Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

What's New in This Guide

• New and Changed Features for 11g Release 5 (11.1.5)

1 Enterprise Deployment Overview

• 1.1 About the Enterprise Deployment Guide
• 1.2 Enterprise Deployment Terminology
• 1.3 Benefits of Oracle Recommendations
  • 1.3.1 Built-in Security
  • 1.3.2 High Availability

2 Introduction to the Enterprise Deployment Reference Topologies

• 2.1 Overview of Enterprise Deployment Reference Topologies
  • 2.1.1 Reference Topologies Documented in the Guide
    • 2.1.1.1 Oracle Access Manager 11g and Oracle Identity Manager 11g for Fusion Applications
    • 2.1.1.2 Split Domain Topology for Oracle Fusion Applications
    • 2.1.1.3 Oracle Identity Federation 11g for Fusion Applications
  • 2.1.2 About the Directory Tier
    • 2.1.2.1 High Availability Provisions
  • 2.1.3 About the Application Tier
    • 2.1.3.1 Architecture Notes
    • 2.1.3.2 High Availability Provisions
    • 2.1.3.3 Security Provisions
  • 2.1.4 About the Web Tier
    • 2.1.4.1 Architecture Notes
    • 2.1.4.2 High Availability Provisions
    • 2.1.4.3 Security Provisions
• 2.2 Hardware Requirements for an Enterprise Deployment
• 2.3 Identifying the Software Components to Install
• 2.4 Road Map for the Reference Topology Installation and Configuration
  • 2.4.1 Flow Chart of the Oracle Identity Management Enterprise Deployment Process for Oracle Fusion Applications
  • 2.4.2 Steps in the Oracle Identity Management Enterprise Deployment Process

3 Preparing the Network for an Enterprise Deployment

• 3.1 Overview of Preparing the Network for an Enterprise Deployment
• 3.2 About Virtual Server Names Used by the Topologies
  • 3.2.1 oididstore.mycompany.com
  • 3.2.2 policystore.mycompany.com
  • 3.2.3 idstore.mycompany.com
  • 3.2.4 admin.mycompany.com
  • 3.2.5 oimadmin.mycompany.com
  • 3.2.6 idminternal.mycompany.com
  • 3.2.7 sso.mycompany.com
• 3.3 Configuring the Load Balancers
  • 3.3.1 Load Balancer Requirements
  • 3.3.2 Load Balancer Configuration Procedures
• 3.4 Load Balancer Configuration
• 3.5 About IP Addresses and Virtual IP Addresses
• 3.6 About Firewalls and Ports
• 3.7 Managing Oracle Access Manager Communication Protocol
  • 3.7.1 Oracle Access Manager Protocols
  • 3.7.2 Overview of Integration Requests
  • 3.7.3 Overview of User Request
• 3.8 About WebLogic Domains

4 Preparing the File System for an Enterprise Deployment

• 4.1 Overview of Preparing the File System for Enterprise Deployment
• 4.2 Terminology for Directories and Directory Variables
• 4.3 ASERVER_HOME and MSERVER_HOME
• 4.4 About Recommended Locations for the Different Directories
  • 4.4.1 Local Storage
  • 4.4.2 Shared Storage
  • 4.4.3 Redundant Binary Installations
  • 4.4.4 Directory Structure
• 4.5 Configuring Shared Storage

5 Preparing the Database for an Enterprise Deployment

• 5.1 Overview of Preparing the Databases for an Identity Management Enterprise Deployment
• 5.2 Verifying the Database Requirements for an Enterprise Deployment
  • 5.2.1 Databases Required
  • 5.2.2 Database Host Requirements
  • 5.2.3 Database Versions Supported
  • 5.2.4 Patching the Oracle Database
    • 5.2.4.1 Patch Requirements for Oracle Database 11g (11.1.0.7)
    • 5.2.4.2 Patch Requirements for Oracle Database 11g (11.2.0.2.0)
  • 5.2.5 About Initialization Parameters
• 5.3 Installing the Database for an Enterprise Deployment
• 5.4 Creating Database Services
  • 5.4.1 Creating Database Services for 10.x and 11.1.x Databases
  • 5.4.2 Creating Database Services for 11.2.x Databases
  • 5.4.3 Database Tuning
• 5.5 Loading the Identity Management Schemas in the Oracle RAC Database by Using RCU
• 5.6 Backing up the Database

