Which Integration Method to Use?
Use the following flowchart to learn which method to use to integrate your application with Oracle Identity Cloud Service.
The following scenarios will help you understand this flowchart for synchronization and provisioning purposes:
Scenarios for User Synchronization
One of the following scenarios may apply when synchronizing users and groups from authoritative sources:
An HR Application as an Authoritative Source
When a company hires an employee, an HR representative adds that employee's information in the HR application directly. The HR application contains information about the user, such as the user's first name, last name, job role, and job location. This information is used to create an account for the user and assign applications to the user. For this scenario, you want to synchronize your user account into Oracle Identity Cloud Service from the HR application.
Oracle Identity Cloud Service supports integration with the HR application via the App Catalog. If your application isn't listed in the App Catalog, then you can build your own connector or use the Generic SCIM App Template. This template facilitates the configuration of your custom application when the SCIM APIs are exposed. If your application doesn't expose the SCIM APIs, then you can develop a custom SCIM gateway to act as an interface between Oracle Identity Cloud Service and your application.
A Corporate LDAP as an Authoritative Source
Some customers store users and groups into an LDAP, such as Microsoft Active Directory (AD) or Oracle Internet Directory. These users and groups can authenticate into Oracle Identity Cloud Service via SSO. For this to occur, first, the users and groups must be synchronized from the LDAP into Oracle Identity Cloud Service. To do this, use the Microsoft Active Directory Bridge (for AD) or the Provisioning Bridge (for Oracle Internet Directory).
Scenario for User Provisioning
Oracle Identity Cloud Service enables you to use app templates to provision users to applications. In the App Catalog, you'll find a list of app templates that support provisioning. These templates enable you to integrate these applications with Oracle Identity Cloud Service quickly. If your application isn't listed in the App Catalog, then use the Generic SCIM App Template.
Now that you know how to use the flowchart to select a method to integrate your application with Oracle Identity Cloud Service for provisioning and synchronization purposes, let's learn about each integration type in greater detail.