Access Management 7.3.2

Test external identity repository access

To verify that you have configured the repository and administrator privileges correctly, follow these steps:

  • Attempt to create an AM user by going to Realms > Realm Name > Identities in the AM admin UI. Run this test only if you have given the AM bind account write privileges to your identity repository.

    For example, create a demo user. When creating a demo user’s account, set the fields as follows:

    Demo user account settings
    Field Value

    ID

    demo

    First Name

    Leave this field blank.

    Last Name

    demo

    Full Name

    demo

    Password

    Ch4ng31t

    User Status

    Active

  • Attempt to access an AM user from Realms > Realm Name > Identities in the AM admin UI.

If you receive an LDAP error code 65 while attempting to create a user, it indicates that you did not correctly prepare the identity repository. Error code 65 is an LDAP object class violation and often indicates a problem with the directory schema or permissions.

A common reason for this error while attempting to create a user is that the bind account might not have adequate rights to add data to the directory. Review the DS access log and locate the entries for the add operation to determine if it is an access rights issue.

For information on setting up Directory Services as an identity store, see Install and configure Directory Services for identity data.