6 Installing the Software for an Enterprise Deployment

• 6.1 Overview of the Software Installation Process
  • 6.1.1 Obtaining the Software
  • 6.1.2 Software to Install
• 6.2 Installing Oracle HTTP Server
  • 6.2.1 Verifying Prerequisites
    • 6.2.1.1 Check oraInst.loc
  • 6.2.2 Running the Installer
  • 6.2.3 Backing Up the Installation
• 6.3 Installing Oracle Fusion Middleware
  • 6.3.1 Installing Oracle Fusion Middleware Components
  • 6.3.2 Installing Oracle Fusion Middleware Home
  • 6.3.3 Installing Oracle WebLogic Server and Creating the Fusion Middleware Home
  • 6.3.4 Installing Oracle Identity Management
  • 6.3.5 Installing the Oracle SOA Suite
  • 6.3.6 Installing Oracle Identity and Access Management
  • 6.3.7 Applying Patches and Workarounds
    • 6.3.7.1 Patches for Fusion Middleware
    • 6.3.7.2 Provisioning the OIM Login Modules Under the WebLogic Server Library Directory
    • 6.3.7.3 Creating the wlfullclient.jar File
  • 6.3.8 Backing Up the Installation

7 Configuring the Web Tier for an Enterprise Deployment

• 7.1 Overview of Configuring the Web Tier
• 7.2 Prerequisites for Configuring the Web Tier
• 7.3 Running the Configuration Wizard to Configure the HTTP Server
• 7.4 Validating the Configuration
• 7.5 Configuring Virtual Hosts and Server Owner
  • 7.5.1 Configuring Virtual Hosts
  • 7.5.2 Configuring Oracle HTTP Server to Run as Software Owner
  • 7.5.3 Update Oracle HTTP Server Runtime Parameters
  • 7.5.4 Restarting the Oracle HTTP Servers
  • 7.5.5 Validating the Configuration
• 7.6 Backing up the Web Tier Configuration

8 Creating Domains for an Enterprise Deployment

• 8.1 Overview of Creating a Domain
• 8.2 Choosing Single Domain or Split Domain
• 8.3 About Console URLs and Domains
• 8.4 Synchronize System Clocks
• 8.5 Enabling Virtual IP Addresses for Use by the Domain
  • 8.5.1 Enabling Virtual IP Addresses for Administration Servers
• 8.6 Running the Configuration Wizard to Create a Domain with Oracle Access Manager, Oracle SOA Suite, and Oracle Identity Manager
• 8.7 Post-Configuration and Verification Tasks
  • 8.7.1 Creating boot.properties for the WebLogic Administration Server on IDMHOST1
  • 8.7.2 Creating boot.properties for the WebLogic Administration Server on OIMHOST1
  • 8.7.3 Starting Node Manager
  • 8.7.4 Updating the Node Manager Credentials
  • 8.7.5 Validating the WebLogic Administration Server
  • 8.7.6 Removing IDM Domain Agent on IDMHOST1
  • 8.7.7 Creating a Separate Domain Directory for Managed Servers in the Same Node as the Administration Server
  • 8.7.8 Propagate Changes to Remote Servers
  • 8.7.9 Copy SOA Composites to Managed Server Directory
  • 8.7.10 Start Node Manager on Remote Hosts
  • 8.7.11 Disabling Host Name Verification for the Oracle WebLogic Administration Server
  • 8.7.12 Stopping and Starting the WebLogic Administration Server
• 8.8 Configuring Oracle HTTP Server for the WebLogic Domain
  • 8.8.1 Configuring Oracle HTTP Server for the WebLogic Administration Server
  • 8.8.2 Configuring Oracle HTTP Server for the Oracle Identity Manager Domain
  • 8.8.3 Restart Oracle HTTP Server
  • 8.8.4 Registering Oracle HTTP Server with WebLogic Server
  • 8.8.5 Setting the Front End URL for the Administration Console
  • 8.8.6 Enabling WebLogic Plug-in
  • 8.8.7 Validating Access to Domains
• 8.9 Manually Failing Over the WebLogic Administration Server
  • 8.9.1 Failing over the Administration Server to IDMHOST2
  • 8.9.2 Starting the Administration Server on IDMHOST2
  • 8.9.3 Validating Access to IDMHOST2 Through Oracle HTTP Server
  • 8.9.4 Failing the Administration Server Back to IDMHOST1
• 8.10 Backing Up the WebLogic Domain

