Skip Headers
Oracle® Fusion Middleware Licensing Information
11g Release 1 (11.1.1)

Part Number E14860-37
Go to Documentation Home
Home
Go to Book List
Book List
Go to Table of Contents
Contents
Go to Master Index
Master Index
Go to Feedback page
Contact Us

Go to previous page
Previous
Go to next page
Next
PDF · Mobi · ePub

10 Oracle Identity and Access Management Independent License Offerings

This chapter describes the separately licensed Oracle Identity and Access Management independent license offerings. Please note that as of August 9th, 2012, the Oracle Identity and Access Management products are version 11gR2 (11.1.2).

The following sections describe the Oracle Identity and Access Management products and product families that can be separately licensed, independent of the packaged Oracle Application Server or WebLogic editions.

You may not use the options, packs, or products described below without separately purchased licenses. The fact that these options, packs, or products may be included in product CDs or downloads or described in documentation that you receive does not authorize you to use them without purchasing the appropriate licenses.

See Section 10.14, "Oracle Database License Requirements," for important license requirements regarding the use of Oracle Database with the products described in this chapter.

10.1 Oracle Identity Governance Suite

Oracle Identity Governance Suite can be separately licensed, independent of any Oracle Application Server or WebLogic edition. It includes:

The following restricted-use licenses are included when you separately license Oracle Identity Governance Suite:

10.2 Oracle Entitlements Server

Oracle Entitlements Server can be separately licensed, independent of any Oracle Application Server or WebLogic edition. For using Oracle Entitlements Server, a license of Oracle Entitlements Server Security Module is required.

10.2.1 Restricted-Use Licenses

The following restricted-use licenses are included when you separately license Oracle Entitlements Server:

  • Restricted Use: Business Intelligence Publisher to publish and/or view:

    • Shipped BI Publisher reports. Layout changes are allowed, AND

    • Shipped or newly created BI Publisher reports that are modified to access data from the existing Identity Management schema that has not been customized.

  • Oracle Internet Application Server Enterprise Edition or WebLogic Enterprise Edition as host for only Oracle Entitlements Server, including run-time components to provide Java run-time environment and HTTP support, as well as configuration and administration components used for the setup and management of these run-time components.

10.3 Oracle Entitlements Server Security Module

Oracle Entitlements Server Security Module can be separately licensed, independent of any Oracle Application Server or WebLogic edition.

Note that to use the Oracle Entitlements Server Security Module, you need to license Oracle Entitlements Server or Oracle Access Management Suite Plus (which includes Oracle Entitlements Server).

10.4 Oracle Directory Services Plus

Oracle Directory Services Plus can be separately licensed, independent of any Oracle Application Server or WebLogic edition. It includes:

* Includes usage of Oracle Directory Services Manager.

10.4.1 Restricted-Use Licenses

The following restricted-use licenses are included when you separately license Oracle Directory Services Plus:

  • Oracle Single Sign-On is provided for authentication services to users accessing Oracle Delegated Administration Services only.

  • Restricted Use: Business Intelligence Publisher to publish and/or view:

    • Shipped BI Publisher reports. Layout changes are allowed, AND

    • Shipped or newly created BI Publisher reports that are modified to access data from the existing Identity Management schema that has not been customized.

  • Oracle Internet Application Server Enterprise Edition or WebLogic Enterprise Edition as host for only Oracle Directory Services Plus, including run-time components to provide Java run-time environment and HTTP support, as well as configuration and administration components used for the setup and management of these run-time components.

  • Oracle Database Standard Edition. This infrastructure database is only to be used for storing LDAP related data related to the use of Internet Directory as a general purpose LDAP directory. Storing any other data in the infrastructure database requires a full use license of Oracle Database Standard Edition.

10.5 Oracle Access Manager

Oracle Access Manager can be separately licensed, independent of any Oracle Application Server or WebLogic edition.

10.5.1 Restricted-Use Licenses

The following restricted-use licenses are included when you separately license Oracle Access Manager:

  • Restricted Use: Business Intelligence Publisher to publish and/or view:

    • Shipped BI Publisher reports. Layout changes are allowed, AND

    • Shipped or newly created BI Publisher reports that are modified to access data from the existing Identity Management schema that has not been customized.

  • Oracle Internet Application Server Enterprise Edition or WebLogic Enterprise Edition as host for only Oracle Access Manager, including run-time components to provide Java run-time environment and HTTP support, as well as configuration and administration components used for the setup and management of these run-time components.

