ACS with Tivoli Identity Manager

[jboyer]

Has anyone implemented ACS with ITIM? It was press released almost a year ago and I cannot find any technical documentation to find out how it integrates. What I need to find out is: Does the ACS server use ITIM as a external database for user auth? Or do both products need to backend into the same LDAP dir for user/pass info?

[vmehr]

Yes, we have. ITIM has develped an ITIM ACS agent for Cisco ACS integration. The ITIM ACS Agent is installed on the ACS server and it communicates with Cisco ACS application through Cisco ACS available API. Through the ITIM agent, TIM can creat, delete and modify ACS user's account. No, Cisco ACS server can not use ITIM database as an external for user auth.

[jboyer]

Thank you for the information. Does you implementation currently have a local ACS database or do both ACS and ITIM backend in the same LDAP dir? The issue I have is the LDAP dir doesn't have group membership information, that info is in ITIM so ACS cannot backend into LDAP if the groups membership info is not there?!