EmpowerID IBM Domino Connector

The EmpowerID IBM Domino Connector allows organizations to integrate user and group data from their IBM Domino system with EmpowerID. Once connected, EmpowerID enables seamless management and synchronization of this data with any connected back-end user directories.

Features and Capabilities

Account Management

• Inventory IBM Domino user accounts
• Create, update, and delete IBM Domino user accounts
• Enable and disable IBM Domino user accounts
• Reset user passwords

Group Management

• Inventory IBM Domino groups
• Inventory IBM Domino group memberships
• Create and delete IBM Domino groups
• Add and remove members to and from IBM Domino groups

Attribute Flow

EmpowerID inventories users in IBM Domino as accounts. The following table details the attribute mappings between IBM Domino and EmpowerID:

Domino Attribute	EmpowerID Attribute	Description
LastName	LastName	Last name of the user
FirstName	FirstName	First name of the user
MiddleInitial	MiddleName	Middle initial of the user
Name	Name	Name of the user
DisplayName	FriendlyName	Display name of the user
ShortName	Login	Login of the user
InternetAddress	Email	Email address of the user
EmployeeNumber	EmployeeID	Unique employee ID
EmployeeType	EmployeeType	Employee type of the user
JobTitle	Title	Job title of the user
Department	Department	Department of the user
DepartmentNumber	DepartmentNumber	Department number of the user
CellPhoneNumber	MobilePhone	Mobile phone number of the user
OfficePhoneNumber	Telephone	Office phone number of the user
Manager	ManagerPersonID	Person ID of the user’s manager
Location	Location	Location of the user

Prerequisites

To integrate EmpowerID with IBM Domino, ensure the following requirements are met:

• IBM Domino version 9.0 or above
• IBM Domino client installed on a 32-bit machine
• IIS
• EmpowerID Domino Web Service installed on the same machine as the Domino client (The installer must be requested from EmpowerID.)

Installation and Configuration Steps

Step 1 – Install the EmpowerID Domino Web Service

1. On a 32-bit machine with IIS, run the Lotus Notes Connector Service X.X.X.X.msi installer.
2. Click Next to start the installation.
3. Accept the license agreement and click Next.
4. Select the installation destination and click Next.
5. In the Lotus Notes Server Configuration screen:
   • Enter YourDominoServerName/Domain as the Registration Server.
   • Enter /Domain as the Certifier Name.
   • Select the cert.id file from the Domino installation directory.
   • Select the ID file location from the Domino installation directory.
   • Choose True or False for Unique ShortName (True recommended).
   • Choose True or False for No ID File (False recommended).
   • Select the Mail System (default: Notes).
   • Enter the Mail Domain, if different from the Domino server domain.
   • Click Next.
6. In the IIS Settings screen:
   • Enter the Domino admin username and password.
   • Enter the name of the IIS Web Site.
   • Click Next.
7. Click Install, then Finish when complete.

Step 2 – Connect EmpowerID to IBM Domino

1. Navigate to Admin > Applications and Directories > Account Stores and Systems.
2. Click Create Account Store under the Actions tab.
3. Select Lotus Notes as the system type and click Submit.
4. In the Lotus Notes Domino form:
   • Enter the Name for the account store.
   • Enter the Domino Admin Username and Password.
   • Enter the ServiceURL (format: https://<server>/LotusNotes/LotusNoteService.svc/v1).
   • Enter the Certifier Password.
   • Click Submit.

Step 3 – Configure Attribute Flow

1. Navigate to Account Stores and Systems and locate the newly created account store.
2. Click the Account Store link.
3. Click the Attribute Flow Rules tab.
4. Modify attribute flow settings as needed:
   • No Sync – No information flows.
   • Bidirectional Flow – Changes sync in both directions (default).
   • Account Store Changes Only – Only changes from the native system sync to EmpowerID.
   • EmpowerID Changes Only – Only changes from EmpowerID sync to the native system.
5. Modify CRUD operation scores if multiple account stores are connected.

Step 4 – Configure Account Store Settings

1. Navigate to Account Store and Resource System.
2. Click the Account Store tab.
3. Click the pencil icon to edit settings.
4. Modify necessary settings, including:
   • Authentication and password policies
   • Business role and location settings
   • Inventory and membership settings
5. Click Save.

Step 5 – Enable the Account Inbox Workflow

1. Navigate to Infrastructure Admin > EmpowerID Server and Settings > Permanent Workflows.
2. Click Account Inbox.
3. Click the pencil icon to edit.
4. Check Enabled.
5. Click Save.

Step 6 – Monitor Inventory

1. Navigate to Identity Lifecycle > Account Inbox.
2. Use the following tabs to monitor activity:
   • All – View all user accounts and their status.
   • Proposed – View processing suggestions for new accounts.
   • Dashboard – Get a summary of activity.
   • Orphans – Identify accounts without an EmpowerID Person.