Requirements

Databases

...

For SQL Server and Azure SQL see also the transaction isolation level requirements here: Set transaction isolation level for MS SQL when used with Identity Manager

Capture or production client: Software

The following requirements apply for a workstation that is to be used as a capture client or production client: 

...

• A PKCS#11 compliant smart card middleware.

  • For a list of supported smart card middleware, see heading "Supported smart cards and middleware in Identity Manager".

• OpenJDK or Oracle Java

  • Version 11 (64-bit), tested on OpenJDK 11.0.6+10

  • Architecture: 32-bit (for any smart card middleware) or 64-bit (for any smart card middleware except Nexus Personal)

• The smart card middleware and client-side Java must have the same OS architecture, either 32-bit or 64-bit, since Identity Manager's encoding component connects from the client-side Java to the middleware.

PKI encoding via Self-Service: Software

The following requirements apply for the use of PKI cryptochip encoding features on Identity Manager Self-Service clients:

• Smart ID Desktop App of the latest version is supported and must be installed. See Smart ID Desktop App news for information about the latest Smart ID Desktop App version. For more information, see Smart ID Desktop App requirements and interoperability. 

• A PKCS#11 compliant smart card middleware must be installed.

  • For a list of supported smartcard middleware, see heading "Supported smart cards and middleware in Identity Manager".

Identity Manager war files deployment installation

The following requirements apply for Identity Manager war files deployment installations:

• Tomcat 8/9

• Java 11

Interoperability

Data connectors

Identity Manager allows synchronization of data with external systems for many different use cases, for example card data, employee data from corporate directories, and entitlements from physical access control systems. Import and export of data can be done for various formats, for example LDAP, JDBC, CSV and SCIM. 

Corporate directories

Identity Manager supports connection to directories compliant with the following standard: 

...

For more information, see Integrate Identity Manager with Microsoft services.

JDBC databases

Identity Manager supports connection to databases based on Java database connectivity (JDBC).

...

The SQL Server and Azure SQL databases only support case insensitive queries (which is the default option).

Certificate authorities

...

Other CAs can be integrated on demand.

Physical access control systems (PACS)

...

Set up integrations

For more information, see Integrate Identity Manager with physical access control system (PACS). 

There is also a PACS demo service included in the Physical Access component that can be used to simulate PACS integration. 

Mobile device management (MDM)

The following mobile device management (MDM) product is supported in Identity Manager:

...

Other MDM systems can be integrated on demand.

Digital identities

Smart cards and middleware in Identity Manager

...

⁽⁹⁾ JCOP 4.5 cards with Chipdoc applet versions before 4.1.1 are not supported on some PIN pad readers (e.g. Xiring/Ingenico Leo) due to missing support for chained APDUs in the card firmware.

Yubikey Yubikeys

Identity Manager supports certificate enrollment to Yubico YubiKey 5 PIV tokens via Smart ID Desktop App. 

Fido2 tokens on Yubikey are not supported. 

Virtual smart cards

Virtual smart cards are supported with Smart ID Desktop App.

...