ideiio Connect is a tool for synchronizing identity data between different applications using a variety of different technologies. Connect provides basic identity mapping capabilities to transfer identity data to and from identity sources and for user provisioning.
This document only pertains to the Directory Service Sync Tool. Please disregard this document if you are not utilizing or deploying the Directory Service Sync Tool.
ideiio Connect uses the SCIM 1.1 data format for synchronization between source and target identity data. In most use cases, ideiio acts as the SCIM 1.1 source of data into Connect, sending identity information to provisioning targets.
ideiio Connect can run purely in the cloud as a SaaS service, or the ideiio connect bridge agent can be installed locally to synchronize data between systems that are not exposed to the internet. This document will describe the installation process for the ideiio connect bridge agent.
This section describes the process to install a new ideiio bridge. To upgrade an existing bridge, refer to the upgrade section of this document.
OS Recommended Disk Size RAM Processor Cores Debian Linux 300 GB (minimum) 32 GB Dual
Note: Please wait for installation services before deploying any VM in a customer environment.
• Java8 or Java11
• A database server (MySQL or MariaDB is recommended)
Unzip the distribution to a temporary working directory.
You will configure the Bridge in the temporary directory and then use the install script to install files to the proper locations.
Download and copy any required JDBC drivers/connectors to the lib directory. For example, the MySQL connector and Oracle Driver are not included in the distribution due to licensing restrictions.
cp mysql-connector-java-x.y.z.jar <temp working dir>/lib/
ideiio Bridge requires a database for its application tables. The update-db-schema.sh script will set up the database. First, edit the script and update the database connection information.
Edit the mysql/create.sql script and update the password and server for the ideiiobridge user. Replace the password changeit with a secure password for the ideiiobridge user. Make sure to record this password. It is needed later. The login location, denoted by the % character in the commands below should also be replaced by the bridge server’s IP address or hostname.
-- Create the ideiio Bridge user
CREATE USER IF NOT EXISTS 'ideiiobridge'@'%' IDENTIFIED BY 'changeit';
-- Grant the ideiio Bridge user permissions
GRANT INSERT, UPDATE, DELETE, SELECT ON ideiiobridge.* TO 'ideiiobridge'@'%';
Then run the database setup script.
The bridge agent installation package is fully configured with the configuration provided in the ideiio Connect manager. If any information is missing from the cloud config, the configuration can be updated manually.
vi <temp working dir>/etc/config.json
Now the installation script can be run. The script will create the bridge user, place the files in the correct locations, and install the bridge as a service. It needs root access to run, so use sudo to run it.
The ideiio bridge is now running with the default configuration including the default port of 4646. The following section will provide information about advanced configuration.
Updated 2 months ago