Index

A B C D E F G H I L M N O P R S T U V W X

A

Access Manager API, 4.4

B

backward compatibility, 6.1.1.1, 7.1.2.1

C

certifcate decode plug-in, 6.9.3

certificate decode, selection filter, 6.9

configureAccessGate, 4.2.3.3

ecryption, 3.2.1.6

COREid

now named Oracle Access Manager, Preface

credential mapping, 6.9

customization, Preface

D

date object class, 5.4.43

deployment, Preface

directory schema, Preface

DN values

finding, 2.1.2.2

duplicate actions, 5.4.26

E

encryption

Identity Event API events, 3.4.6

Example

Calling Logger as a Post-Processing Action After a Workflow Step, 3.4.4.1

Examples

IdentityXML, 2.9

EXEC action example, 3.7

EXEC actions, 3.2.2.3, 3.3.2, 3.5

F

features

new, Preface

new in this release, Preface

G

globalization, Preface

of Access Manager SDK, 4.5

of plug-ins, 7.1.2

Group Manager

getting data from, 1.4.2

groupservcenter, 1.2.4

IdentityXML functions for, 2.7

IdentityXML usage for, 2.1

sending information to programmatically, 1

setting data in, 1.4.3

testing if you can perform a function, 1.4.1

URL to access, 1.3

groups

create group, 2.7.2.3

delete group, 2.7.2.4

expand groups, 2.7.2.8

flush group cache, 2.7.2.9

get groups, 2.7.2.5, 2.7.2.6

membership, 2.7.1.9

modify group attributes, 2.7.2.2

permission to create a group, 2.7.1.5, 2.7.1.13

permission to delete a group, 2.7.1.6, 2.7.1.14

permission to modify, 2.7.1.3

permission to modify a group, 2.7.1.12, 2.7.1.16

permission to request modification, 2.7.1.4

permission to subscribe to a group, 2.7.1.7

permission to unsubscribe from a group, 2.7.1.8

permission to view, 2.7.1.1

permission to view a group, 2.7.1.10

permission to view a group attribute, 2.7.1.2, 2.7.1.11

permission to view group membership, 2.7.1.15

subscribe to a group, 2.7.2.10

subscribe to using IdentityXML, 2.5.1.4

unsubscribe any user via IdentityXML, 2.5.1.7

unsubscribe using IdentityXML, 2.5.1.5

view group attributes, 2.7.2.1

view groups, 2.7.2.7

GUI customization, Preface

H

host identifiers, 5.4.1

I

Identity applications

example of using IdentityXML with, 1.2.5.1

sending information to programmatically, 1

URLs to access, 1.3

Identity Event Plug-in API

about, 3, 3.1

action completed successfully, 3.3.1

actions, 3.2

guidelines for writing, 3.2.4

catalog entry

encryption events, 3.4.6.1

OnChange events, 3.4.3.1

password management events, 3.4.5.1

pre and post events, 3.4.2.1

workflow events, 3.4.4.1

catalog file, 3.2.3

configuration file, 3.2.3

Dynamically Shared Object (DSO), 3.3.2.3

encryption events, 3.2.1.6, 3.4.6

error signal, 3.3.1

errors

returning, 3.5.4

event handling, 3.4

events, 3.2

EventXML format, 3.3.3.1

example files, 3.5.5.3, 3.5.5.4

examples, 3.7

examples of use, 3.1.1

EXEC action example, 3.7

EXEC actions, 3.2.2.3, 3.3.1, 3.3.2, 3.3.2.10, 3.5

about, 3.5.3

EXEC examples, 3.3.2.12

get function, 3.3.2.2, 3.3.2.6

global parameters, 3.3.2.13

how it works, 3.3

initialization and shutdown, 3.4.1

LIB action example, 3.7

LIB actions, 3.2.2.1, 3.3.1, 3.3.2, 3.3.2.1, 3.5

about, 3.5.1

LIB examples, 3.3.2.4

LIB interface, 3.3.2.2

libraries, 3.5.5.1, 3.5.5.2

load behavior, 3.3.2, 3.3.2.3, 3.3.2.7, 3.3.2.11

lost password management events, 3.2.1.5

MANAGEDLIB actions, 3.2.2.2, 3.3.1, 3.3.2, 3.3.2.5, 3.3.2.9, 3.5

about, 3.5.2

example, 3.7

MANAGEDLIB examples, 3.3.2.8

ObInitEventAPI, 3.4.1.1