9 Extending the Domain to Include Oracle Internet Directory

• 9.1 Overview of Extending the Domain to Include Oracle Internet Directory
• 9.2 Using Oracle Internet Directory in an Enterprise Deployment
• 9.3 Prerequisites for Configuring Oracle Identity Directory Instances
• 9.4 Configuring the Oracle Internet Directory Instances
  • 9.4.1 Configuring the First Oracle Internet Directory Instance
  • 9.4.2 Configuring an Additional Oracle Internet Directory Instance
• 9.5 Post-Configuration Steps
  • 9.5.1 Registering Oracle Internet Directory with the WebLogic Server Domain (IDMDomain)
  • 9.5.2 Generating a Certificate to be Used by the Identity Management Domain
    • 9.5.2.1 Prerequisites
    • 9.5.2.2 Generating the Certificate
  • 9.5.3 Configuring Oracle Internet Directory to Accept Server Authentication Mode SSL Connections
    • 9.5.3.1 Prerequisites
    • 9.5.3.2 Configuring Oracle Internet Directory for SSL
  • 9.5.4 Validating SSL Manually
  • 9.5.5 Considering Oracle Internet Directory Password Policies
• 9.6 Validating the Oracle Internet Directory Instances
• 9.7 Tuning Oracle Internet Directory
• 9.8 Backing up the Oracle Internet Directory Configuration

10 Extending the Domain to Include ODSM

• 10.1 Overview of Extending the Domain to Include ODSM
• 10.2 Prerequisites
• 10.3 Extending the Oracle WebLogic Domain IDMDomain
• 10.4 Expanding the ODSM Cluster
• 10.5 Provisioning the Managed Servers in the Managed Server Directory
• 10.6 Configuring ODSM to work with the Oracle Web Tier
  • 10.6.1 Prerequisites
  • 10.6.2 Configuring Oracle HTTP Servers to Access the ODSM Console
• 10.7 Validating the Application Tier Configuration
  • 10.7.1 Validating Browser Connection to ODSM Site
  • 10.7.2 Validating ODSM Connections to Oracle Internet Directory
• 10.8 Backing Up the Application Tier Configuration

11 Preparing Identity and Policy Stores

• 11.1 Overview of Preparing Identity and Policy Stores
• 11.2 Backing up the LDAP Directories
• 11.3 Prerequisites
• 11.4 Preparing the OPSS Policy Store
  • 11.4.1 Creating Policy Store Users and the Policy Container
  • 11.4.2 Reassociating the Policy and Credential Store
  • 11.4.3 Associate OIMDomain with Policy and Credential Store
• 11.5 Preparing the Identity Store
  • 11.5.1 Creating the Configuration File
  • 11.5.2 Preparing a Directory for Oracle Access Manager and Oracle Identity Manager
    • 11.5.2.1 Configuring Oracle Internet Directory for Use with Oracle Access Manager and Oracle Identity Manager
    • 11.5.2.2 Configuring Active Directory for Use with Oracle Access Manager and Oracle Identity Manager
  • 11.5.3 Creating Users and Groups
  • 11.5.4 Creating Access Control Lists in Non-Oracle Internet Directory Directories

12 Extending the Domain to Include Oracle Virtual Directory

• 12.1 Overview of Extending the Domain to Include Oracle Virtual Directory
• 12.2 Prerequisites for Configuring Oracle Virtual Directory Instances
• 12.3 Configuring the Oracle Virtual Directory Instances
  • 12.3.1 Configuring the First Oracle Virtual Directory Instance
  • 12.3.2 Configuring an Additional Oracle Virtual Directory
• 12.4 Post-Configuration Steps
  • 12.4.1 Registering Oracle Virtual Directory with the Oracle WebLogic Server Domain (IDMDomain)
  • 12.4.2 Configuring Oracle Virtual Directory to Accept Server Authentication Only Mode SSL Connections
    • 12.4.2.1 Prerequisites
    • 12.4.2.2 Configuring Oracle Virtual Directory for SSL
• 12.5 Disable Oracle Virtual Directory LDAP Listeners NIO
• 12.6 Validating the Oracle Virtual Directory Instances
• 12.7 Creating ODSM Connections to Oracle Virtual Directory
• 12.8 Creating Adapters in Oracle Virtual Directory
  • 12.8.1 Ensuring the Change Log Generation is Enabled in Oracle Internet Directory
  • 12.8.2 Creating Oracle Virtual Directory Adapters for Oracle Internet Directory and Active Directory
  • 12.8.3 Validating the Oracle Virtual Directory Adapters
• 12.9 Backing Up the Oracle Virtual Directory Configuration

