Versions Compared

Old Version 5

changes.mady.by.user Karolin Hemmingsson

Saved on

compared with

New Version 6

changes.mady.by.user Ann Base (Deactivated)

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


When
Excerpt
When Smart ID Identity Manager (PRIME) is running in the cloud it does not have access to internal customer systems, like, for example, LDAP. It can not be guaranteed that a service in the customer's network can be accessed. To get access to customer systems, the Smart ID Agent (DataSyncProxy) is
introduced
used.


The Smart ID Agent (DataSyncProxy) is a small Spring Boot application. It is placed and runs on a machine in the customers network environment. The machine on which the the Smart ID Agent (DataSyncProxy) runs must have access to internal systems like LDAP. The The Smart ID Agent (DataSyncProxy) connects with Identity Manager (in the cloud) with a normal http connection. The connection is held as long as the proxy is running. While the connection is held, Identity Manager (in the cloud) is able to send Server-Sent Events (SSE) to the Smart ID Agent (DataSyncProxy). The  The Smart ID Agent (DataSyncProxy) allows accessing a subsystem (search and export) in the same way as with any data source in a non-cloud installation of Identity Manager.

The picture illustrates how the the Smart ID Agent (DataSyncProxy) is placed in the customer's network.

  • Customer 1 and Customer 2 symbolizes networks at two different customers that connect to the Identity Manager cloud service via the gateway.
  • When the user performs a search in Identity Manager, the the Smart ID Agent (DataSyncProxy) provides a data connection to the user’s subsystem and transfers the search result data to Identity Manager. Subsystems could be the LDAP, an external JDBC database, a SCIM data source, etc.
  • The The Smart ID Agent (DataSyncProxy) also allows the export of data from Identity Manager to the user’s subsystem.
Expand
titleEnable the DataSyncProxy to Identity Manager
  1. In Identity Manager Admin, go to Home > Data pool.
  2. To edit an existing data pool, double-click the data pool name.
  3. In the Data sources tab, select one of the data sources in the Type drop-down list.
  4. Check DataSyncProxy enabled.
  5. Click Save.
Expand
titleConfigure DataSyncProxy in Identity Manager

In the Identity Manager file system.properties, these are the standard settings for response intervals and timeouts for Identity Manager (for executing searches, exporting data, ...) and Identity Manager Admin (for testing connection, getting the scim resource types and getting the attribute lists). If needed, they can be configured.

Code Block
titleExample: Configure DataSyncProxy in system.properties
dataSync.responsePollingIntervalInMs=200
dataSync.responsePollingTimeoutInMs=30000
dataSync.proxyConnectionTimeoutInMs=3600000
 
# when the connection timeout above occurs, spring logs a message on error level. To disable this enter: (Note: if you want to be sure not to miss any other logs do not turn this on)
dataSync.suppressSpringMvcExceptionsWhileTimeout=true
Expand
titleConfigure DataSyncProxy in customer system

In data_sync_proxy.yaml the following can be configured:

Code Block
titleExample: Configure data_sync_proxy.yaml
logging.config: ./log4j2.xml # Custom logging configuration prime: urls: # The urls of the Prime server(s) the proxy should connect to - http://localhost:18080/prime_explorer - http://localhost:18080/prime_designer tenantId: 1 # The Tenant id the Proxy is used for userName: admin # The userName for which to call the Rest Service password: admin # The password of the user which triggers the Rest Service reconnectDelay: 15000 # The delay how often the proxy checks if the connection is still active (in milliseconds)

This article is valid from Nexus PRIME 3.11.

How the DataSyncProxy is placed in the customer's network.Image Removed

for Smart ID 20.06.1 and later.

Related information

Image Added

Read more about how to enable and configure Smart ID Agent (DataSyncProxy) here: ADD LINK to "Access local services..."