Novell SENTINEL 6.1 SP2 - 02-2010 User Manual page 433

The Solution also requires "identity-enabled" Collectors, which are available for download at the
standard Sentinel content download web site (http://support.novell.com/products/sentinel/
sentinel61.html).
After Sentinel and Identity Manager are installed, the Sentinel Driver for Identity Manager sends
identity and account information from the Identity Vault to the Sentinel Identity Vault Collector,
which populates the Sentinel database. The information is inserted into two new tables in Sentinel
6.1. These two tables are the Identity table (USR_IDENTITY) and the Account table
(USR_ACCOUNT ). For more information, see
Database Views for Microsoft SQL
The time required to initially populate the Sentinel database will depend on the amount of data in the
Identity Vault; identity information including photographs will require significantly more time to
load.
The Sentinel Driver for Identity Manager and Identity Vault Collector also keep the identity
information synchronized as information is updated in the Identity Vault during normal Identity
Manager operations.
After the identity information and account information are loaded in their respective tables with a
link between them, a map named
ESEC_HOME/DATA/MAP_DATA. The map contains the following information:
Account Name

Authority

 Customer Name
Identity GUID

Full Name

 Department
Job Title

Manager GUID

 Account Status
IMPORTANT: An identity can have multiple accounts but one account cannot be assigned to
multiple identities.
The identity map is automatically applied to all events from Collectors to look for an identical match
between the information in the event and key fields in the map. The table below shows the fields that
are populated if all of the map key fields and event data exactly match. These mappings are
automatically configured and are not editable.
Label
InitUserDepartment
"Sentinel Database Views for
Server" in Sentinel 6.1 Reference
IdentityAccount
Populated by which Column
from IdentityAccount Map
Department
Oracle" and
Guide.
is generated automatically in the location
Map Key Field : Event Label
Account Name : InitUserName
Authority : InitUserDomain
Customer Name : MSSPCustomerName
"Sentinel
Identity Integration 433