Skip to main content

EmpowerID Admin Lab 5 - Tracking Only Account Store

Purpose

This lab guides you through creating a "Tracking Only" account store in EmpowerID to represent an external application or system that is not digitally integrated with EmpowerID.


Prerequisites

  1. Access to the EmpowerID training environment.
  2. Knowledge of the external system or application to be represented.
  3. A modern web browser.

Steps

1. Navigate to Account Stores and Systems

  1. Open your browser and log in to EmpowerID.
  2. Go to Admin > Applications and Directories > Account Stores and Systems.
  3. Click on the Account Stores tab.

2. Create a Tracking Only Account Store

  1. Click on the Create Account Store workflow.
  2. Search for and select the Tracking Only System type by typing "Track" into the search bar.
  3. Click Submit.
  4. Provide a name for the account store, e.g., Sales Management System.
  5. Leave the remote option unchecked, as this account store is internal to EmpowerID.
  6. Save to create the account store.

3. Configure the Account Store

  1. Open the newly created account store to edit its settings.
  2. Configure the following settings:
    • Visibility: Mark as Visible in IAM Shop to allow requests for accounts and groups.
    • Provisioning and Deprovisioning: Enable these options to allow manual provisioning and deprovisioning actions.
    • Attribute Flow: Enable attribute flow to allow data updates.
    • Inventory: Leave inventory disabled, as no digital connection to the external system exists.
    • Business Roles and Locations: Leave these settings disabled, as they are not applicable.
  3. Save the configuration.

4. Verify the Account Store

  1. Confirm the account store is displayed in the list with the provided name, e.g., Sales Management System.
  2. Note that no users or groups are associated with the account store initially.
  3. This account store can now be used to:
    • Target provisioning policies.
    • Manually create groups or accounts.
    • Import groups from a CSV file if needed.

Notes

  • A "Tracking Only" account store is useful for representing external systems in EmpowerID where manual processes are required for provisioning and deprovisioning.
  • Periodic recertification or audit campaigns can be conducted to ensure manual reconciliation of accounts and groups.
  • Consult your instructor or EmpowerID documentation if additional configuration is required.

Completion

Once the "Tracking Only" account store is created and configured, it is ready for use in manual provisioning workflows, business requests, or group imports. Proceed to the next lab to explore further EmpowerID functionality.


Video Walk-thru

View a video walk-thru of this lab exercise.