oblixpppcatalog.lst, 3.4.4.1, 3.4.4.1

ObTermEventAPI, 3.4.1.3

OnChange events, 3.2.1.2, 3.4.3

password management events, 3.2.1.4, 3.4.5

pre and post events, 3.4.2

PresentationXML, use with, 3.3.3.2

process a request before it reaches a program, 3.2.1.1

process the results of a request, 3.2.1.1

receive function, 3.3.2.2, 3.3.2.6

return values, 3.4.1.2

send function, 3.3.2.2, 3.3.2.6

set function, 3.3.2.2, 3.3.2.6

SetResultString, 3.3.2.6

STATUS_PPP_ABORT, 3.3.1

STATUS_PPP_OK, 3.3.1

STATUS_PPP_WF_ASYNC, 3.3.1

STATUS_PPP_WF_RETRY, 3.3.1

use of XML, 3.3.3

wait for asynchronous action, 3.3.1

workflow events, 3.2.1.3, 3.4.4

workflow step failure, 3.3.1

XML, parsing, 3.3.3.3

Identity System

L

Latin-1, 3.1

LDAP schema names

finding, 2.1.2.2

LIB actions, 3.2.2.1, 3.3.2, 3.5

example, 3.7

M

MANAGEDLIB actions, 3.2.2.2, 3.3.2, 3.5

MANAGEDLIB interface, 3.3.2.6

master audit rule, 5.4.12

N

name changes, Preface

names, new, Preface

NetPoint

now named Oracle Access Manager, Preface

NetPoint SAML Services

now named Oracle Identity Federation, Preface

O

ObAccessException, 4.10.7

ObAMAccessConditions, 5.4.29

ObAMAccessConditionsMGD, 5.4.30

ObAMAccessTest, 5.5.1

ObAMAccessTestMGD, 5.5.2

ObAMAccessTestResult, 5.5.5

ObAMAccessTestResultManaged, 5.5.6

ObAMAccessTestResultMgd, 5.5.4, 5.5.4

ObAMAccessTestResults, 5.5.3

ObAMAccessTestResultsMgd, 5.5.4

ObAMAction, 5.4.35, 5.4.37

ObAMActionMgd, 5.4.37

ObAMActionTypeMgd, 5.4.31

ObAMAdminRule, 5.4.17

ObAMAuditRule, 5.4.40

ObAMAuditRule_EventTypeMgd, 5.4.42

ObAMAudtiRuleMgd, 5.4.41

ObAMAuthenticationPlugin, 5.4.8

ObAMAuthenticationPluginMgd, 5.4.9

ObAMAuthenticationRule, 5.4.22

ObAMAuthenticationScheme, 5.4.5

ObAMAuthenticationSchemeMgd, 5.4.6

ObAmAuthorizationExpr, 5.4.26

ObAMAuthorizationExprMgd, 5.4.27

ObAMAuthorizationRule, 5.4.24

ObAmAuthorizationRuleMgd, 5.4.25

ObAMAuthorizationScheme, 5.4.10

ObAMAuthorizationSchemeMgd, 5.4.11

ObAMDate, 5.4.43

ObAMDate_DaysOfWeekMgd, 5.4.35, 5.4.36, 5.4.46

ObAMDate_MonthsMgd, 5.4.45

ObAMDuplicateActionPolicyMgd, 5.4.28

ObAMException, 5.5.7

ObAMHostIdentifier, 5.4.1

ObAMHostIdentifierMgd, 5.4.2

ObAMIdentity, 5.4.47

ObAMMasterAuditRule, 5.4.12

ObAMMasterAuditRuleMgd, 5.4.13

ObAMObjectWithActions, 5.4.32

ObAMParameter, 5.4.49

ObAMParameterMgd, 5.4.50

ObAMPolicy, 5.4.20

ObAMPolicyDomain, 5.4.15

ObAMPolicyMgd, 5.4.21

ObAMResource, 5.4.51

ObAMResourceType, 5.4.3

ObAMResourceTypeMgd, 5.4.4

ObAMTime, 5.4.53

ObAMTimeMgd, 5.4.53

ObAMTimingConditions, 5.4.33

ObAMTimingConditionsMgd, 5.4.34

ObInitEventAPI, 3.4.1.1

objects

create object, 2.8.1.5, 2.8.1.10, 2.8.2.4

delete object, 2.8.1.6, 2.8.1.11, 2.8.2.6

modify object, 2.8.1.3, 2.8.1.9, 2.8.2.2, 2.8.2.3

request to modify object, 2.8.1.4, 2.8.1.12

schema names for

finding, 2.1.2.2

view object, 2.8.1.1, 2.8.1.7, 2.8.2.1

view object attribute, 2.8.1.2, 2.8.1.8

oblixpppcatalog.lst, 3.2.3, 3.4.4.1

entry for Unix, 3.4.4.1

ObTermEventAPI, 3.4.1.3

ObUserSession, 4.10.5

OnChange events, 3.2.1.2, 3.4.3

Oracle Access Manager

Access System administration, Preface

customization, Preface

deployment, Preface

directory schema, Preface

formerly NetPoint or COREid, Preface

installation, Preface

integration with third-party products, Preface

introduction, Preface

Oracle Identity Federation, Preface

formerly SHAREid, Preface

Organization Manager

getting data from, 1.4.2

