Security

Oracle Internet Directory is a key element of the Oracle Identity Management Infrastructure. This enables you to deploy multiple Oracle components to work against a shared instance of Oracle Internet Directory and associated infrastructure pieces. This sharing allows an enterprise to simplify security management across all applications.

In addition to the role it plays in the Oracle Identity Management infrastructure, Oracle Internet Directory provides many powerful features for protecting information.

These security features within Oracle Internet Directory itself include:

• Data integrity: Ensuring that data is not tampered with during transmission

• Data privacy: Ensuring that data is not inappropriately observed during transmission between Oracle Internet Directory and other components in the network.

• Authentication: Ensuring that the identities of users, hosts, and clients are correctly validated

• Authorization: Ensuring that a user reads or updates only the information for which that user has privileges

• Password policies: Establishing and enforcing rules for how passwords are defined and used

• Password protection: Ensuring that passwords are not easily discovered by others

In either an enterprise or hosted environment, you can use all these features to enforce a uniform security policy across multiple applications enabled for use with Oracle Internet Directory. To do this, you deploy the directory for administrative delegation. This deployment allows, for example, a global administrator to delegate to department administrators access to the metadata of applications in their departments. These department administrators can then control access to their department applications.

See Also: Chapter 12, "Directory Security Concepts" for a fuller discussion of the security features of Oracle Internet Directory Chapter 19, "Deployment of Oracle Identity Management Realms" for information on Oracle Internet Directory as it relates to the Oracle Identity Management infrastructure Chapter 17, "Delegation of Privileges for an Oracle Technology Deployment" for a discussion of how to protect applications in a large enterprise and in hosted environments Chapter 36, "Security in the Oracle Directory Integration and Provisioning Platform" for a discussion of the unique aspects of security in an Oracle Directory Integration and Provisioning platform environment Oracle Identity Management Concepts and Deployment Planning Guide for a fuller discussion of the Oracle Identity Management infrastructure