Contents

List of Figures

Title and Copyright Information

Send Us Your Comments

Preface

Intended Audience

Structure

Related Documents

Conventions

Documentation Accessibility

1 Introduction to Identity Management

What is Identity Management?

Identity Management System Components

Oracle Identity Management Overview

Oracle Identity Management Objectives

2 Oracle Identity Management Concepts and Architecture

Identity Management Terminology

Identity Management Concepts

Integrating Application Security with Identity Management

Identity and Application Provisioning Lifecycle

Administrative Delegation

Identity Management Integration with Oracle Products

3 Oracle Identity Management Deployment Planning

Identity Management Deployment Planning Process

Requirement Analysis

High-Level Enterprise Requirements

Deciding Who Will Plan and Deploy the Oracle Identity Management Infrastructure

Deciding Which Components of Oracle Identity Management to Deploy

Considering Information Model Requirements

Considering Centralized Security Management Requirements

Considering Enterprise Application Requirements

Considering Administrative Autonomy Requirements

Considering Security Isolation Requirements

Considering Third-Party Identity Management Integration Requirements

Considering High Availability, Scalability, and Performance Requirements

Translating Requirements into a Logical Deployment Plan

Model of Deploying a Central Identity Management System - Standard Enterprise Model

Model of Serving Internal and External Users

Model of Providing Administrative Autonomy for Departmental Applications

Model of Integrating Oracle Identity Management in a Windows Environment

Deploying Central Identity Management Infrastructure in Application Service Provider Hosting Environments

Summary of Requirement Analysis

Detailed Deployment Planning

Planning the Logical Organization of Directory Information

Planning the Overall Directory Information Tree Structure

Planning User and Group Naming and Containment

Planning the Identity Management Realm

Planning the Physical Network Topologies

Identity Management Infrastructure Default Deployment

Identity Management Infrastructure Deployment in a DMZ Network

Identity Management Infrastructure Deployment Using Multiple Middle Tiers

Identity Management Infrastructure Deployment using Cold Failover Cluster Solution

Identity Management Infrastructure Deployment on Active Failover Cluster

Replicated Identity Management Infrastructures

Application Deployments in Replicated Directory Environments

Geographically Distributed Identity Management Infrastructure Deployment

Disaster Recovery Deployment for Identity Management Infrastructure

Oracle Application Server Certificate Authority Recommended Deployment

Summary of Detailed Deployment Planning

4 Oracle Identity Management Administration and Usage

Administering Oracle Identity Management Infrastructure

Routine Monitoring of the Oracle Identity Management Infrastucture

Managing Individual Oracle Identity Management Components

Managing Enterprise Data in the Oracle Identity Management Infrastructure

Oracle Identity Management Administration Delegation

Delegating User Management

Delegating Group Management

Delegating Component Deployment and Administration

Oracle Internet Directory Delegated Administration Services

5 Integrating with Other Identity Management Solutions

Motivations for Integration

Integration Tools and Strategies

6 Integrating Enterprise Applications

Benefits of Integrating with Oracle Identity Management

Oracle Identity Management Services Available for Application Integration

Integrating Existing Applications with Oracle Identity Management

Integrating New Applications with Oracle Identity Management

A Oracle Internet Directory Default Settings

Index