Index

A C D E G I J L N O P R S U X

A

account provisioning

defined, 2.1

administering groups and roles

in Oracle Internet Directory, 2.2.2

application deployments

in replicated directory environments, 3.3.2.7

applications

deploying against Oracle Identity Management infrastructure, 2.2.2

authentication

defined, 2.1

authorization

defined, 2.1

authorization policies

defined, 2.1

C

centralized assertion services

defined, 2.1

centralized user administration

integrating Oracle Identity Management, 5.1

cold failover

deployment, 3.3.2.4

conflict resolution, 3.3.2.7

containment

group, 3.3.1.2

user, 3.3.1.2

D

DAS service units

see delegated administration service units

delegated administration

of Oracle Identity Management, 2.2.3

delegated administration service units

defined

delegating

group management, 4.2.2

user management, 4.2.1

deployment

of Oracle Identity Management components, 3.2.1.1, 3.2.1.2

deployment-time privileges, 4.2.3

directory information tree

attributes, 3.3.1.1

planning, 3.3.1.1

DIT

see directory information tree

E

entitlements

defined, 2.1

entity

Oracle Context, A

G

group

containment in a DIT, 3.3.1.2

identities, 3.3.1.2

naming in a DIT, 3.3.1.2

owners, 4.2.2

group management

delegating, 4.2.2

I

identities

group, 3.3.1.2

planning, 3.3.1.2

user, 3.3.1.2

considerations, 3.3.1.2

planning, 3.3.1.2

identity

defined, 2.1

identity administration

defined, 2.1

identity and application provisioning

flow, 2.2.2

identity database

defined, 2.1

identity management

benefits, 1.1

components, 1.2

defined, 1.1

operational privileges, A

realm administrator, 4.2.1

realms

administrator, 4.2.2

delegating group management in, 4.2.2

delegating user management in, 4.2.1

deployment-specific roles, 4.2.1

DIT design, 3.3.1.3

planning, 3.3.1.3

realm-specific policies, 3.3.1.3

root of, 3.3.1.3

terms and concepts, 2.1

account provisioning, 2.1

authentication, 2.1

authorization, 2.1

authorization policies, 2.1

centralized assertion services, 2.1

entitlements, 2.1

identity, 2.1

identity administration, 2.1

identity database, 2.1

identity policy assertion services, 2.1

identity provisioning, 2.1

policy decision services, 2.1

security principals, 2.1

identity policy assertion services

defined, 2.1

identity provisioning

defined, 2.1

IETF LDAPv3 directory standard, 5.2

J

JAZN

see Oracle Application Server Java Authentication and Authorization Service

L

LDAP

standard support

IETF LDAPv3 directory standard, 5.2

load balancer, 3.3.2.5

configuring

in replicated Oracle Internet Directory network, 3.3.2.6

with Oracle Internet Directory, 3.3.2.5

N

naming

group, 3.3.1.2

user, 3.3.1.2

O

object class

inetOrgPerson, 3.3.1.2

orclGroup, 3.3.1.2

orclUserV2, 3.3.1.2

Oracle Application Server Certificate Authority

deployment

recommended, 3.3.2.10

Oracle Identity Management infrastructure, 1.3

Oracle Application Server Java Authentication and Authorization Service

defined, 6.2

Oracle Application Server Single Sign-On

deployment

default, 3.3.2.1

Oracle Identity Management infrastructure, 1.3

Oracle Certificate Authority

X.509v3 certificates, 2.1

Oracle Context

entity

defined, A

Oracle Delegated Administration Services

about, 4.2.4

deployment

default, 3.3.2.1

in a DMZ, 3.3.2.2

on Active Failover Cluster, 3.3.2.5

Oracle Identity Management infrastructure, 1.3

Oracle Directory Integration and Provisioning

Oracle Identity Management infrastructure, 1.3

Oracle Identity Management

architecture, 1.4

centralized repository, 2.2.3

components

deployment, 3.2.1.1, 3.2.1.2

defined, 1.3

delegated administration, 2.2.3

infrastructure, 1.3

administering, 4.1

deploying applications against, 2.2.2

deployment-time privileges, 4.2.3

integrating, 5.1

modifying existing applications, 6.3

Oracle Application Server Certificate Authority, 1.3

Oracle Application Server Single Sign-On, 1.3

Oracle Delegated Administration Services, 1.3

Oracle Directory Integration and Provisioning, 1.3

Oracle Internet Directory, 1.3

run-time privileges, 4.2.3

integrating

centralized user administration, 5.1

new applications, 6.4

runtime security service integration, 5.1

user provisioning, 5.1

integrating applications with, 6

benefits of, 6.1

supported services, 6.2

integration tools

IETF LDAPv3 directory standard, 5.2

Kerberos authentication, 5.2

Oracle Application Server Java Authentication and Authorization Service developer APIs, 5.2

Oracle Directory Integration and Provisioning, 5.2

Oracle Internet Directory plug-in architecture, 5.2

preconfigured connectivity solutions, 5.2

third-party authentication API, 5.2

privileges

delegated administration service units

Oracle Internet Directory

administering groups and roles, 2.2.2

administrative interfaces, 3.3.1.3

Oracle Internet Directory Self-Service Console, 3.3.1.3

configuration assistant, 3.3.1.3

default DIT, A

directory information tree, 3.3.1.1

Oracle Identity Management infrastructure, 1.3

plug-in architecture, 5.2

preconfigured connectivity solutions, 5.2

super user, 4.2.1

user provisioning, 2.2.2

Oracle Internet Directory Configuration Assistant, 3.3.1.3

Oracle Internet Directory Self-Service Console, 3.3.1.3

OracleAS

infrastructure

on Active Failover Cluster, 3.3.2.5

OracleAS JAAS Provider developer APIs, 5.2

OracleAS Single Sign-On

deployment

geographically distributed, 3.3.2.8

in a DMZ, 3.3.2.2

multiple middle tiers, 3.3.2.3

on Active Failover Clusters, 3.3.2.5

See Oracle Application Server Single Sign-On

third-party authentication API, 5.2

P

policy decision services

defined, 2.1

privileges

deployment-time, 4.2.3

run-time, 4.2.3

R

run-time privileges, 4.2.3

runtime security service integration, 5.1

S

security principals

defined, 2.1

service units

defined, 2.3

U

user

containment in a DIT, 3.3.1.2

identities, 3.3.1.2

naming in a DIT, 3.3.1.2

user management

delegating, 4.2.1

user provisioning

in Oracle Internet Directory, 2.2.2

integrating Oracle Identity Management, 5.1

X

X.509v3 certificates, 2.1