Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Documentation Updates
• Conventions

1 Introduction to the Administrative and User Console

• Understanding User Roles and Capabilities
• Overview of the Resource Model
  • Approval Processes
  • Provisioning Processes

2 Self-Registration

• Creating an Oracle Identity Manager Account
• Changing Your Password
• Tracking a Self-Registration Request
• Logging In to the Administrative and User Console
• Logging Out of the Administrative and User Console

3 Using Oracle Identity Manager

• Searching in Oracle Identity Manager
  • Constructing a Search (or Query)
  • Using Wildcards
  • Understanding Search Behavior
• Understanding Special User interface Behavior
  • Truncating Text Entries
  • Displaying Process Forms with Child Tables

4 My Account

• Viewing and Modifying Your Account Profile
• Changing Your Password
• Specifying Questions and Answers for Password Change and Retrieval
• Delegating Your Responsibilities to a Proxy

5 My Resources

• Viewing Your Resources
• Viewing Your Resource Requests
• Requesting New Resources

6 Requests

• Creating and Managing Requests
  • Granting Resources
  • Disabling Resources
  • Re-enabling Resources
  • Revoking Resources
• Tracking Requests
  • Searching for Requests
  • Viewing Approval Details
  • Viewing Provisioning Details
    • Viewing by User/Organization
    • Viewing by Resource
  • Viewing Request Comments
  • Viewing Request Status History

7 To-Do List

• Reviewing Pending Approvals
• Managing Open Tasks
  • Viewing Open Tasks
  • Reassigning an Open Task
  • Setting a Response to an Open Task
• Managing Attestation Requests
  • Viewing Attestation Requests
  • Saving Attestation Actions
  • Updating Comments and Delegations
  • Submitting Attestations

8 Users

• Creating Users
  • Editing the User Profile
  • Disabling the User
  • Changing the User's Password
• Managing Users

9 Organizations

• Creating Organizations
• Managing Organizations
  • Searching for and Viewing Organizations
  • Enabling an Organization
  • Disabling an Organization
  • Deleting an Organization
• Managing Organization Details

10 User Groups

• Creating Groups
• Managing Groups
  • Searching for User Groups
  • Deleting User Groups
  • Viewing and Administering a User Group
    • Member and Sub-Groups
    • Menu Items
    • Administrative Groups
    • Access Policies
    • Membership Rules
    • Permissions
    • Allowed Reports

11 Access Policies

• Creating an Access Policy
• Managing Access Policies

12 Resource Management

• Managing Resources
• Working with an Organization Associated With a Resource
• Using the Resource Administrator Option
  • Assigning a User Group as Administrators for Resources
  • Creating a New Administrator Group
  • Updating Permissions of an Administrative Group
• Using the Resource Authorizers Option
• Using the Resource Workflows Option
  • Launching the Workflow Visualizer
    • Using the Workflow Visualizer
    • User Interface
  • Using Drag and Drop
  • Using Display Options (menu item)
  • Using the Task Node (right-click menu)
  • Using the Expansion Nodes (Response Sub-Tree)
  • Using the Provisioning Workflow Definition Event Tabs
    • Provisioning Tab
    • Reconciliation Tab
    • Service Account Tab
    • User Event Tab
    • Org Event Tab
    • Resource Event Tab
    • Form Event Tab
    • Attestation Tab
  • Accessing the Task Details
    • General Tab
    • Automation Tab
    • Task Assignment Tab
    • Depends On Tab
    • Resource Status Management Tab

13 Deployment Manager

• Exporting Deployments
• Importing Deployments
  • Deployment Manager Behavior on Re-Imported Scheduled Task
  • Importing an XML File
• Best Practices

14 Reports

• Overview of Operational Reports
• Overview of Historical Reports
• Running Reports
• Report Display
• Filters
• Change Input Parameters
• CSV Export
• Detail Page Links
• Creating Reports Using Third-Party Software

15 Attestation

• Attestation Process Configuration
  • Menu Structure
  • System Control
• Creating Attestation Processes
• Managing Attestation Processes
  • Editing an Attestation Process
  • Disabling an Attestation Process
  • Enabling an Attestation Process
  • Deleting an Attestation Process
  • Running an Attestation Process
  • Managing Attestation Process Administrators
  • Viewing Attestation Process Execution History
• Using the Attestation Dashboard
  • Viewing Attestation Request Details
  • Email Notifications
  • Scheduled Tasks

16 Working with the Diagnostic Dashboard

• Introduction to the Diagnostic Dashboard
  • Installation Checks
  • Post Installation Check
• Installing the Diagnostic Dashboard
  • Installing the Diagnostic Dashboard on OC4J
  • Deploying on JBoss
  • Deploying on WebSphere
  • Deploying on WebLogic
  • Launching the Diagnostic Dashboard
• Using the Diagnostic Dashboard
• Test Details and Parameters
  • Microsoft SQL Server JDBC Libraries Availability Check
  • Microsoft SQL Server Prerequisites Check
  • Oracle Prerequisites Check
  • WebSphere Embedded JMS Server Status
  • Database Connectivity Check
  • Account Lock Status
  • Data Encryption Key Verification
  • Scheduler Service Status
  • Remote Manager Status
  • JMS Messaging Verification
  • Target System SSL Trust Verification
  • Java VM System Properties Report
  • WebSphere Version Report
  • Oracle Identity Manager Libraries and Extensions Version Report
  • Oracle Identity Manager Libraries and Extensions Manifest Report
  • SSO Diagnostic Information

A Understanding Attestation

• Definition of an Attestation Process
  • Attestation Process Control
    • Disabling Processes
    • Deleting Processes
• Components of an Attestation Task
  • The Attestation Inbox
• Attestation Request
• Financially Significant Resources
• Delegation
• The Attestation Lifecycle Process
  • Stage 1 - Creation of Attestation Task(s)
  • Stage 2 - Acting on an Attestation Task
  • Stage 3 – Processing a Submitted Attestation Task
• The Attestation Engine
• Attestation Scheduled Task
• Attestation Driven Workflow Capability
• Emails
  • Notify Attestation Reviewer
    • Variables
    • Subject Line
    • Body
  • Notify Delegated Reviewers
    • Variables
    • Subject Line
    • Body
  • Notify Process Owner about Invalid Attestation Reviewers
    • Variables
    • Subject Line
    • Body
    • Special Comments
  • Notify Process Owner about Declined Attestation Entitlements
    • Variables
    • Subject Line
    • Body
    • Special Comments
  • Notify Process Owner About Reviewers with No Email Defined
    • Variables
    • Subject Line
    • Body
    • Special Comments

B System Configuration Considerations for Administrators

Index