IdentityXML functions for, 2.8

IdentityXML usage for, 2.1

objservcenter, 1.2.4

sending information to programmatically, 1

setting data in, 1.4.3

testing if you can perform a function, 1.4.1

URL to access, 1.3, 1.3

P

password validation, 3.1.1

passwords

Identity Event API events, 3.4.5

lost password management, 3.2.1.5

password management events, 3.2.1.4

plug-ins

globalization for, 7.1.2

policies, 5.4.20, 7.1

audit rules for, 5.4.12

auditing, 5.4.40

creating, 5.4.20

matching against request data, 5.4.49

testing, 5.5.2

policy domain, 4.2.5, 5.1, 7.1

administrators, 5.4.17

creating, 5.4.18

auditing, 5.4.40

creating, 5.4.15

default, Preface

object class, 5.4.15

policies

creating, 5.4.20

policies within, 5.4.20

Policy Manager

providing its functionality via an API, 5.3

Policy Manager API, Preface

about, 5

access policy objects, 5.4.14

Access System configuration objects, 5.3.10

administrators, creating, 5.4.18

API classes, 5.4

apidoc, 5.2.2

authentication rule

creating, 5.4.22

authorization expression

creating, 5.4.26

cloning objects, 5.3.3.1

connecting to the Access Server, 5.3.9.2

conventions, 5.3.1

copying existing objects, 5.3.3

copying only modified data, 5.3.7

creating a policy domain, 5.4.15

creating new objects, 5.3.2

deleting objects, 5.3.4

enumerations, 5.3.8

examples, 5.2.2

functionality provided in the API, 5.3

header files, 5.2.2

installing, 5.2.1

libraries, 5.2.2

managed code, using with, 5.1.1

managing arrays, 5.3.6

messages available, 5.2.2

naming conventions, 5.3.1.2

ObAccessManager objects, 5.3.9

ObAMAccessConditions, 5.4.29

ObAMAccessConditionsMgd, 5.4.30

ObAMAccessTest, 5.5.1

ObAMAccessTestMgd, 5.5.2

ObAMAccessTestResult, 5.5.5

ObAMAccessTestResultMgd, 5.5.6

ObAMAccessTestResultsMgd, 5.5.4

ObAMAccesstTestResults, 5.5.3

ObAMAction, 5.4.35, 5.4.37

ObAMAction_ValueTypeMgd, 5.4.39

ObAMActionMgd, 5.4.37

ObAMActionTypeMgd, 5.4.31

ObAMAdminRule, 5.4.17

ObAmAdminRuleMgd, 5.4.19

ObAMAuditRule, 5.4.40

ObAMAuditRule_EventTypeMgd, 5.4.42

ObAMAuditRuleMgd, 5.4.41

ObAMAuthenticationPlugin, 5.4.8

ObAMAuthenticationPluginMgd, 5.4.9

ObAMAuthenticationRule, 5.4.22

ObAmAuthenticationRuleMgd, 5.4.23

ObAMAuthenticationScheme, 5.4.5

ObAMAuthenticationScheme_ChallengeMethodMgd, 5.4.7

ObAMAuthenticationSchemeMgd, 5.4.6

ObAMAuthorizationExpr, 5.4.26

ObAMAuthorizationExprMgd, 5.4.27

ObAMAuthorizationRule, 5.4.24

ObAMAuthorizationRuleMgd, 5.4.25

ObAMAuthorizationScheme, 5.4.10

ObAMAuthorizationSchemeMgd, 5.4.11

ObAMDate, 5.4.43

ObAMDate_DaysOfWeekMgd, 5.4.35, 5.4.35, 5.4.36, 5.4.46

ObAMDate_MonthsMgd, 5.4.45

ObAMDuplicateActionPolicyMgd, 5.4.28

ObAMException, 5.5.7

ObAMHostIdentifier, 5.4.1

ObAMHostIdentifierMgd, 5.4.2

ObAMIdentity, 5.4.47

ObAMMasterAuditRule, 5.4.12

ObAMMasterAuditRuleMgd, 5.4.13

ObAMObjectWithActions, 5.4.32

ObAMParameter, 5.4.49

ObAMParameterMgd, 5.4.50

ObAMPolicy, 5.4.20

ObAMPolicyDomain, 5.4.15

ObAMPolicyDomainMgd, 5.4.16

ObAMPolicyMgd, 5.4.21

ObAMResource, 5.4.51

ObAMResourceType, 5.4.3

ObAMResourceTypeMgd, 5.4.4

ObAMTime, 5.4.53

ObAMTimeMgd, 5.4.53

ObAMTimingConditions, 5.4.33

ObAMTimingConditions_RelativeToMgd, 5.4.35

ObAMTimingConditionsMgd, 5.4.34

policy domain administrators, 5.4.17

policy domain objects, 5.4.14

prerequisite AccessGate configuration, 5.2.3

referring to an object elsewhere, 5.4.14.1

