Deltek CostPoint
Identities ❌ | Accounts ✔️ | Groups ✔️ | App Roles ❌ | Entitlements ❌ |
Application
The first step in collecting accounts, tokens information from Deltek CostPoint is to create a placeholder application to store this information in RSA Governance & Lifecycle.
Steps
- Login to RSA G&L console as System Administrator.
- Navigate to Resources > Application.
- Click on Create Application and select Other Application.
- Enter the details as shown below.
- Click Finish.
Account Collector
This section explains the process for configuring an account collector for the Deltek Costpoint application. We will use the SQL Server database collector for this purpose.
Steps
- Login to RSA G&L console as System Administrator.
- Navigate to Resources > Applications.
- Click on Deltek CostPoint.
- Navigate to Collectors tab and click on Create Account Collector. Enter the details as shown below.
- Click Next and enter the database details. Use the Test Connection to make sure the connection details are accurate. Use the latest Microsoft JDBC Driver for SQL Server if NTLM authentication is required.
- Click Next. Select the appropriate data that you intend to collect.
- Click Next. On the Account Data page, enter the following query to collect account information.
SELECT
DISTINCT users.USER_ID as accountName,
user_details.NAME as displayname,
user_details.EMPL_ID as employeeID,
user_details.LAST_PSWD_CHNG_DT as passwordChangeDate,
CASE WHEN user_details.DE_ACTIVATION_DT IS NULL
THEN 0 ELSE 1
END as isDisabled,
user_details.LAST_LOGIN_DT as lastLogin,
company.ORG_SEC_GRP_CD as company
FROM
CPADMIN.W_USER_GRP_USERS users
JOIN CPADMIN.W_USER_UGRP_LIST user_details
ON users.USER_ID = user_details.SEC_OBJ_ID
JOIN CPADMIN.W_USER_COMPANY company
ON users.USER_ID = company.USER_ID
The following are the important attributes
8. Click Next. On the User Account Mappings Data configuration page enter the following query to map the Deltek CostPoint account to user identity.
select
CPADMIN.W_USER_GRP_USERS.USER_ID as accountName,
CPADMIN.W_USER_GRP_USERS.USER_ID as userID
from
CPADMIN.W_USER_GRP_USERS
The following are the important attributes
9. Click Next. In the Group Data configuration section enter the following query to collect groups from Deltek CostPoint.
SELECT
DISTINCT SEC_OBJ_ID as groupID,
NAME as groupName
FROM
CPADMIN.W_USER_UGRP_LIST groups
WHERE
TYPE = 'G'
The following are the important attributes
10. In the Account Membership Data configuration section enter the following query to collect groups membership information from Deltek CostPoint.
SELECT
groups.NAME as groupName,
groups.SEC_OBJ_ID as groupID,
users.USER_ID as accountName
FROM
CPADMIN.W_USER_GRP_USERS users
INNER JOIN CPADMIN.W_USER_UGRP_LIST groups
ON groups.SEC_OBJ_ID = users.SEC_OBJ_ID
WHERE
groups.TYPE = 'G'
- Click Next. In the User Resolution Rules, map the user to account
- Click Next. In the Member Account Resolution Rules, map the account collector.
- Click Finish. Use the Test function to make sure the configurations are accurate.
COL023