Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Documentation Updates
• Conventions

What's New in the Oracle Identity Manager Connector for CA ACF2?

• Software Updates
• Documentation-Specific Updates

1 About the Connector

• 1.1 Certified Components
• 1.2 Certified Languages
• 1.3 Connector Architecture
  • 1.3.1 Connector Components
  • 1.3.2 Connector Operations
    • 1.3.2.1 Full Reconciliation Process
    • 1.3.2.2 Incremental (Real-Time) Reconciliation Process
    • 1.3.2.3 Provisioning Process
• 1.4 Features of the Connector
  • 1.4.1 Target Resource and Trusted Source Reconciliation
  • 1.4.2 Full and Incremental Reconciliation
  • 1.4.3 Encrypted Communication Between the Target System and Oracle Identity Manager
  • 1.4.4 High Availability Feature of the Connector
• 1.5 Connector Objects Used During Reconciliation and Provisioning
  • 1.5.1 Supported Functions for Reconciliation
  • 1.5.2 Supported Functions for Provisioning
  • 1.5.3 User Attributes for Target Resource Reconciliation and Provisioning
    • 1.5.3.1 Resource Rule Attributes for Target Resource Reconciliation and Provisioning
    • 1.5.3.2 Access Rule Attributes for Target Resource Reconciliation and Provisioning
  • 1.5.4 User Attributes for Trusted Source Reconciliation
  • 1.5.5 Reconciliation Rule
  • 1.5.6 Reconciliation Action Rules

2 Deploying the IdF Advanced Adapter for ACF2

• 2.1 IDF Mainframe Adapters Functional Characteristics
  • 2.1.1 Alias Post-Processing
  • 2.1.2 Other Post-Processing
• 2.2 Prerequisites
  • 2.2.1 Message Transport Requirements
  • 2.2.2 APF Authorization
• 2.3 Mainframe Adapter Installation
  • 2.3.1 Extracting the Files from the Distribution Zip Archive File
  • 2.3.2 Uploading the Files
  • 2.3.3 Extracting the XMIT Files
  • 2.3.4 Editing the Mainframe Batch Job Files to Match the Settings for the Customer's Site
  • 2.3.5 Submitting Batch Job Streams
  • 2.3.6 Loading and Activating the Exits
  • 2.3.7 Creating an ACF2 LID for Pioneer and Voyager with Permissions
  • 2.3.8 Adding Pioneer/Voyager to the Resource Rule Facilities (BPX and IRR)
  • 2.3.9 Testing the Installation

3 Connector Deployment on Oracle Identity Manager

• 3.1 Files and Directories that Comprise the Connector
• 3.2 Determining the Release Number of the Connector
• 3.3 Before Running the Connector Installer
• 3.4 Running the Connector Installer
• 3.5 Configuring the IT Resource
• 3.6 Configuring Oracle Identity Manager
  • 3.6.1 Clearing Content Related to Connector Resource Bundles from the Server Cache
  • 3.6.2 Enabling Logging
• 3.7 Configuring Trusted Source Reconciliation
• 3.8 Configuring Oracle Identity Manager for Request-Based Provisioning
  • 3.8.1 Copying Predefined Request Datasets
  • 3.8.2 Importing Request Datasets into the MDS
  • 3.8.3 Enabling the Auto Save Form Feature
  • 3.8.4 Running the PurgeCache Utility
• 3.9 Installing and Configuring the LDAP Gateway

4 Configuring the Connector

• 4.1 Performing Full Reconciliation
• 4.2 Configuring Account Status Reconciliation
• 4.3 Configuring Filtered Reconciliation to Multiple Resource Objects
• 4.4 Guidelines on Using the Connector
• 4.5 Performing Provisioning Operations
  • 4.5.1 Provisioning Users
    • 4.5.1.1 Direct Provisioning
    • 4.5.1.2 Request-Based Provisioning
• 4.6 Switching Between Request-Based Provisioning and Direct Provisioning on Oracle Identity Manager Release 11.1.1
• 4.7 Configuring Resource and Access Rule Pre-Population Scheduled Tasks

5 Extending the Functionality of the Connector

• 5.1 Adding New Attributes for Target Resource Reconciliation
• 5.2 Adding New Attributes for Provisioning
• 5.3 Removing Attributes Mapped for Target Resource Reconciliation and Provisioning
• 5.4 Configuring the Connector for Provisioning to Multiple Installations of the Target System
• 5.5 Configuring the Connector for Reconciliation of Multiple Installations of the Target System
• 5.6 Reconciling Deleted Users to Oracle Identity Manager
• 5.7 Reconciling Users to the Internal LDAP
• 5.8 Reconciling Internal LDAP Users to Oracle Identity Manager

6 Troubleshooting

7 Known Issues

A Reconciliation Agent (Voyager) Messages

B Provisioning Agent (Pioneer) Messages

C Authorized Libraries

D Relationship between the Pioneer (DDs), Voyager (DDs) and the INDDs

E LOADDSN1 Member and the File Contents

F Voyager and Pioneer Control File Parameters

G Mainframe Language Environment Runtime Options

Index