1 About the Connector

Oracle Identity Manager automates access rights management, security, and provisioning of IT resources. Oracle Identity Manager connectors are used to integrate Oracle Identity Manager with third-party applications. The connector for Oracle Internet Directory is used to integrate Oracle Identity Manager with Oracle Internet Directory.

Note:

Oracle Identity Manager connectors were referred to as resource adapters prior to the acquisition of Thor Technologies by Oracle.

This chapter contains the following sections:

• Supported Functionality

• Reconciliation Module

• Provisioning Module

• Files and Directories That Comprise the Connector

Supported Functionality

The following table lists the functions that are available with this connector.

Function	Type	Description
Create User	Provisioning	Creates a user
Delete User	Provisioning	Deletes a user
Enable User	Provisioning	Enables a user
Disable User	Provisioning	Disables a user
Move User	Provisioning	Moves a user from one container to another
Password Updated	Provisioning	Updates the password of a user
First Name Updated	Provisioning	Updates the first name of a user
Last Name Updated	Provisioning	Updates the last name of a user
Department Updated	Provisioning	Updates the department of a user
Email ID Updated	Provisioning	Updates the e-mail address of a user
Location Updated	Provisioning	Updates the location of a user
Middle Name Updated	Provisioning	Updates the middle name of a user
Preferred Language Updated	Provisioning	Updates the language of a user
Telephone Updated	Provisioning	Updates the telephone number of a user
Time Zone Updated	Provisioning	Updates the time zone of a user
Title Updated	Provisioning	Updates the title of a user
Organization DN Updated	Provisioning	Updates the organization DN of a user
Add user to group	Provisioning	Adds a user to a group
Remove user from group	Provisioning	Removes a user from a group
Add user to role	Provisioning	Adds a user to a role
Remove user from role	Provisioning	Removes a user from a role
Reconciliation Delete Received	Reconciliation	Deletes a user from Oracle Identity Manager if the user has been deleted from the target system
Reconciliation Insert Received	Reconciliation	Inserts a user in Oracle Identity Manager
Reconciliation Update Received	Reconciliation	Updates a user in Oracle Identity Manager. This operation could involve modifying any of the user properties, such as the first name or last name.

Note:

Oracle Internet Directory is a general-purpose directory service that enables fast retrievals and centralized management of information about dispersed users and network resources.

Lightweight Directory Access Protocol (LDAP) is an Internet-ready, lightweight implementation of ISO X.500 standard for directory services.

Oracle Internet Directory implements and combines LDAP with the high performance, scalability, robustness, and availability features of Oracle Database. At some places in this guide, the terms Oracle Internet Directory and LDAP have been used interchangeably.

Reconciliation Module

This section describes the elements that the reconciliation module extracts from the target system to construct reconciliation event records.

Reconciliation can be divided into the following types:

• Lookup Fields Reconciliation

• User Reconciliation

Lookup Fields Reconciliation

Lookup fields reconciliation involves reconciling the lookup values for groups and roles.

User Reconciliation

This section provides information about user reconciliation.

Reconciled Resource Object Fields

The following fields are reconciled:

• User ID (This is a mandatory field)

• First Name

• Last Name

• Middle Name

• Department

• Location

• Telephone

• Email

• Preferred Language

• Timezone

• Logon Script

• Title

• Organization Unit

• Server Name (IT resource)

• UserGroup

• UserRole

Reconciled Xellerate User Fields

The following fields are reconciled only if reconciliation is implemented in trusted mode:

• User ID (This is a mandatory field)

• First Name

• Last Name

• Organization

• Xellerate Type

• Password

• Xellerate

• Role

Note:

The user search has been modified to fetch all records from the target system, regardless of the QueryEntryReturnLimit value set in Oracle Identity Manager. However, this modified functionality works only if the number of Oracle Identity Manager user IDs starting with patterns of aa, ab, ac, and so on is less than or equal to the QueryEntryReturnLimit value.

Provisioning Module

The following fields are provisioned:

• ldapObjectClass

• ldapUserObjectClassPrimary

• ldapUserObjectClassSecondary

• ldapFirstName

• ldapLastName

• ldapUserID

• ldapPassword

• ldapUserDNPrefix

• ldapUserDisableAttr

• ldapOrgDNPrefix

• ldapGroupDNPrefix

• ldapGroupMemberAttr

Note:

The names of the fields are case-sensitive.

Files and Directories That Comprise the Connector

The files and directories that comprise this connector are compressed in the following ZIP file on the installation media.

Directory Servers\Oracle Internet Directory\Oracle Internet Directory Rev 2.0.0.zip

These files and directories are listed in the following table.

File in the Installation Media Directory	Description
xml\oimOIDUser.xml	This XML file contains the following components of the connector: IT resource type Custom process form Process task and adapters (along with their mappings) Resource object Xellerate User Provisioning process Pre-populate rules Reconciliation process Lookup definitions
xml\oimUser.xml	This XML file contains the configuration for the Xellerate User. You must import this file only if you plan to use the connector in trusted source reconciliation mode.
lib\xliOID.jar	This JAR file contains the class files required for provisioning and reconciliation.
The following files in the Batch\custom directory: custom.bat customIndex.ldif customOrganizationalRole.ldif customRoleOccupant.ldif readme.txt	When you run the custom.bat file, a required object class and an attribute are added to the existing Oracle Internet Directory schema.
The following files in the troubleshoot directory: config.properties log4j-1.2.9.jar log.properties tcUtilTestOID.class testcreate.bat testdelete.bat testmodify.bat xliOID.jar xlLogger.jar xlUtils.jar	These files are used to perform basic tests on the connector, even before Oracle Identity Manager and the application server are installed.
docs\B31128_01.pdf docs\html	These are PDF and HTML versions of this guide, which provides instructions to deploy the connector.

The"Step 4: Copying the Connector Files and External Code" section provides instructions to copy these files into the required directories.