8.4 Configuring Identity Reporting

To assign the Report Administrator authorization:

1. Log in to Identity Governance as the Global Administrator.

2. Select Administration > Authorization Assignments.

3. Assign users or groups to the Report Administrator authorization.

4. Save the change.

5. Select Identity Manager System Connection Information.

6. For Identity Manager URL, specify the URL for Identity Reporting.

   For example, http://myserver.mydomain.com:8080/IDMRPT

7. Save the change, then refresh the browser to see the change.

1. Log in to the application server that hosts Identity Reporting.

2. (Conditional) If this is the first time for starting Identity Reporting, complete the following steps:

   1. Delete all files and folders in the following directories for your application server:

      • Linux: Temporary directory, located by default in

        • /opt/netiq/idm/apps/tomcat/temp

        • Catalina cache directory, located by default in /opt/netiq/idm/apps/tomcat/work/Catalina/localhost

      • Windows: Temporary directory, located by default in:

        • C:\netiq\idm\apps\tomcat\temp

        • Catalina cache directory, located by default in: C:\netiq\idm\apps\tomcat\work\Catalina\localhost

   2. Delete all log files from the logs directory of your application server, located by default in:

      • Linux: /opt/netiq/idm/apps/tomcat/logs

      • Windows: C:\netiq\idm\apps\tomcat\logs

3. Start Apache Tomcat. For more information, see Section 3.4.3, Starting and Stopping Apache Tomcat.

4. (Optional) To observe the Apache Tomcat initialization process in Linux, enter the following command:

   tail -f path_to_Tomcat_folder/logs/catalina.out

   When the process completes, the file contains the following message:

   Server startup in nnnn ms

5. To log in to Identity Reporting, you need an account with the Report Administrator authorization.

   For more information, see Section 8.4.1, Assigning the Report Administrator Authorization.

1. To verify that you can access Identity Reporting from Identity Governance, complete the following steps:

   1. Log in to Identity Reporting as a Report Administrator.

      https://myserver.mydomain.com:8443/IDMRPT

   2. Select Home in the upper right corner.

   3. Select the Reporting module icon near your user name.

   4. Verify that you are redirected to Identity Reporting.

2. To verify that Identity Governance denies other authorizations to Identity Reporting, complete the following steps:

   1. Log in to Identity Governance, as a Global Administrator or Security Officer.

      https://myserver.mydomain.com:8443

   2. Remove the Report Administrator authorization from the account that successfully logged in to Identity Reporting.

   3. Log in to Identity Reporting with that account, which no longer has the authorization, and log in to Identity Governance and access the reporting features.

      • Identity Governance: https://myserver.mydomain.com:8443

      • Identity Reporting: https://myserver.mydomain.com:8443/IDMRPT

   4. Verify you cannot access Identity Reporting.

   You can also attempt to log in to Identity Reporting by using a Global Administrator or Security Officer account to verify that accounts with high-level privileges cannot access Identity Reporting without the Report Administrator authorization.

To configure the Identity Reporting server to use a proxy server for the updated reports requests:

1. Log in to the Identity Reporting server as an administrator user on a Windows server or as a user with root access on a Linux server.

2. From a command prompt, access the Identity Governance Configuration Update utility directory.

   • Linux: /opt/netiq/idm/apps/configupdate

   • Windows: C:\netiq\idm\apps\configupdate

3. Launch the Identity Governance Configuration Update utility.

   • Linux: ./configupdate.sh

   • Windows: configupdate.bat

4. Click the Reporting tab.

5. In the lower left corner, click Show Advanced Options.

6. Scroll towards the bottom of the page and find the Outbound Proxy section.

7. Specify the hostname or IP address, the port, and if you are using SSL or not of the proxy server.

8. Click OK to save the changes and the Identity Governance Configuration Update utility automatically closes.

9. Restart Apache Tomcat. For more information, see Section 3.4.3, Starting and Stopping Apache Tomcat.

1. Log in to Identity Reporting as the Report Administrator.

   https://myserver.mydomain.com:8443/IDMRPT

2. Select Data Sources.

3. Select Add.

4. Specify whether you want to select from the list of data sources or provide the details for the source.

5. (Conditional) If you selected Provide database details, specify the values for the data source. For example, database platform, the host name or IP address of the database server, and include the following settings:

   Database

   Specifies the name of the database. For example, to add the Identity Governance database, specify igops for PostgreSQL and orcl or whatever name you gave the Oracle database.

   Username

   Specifies an account that can access the tables and views in the database. For example, when adding the Identity Governance database, specify igrptuser.

6. (Optional) Test the connection to your data source.

7. Select Save.

8. Clean up the Apache Tomcat folders as described in Step 2.

   You might need to restart Apache Tomcat.

9. Run a test report to verify functionality in Identity Reporting.

   For more information about running reports, see Using the Reports Page in the Identity Reporting Guide.