Onboarding IBM Security Identity Manager(ISIM) application
Posted on April 2, 2023 at 11:00 PM
IBM Security Identity Manager (ISIM) is a popular IAM system. It has been around for a
while. Many organizations have more than one instance of ISIM.
Some others have different IAM systems from multiple vendors. There arises a need to provision to
ISIM from another ISIM instance or another IAM system.
In this blog post we will present a simple way to develop an ISIM connector to onboard an ISIM as an
application.
The following diagram shows the basic concept
ISIM is bundled with Tivoli Directory Integrator (TDI) also known as Security Directory Integrator.
TDI comes with multiple connectors, including an LDAP server connector and ISIM DSML2 connector.
The source IAM system could be SailPoint, RSA, ISIM or any other vendor product. All these systems
come with an LDAP connector.
The basic idea here is to write LDAP server assembly line(AL) running on TDI. This AL will act as an
LDAP server.
It will receive LDAP commands from the source IAM and provison/deprovision to target ISIM using the
DSML2 to connector
With a little bit of Javascript it will be easy to implement, create, delete, modify and search
functions in the TDI assembly line.