13 Configuring Oracle Access Manager 11g

• 13.1 Overview of Configuring Oracle Access Manager
• 13.2 About Domain URLs
• 13.3 Using Different Directory Configurations
• 13.4 Prerequisites
• 13.5 Starting Oracle Access Manager Managed Servers
• 13.6 Configuring Oracle Access Manager to work with the Oracle Web Tier
  • 13.6.1 Prerequisites
  • 13.6.2 Configuring Oracle HTTP Servers to Display Login Page
  • 13.6.3 Configuring Oracle HTTP Servers to Access Oracle Access Manager Console
• 13.7 Configuring Oracle Access Manager
  • 13.7.1 Setting a Global Passphrase
  • 13.7.2 Configuring Oracle Access Manager by Using the IDM Automation Tool
  • 13.7.3 Validating the Configuration
  • 13.7.4 Updating Newly-Created Agent
  • 13.7.5 Updating Existing WebGate Agents
  • 13.7.6 Perform Bug 13824816 Workaround
  • 13.7.7 Configuring Oracle Access Manager for Multidirectory Support
• 13.8 Adding the oamadmin Account to Access System Administrators
• 13.9 Create Oracle Access Manager Policies for WebGate 11g
• 13.10 Creating Oracle Access Manager Key Store
  • 13.10.1 Creating an Empty Trust Store File Named oamclient-truststore.jks
  • 13.10.2 Importing the CA Certificate into the Trust Store
  • 13.10.3 Setting up Keystore with the SSL Certificate and Private Key File of the Access Client
• 13.11 Updating Oracle Access Manager System Parameters
• 13.12 Backing Up the Application Tier Configuration

14 Configuring Oracle Identity Manager

• 14.1 Overview of Configuring Oracle Identity Manager
• 14.2 About Domain URLs
• 14.3 Prerequisites
• 14.4 About the Split Oracle Identity Manager Domain
• 14.5 Synchronize System Clocks
• 14.6 Configuring Oracle Identity Manager
• 14.7 Configuring Oracle Coherence for Deploying Composites
  • 14.7.1 Enabling Communication for Deployment Using Unicast Communication
  • 14.7.2 Specifying the Host Name Used by Oracle Coherence
• 14.8 Post-Installation Steps on OIMHOST1
  • 14.8.1 Starting the WLS_OIM1 and WLS_SOA1 Managed Servers on OIMHOST1
  • 14.8.2 Validating Oracle Identity Manager Instance on OIMHOST1
• 14.9 Post-Installation Steps on OIMHOST2
  • 14.9.1 Starting Node Manager on OIMHOST2
  • 14.9.2 Starting the WLS_OIM2 and WLS_SOA2 Managed Servers on OIMHOST2
  • 14.9.3 Validating Oracle Identity Manager Instance on OIMHOST2
• 14.10 Modifying the Oracle Identity Manager Properties to Support Active Directory
• 14.11 Configuring Oracle Identity Manager to Reconcile from ID Store
• 14.12 Configuring Oracle Identity Manager to Work with the Oracle Web Tier
  • 14.12.1 Prerequisites
  • 14.12.2 Configuring Oracle HTTP Servers to Front End the Oracle Identity Manager and SOA Managed Servers
  • 14.12.3 Changing Host Assertion in WebLogic
  • 14.12.4 Validating Oracle Identity Manager Instance from the WebTier
  • 14.12.5 Validating SOA Instance from the WebTier
• 14.13 Configuring a Default Persistence Store for Transaction Recovery
• 14.14 Configuring an IT Resource Instance for Email
• 14.15 Enabling Oracle Identity Manager to Connect to SOA Using the Administrative Users Provisioned in LDAP
• 14.16 Updating the Username Generation Policy for Active Directory
• 14.17 Tuning Oracle Platform Security
• 14.18 Provisioning Users to the Enterprise Identity Store in a Multidirectory Scenario
  • 14.18.1 Creating and Importing New Rules
  • 14.18.2 Updating IT Resource for Oracle Identity Manager Integration
  • 14.18.3 Updating the Incremental Reconciliation Changelog Number
• 14.19 Excluding Users from Oracle Identity Manager Reconciliation
  • 14.19.1 Adding the orclAppIDUser Object Class to the User by Using ODSM
  • 14.19.2 Closing Failed Reconciliation Events by Using the OIM Console
• 14.20 Backing Up the Application Tier Configuration

