FAQ - Maverics Identity Discovery

Search…

Maverics Identity Discovery Overview

FAQ

Get Started

Check prerequisites

Get the free tool

Launch the Command Line Interface (CLI)

Connect to SiteMinder 12.8

Discover your SiteMinder data

Load SiteMinder traffic (Optional)

Export the analysis to a .json file

Analyze the results in a browser

Explore the results

Advanced

Deploying the CLI to a JumpBox

List of Commands for the CLI

FAQ

Quick answers to common Maverics Identity Discovery tool questions.

How can I learn more about accelerating my migration with Maverics?
We'd love to explore the results you have discovered and help get you on your way with a successful migration. Please contact us by scheduling a demo.
What do I need to get started?
That's simple! Only a couple things:
You need to download the FREE Maverics Identity Discovery Tool. You can register to get the tool from here. Check your email to get a link to download the tool. If you have any trouble with this, contact sales.
The tool supports SiteMinder 12.8 or higher and to run the tool you need Admin access.
General Questions
What Identity Provider (IdP) and version does Discovery currently support
Discovery currently works with SiteMinder 12.8 +.
What information and access credentials do you need to run Discovery for SiteMinder 12.8?
You will need both the base URL path for accessing your instance of SiteMinder as well as admin credentials to run Discovery.
What additional IdP versions of Discovery will be released and when?
We regularly evaluate the needs of businesses like yours and would love to hear from you about the version you’d like to see next. Reach out at [email protected] and let us know which legacy IdP version of Discovery would be most valuable to you.
Does Discovery share any information about my SiteMinder environment outside of my workstation?
No - Both components of the Discovery tool (the Command Line and Browser Interfaces) run locally on your workstation and no sensitive information or data is shared externally. The data and visual report returned during the Discovery experience remain secure and private to your organization.
Will running Discovery cause any impact on the current access experience of my users or degrade system performance in any way?
No - The Discovery tool is a read-only solution, and will not affect your users’ experience in any fashion. Further, Discovery has no ability to modify or affect existing SiteMinder rules or policies within your current environment.
Command Line Interface (CLI)
Which version of the Discovery software should I download?
You should select the version (MacOS, Windows, or Linux) that matches the workstation used in your workflow path to access your SiteMinder environment today.
Browser Interface
What filter operators can I use in the Search bar to better understand my Discovery data?
You can use plain text terms to add filters to your search parameters in the Browser Interface, such as a Realm’s name. When you add additional filter terms, know that they are combined with an implied “and” operator and the list of results will get smaller with each additional search term.
How is the Complexity Score assessed and what are the units of measure?
Complexity is a measure of the relative difficulty any given realm will be to migrate using Maverics due to its structure and interdependencies. There are three units of measure for Complexity (Low, Medium, and High) and they are defined as:
****
Score
Description
Maverics Solution
Low
• Header count under 20
• Rule/Policy count under 20
• No active responses
• No active rules
The simplest realms to migrate with Maverics using standard configurations.
Medium
Meets at least one of these conditions:
• Header count over 20
• Rule/Policy count over 20
• At least 1 rule defined with a regular expression
These realms can be migrated with some customization of the Maverics configurations.
High
Meets at least one of these conditions:
• Has an active rule
• Has an active response
These realms can be migrated by leveraging Maverics service extensions.
What does the measure of “Traffic” represent?
Traffic is a numerical count of the number of authentication events that have accessed a particular Realm over the duration of the imported logs. This allows you to understand which Realms see the majority of usage relative to others in Discovery’s single view of your SiteMinder 12.8 environment. In order for traffic to be incorporated in the discovery you need to Load SiteMinder traffic.
What additional information can I learn about a Realm when I click on its link in the Browser Interface?
The Discovery tool's Browser Interface will also tell you hidden policy characteristics such as Filter Path, Filter Class, regular expression usage, and app interdependencies.
Reporting
How can I share the results of my Discovery experience with other stakeholders on my team?
There are two ways that you can share your results:
The simplest option is to use the “Generate Report” option found on the Browser Interface to generate a static PDF version of your results that can be emailed to others on your team.
You can share the exported .json file with others so they can explore the results on their computer. Simply have them download and run the CLI. They can pick up the next steps outlined in the section titled: "Open results in a browser".
What does the Complexity Score allow me to do?
The Complexity Score will allow you to prioritize Realms based on the relative level of effort it will take to migrate your entire SiteMinder environment to a new target Cloud IdP. The more Realms you have that fall into the “Medium” and “Hard” categories, you can infer that the lift involved will require more time and resources.
The good news is that Strata’s migration experts can help you understand what that means in practical terms and are available to help you begin planning your migration strategy. You will be pleasantly surprised to learn how simple the migration process can actually be when you can eliminate manual integration coding.
Visit us at strata.io to learn more and schedule a free migration strategy session with one of our experts at [email protected].