The Identity Management interface allows for the creation and management of identity-related objects. User, role, group, policies, organization, sub-organization, container objects, and agents can be defined, modified or deleted using either the OpenSSO console or the command line interface. The console has default administrators with varying degrees of privileges used to create and manage the organizations, groups, containers, users, services, and policies. (Additional administrators can be created based on roles.) The administrators are defined within the Directory Server when installed with OpenSSO.
For descriptions of the OpenSSO identity object types and basic creation and configuration instructions, see the Directory Management in the Federated Access Manager 7.1 Administration Guide.