Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Documentation Updates
• Conventions

What's New in Oracle Identity Manager Connector for Oracle E-Business User Management?

• Software Updates
• Documentation-Specific Updates

1 About the Connector

• 1.1 Certified Components
• 1.2 Usage Recommendations
• 1.3 Certified Languages
• 1.4 Connector Architecture
• 1.5 Features of the Connector
  • 1.5.1 Oracle E-Business User Management Connectors
    • 1.5.1.1 User Management
    • 1.5.1.2 User Management with HR Foundation
    • 1.5.1.3 User Management with TCA Foundation
    • 1.5.1.4 Similarities Between the Three Connectors
    • 1.5.1.5 Differences Between the Connectors
  • 1.5.2 Management of Entitlements
  • 1.5.3 SoD Validation of Entitlement Provisioning
  • 1.5.4 Support for an SSO-Enabled Target System Installation
  • 1.5.5 Reconciliation of Effective-Dated Events
  • 1.5.6 Account Status Reconciliation and Provisioning
  • 1.5.7 Configurable Reconciliation Queries
  • 1.5.8 Account Password Management
  • 1.5.9 Support for Full and Incremental Reconciliation
  • 1.5.10 Support for Limited (Filtered) Reconciliation
  • 1.5.11 Support for Batched Reconciliation
  • 1.5.12 Connection Pooling
• 1.6 Reconciliation Process
  • 1.6.1 Reconciliation Queries
  • 1.6.2 Target System Columns Used in Reconciliation
  • 1.6.3 Reconciliation Rule
  • 1.6.4 Reconciliation Action Rules for Target Resource Reconciliation
• 1.7 Provisioning Process
  • 1.7.1 Request-Based Provisioning of Entitlements
  • 1.7.2 Attribute Mappings for Provisioning
  • 1.7.3 Provisioning Functions
• 1.8 Lookup Definitions Used During Connector Operations
  • 1.8.1 Lookup Definitions That Are Common to All Three Connectors
  • 1.8.2 Lookup Definitions That Are Specific to the User Management Connector
  • 1.8.3 Lookup Definitions That Are Specific to the User Management with HR Foundation Connector
  • 1.8.4 Lookup Definitions That Are Specific to the User Management with TCA Foundation Connector
• 1.9 Roadmap for Deploying and Using the Connector

2 Deploying the Connector

• 2.1 Preinstallation
  • 2.1.1 Preinstallation on Oracle Identity Manager
    • 2.1.1.1 Files and Directories on the Installation Media
    • 2.1.1.2 Determining the Release Number of the Connector
    • 2.1.1.3 Creating a Backup of the Existing Common.jar File
  • 2.1.2 Preinstallation on the Target System
    • 2.1.2.1 Creating a Target System User Account for Connector Operations
    • 2.1.2.2 Compiling Custom Wrapper Packages
    • 2.1.2.3 Setting the Employee Number Creation Mode
• 2.2 Installation
  • 2.2.1 Running the Connector Installer
  • 2.2.2 Copying Files to the Oracle Identity Manager Host Computer
• 2.3 Postinstallation
  • 2.3.1 Configuring SoD
    • 2.3.1.1 Configuring the Oracle Applications Access Controls Governor to Act As the SoD Engine
    • 2.3.1.2 Specifying a Value for the TopologyName IT Resource Parameter
    • 2.3.1.3 Disabling and Enabling SoD
  • 2.3.2 Configuring Secure Communication Between the Target System and Oracle Identity Manager
    • 2.3.2.1 Configuring Data Encryption and Integrity in Oracle Database
    • 2.3.2.2 Configuring SSL Communication in Oracle Database
  • 2.3.3 Postinstallation on Oracle Identity Manager
    • 2.3.3.1 Modifying Dependent Lookup Query Properties for Lookup Fields on Microsoft SQL Server
    • 2.3.3.2 Configuring Oracle Identity Manager 11.1.2 or Later
    • 2.3.3.3 Clearing Content Related to Connector Resource Bundles from the Server Cache
    • 2.3.3.4 Enabling Logging
    • 2.3.3.5 Determining Values for the JDBC URL and Connection Properties Parameters
    • 2.3.3.6 Configuring the IT Resource
    • 2.3.3.7 SSO IT Resource
    • 2.3.3.8 Disabling the Auto Save Form Feature on Oracle Identity Manager Releases 11.1.x and 11.1.2.x
    • 2.3.3.9 Enabling Request-Based Provisioning
  • 2.3.4 Localizing Field Labels in UI Forms
• 2.4 Postcloning Steps

