus Notes®
application, and a service can be defined for a Lotus Notes User
A large number of Identity Brokerage Adapters are already supported, and new adapters are being added.
Enterprise Connectors are an alternative choice for periodic HR feeds, or any integration where data changes over time, even on a hourly or daily basis. Enterprise Connectors can be easily scheduled for periodic execution.
Note: This video was recorded during the IGI v5.2.0 Train-the-Trainer session (August 2016).