What's New in This Guide?

This chapter introduces the new features of Oracle Privileged Account Manager and provides pointers to additional information.

New Features for 11g Release 2 (11.1.2)

Oracle Privileged Account Manager 11g Release 2 (11.1.2) includes the following features:

• Account lifecycle management, which enables you to manage the lifecycle of account and application credentials stored in the Credential Store Framework (CSF).

  See Section 1.2.4, "Oracle Privileged Account Manager-Managed CSF Credentials" for more information.

• An authentication and authorization framework that includes

  • Oracle Platform Security Services (OPSS) authorization for Oracle Privileged Account Manager resources, such as targets and accounts

  • Oracle WebLogic Server (WLS) authentication with identity propagation through OPSS Trust

  • Common Admin Roles for Oracle Privileged Account Manager administrators and user managers

  See Chapter 2, "Understanding Oracle Privileged Account Manager Security" for more information.

• A web-based user interface provided by the Oracle Identity Navigator product, a command line tool, and REST APIs that you can use to perform various tasks in Oracle Privileged Account Manager. The web-based interface provides access to

  • An administration user interface for configuring and managing targets, privileged accounts, password policies, and usage policies.

  • A self-service user interface that enables users with or without administrative privileges to check-in and check-out accounts.

  See Chapter 3, "Getting Started with Administering Oracle Privileged Account Manager," Chapter 5, "Configuring and Managing Oracle Privileged Account Manager," and the appendices for more information.

  Note:

  The command line tool messages and help are only provided in English. Globalization support for the Oracle Privileged Account Manager command line tool is not available for this release.

• Integration with the Identity Connector Framework (ICF), which enables Oracle Privileged Account Manager to interact with identity repositories on third-party systems.

  See "Deploying ICF Connectors in Oracle Privileged Account Manager" in Chapter 3, "Getting Started with Administering Oracle Privileged Account Manager" for more information.

• Oracle Privileged Account Manager logs audit events or state changes and provides generic logging, which includes debugging statements and exception messages.

  Oracle Privileged Account Manager audits all security events that occur under its purview, which enables you to monitor how privileged accounts are being used in your organization, while leveraging proven technology to manage sensitive information.

  See Chapter 6, "Managing Oracle Privileged Account Manager Auditing and Logging" for more information.

• Certification with Oracle Identity Manager request and approval workflow.

  See Chapter 7, "Configuring Oracle Privileged Account Manager for Integrated Solutions" for more information.