15 Extending the Domain to Include Oracle Identity Federation

• 15.1 Overview of Extending the Domain to Include Oracle Identity Federation
• 15.2 Prerequisites
• 15.3 Configuring Oracle Identity Federation on IDMHOST1
• 15.4 Run Upgrade Script
• 15.5 Configuring Oracle Identity Federation on IDMHOST2
• 15.6 Provisioning the Managed Servers on the Local Disk
• 15.7 Validating Oracle Identity Federation
• 15.8 Configure the Enterprise Manager Agents
• 15.9 Enabling Oracle Identity Federation Integration with LDAP Servers
• 15.10 Configuring Oracle Identity Federation to work with the Oracle Web Tier
  • 15.10.1 Prerequisites
  • 15.10.2 Making Oracle Identity Federation aware of the Load Balancer
  • 15.10.3 Configuring Oracle HTTP Servers To Front End the Oracle Identity Federation Managed Servers
• 15.11 Validating Oracle Identity Federation
• 15.12 Backing Up the Application Tier Configuration

16 Setting Up Node Manager for an Enterprise Deployment

• 16.1 Overview of the Node Manager
• 16.2 Changing the Location of the Node Manager Log
• 16.3 Enabling Host Name Verification Certificates for Node Manager
  • 16.3.1 Generating Self-Signed Certificates Using the utils.CertGen Utility
  • 16.3.2 Creating an Identity Keystore Using the utils.ImportPrivateKey Utility
  • 16.3.3 Creating a Trust Keystore Using the Keytool Utility
  • 16.3.4 Configuring Node Manager to Use the Custom Keystores
  • 16.3.5 Using a Common or Shared Storage Installation
  • 16.3.6 Configuring Managed WebLogic Servers to Use the Custom Keystores
  • 16.3.7 Changing the Host Name Verification Setting for the Managed Servers
• 16.4 Starting Node Manager

17 Configuring Server Migration for an Enterprise Deployment

• 17.1 Overview of Server Migration for an Enterprise Deployment
• 17.2 Setting Up a User and Tablespace for the Server Migration Leasing Table
• 17.3 Creating a Multi Data Source Using the Oracle WebLogic Administration Console
• 17.4 Editing Node Manager's Properties File
• 17.5 Setting Environment and Superuser Privileges for the wlsifconfig.sh Script
• 17.6 Configuring Server Migration Targets
• 17.7 Testing the Server Migration

18 Integrating Oracle Identity Management Components for an Enterprise Deployment

• 18.1 Overview of Integrating Oracle Identity Management Components
• 18.2 Integrating Oracle Identity Manager and Oracle Access Manager 11g
  • 18.2.1 Prerequisites
  • 18.2.2 Copying OAM Keystore Files to OIMHOST1 and OIMHOST2
  • 18.2.3 About the Split Oracle Identity Manager Domain
  • 18.2.4 Updating Existing LDAP Users with Required Object Classes
  • 18.2.5 Integrating Oracle Access Manager 11g with Oracle Identity Manager 11g
  • 18.2.6 Managing the Password of the xelsysadm User
  • 18.2.7 Validating Integration
• 18.3 Preparing the Environment for Fusion Applications Provisioning
  • 18.3.1 About Input to the Fusion Applications Provisioning Tool
  • 18.3.2 Creating a Client Keystore
• 18.4 Integrating Oracle Identity Federation with Oracle Access Manager 11g
  • 18.4.1 Prerequisites
  • 18.4.2 Integrating Oracle Identity Federation with Oracle Access Manager in SP Mode
    • 18.4.2.1 Configuring the Oracle Access Manager 11g SP Engine
    • 18.4.2.2 Updating the Oracle Identity Federation Authentication Scheme in Oracle Access Manager
  • 18.4.3 Switching from Local Authentication to Federation SSO
• 18.5 Backing Up the Identity Management Configuration

