User manual NOVELL IDENTITY ASSURANCE SOLUTION 3.0.2 ADMINISTRATION

[. . . ] Identity Assurance Solution 3. 0. 2 Administration Guide novdocx (en) 11 December 2007 Novell Identity Assurance Solution 3. 0. 2 ADMINISTRATION GUIDE February 15, 2008 www. novell. com novdocx (en) 11 December 2007 Legal Notices Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. [. . . ] This can be read from the Agency object. ) After creating the Card object, set the following attribute on the User object you created: fipsAgencyCardDNs (Adds a value that points to the card object you created) The Sponsor Uses IAS Workflow to Add a User to the Identity Vault In the second instance, the sponsor uses a workflow to add a user: 1 Log in to IAS Workflow as an agency sponsor. 5 Fill in the required fields, then click Submit. 3. 1. 3 Delete a User When an agency sponsor deletes a user, the user is removed from the Identity Vault. 1 Log in to IAS Workflow as an agency sponsor. 16 Identity Assurance Solution 3. 0. 2 Administration Guide novdocx (en) 11 December 2007 2 Click Requests & Approvals > Request Resources. You can search for the user by either typing the user's last name and date of birth or by typing the user's Social Security number and date of birth. 8 Click Submit. 3. 1. 4 Display Applicant Information This task allows the agency sponsor to view the applicant's user and card information. You can search for the user by either typing the user's last name and date of birth or by typing the user's Social Security number and date of birth. 8 Click OK. 3. 1. 5 Request Card Reissuance This task allows the agency sponsor to force a re-enrollment and have a new PIV card reprinted, if something happens to the original card. You can search for the user by either typing the user's last name and date of birth or by typing the user's Social Security number and date of birth. The user and card information are automatically filled in. Managing Agency-Specific Roles 17 novdocx (en) 11 December 2007 8 Select a reason why the card is being reissued. The options are: Biometrics no longer valid Damaged Lost Stolen 9 Select the Warning and Usage Statement, then click Sign Approval. 10 Ensure that all required fields are filled in, then click Submit. 3. 1. 6 Request Card Reprint This task allows the agency sponsor to request a reprint of a PIV card without requiring a reenrollment. A sponsor might use this task if an applicant's name has changed or if a bad card was identified during the application process. You can search for the user by either typing the user's last name and date of birth or by typing the user's Social Security number and date of birth. 9 Ensure that all required fields are filled in, then click Reprint. 3. 1. 7 Sponsor New Applicant This workflow allows an agency sponsor to request a PIV card for the following types of applicants: New Applicant: When a new applicant is entered in the system for the first time, the agency sponsor fills in any required data fields that don't have a value. Unaffiliated Applicant: An unaffiliated applicant is a person who has been sponsored before, but whose sponsorship has been terminated or expired. When an agency wants to sponsor an unaffiliated applicant, it can use the Social Security number or last name and date of birth to look up the applicant. All the applicant information pre-populate in the sponsorship screen and links the applicant to the sponsor's agency. To start the Sponsor New Applicant workflow: 1 Log in to IAS Workflow as an agency sponsor. 3 Click Continue. 18 Identity Assurance Solution 3. 0. 2 Administration Guide novdocx (en) 11 December 2007 4 Click Sponsor New Applicant. 5 For an existing applicant, select a value from the Search by drop-down menu, then click Search. You can search for the user by either typing the user's last name and date of birth or by typing the user's Social Security number and date of birth. 7 Ensure that all required fields are filled in, then click Submit. 3. 1. 8 Update Applicant Employment Status An agency sponsor can update the employment status of an applicant to one of the following: Active: This status indicates that the applicant is an active employee in the system. [. . . ] An agency security officer might use this task if an applicant's name has changed or if a bad card was identified during the application process. You can search for the user by either typing the user's last name and date of birth or by typing the user's Social Security number and date of birth. 9 Ensure that all required fields are filled in, then click Reprint. 3. 4 Agency Role Administrator The agency role administrator can perform the following tasks: Section 3. 4. 1, "Add a User to an Agency-Specific Role, " on page 23 Section 3. 4. 2, "Remove a User from an Agency-Specific Role, " on page 24 3. 4. 1 Add a User to an Agency-Specific Role This task allows the agency role administrator to add a user to an agency-specific role. You can search for the user by either typing the user's last name and date of birth or by typing the user's Social Security number and date of birth. [. . . ]