  • Oracle Identity Manager and associated Identity Manager LDAP Connectors (Microsoft AD, Novell eDirectory, Oracle Internet Directory, and Sun Java System Directory) are restricted to managing users in a directory specific to the following:

    • Self-service registration

    • Self-service user profile view and/or modify

    • Self-service password reset

    • Lost password management (setting up challenge questions)

    • Password reset on first login

    • Password policy enforcement (password strength, expiration period, and so on)

    • Password expiration notification

    • Delegated administration of administrative capabilities (down to the attribute level) to lower level administrators to manage users in the system

  • Oracle Coherence Enterprise Edition (restricted to run in the same JVM as Oracle Access Manager) for user session, configuration, and policy synchronization within Oracle Access Manager. Any other use, including running Oracle Coherence Enterprise Edition on a separate processor, triggers a full use license.

10.5.2 Oracle Access Manager Clients

The license for Oracle Access Manager provides unrestricted use of Access Manager WebGates, which are web server plug-ins that intercept requests from users for resources and forwards these requests to the Access Manager server for authentication and authorization. This license also provides unrestricted use of Access Manager authentication provider for application servers.

10.6 Oracle Identity Federation

Oracle Identity Federation can be separately licensed, independent of any Oracle Application Server or WebLogic edition. It includes Oracle OpenSSO Fedlet.

10.6.1 Restricted-Use Licenses

The following restricted-use licenses are included when you separately license Oracle Identity Federation:

  • Restricted Use: Business Intelligence Publisher to publish and/or view:

    • Shipped BI Publisher reports. Layout changes are allowed, AND

    • Shipped or newly created BI Publisher reports that are modified to access data from the existing Identity Management schema that has not been customized.

  • Oracle Internet Application Server Enterprise Edition or WebLogic Enterprise Edition as host for only Oracle Identity Federation, including run-time components to provide Java run-time environment and HTTP support, as well as configuration and administration components used for the setup and management of these run-time components.

10.7 Oracle Identity Manager

Oracle Identity Manager can be separately licensed, independent of any Oracle Application Server or WebLogic edition.

10.7.1 Restricted-Use Licenses

The following restricted-use licenses are included when you separately license Oracle Identity Manager:

  • Restricted Use: Business Intelligence Publisher to publish and/or view:

    • Shipped BI Publisher reports. Layout changes are allowed, AND

    • Shipped or newly created BI Publisher reports that are modified to access data from the existing Identity Management schema that has not been customized.

  • Oracle Internet Application Server Enterprise Edition or WebLogic Enterprise Edition as host for only Oracle Identity Manager, including run-time components to provide Java run-time environment and HTTP support, as well as configuration and administration components used for the setup and management of these run-time components.

  • Restricted use license of BPEL Process Manager for creating approval workflows, reviewing and approving approval tasks, invoking and consuming external web services and Java code, and performing endpoint routing and selection only for Oracle Identity Manager.

  • Restricted Use: Oracle Identity Manager product includes use of Oracle Entitlements Server product solely for defining and managing authorization policies for Oracle Identity Manager

10.8 Oracle Identity Manager Connectors

Oracle Identity Manager Connectors can be separately licensed, independent of any Oracle Application Server or WebLogic edition. Oracle Identity Manager Connectors require Oracle Identity Manager.

Available Identity Manager Connectors are:

10.9 Oracle Enterprise Single Sign-On Suite Plus

Oracle Enterprise Single Sign-On Suite Plus (ESSO Suite Plus) can be separately licensed, independently of any Oracle Application Server or WebLogic Server edition. ESSO Suite Plus includes the following integrated components:

10.9.1 Restricted-Use Licenses

The following restricted-use licenses are included when you separately license Oracle Enterprise Single Sign-On Suite Plus:

  • Restricted Use: Business Intelligence Publisher to publish and/or view:

    • Shipped BI Publisher reports. Layout changes are allowed, AND

    • Shipped or newly created BI Publisher reports that are modified to access data from the existing Identity Management schema that has not been customized.

10.10 Oracle Access Management Suite Plus

Oracle Access Management Suite Plus can be separately licensed, independent of any Oracle Application Server or WebLogic edition. It includes:

10.10.1 Restricted-Use Licenses

The following restricted-use licenses are included when you separately license Oracle Access Management Suite Plus:

  • Restricted Use: Business Intelligence Publisher to publish and/or view:

    • Shipped BI Publisher reports. Layout changes are allowed, AND

    • Shipped or newly created BI Publisher reports that are modified to access data from the existing Identity Management schema that has not been customized.

  • Oracle Internet Application Server Enterprise Edition or WebLogic Enterprise Edition as host for only Access Management Suite Plus, including run-time components to provide Java run-time environment and HTTP support, as well as configuration and administration components used for the setup and management of these run-time components.

