All documentation

Configuring SailPoint IdentityNow Service with TLS and Certificates

Published August 28, 2023 Guide

Introduction

SailPoint IdentityNow is a comprehensive identity management solution that allows organizations to manage user identities and access privileges efficiently. To enhance security and ensure encrypted communication between components, configuring Transport Layer Security (TLS) and certificates is essential. This article will guide you through the process of configuring SailPoint IdentityNow with TLS and certificates for a more secure identity management environment.

Prerequisites

  1. SailPoint IdentityNow Environment: Ensure you have access to the SailPoint IdentityNow environment where you will be configuring TLS and certificates.
  2. SSL/TLS Certificates: Obtain valid SSL/TLS certificates from a trusted Certificate Authority (CA) for your IdentityNow environment. You should have a certificate for the IdentityNow application server as well as any other relevant components.

Step 1: Obtain SSL/TLS Certificates

  1. Obtain SSL/TLS certificates for your IdentityNow environment. This involves generating a Certificate Signing Request (CSR) and submitting it to a trusted CA to obtain the certificate.
  2. Once you receive the certificates, make sure you have the certificate files, private keys, and any intermediate certificates.

Step 2: Configure IdentityNow Application Server

  1. Log in to the IdentityNow Admin Console.
  2. Navigate to Admin > Settings > General.
  3. In the "SSL Configuration" section, upload the SSL certificate and private key you obtained.
  4. If your certificate chain includes intermediate certificates, upload those as well.

Step 3: Update IdentityNow URLs

  1. Update the IdentityNow URLs in the admin console to use the "https" protocol instead of "http" to ensure secure communication.

Step 4: Configure IdentityNow Connectors and Adapters

  1. For IdentityNow connectors and adapters that communicate over secure channels, update the configuration to use the updated "https" URLs.

Step 5: Validate Certificate Installation

  1. Use SSL validation tools to ensure that your SSL/TLS certificates are installed correctly and that your server configuration is secure.

Step 6: Periodic Certificate Renewal

  1. SSL/TLS certificates have an expiration date. Implement a process to renew certificates before they expire to ensure uninterrupted services.

Step 7: Implement Monitoring and Alerts

  1. Set up monitoring and alerts for certificate expirations and other security-related events in your IdentityNow environment.

Conclusion

Configuring SailPoint IdentityNow with TLS and certificates is crucial for maintaining a secure identity management environment. By following the steps outlined in this guide, you can ensure encrypted communication between components, protect sensitive data, and mitigate security risks. Remember that SSL/TLS certificate management is an ongoing process, and regular monitoring and updates are necessary to ensure the continued security and availability of your IdentityNow services.