Understanding Closed Loop Compliance

With the integration of Oracle Identity Analytics and Oracle Identity Manager, it is possible to directly revoke roles and entitlements from Oracle Identity Manager if the results of the certification process require it. This integration eliminates the need for manual de-provisioning of access for managed resources. In addition, the manual process of revoking roles and entitlements by leveraging the information stored in the remediation configuration module is also retained. This takes into account non-managed applications.

If certification remediation is enabled, changes are propagated to Oracle Identity Manager either when the certification is complete, or when the certification end-date is reached (depending on configuration). OIM revokes or re-provisions target system accounts based on the revocations and certifications that occurred during the certification process.

To Configure Resources in Oracle Identity Analytics for Remediation

Every resource type in Oracle Identity Analytics can be separately configured for automatic or manual remediation.

1. Log in to Oracle Identity Analytics.

2. Choose Identity Warehouse> Resources.

3. Click the resource for which remediation action needs to be configured, and go to the Remediation tab.

4. Select the Select Provisioning Mode check box.

5. Choose the mode of provisioning desired for the particular resource.

   • Auto - Automatically send role/entitlement updates linked with this resource to Oracle Identity Manager.

     Select the appropriate connection name of the provisioning server and save the changes.

   • Manual - Use the manual steps for revocation of roles and entitlements using a text editor.

     List the steps to be followed for non-managed system remediation and save the changes.

To Configure Certifications in Oracle Identity Analytics for Remediation

1. Log in to Oracle Identity Analytics.

2. Choose Administration > Configuration.

3. Click Identity Certification.

4. Expand the Revoke and Remediation section, and, under the Remediation section, choose one of the following options:

   • Display Remediation Instructions - Select to display instructions about how to perform manual remediation of nonmanaged resources.

   • Perform Closed Loop Remediation on - Select to specify that the remediation be completed by either the Certification End Date or the Certification Completion Date.