CP-PingIDM
Certified Professional - PingIDM
Parte de Certified Professional - PingIDM
Credential valid for 3 years. Validates install, configure, administer, troubleshoot, and maintain for PingIDM (formerly ForgeRock Identity Management). Official recommended training: PingIDM Deep Dive.
Material de estudo independente, construído a partir do blueprint público da prova. Sem afiliação, autorização ou endosso da ping. Os objetivos são transcritos e mapeados à mão, então esta página pode conter erros ou estar defasada em relação ao material atual do fabricante: objetivos, versões, numeração e disponibilidade mudam sem aviso. Trate o portal de certificação da própria ping como a fonte da verdade e confira nele antes de agendar qualquer coisa.
Section 1: Modeling Objects and Identities
1.01 Modeling an identity profile
O que saber:- managed.json defines the managed object schema
- Properties: type, required, searchable, encrypted, virtual
- Policies validate values on create/update
- Relationships declared as properties (ref types)
1.02 Querying IDM objects
O que saber:- Query by filter (_queryFilter), by id, or by named query
- Filter operators: eq, co, sw, gt, and boolean composition
- Fields, page-size, and sort parameters
- Query endpoints over REST return uniform result envelopes
1.03 Managing relationships
O que saber:- Relationships link managed objects (user-role, user-manager)
- Bidirectional references kept consistent by IDM
- Relationship properties carry grant metadata (e.g. temporal)
- Reverse queries traverse the graph
1.04 Managing organizations
O que saber:- Organizations model hierarchical business units
- Owners, admins, and members as relationships
- Delegated scope follows the org tree
- Org membership can drive provisioning
1.05 Delegating administration
O que saber:- Delegated admin via access-control rules (access.js)
- Scope by relationship, org, or attribute condition
- Privilege sets limit which properties/actions are allowed
- Least privilege for helpdesk vs full admin
Section 2: Managing Connectors
2.01 Configuring connectors with the IDM admin UI
O que saber:- Admin UI configures connectors from provisioner templates
- Base connection, credentials, and object-type mappings
- Test connection before activating
- Sync mappings reference the connector's object types
Ferramentas: ldap-filter-explainer2.02 Configuring connectors over REST
O que saber:- Connector config is JSON under conf/provisioner.openicf-*.json
- REST create/update of connector configuration
- Scriptable provisioning for CI/CD
- Same result as the UI, versionable in source
Section 3: Managing Synchronization and Reconciliation
3.01 Performing basic synchronization
O que saber:- Reconciliation compares source and target, applies situations/actions
- Situations: ABSENT, MISSING, FOUND, UNQUALIFIED, etc.
- Mappings define source-to-target attribute flow
- Full recon vs targeted by id
3.02 Running selective synchronization and LiveSync
O que saber:- LiveSync polls the connector changelog for deltas
- Selective sync via query filters on the mapping
- Lower latency than scheduled full recon
- When to prefer LiveSync vs reconciliation
Neste site: Filtros de busca LDAP: lendo os parêntesesFerramentas: ldap-filter-explainer3.03 Configuring role-based provisioning
O que saber:- Roles carry assignments that grant entitlements
- Conditional (query-based) vs manual role membership
- Assignment attributes flow to target on provisioning
- Deprovisioning on role removal
Section 4: Getting Started With Workflow
4.01 Deploying and starting a workflow
O que saber:- BPMN workflows deployed to the embedded engine
- Start via REST, UI, or event trigger
- Task queues and candidate assignment
- Process variables carry request context
4.02 Deploying and creating a workflow
O que saber:- Author BPMN with user tasks, script tasks, gateways
- Package and deploy the process definition
- Forms bind to user tasks for input
- Versioning of process definitions
Section 5: OAuth and OIDC Configuration
5.01 Installing IDM
O que saber:- Unpack, configure repo (JDBC/DS), start via startup script
- boot.properties and resolver config
- First-run admin bootstrap
- Ports and TLS keystore setup
5.02 Deploying IDM in a cluster
O que saber:- Shared repository backs the cluster state
- Cluster node identity and instance config
- Scheduler coordination so jobs run once
- Load balancer in front of the nodes
5.03 Managing IDM in a cluster
O que saber:- Node health and cluster membership monitoring
- Config propagation across nodes
- Rolling restarts without downtime
- Scheduler failover behavior
5.04 Monitoring and troubleshooting
O que saber:- Health endpoints and metrics (Prometheus-style)
- Audit and recon logs for troubleshooting
- Common failure points: connector creds, mapping errors
- Log levels per logger for diagnosis
5.05 Implementing explicit mapping
O que saber:- Explicit attribute mapping vs default/implicit
- Transform scripts on individual attributes
- Conditional mapping and default values
- onCreate/onUpdate hooks in the mapping
5.06 Upgrading IDM
O que saber:- Upgrade tooling migrates config and repo schema
- Back up conf/ and the repository first
- Custom scripts and mappings review post-upgrade
- Version-order the steps in a cluster
Fontes públicas, usadas de boa-fé
Estes guias são materiais de estudo independentes, montados a partir de conteúdo publicamente disponível: blueprints de exame publicados, documentação oficial de produto e catálogos de treinamento dos fabricantes. Nomes de produtos, códigos de exame e marcas pertencem a seus titulares e são usados apenas para identificar o assunto ensinado. Este site não é afiliado a nenhum fabricante aqui citado nem endossado por ele. Se você detém direitos sobre material publicado nesta página e entende que ele deve ser removido ou corrigido, envie a URL exata e uma breve nota sobre o problema pela página de contato; os pedidos são analisados com rapidez e boa-fé. Ler o aviso legal completo →