Thursday, 11 May 2023, SoftwareIDM will host HyperSync Patterns and Practices Primer in London, U.K. This course is designed to prepare you to migrate customers from Microsoft Identity Manager to HyperSync, or implement HyperSync matching requirements to the Pattern Toolkit.

Courses times are 9AM until 5PM daily. This course is the Third in a four-day expert series and will focus on SoftwareIDM's HyperSync and Service Panel. This series will prepare you to attend Access Panel Solution Developer training London, U.K. - 27-30 November 2023.

This course is part of series being held the week of 9 May 2023 (Tuesday) in London.

These courses prepare you for the new Access Panel and Service Panel Developer Training

London, U.K. - 27-30 November 2023 - M970 - Access Panel and Service Panel Developer

Instructor: Peter Sidebotham

This course repeats and is part of a series that is designed to allow you to pick and choose your course attendance days based on your learning needs. We hope you will learn and return for you next learning goal from our list of course topics for administrators and developers. You choose only the days your need to attend this year, and then use what you learn, to then return for more advanced learning in the future. Training is designed to repeat and to evolve your skills and product use. The Knowledge Package training is designed to enable you to help your organization reach its implementations roadmap goals for this year, then train again for next year's goals.

Important Notes Regarding this Course:

Hard copies of the course manual will be provided to attend delegates
Course starts at 9:00AM
Lunch is provided
You will need to bring a laptop with WiFi

Who should attend?

This course is ideal for anyone who wants to migrate Microsoft Identity Manager (MIM) to HyperSync. HyperSync is complete and simple replacement for MIM with everything you wish MIM had, or a quick way to expand MIM's capabilities without delay.

If you are Microsoft Identity Manager administrator, developer, or just looking for the best identity lifecycle project, this course on HyperSync is for you.

Those who want to migrate MIM to HyperSync Panel
Those who want to match business requirement to a pre-patterned solution you can copy and follow.
Those who want to become proficient at implement Identity Panel Suite and HyperSync

Prerequisites

Have attended one of the following courses.

Venue

Regus, 17 Hanover Square, London, W1S 1BN

Suggested Hotel

There are many hotels near the venue. These are walking distance. We also recommend the...

Hotel - The Waldorf Hilton, London

Hotel - Lost Property at St. Paul's

SoftwareIDM Patterns and Practices Toolkit

Access Required

User Lifecycle
- Application (pre-HR)
  - Verified ID (or equivalent for 100 pt check etc.)
  - Letter of Offer
  - Acceptance
  - Pre-start access
- Joiner
  - Account Provisioning
    - HR Provisioning (Org structure occupant, independent of whether or not application process precedes it)
      - HR Contingent Worker (Org structure occupant)
    - Contingent Worker Provisioning (non-HR)
      - Guest provisioning (vendor/service provider)
      - Other provisioning (contingent worker/interested party)
  - Multiple HR feeds
  - HR feed masking/overriding
  - Generate non-HR employee ids
  - Immutable/correlation id
  - Unique name generation
  - Provisioning in advance of start date (in HR, not in HR yet)
    - Provision before start date
    - Use SvP to pre-create an employee in advance of HR
- Mailbox provisioning (on prem AD or M365)
  - M365 group based licensing, set remote mailbox
- Home folder provisioning
- Birthright access
  - Azure license group/assignment
  - VPN
  - Internet users etc.
- Sign conditions of use agreement
- Activation
  - Advance account activation
  - Manager-driven initial Access/Activation (incl. notifications)
- Notifications (new account, manager, initial pwd, etc.) [TODO:enumerate password delivery options]
- Admin/Secondary account provisioning
- Out-of-band setup, e.g. mailbox scripts
- Location or Job based provisioning templates
  - Email suffix
  - OU/Domain target
  - Azure tenancy
  - Share/home folder locations (persona)
- Mover/Changes
  - Change profile (personal details)
  - Change profile (employment details)
  - Change Org Structure (manager/subordinates)
  - Change roles
  - Non-employee manager reassignment
  - Account dormancy
  - Dormant account reclaim
  - Name change
  - Account name/email change (with notification/approval)
  - Multi-domain/forest
    - Primary domain
    - Domain move
    - Cross-domain join
    - SID history management
  - Account changes notes
- Leaver
  - Non-employee re-certification
  - Immediate/Emergency termination (walked)
  - Termination on elapsed date
    - Delayed termination
  - Delayed archiving workflows
  - Out-of-band cleanup
  - Entitlement cleanup
  - Litigation holds
- Re-joiner
  - Rejoin as Non-HR contingent worker
    - Rejoin as former employee
    - Search and verify for previous account
  - Rejoin as HR employee
    - Rejoin as former Non-HR contingent worker
  - Merge identity (user with multiple accounts)
  - Re-certification of entitlements
- Password Management
  - SSPR
  - Service desk password reset
  - Password synchronization
- Non-person and Special Account Management
  - Service accounts
    - Request authorization
    - Metadata (ownership, application assignment)
    - Decommissioning
  - Test accounts
  - VIP accounts
    - Change approval for VIP accounts
    - Board members
  - Auditors
  - Guest accounts
    - Guest Lifecycle management
    - Guest Invitations
- Reference Data Management (Locations, Org Units, etc.)
  - Ref Data Lifecycle Management
  - Overrides (time-bound)
- Group Lifecycle
  - Criteria Groups
    - Exception management
  - Group policy templates
    - Job based granularity of group grants
  - Group creation
    - Request/approve
    - Security groups
    - Distribution groups
  - Group ownership
    - Pooled ownership
    - Position derived ownership
  - Membership request
    - Approval
  - JIT/PAM
  - Out-of-band
    - Mailbox setup
    - Post removal cleanup
  - Expiry and Extension
  - Attestation
  - Roles
    - Link to groups
    - Criteria assignment
    - Hierarchical roles
    - Attestation/certification
- System Operations
  - Availability monitoring (panel check, status page)
  - Backup and Recovery (on-premises only)
  - Timing (operational efficiency)
  - System health
    - Supported OS
    - Supported dependencies
    - Secure networking
  - Connected system availability
  - Schema changes
  - Updates and compatibility
  - Secret Management
  - Threshold triggering
  - Change Management (promotion of configuration)
  - Housekeeping
- Compliance and Reporting
  - JML Reporting
    - Leavers reporting
  - License utilization
  - Pending changes
    - Exports
    - Imports
  - Sync Errors
  - Requests and Approval history
  - SLA adherence
    - Change volume
  - Policy violations [TODO: expand definition of policy violations]
  - Data integrity
    - Mismatched accounts
    - Enablement conflicts
    - Expiry
    - Ambiguous joins
    - Incorrect joins
    - Uniqueness conflicts
    - Manager tree integrity
    - Valid manager (e.g. employee)
    - Unresolved references
  - Dormant accounts
  - AD flags (Password never expires, not required)
  - Event syndication (to SIEM)
    - IdP request logs
    - Sync activity
  - Data syndication to BI
    - Org has a Power BI team that wants Identity data
    - Org was dumping MV data into tables for reporting
  - Groups with no members
  - Groups with no owner
  - Groups with no changes (e.g. add/remove in n years)

Note: referenced JSON files for the above can be found here.

Articles in this section

London, U.K. - 11 May 2023 - W902 - HyperSync Patterns and Practices - with MIM Sync to HyperSync Migration Toolkit

SoftwareIDM Patterns and Practices Toolkit

Comments