Contents

List of Figures

List of Tables

Title and Copyright Information

Send Us Your Comments

Preface

Intended Audience

Documentation Accessibility

Structure

Related Documents

Conventions

1 Introduction to Identity Management

1.1 What Is Identity Management?

1.2 Identity Management System Components

1.3 Oracle Identity Management Overview

1.4 Oracle Identity Management Objectives

2 Oracle Identity Management Concepts and Architecture

2.1 Identity Management Terminology

2.2 Identity Management Concepts

2.2.1 Integrating Application Security with Identity Management

2.2.2 Identity and Application Provisioning Lifecycle

2.2.3 Administrative Delegation

2.3 Identity Management Integration with Oracle Products

3 Oracle Identity Management Deployment Planning

3.1 Identity Management Deployment Planning Process

3.2 Requirement Analysis for Identity Management Deployment

3.2.1 High-Level Enterprise Requirements

3.2.1.1 Deciding Who Will Plan and Deploy the Oracle Identity Management Infrastructure

3.2.1.2 Deciding Which Components of Oracle Identity Management to Deploy

3.2.1.3 Considering Information Model Requirements

3.2.1.4 Considering Centralized Security Management Requirements

3.2.1.5 Considering Enterprise Application Requirements

3.2.1.6 Considering Administrative Autonomy Requirements

3.2.1.7 Considering Security Isolation Requirements

3.2.1.8 Considering Third-Party Identity Management Integration Requirements

3.2.1.9 Considering High Availability, Scalability, and Performance Requirements

3.2.2 Transforming Requirements into a Logical Deployment Plan

3.2.2.1 Model of Deploying a Central Identity Management System - Standard Enterprise Model

3.2.2.2 Model for Internal and External Users

3.2.2.3 Model of Providing Administrative Autonomy for Departmental Applications

3.2.2.4 Model of Integrating Oracle Identity Management in a Windows Environment

3.2.2.5 Deploying Central Identity Management Infrastructure in Application Service Provider Hosting Environments

3.3 Detailed Deployment Planning for Identity Management

3.3.1 Planning the Logical Organization of Directory Information

3.3.1.1 Sample Directory Information Tree

3.3.1.2 Planning the Overall Directory Information Tree Structure

3.3.1.3 Planning User and Group Naming and Containment

3.3.1.4 Planning the Identity Management Realm

3.3.2 Planning the Physical Network Topologies

3.3.2.1 Identity Management Infrastructure Default Deployment

3.3.2.2 Identity Management Infrastructure Deployment in a DMZ Network

3.3.2.3 Identity Management Infrastructure Deployment Using Multiple Middle Tiers

3.3.2.4 Identity Management Infrastructure Deployment Using Cold Failover Cluster Solution

3.3.2.5 Replicated Identity Management Infrastructures

3.3.2.6 Fan-out Replication Deployment

3.3.2.7 Application Deployments in Replicated Directory Environments

3.3.2.8 Geographically Distributed Identity Management Infrastructure Deployment

3.3.2.9 Disaster Recovery Deployment for Identity Management Infrastructure

3.3.2.10 Oracle Application Server Certificate Authority Recommended Deployment

4 Oracle Identity Management Administration and Usage

4.1 Administering Oracle Identity Management Infrastructure

4.1.1 Routine Monitoring of the Oracle Identity Management Infrastructure

4.1.2 Managing Individual Oracle Identity Management Components

4.1.3 Managing Enterprise Data in the Oracle Identity Management Infrastructure

4.2 Delegating Oracle Identity Management Administration

4.2.1 Delegating User Management

4.2.2 Delegating Group Management

4.2.3 Delegating Component Deployment and Administration

4.2.4 Oracle Internet Directory Delegated Administration Services

5 Integrating with Other Identity Management Solutions

5.1 Reasons for Identity Management Integration

5.2 Identity Management Integration Tools and Strategies

A Deploying Oracle Identity Management with Multimaster Replication

A.1 Multimaster Identity Management Replication Configuration

A.1.1 Master Node Installation

A.1.2 Replica Node Installation

A.1.3 Multimaster Replication Installation

A.1.4 Installing Oracle Application Server Single Sign-On and Oracle Delegated Administration Services on the Master Node

A.1.5 Synchronizing the Single Sign-On Schema Password

A.1.6 Installing Oracle Application Server Single Sign-On and Oracle Delegated Administration Services on the Replica Node

A.1.7 Oracle Directory Integration and Provisioning Event Propagation in a Multimaster Scenario

A.2 Adding a Node to a Multimaster Replication Group

A.3 Deleting a Node from a Multimaster Replication Group

B Deploying Oracle Identity Management with Fan-Out Replication

B.1 Master Node Installation

B.2 Replica Node Installation

B.3 Fan-out Replication Setup

C Oracle Internet Directory Default Settings

Index