Skip Headers
Oracle® Identity Manager Connector Guide for Sun Java System Directory
Release 9.0.4

Part Number E10175-01
Go to Documentation Home
Home
Go to Book List
Book List
Go to Table of Contents
Contents
Go to Index
Index
Go to Feedback page
Contact Us

Go to previous page
Previous
Go to next page
Next
View PDF

1 About the Connector

Oracle Identity Manager automates access rights management, security, and provisioning of IT resources. Oracle Identity Manager connectors are used to integrate Oracle Identity Manager with third-party applications. The connector for Sun Java System Directory is used to integrate Oracle Identity Manager with Sun Java System Directory.

Note:

Oracle Identity Manager connectors were referred to as resource adapters prior to the acquisition of Thor Technologies by Oracle.

This chapter contains the following sections:

Note:

At some places in this guide, Sun Java System Directory has been referred to as the target system.

Reconciliation Module

Reconciliation involves duplicating in Oracle Identity Manager additions of and modifications to user accounts on the target system. It is an automated process initiated by a scheduled task that you configure.

See Also:

The "Deployment Configurations of Oracle Identity Manager" section in Oracle Identity Manager Connector Framework Guide for conceptual information about reconciliation configurations

Based on the type of data reconciled from the target system, reconciliation can be divided into the following types:

Lookup Fields Reconciliation

Lookup fields reconciliation involves reconciling the fields for groups, roles, organizations, and organizational units.

User Reconciliation

User reconciliation involves reconciling the fields discussed in this section.

Reconciled Resource Object Fields

The following target system fields are reconciled:

  • User ID

  • First Name

  • Last Name

  • Middle Name

  • Department

  • Location

  • Telephone

  • Email

  • Timezone

  • Communication Language

  • Title

  • Organizational Unit

  • Group

  • Role

Reconciled Xellerate User Fields

The following target system fields are reconciled only if trusted source reconciliation is implemented:

  • User ID

  • First Name

  • Last Name

  • Employee Type

  • Timezone

  • User Type

  • Organization

  • Email

Provisioning Module

Provisioning involves creating or modifying a user's account information on the target system through Oracle Identity Manager. You use the Administrative and User Console to perform provisioning operations.

See Also:

The "Deployment Configurations of Oracle Identity Manager" section in Oracle Identity Manager Connector Framework Guide for conceptual information about provisioning

For this target system, the following fields are provisioned:

Supported Functionality

The following table lists the functions that are available with this connector.

Function Type Description
Create User Provisioning Creates a user
Delete User Provisioning Deletes a user
Enable User Provisioning Enables a user
Disable User Provisioning Disables a user
Move User Provisioning Moves a user from one container to another
Password Updated Provisioning Updates the password of a user
First Name Updated Provisioning Updates the first name of a user
Last Name Updated Provisioning Updates the last name of a user
Department Updated Provisioning Updates the department of a user
Email ID Updated Provisioning Updates the e-mail address of a user
Location Updated Provisioning Updates the location of a user
Middle Name Updated Provisioning Updates the middle name of a user
Communication Language Updated Provisioning Updates the communication language preference of a user
Telephone Updated Provisioning Updates the telephone number of a user
Title Updated Provisioning Updates the title of the user
Organization DN Updated Provisioning Updates the organization DN of a user
Add User to Group Provisioning Adds a user to a group
Remove User from Group Provisioning Removes a user from a group
Add User to Role Provisioning Adds a user to a role
Remove User from Role Provisioning Removes a user from a role
Create OU Provisioning Creates an organizational unit
Change OU Name Provisioning Changes OU name
Delete OU Provisioning Deletes organizational unit
Move OU Provisioning Moves organization sub unit to another parent organizational unit
Create iPlanet Group Provisioning Creates an iPlanet group
Delete iPlanet Group Provisioning Deletes an iPlanet group
New Group Name Updated Provisioning Changes the group name
Create iPlanet Role Provisioning Creates iPlanet role
Delete iPlanet Role Provisioning Deletes iPlanet role
New Role Name Updated Provisioning Changes the role name
Reconciliation Delete Received Reconciliation Deletes a user from Oracle Identity Manager if the user is deleted from Sun Java System Directory
Reconciliation Insert Received Reconciliation Inserts a user in Oracle Identity Manager
Reconciliation Update Received Reconciliation Updates user attributes, such as the first name and last name, in Oracle Identity Manager
Create User Reconciliation Creates a user in Oracle Identity Manager
Delete User Reconciliation Deletes a user is Oracle Identity Manager
Enable User Reconciliation Enables a user in Oracle Identity Manager
Disable User Reconciliation Disables a user in Oracle Identity Manager
Move User Reconciliation Moves a user from one container to another in Oracle Identity Manager
Add User to Group Reconciliation Adds a user to a group in Oracle Identity Manager
Remove User from Group Reconciliation Removes a user from a group in Oracle Identity Manager
Assign Role to User Reconciliation Assigns a role to a user in Oracle Identity Manager
Remove Assigned Role from User Reconciliation Removes a role from a user in Oracle Identity Manager

