Contents

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Documentation Updates
• Conventions

What's New in the Oracle Identity Manager Connector for Microsoft Active Directory?

• Software Updates
• Documentation-Specific Updates

1 About the Connector

• Reconciliation Module
  • Lookup Fields Reconciliation
  • Group Reconciliation
  • User Reconciliation
• Provisioning Module
  • Organization Provisioning
  • Group Provisioning
  • User Provisioning
• Supported Functionality
• Multilanguage Support
• Files and Directories That Comprise the Connector
• Determining the Release Number of the Connector
  • Before Deployment
  • After Deployment

2 Deploying the Connector

• Step 1: Verifying Deployment Requirements
• Step 2: Configuring the Target System
  • Ensuring That the Parent Organization Exists in Microsoft Active Directory
  • Enabling or Disabling Password Policies on Microsoft Active Directory
• Step 3: Copying the Connector Files and External Code Files
• Step 4: Configuring the Oracle Identity Manager Server
  • Changing to the Required Input Locale
  • Clearing Content Related to Connector Resource Bundles from the Server Cache
  • Enabling Logging
• Step 5: Importing the Connector XML Files
  • Defining IT Resources
    • Microsoft Windows 2000
    • Microsoft Windows 2003
• Step 6: Configuring SSL
  • Installing Certificate Services
  • Enabling LDAPS
  • Setting Up the Microsoft Active Directory Certificate As a Trusted Certificate
    • Exporting the Microsoft Active Directory Certificate
    • Importing the Microsoft Active Directory Certificate

3 Configuring the Connector

• Configuring Reconciliation
  • Configuring Trusted Source Reconciliation
  • Partial Reconciliation
  • Batched Reconciliation
  • Configuring the Reconciliation Scheduled Tasks
    • Specifying Values for the Scheduled Task Attributes
  • Enabling Reconciliation in Oracle Identity Manager Release 9.0.1
  • Adding Custom Attributes for Reconciliation
• Configuring Provisioning
  • Adding Custom Attributes for Provisioning
• Configuring the Connector for Oracle Identity Manager Release 9.0.1.3
• Configuring the Connector for Multiple Installations of the Target System
• Configuring the Connector and Password Synchronization Module
  • Creating a Custom Attribute in Microsoft Active Directory to Track Password Changes
    • Ensuring That the Microsoft Active Directory Schema Snap-In Is Installed
    • Creating a Custom Attribute
  • Creating a Custom Attribute in Oracle Identity Manager
  • Specifiying Values for IT Resource Parameters
  • Sequence of Events That Occur During a Password Change
  • Configuring the xlconfig.xml File for the Password Synchronization Module

4 Testing and Troubleshooting

• Testing Provisioning
• Troubleshooting

5 Known Issues

A Attribute Mappings Between Oracle Identity Manager and Microsoft Active Directory

B Attributes of the Reconciliation Scheduled Task

C Code for a Sample Transformation Class

Index