IDENTITY MIGRATION APPARATUS AND METHOD

• US 20080104220A1
• Filed: 10/30/2007
• Published: 05/01/2008
• Est. Priority Date: 10/30/2006
• Status: Active Grant

• Current Assignee: Quest Software, Inc.
• Original Assignee: Quest Software, Inc.
• Inventors: VANYUKHIN, NIKOLAY, Shevnin, Oleg, Korotich, Alexey
• Granted Patent: US 8,086,710 B2
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements

Abstract

An identity migration program provides interfaces for a user to manage operations for migrating locally-managed identities to centrally-managed identities. The provided interfaces include a project management interface, an identity selection interface, a migration rule editor interface, and a project scheduling interface. In certain embodiments, the identity migration program includes a communication module that provides interfaces for managing communication between the identity migration program and locally-managed and centrally-managed servers. Interfaces may also be provided to manage identity group migration and migration error resolution. A migration process management interface enables the user to halt, roll back, or resume a migration project.

Claims

1. A computer readable medium tangibly embodying a program of machine-readable instructions executable by a digital processing apparatus to perform operations to migrate locally-managed identities to centrally-managed identities, the operations comprising:

providing at least one interface control that enables a user to create a migration project;

providing at least one interface control that enables a user to specify locally-managed identities to be migrated to centrally-managed identities;

providing at least one interface control that enables a user to specify a plurality of migration rules for the migration project;

providing at least one interface control that enables a user to specify a migration schedule for the migration project; and

executing the migration rules according to the migration schedule.

2. The invention of claim 1, further comprising providing at least one interface control that enables a user to communicate an identity map to at least one server.

3. The invention of claim 1, further comprising providing at least one interface control that enables a user to specify accounts to be included in an account group.

4. The invention of claim 1, further comprising providing at least one interface control that enables a user to modify a migration rule to resolve identity migration errors.

5. The invention of claim 1, further comprising providing at least one interface control that enables a user to manually correct an identity migration error.

6. The invention of claim 1, further comprising providing at least one interface control that enables a user to halt a migration process specified by the migration project.

7. The invention of claim 1, further comprising providing at least one interface control that enables a user to roll back a migration process specified by the migration project.

8. The invention of claim 1, further comprising providing at least one interface control that enables a user to resume a migration process specified by the migration project.

9. An apparatus to centralize identity management, the apparatus comprising:

a project management module configured to provide at least one interface control that enables a user to create a migration project;

an identity selection module configured to provide at least one interface control that enables a user to specify locally-managed identities to be migrated to centrally-managed identities and associate the locally-managed identities with the migration project;

a migration rule editor configured to provide at least one interface control that enables a user to specify a plurality of migration rules for the migration project;

a scheduling module configure to provide at least one interface control that enables a user to specify a migration schedule and associate the migration schedule with the migration project; and

an execution module configured to execute the migration schedule according to the plurality of migration rules and the migration schedule.

10. The invention of claim 9, further comprising a communication module configured to:

retrieve locally-managed identities from at least one server;

provide at least one interface control that enables a user to communicate an identity map to at least one server; and

communicate an identity map to at least one server in response to user activation of the at least one interface control.

11. The invention of claim 9, further comprising a group management module configured to provide at least one interface control that enables a user to specify accounts to be included in an account group.

12. The invention of claim 9, wherein the migration rule editor is further configured to provide at least one interface control that enables a user to modify a migration rule to resolve identity migration errors.

13. The invention of claim 9, further comprising an account mapping module configured to provide at least one interface control that enables a user to manually correct an identity migration error.

14. The invention of claim 9, further comprising a migration process management module configured to provide at least one interface control that enables a user to halt a migration process specified by the migration project.

15. The invention of claim 14, wherein the migration process management module is further configured to provide at least one interface control that enables a user to roll back a migration process specified by the migration project.

16. The invention of claim 14, wherein the migration process management module is further configured to provide at least one interface control that enables a user to resume a migration process specified by the migration project.

17. A method to migrate locally-managed identities to centrally-managed identities, the method comprising:

providing at least one interface control that enables a user to create a migration project;

providing at least one interface control that enables a user to specify locally-managed identities to be migrated to centrally-managed identities;

providing at least one interface control that enables a user to specify a plurality of migration rules for the migration project;

providing at least one interface control that enables a user to specify a migration schedule for the migration project; and

executing the migration rules according to the migration schedule.