19 Configuring Single Sign-on for Administration Consoles in an Enterprise Deployment

• 19.1 Overview of Configuring Single Sign-on for Administration Consoles in an Enterprise Deployment
• 19.2 Prerequisites
• 19.3 Create WebLogic Security Providers
  • 19.3.1 Creating Oracle Directory Authenticator
  • 19.3.2 Creating Oracle Access Manager Identity Asserter
• 19.4 Assigning WLSAdmins Group to WebLogic Administration Groups
• 19.5 Register EM with OPSS Security Provider
• 19.6 Updating the boot.properties File
  • 19.6.1 Update the Administration Server on IDMHOST1
  • 19.6.2 Update the Administration Server on OIMHOST1
  • 19.6.3 Restarting the Servers
• 19.7 Installing and Configuring WebGate 11g
  • 19.7.1 Prerequisites
  • 19.7.2 Making Special gcc Libraries Available
  • 19.7.3 Installing Oracle WebGate on WEBHOST1 and WEBHOST2
• 19.8 Validating WebGate and the Oracle Access Manager Single Sign-On Setup

20 Managing the Topology for an Enterprise Deployment

• 20.1 Starting and Stopping Oracle Identity Management Components
  • 20.1.1 Startup Order
  • 20.1.2 Starting and Stopping Oracle Virtual Directory
    • 20.1.2.1 Starting Oracle Virtual Directory
    • 20.1.2.2 Stopping Oracle Virtual Directory
  • 20.1.3 Starting and Stopping Oracle Internet Directory
    • 20.1.3.1 Starting Oracle Internet Directory
    • 20.1.3.2 Stopping Oracle Internet Directory
  • 20.1.4 Starting, Stopping, and Restarting Oracle HTTP Server
    • 20.1.4.1 Starting Oracle HTTP Server
    • 20.1.4.2 Stopping Oracle HTTP Server
    • 20.1.4.3 Restarting Oracle HTTP Server
  • 20.1.5 Starting and Stopping Node Manager
    • 20.1.5.1 Starting Node Manager
    • 20.1.5.2 Stopping Node Manager
    • 20.1.5.3 Starting Node Manager for an Administration Server
  • 20.1.6 Starting, Stopping, and Restarting WebLogic Administration Server
    • 20.1.6.1 Starting WebLogic Administration Server
    • 20.1.6.2 Stopping WebLogic Administration Server
    • 20.1.6.3 Restarting WebLogic Administration Server
  • 20.1.7 Starting, Stopping, and Restarting Oracle Identity Manager
    • 20.1.7.1 Starting Oracle Identity Manager
    • 20.1.7.2 Stopping Oracle Identity Manager
    • 20.1.7.3 Restarting Oracle Identity Manager
  • 20.1.8 Starting, Stopping, and Restarting Oracle Access Manager Managed Servers
    • 20.1.8.1 Starting Oracle Access Manager Managed Servers
    • 20.1.8.2 Stopping Oracle Access Manager Managed Servers
    • 20.1.8.3 Restarting Oracle Access Manager Managed Servers
  • 20.1.9 Starting and Stopping Oracle Identity Federation Managed Servers
    • 20.1.9.1 Starting Oracle Identity Federation
    • 20.1.9.2 Stopping Oracle Identity Federation
    • 20.1.9.3 Restarting Oracle Identity Federation
    • 20.1.9.4 Starting the EMAgent
    • 20.1.9.5 Stopping the Oracle Identity Federation Instances and EMAgent
• 20.2 About Identity Management Console URLs
• 20.3 Monitoring Enterprise Deployments
  • 20.3.1 Monitoring Oracle Internet Directory
    • 20.3.1.1 Oracle Internet Directory Component Names Assigned by Oracle Identity Manager Installer
  • 20.3.2 Monitoring Oracle Virtual Directory
  • 20.3.3 Monitoring WebLogic Managed Servers
• 20.4 Scaling Enterprise Deployments
  • 20.4.1 Scaling Up the Topology
    • 20.4.1.1 Scaling Up the Directory Tier
      • 20.4.1.1.1 Scaling Up Oracle Internet Directory
      • 20.4.1.1.2 Scaling Up Oracle Virtual Directory
    • 20.4.1.2 Scaling Up the Application Tier
      • 20.4.1.2.1 Scaling Up ODSM