3 Using the Connector

• 3.1 Setting Up Lookup Definitions in Oracle Identity Manager
  • 3.1.1 Setting Up the Configuration Lookup Definition for SSO Password Update
  • 3.1.2 Setting Up the Configuration Lookup Definition
    • 3.1.2.1 Setting Up the Lookup.EBS.UM.Configuration Lookup Definition
    • 3.1.2.2 Setting Up the Lookup.EBS.UMHRMS.Configuration Lookup Definition
    • 3.1.2.3 Setting Up the Lookup.EBS.UMTCA.Configuration Lookup Definition
• 3.2 Scheduled Task for Lookup Field Synchronization
• 3.3 Configuring Reconciliation
  • 3.3.1 Reconciliation Time Stamp
  • 3.3.2 Batched Reconciliation
  • 3.3.3 Configuring Limited Reconciliation
  • 3.3.4 Reconciliation Scheduled Tasks
• 3.4 Configuring Scheduled Tasks
• 3.5 Attributes for Which You Can Specify Values During New Resource and Entitlement Provisioning
  • 3.5.1 Resource Provisioning Using the User Management Connector
  • 3.5.2 Resource Provisioning Using the User Management with TCA Foundation Connector
  • 3.5.3 Resource Provisioning Using the User Management with HR Foundation Connector
  • 3.5.4 Entitlement Provisioning Using All Three Connectors
• 3.6 Provisioning Operations Performed in an SoD-Enabled Environment
  • 3.6.1 Overview of the Provisioning Process in an SoD-Enabled Environment
  • 3.6.2 Direct Provisioning in an SoD-Enabled Environment
    • 3.6.2.1 Prerequisites
    • 3.6.2.2 Performing Direct Provisioning
  • 3.6.3 Request-Based Provisioning in an SoD-Enabled Environment
    • 3.6.3.1 End-User's Role in Request-Based Provisioning
    • 3.6.3.2 Approver's Role in Request-Based Provisioning
• 3.7 Switching Between Request-Based Provisioning and Direct Provisioning on Oracle Identity Manager Release 11.1.x
• 3.8 Performing Provisioning Operations in Oracle Identity Manager Release 11.1.2 or Later
• 3.9 Uninstalling the Connector

4 Extending the Functionality of the Connector

• 4.1 Guidelines on Extending the Functionality of the Connector
  • 4.1.1 Guidelines for Configuring Queries Used in Lookup Field Synchronization
  • 4.1.2 Guidelines for Configuring Queries Used in Reconciliation
  • 4.1.3 Guidelines Common to Configuring Both Types of Queries
  • 4.1.4 Guidelines on Modifying Predefined Attribute Mappings for Provisioning
• 4.2 Adding or Removing Attributes for Reconciliation
  • 4.2.1 Adding New Attributes for Reconciliation
  • 4.2.2 Removing Attributes Used for Reconciliation
• 4.3 Adding or Removing Attribute Mappings for Provisioning
  • 4.3.1 Adding New Attributes for Provisioning
  • 4.3.2 Removing Attributes for Provisioning
• 4.4 Adding Filter Parameters in a Reconciliation Query
• 4.5 Modifying Field Lengths on the Process Form
• 4.6 Configuring Validation of Data During Reconciliation
• 4.7 Configuring Transformation of Data During User Reconciliation
• 4.8 Configuring Validation of Data During Provisioning
• 4.9 Configuring the Connector for Multiple Installations of the Target System
• 4.10 Customizing the Connector to Handle Timezone Differences

5 Testing and Troubleshooting

• 5.1 Running Test Cases
• 5.2 Troubleshooting

6 Known Issues

A Special Characters Supported by Oracle E-Business Suite 11.5.10

Index