sample program, 5.5.1, 5.6

setIDFrom, 5.3.7

single-valued object members, 5.3.5

string names, 5.4.14.1

tools, 5.2.2

post events, 3.4.2

pre events, 3.4.2

preface, Preface

PresentationXML

and the Identity Event API, 3.3.3.2

Procedure

To Create an AccessGate Entry on the Access Server, 4.2.3.2

To find schema names for an attribute, 2.1.2.2

To generate a .NET WSDL client, 1.6.6

To install the Access Manager SDK on a Unix system, D.4

To install the Access Manager SDK on Windows, D.3

To Install the SDK on a UNIX Machine, 4.2.2.3

To Install the SDK on a Windows Machine, 4.2.2.2

To modify data for objects in arrays, 5.3.6.3

To run configureAccessGate on a UNIX Machine, 4.2.3.3

To run configureAccessGate.exe on a Windows Machine, 4.2.3.3

To Set Environment Variables on a UNIX Machine, 4.2.3.1

To Set Environment Variables on a Windows Machine, 4.2.3.1

To set the CLASSPATH, and compile and run the sample code

To set the obEnableCredentialCache parameter, 6.9.1

To set up client side processing, A.3.3

Process overview

Handling a resource request, 4.1.5

Sample program for Access Manager API, 4.6.5

provisioning, 3.1.1

R

read permission, 1.4.4

resource request

testing, 5.5.2

resources

allow or deny access, 5.4.29

defining, 5.4.51

matching a resource request to a policy, 5.4.49

protecting, 4.2.5

protecting custom resources, 5.1

resource type, 5.4.3

rules

master audit rule, 5.4.12

S

schema, Preface

schema names

finding, 2.1.2.2

for tickets using IdentityXML, 2.5.1.1

via IdentityXML, 2.5.1

Secure ID, 6.9

SecurID plug-in, 6.9.6

selection filter plug-in, 6.9.4

SHAREid

now named Oracle Identity Federation, Preface

Soap tags, 1.2.2

special characters, 1.2.6

T

Task overview

AccessGate deployment, 4.2

Cloning a custom AccessGate, 4.2.4.1

Configuring an AccessGate, 4.2.3

Implementing an IdentityXML Request, 1.1.1

Setting up the Access Manager SDK

Using WSDL to generate Java IdentityXML requests, 1.6.5

Using WSDL to generate .NET IdentityXML requests, 1.6.6

Working with the Identity System WSDL files, 1.6.5

third-party products, Preface

U

UDDI

about

user

authentication, 6

profile

identifying, 5.4.47

User Manager

example of using IdentityXML with, 1.2.5.1

getting data from, 1.4.2

IdentityXML functions for, 2.6

IdentityXML usage for, 2.1

sending information to programmatically, 1

setting data in, 1.4.3

testing if you can perform a function, 1.4.1

URL to access, 1.3

userservcenter, 1.2.4

users

allow or deny access, 5.4.24

create, 2.6.2.4

deactivate a user, 2.6.2.6

modify a user, 2.6.2.2

permission to create, 2.6.1.5, 2.6.1.10

permission to delete, 2.6.1.6, 2.6.1.11

permission to modify, 2.6.1.3, 2.6.1.9, 2.6.1.12, 2.6.2.3

permission to modify via a workflow, 2.6.1.4

permission to request modification of a user, 2.6.1.13

permission to view, 2.6.1.1, 2.6.1.7

permission to view a user attribute, 2.6.1.8

permission to view an attribute, 2.6.1.2

proxy users, 1.4.4.2

reactivate a user, 2.6.2.9

read permission, 1.4.4

search deactivated user, 2.6.2.8

self registration, 2.8.2.5

self-registration, 2.6.2.5

view a user, 2.6.2.1

view deactivated user, 2.6.2.7

view permission, 1.4.4

write permission, 1.4.4

UTF-8, 3.1

V

validate password, 6.9

validate password plug-in, 6.9.2

view permission, 1.4.4

W

Web applications

protecting, 4.2.5

Web Services Description Language

see WSDL

WebGates

X

XML