Multilanguage Support

The connector supports the following languages:

See Also:

Oracle Identity Manager Globalization Guide for information about supported special characters

Files and Directories That Comprise the Connector

The files and directories that comprise this connector are in the following directory on the installation media:

Directory Servers/Sun Java System Directory Server

These files and directories are listed in the following table.

File in the Installation Media Directory Description
lib/xliIPlanet.jar
This JAR file contains the class files required for provisioning and reconciliation.
Files in the resources directory Each of these resource bundle files contains language-specific information that is used by the connector.

Note: A resource bundle is a file containing localized versions of the text strings that are displayed on the user interface of Oracle Identity Manager. These text strings include GUI element labels and messages displayed on the Administrative and User Console.

troubleshooting/TroubleShootingUtilityIPlanet.class
This is the standalone class that interacts with the target system. This is the class that has the code required to run the test cases.
troubleshooting/log.properties
This file is used to specify the log level and the directory in which the log file is to be created when you run the testing utility.
troubleshooting/TroubleShootIPlanet.properties
This file contains the connection details that are required to connect to the target system and user details. It also contains details about the commands to be run.
xml/iPlanetResourceObject.xml
This XML file contains definitions for the following components of the connector:
  • IT resource type

  • Custom process form

  • Process task and rule-generator adapters (along with their mappings)

  • Resource object

  • Provisioning process

  • Pre-populate rules

  • Reconciliation process

  • Lookup definitions

xml/iPlanetXLResourceObject.xml
This XML file contains the configuration for the Xellerate User. You must import this file only if you plan to use the connector in trusted source reconciliation mode.

Note:

The files in the troubleshooting directory are used only to run tests on the connector.

The "Step 2: Copying the Connector Files and External Code Files" section provides instructions to copy these files into the required directories.

Determining the Release Number of the Connector

You can use any one of the following methods to determine the release number of the connector.

Before Deployment

To determine the release number of a connector before you deploy it:

  1. Extract the contents of the xliIPlanet.jar file. This file is in the following directory on the installation media:

    Directory Servers/Sun Java System Directory Server/lib
    
    
  2. Open the manifest.mf file in a text editor. The manifest.mf file is one of the files bundled inside the xliIPlanet.jar file.

    In the manifest.mf file, the release number of the connector is displayed as the value of the Version property.

Note:

If you maintain a copy of the xliIPlanet.jar file after deployment, then you can use this method to determine the release number of the connector at any stage. After you deploy the connector, it is recommended that you use the "After Deployment" method, which is described in the following section.

After Deployment

To determine the release number of a connector that has already been deployed:

See Also:

Oracle Identity Manager Design Console Guide
  1. Open the Oracle Identity Manager Design Console.

  2. In the Form Designer, open the process form. The release number of the connector is the value of the Version field.