      • 20.4.1.2.2 Scaling Up Oracle Access Manager 11g
      • 20.4.1.2.3 Scaling Up Oracle Identity Manager (Adding Managed Servers to Existing Nodes)
      • 20.4.1.2.4 Scaling Up Oracle Identity Federation
    • 20.4.1.3 Scaling Up the Web Tier
  • 20.4.2 Scaling Out the Topology
    • 20.4.2.1 Scaling Out the Directory Tier
      • 20.4.2.1.1 Scaling Out Oracle Internet Directory
      • 20.4.2.1.2 Scaling Out Oracle Virtual Directory
    • 20.4.2.2 Scaling Out the Application Tier
      • 20.4.2.2.1 Scaling Out Oracle Identity Federation
      • 20.4.2.2.2 Scaling Out ODSM
      • 20.4.2.2.3 Scaling Out Oracle Access Manager 11g
      • 20.4.2.2.4 Scaling Out Oracle Identity Manager (Adding Managed Servers to New Nodes)
    • 20.4.2.3 Scaling Out the Web Tier
• 20.5 Auditing Identity Management
• 20.6 Performing Backups and Recoveries
• 20.7 Patching Enterprise Deployments
  • 20.7.1 Patching an Oracle Fusion Middleware Source File
  • 20.7.2 Patching Identity and Access Management in a Single Domain Topology
  • 20.7.3 Patching Identity and Access Management in a Split Domain Topology
  • 20.7.4 Patching Identity Management Components
• 20.8 Preventing Timeouts for SQL
• 20.9 Troubleshooting
  • 20.9.1 Troubleshooting Oracle Internet Directory
    • 20.9.1.1 Oracle Internet Directory Server is Not Responsive.
    • 20.9.1.2 SSO/LDAP Application Connection Times Out
    • 20.9.1.3 LDAP Application Receives LDAP Error 53 (DSA Unwilling to Perform)
    • 20.9.1.4 TNSNAMES.ORA, TAF Configuration, and Related Issues
  • 20.9.2 Troubleshooting Oracle Virtual Directory
    • 20.9.2.1 Command Not Found Error When Running SSLServerConfig.sh
    • 20.9.2.2 Oracle Virtual Directory is Not Responsive
    • 20.9.2.3 SSO/LDAP Application Connection Times Out
    • 20.9.2.4 TNSNAMES.ORA, TAF Configuration, and Related Issues
    • 20.9.2.5 SSLServerConfig.sh Fails with Error
  • 20.9.3 Troubleshooting Oracle Directory Services Manager
    • 20.9.3.1 ODSM Browser Window and Session Issues
    • 20.9.3.2 ODSM Does not Open When Invoked from Fusion Middleware Control
    • 20.9.3.3 ODSM Failover is Not Transparent
    • 20.9.3.4 ODSM Loses Connection and Displays Message that LDAP Server is Down
    • 20.9.3.5 ODSM Loses Connection to Instance Using ORAC Database
    • 20.9.3.6 OHS Must Be Configured to Route ODSM Requests to Multiple Oracle WebLogic Servers
    • 20.9.3.7 ODSM is Not Accessible
  • 20.9.4 Troubleshooting Oracle Access Manager 11g
    • 20.9.4.1 Fusion Applications Preverify Fails to Validate OAM Admin Users
    • 20.9.4.2 User Reaches the Maximum Allowed Number of Sessions
    • 20.9.4.3 Policies Do Not Get Created When Oracle Access Manager is First Installed
    • 20.9.4.4 You Are Not Prompted for Credentials After Accessing a Protected Resource
    • 20.9.4.5 Cannot Log In to OAM Console
    • 20.9.4.6 Unable to Create Keystore – Unable to Load Key
    • 20.9.4.7 Error When Starting OAM Managed Servers on Windows
  • 20.9.5 Troubleshooting Oracle Identity Manager
    • 20.9.5.1 java.io.FileNotFoundException When Running Oracle Identity Manager Configuration
    • 20.9.5.2 ResourceConnectionValidationxception When Creating User in Oracle Identity Manager
  • 20.9.6 Troubleshooting Oracle Identity Federation
    • 20.9.6.1 Cannot Log In to the Oracle Identity Federation Server (Windows)
    • 20.9.6.2 Extending the Domain with Oracle Identity Federation Fails
    • 20.9.6.3 Cannot Change Oracle Identity Federation Parameters by Using Fusion Middleware Control

Index