  • Oracle Web Services Manager (OWSM) is included as part of Access Management Suite Plus. However, any use of OWSM to protect web services must be performed in conjunction with at least one of the other products within the Access Management Suite Plus SKU - one or more of either:

    • Authentication — Oracle Web Services Manager requires integration with Oracle Access Manager for authentication.

    • Authorization — Oracle Web Services Manager requires integration with Oracle Entitlements Server for authorization.

    • Federation — Oracle Web Services Manager requires integration with Oracle Identity Federation for federation.

    • Oracle Web Services Manager agents acting as a WS-Trust client to the OpenSSO or Oracle STS server

  • Restricted Use: User Messaging Service for messaging needs related to Oracle Adaptive Access Manager security features. Message delivery is available in all formats including SMS, email, IM, and voice for the following:

    • Delivery of the Oracle Adaptive Access Manager one-time password authentication.

    • Delivery of transaction confirmation messages.

    • Security alerts to administrators/investigators.

Note:

If a product included in Oracle Access Management Suite Plus has restricted-use licenses (for example, Oracle Access Manager), those restricted-use licenses remain in effect when you separately license Oracle Access Management Suite Plus.

10.11 Oracle Enterprise Gateway for Access Management

Oracle Enterprise Gateway for Access Management can be licensed independently of any edition of Oracle Internet Application Server or Oracle WebLogic Server. Oracle Enterprise Gateway for Access Management includes the following components:

10.12 Oracle Identity and Access Management Suite Plus

Oracle Identity and Access Management Suite Plus can be separately licensed, independent of any Oracle Application Server or WebLogic edition. It includes:

10.12.1 Restricted-Use Licenses

The following restricted-use licenses are included when you separately license Oracle Identity and Access Management Suite Plus:

  • Restricted Use: Business Intelligence Publisher to publish and/or view:

    • Shipped BI Publisher reports. Layout changes are allowed, AND

    • Shipped or newly created BI Publisher reports that are modified to access data from the existing Identity Management schema that has not been customized.

  • Oracle Internet Application Server Enterprise Edition or WebLogic Enterprise Edition as host for only Identity and Access Management Suite, including run-time components to provide Java run-time environment and HTTP support, as well as configuration and administration components used for the setup and management of these run-time components.

  • Oracle Database Standard Edition. This infrastructure database is only to be used for storing LDAP related data related to the use of Internet Directory as a general purpose LDAP directory. Storing any other data in the infrastructure database requires a full use license of Oracle Database Standard Edition.

Note:

If an included product (for example, Oracle Access Manager) comes with restricted-use licenses, the restricted-use licenses still apply when you separately license Oracle Identity and Access Management Suite Plus.

10.13 Management Pack for Identity Management

The Management Pack for Identity Management enables enterprises to proactively monitor the availability, performance, load, and security metrics of various Identity Management components. This pack helps improve performance and availability, and reduce the cost and complexity of managing Identity Management deployments, including the following environments:

For complete license details about Management Pack for Identity Management, see "Identity Management Enterprise Management" in Oracle Enterprise Manager Licensing Information. This document is available from the Oracle Enterprise Manager Documentation page at http://www.oracle.com/technetwork/oem/grid-control/documentation/index.html.

10.14 Oracle Database License Requirements

Storing any data other than the Oracle Repository Creation Utility database schema in the Oracle Application Server Infrastructure database requires a full use license of the Oracle Database (Standard Edition, Standard Edition One, or Enterprise Edition).

10.14.1 Full Use License of Oracle Database Standard Edition or Standard Edition One

Some examples of the kinds of data that require the purchase of a full use license for the Oracle Database Standard Edition or Standard Edition One include:

  • Documents or any other objects stored in the Oracle Database under Oracle Content Management SDK

  • Documents or any kind of content stored in the Portal Repository

  • Oracle Integration B2B

  • Any BPEL Process Manager process instance data, which includes using Oracle Database as the dehydration store

  • Any other custom data that is created or updated by an application

10.14.2 Full Use License of Oracle Database Enterprise Edition

Two kinds of data require the purchase of a full use license of the Oracle Database Enterprise Edition:

  • Any Oracle Portal that leverages the VPD functionality of the database for hosting

  • Any LDAP data related to the use of an Oracle Internet Directory LDAP Directory, and database replication is used

10.14.3 When is a Full Use License of Oracle Database Not Required?

The following scenarios do not require the purchase of a full use license of the Oracle Database when you purchase Oracle Internet Application Server:

  • If you are only using Oracle Web Cache

  • If you are using Oracle Business Intelligence Discoverer only against a non-Oracle database

  • If you are using Oracle Reports Services only against a non-Oracle database