Symantec IGA

Hi Experts,

Identity Portal provide a tree like Entitlements for Access - so one can group Applications, Permissions (Roles) etc. But when it comes to certification the same Tree structure is not represented. Its only the Target Permission that is visible for certification - even more worse is the actual IDM representation is certifiable and not the IDP representation. 

I am not sure if I am the only one out here who sees a disconnect or may be people are dealing with workarounds. 

Just want to hear from the experts on what they feel about this. 

Thanks

Any thoughts on this? Is this not a problem Identity Portal customers are facing today?

I think they key is to have the business friendly displayname attribute of the roles, account templates, and resources in sync with the displayname in the entitlement catalog.  In this way what the reviewer is certifying is the same displayname as used when the entitlement was requested.  I think it advisable to have a common script populating the IP Catalog and the IM Roles and Account templates.  In this way you will maintain an exact sync.