Table of Contents

• List of Figures
• List of Tables
• Title and Copyright Information
• Preface
  • Audience
  • Documentation Accessibility
  • Related Documents
  • Documentation Updates
  • Conventions
• What's New in Oracle Identity Manager Connector for Microsoft Active Directory Password Synchronization?
  • Software Updates
    • Software Updates in Release 9.1.1.5
      • Support for New Version of the Connector
      • Support for New Oracle Identity Manager Release
    • Software Updates in Release 9.1.1.4
      • Support for Customizing the Location of OU
      • Resolved Issues
    • Software Updates in Release 9.1.1
      • Architecture of the Connector Has Been Modified
      • No Dependency on the Microsoft Active Directory User Management Connector
      • Support for Password Propagation through SPML Web Service
      • Support for Storing Configuration Parameters in the Registry
      • Support for Retrying Password Propagation when Oracle Identity Manager is not Available
      • No Requirement for Creating an Attribute in Microsoft Active Directory to Track Password Changes
      • No Requirement for Reinstalling the Connector if the Account Used by the Connector for Logging in to Oracle Identity Manager is Changed
      • Resolved Issues
      • Additions to the List of Known Issues
    • Software Updates in Release 9.1.0.1
      • Single Installer for Both 32-Bit and 64-Bit Microsoft Windows
    • Software Updates in Release 9.1.0
      • Support for 32-Bit and 64-Bit Microsoft Windows
      • Oracle Identity Manager Flag Field for Tracking Password Changes Is Automatically Created
      • Support for Signature-Based Authentication
  • Documentation-Specific Updates
    • Documentation-Specific Updates in Release 9.1.1.5
    • Documentation-Specific Updates in Release 9.1.1.4
    • Documentation-Specific Updates in Release 9.1.0.1
• 1 About the Connector
  • Connectors for Microsoft Active Directory
  • Functionality of the Microsoft Active Directory User Management and Password Synchronization Connectors
  • Certified Components
  • Guidelines on Using the Connector
  • Connector Architecture
    • Password Synchronization Process
    • Processes Associated With Events for SPML Requests
      • First SPML Request Rejected
      • First SPML Request Accepted
        • Second SPML Request Rejected
        • Second SPML Request Accepted
        • Oracle Identity Manager Is Not Available
      • Oracle Identity Manager Is Not Available
    • Password Synchronization Connector in a Multi-Domain Controller Environment
  • Roadmap for Deploying and Using the Connector
• 2 Deploying the Connector
  • Preinstallation
    • Deploying the SPML-DSML Service
    • Setting up the SPML-DSML.ear for Password Synchronization
    • Testing the SPML Web Service and SPML-DSML Service
    • Determining the Release Number of the Connector
    • Configuring the Connector for Oracle Identity Governance 12c (12.2.1.4.0) or 14c (14.1.2.1.0)
  • Installation
    • Installing the Connector
      • Installation Procedure
      • Microsoft Active Directory Configuration Parameters
      • Oracle Identity Manager Configuration Parameters
      • Ensuring that the Connector is Ready for Propagating Passwords
    • Reconfiguring the Connector
  • Postinstallation
    • Enabling and Disabling Logging
      • Log Files
      • Enabling or Disabling Logging
    • Configuring the IT Resource for the Target System
    • Specifying a Value for the Allow Password Provisioning Parameter
    • Enabling the Strong Password Authentication (Password Complexity) Feature of Microsoft Active Directory
    • Configuring SSL
      • Configuring SSL on IBM WebSphere Application Server
        • Exporting the Certificate
        • Importing the Certificate
        • Additional Configuration Steps
      • Configuring SSL on JBoss Application Server
        • Generating Keys
        • Signing the Certificate
        • Exporting the Certificate
        • Importing the Certificate
        • Configuring the server.xml File
      • Configuring SSL on Oracle Application Server
        • Enabling SSL for HTTP Communication to Oracle HTTP Server
        • Exporting the Certificate
        • Importing the Certificate
      • Configuring SSL on Oracle WebLogic Server
        • Generating Keys
        • Signing the Certificate
        • Exporting the Certificate
        • Configuring Custom Identity Keystore in Oracle WebLogic Server
        • Importing the Certificate
    • Excluding Users for Password Synchronization
• 3 Removing the Connector
  • Removing an Existing Installation of Release 9.1.0.1
  • Removing an Existing Installation of Release 9.1.1.x
  • Uninstalling Release 9.1.1.5.x of the Connector
• 4 Troubleshooting the Connector
• 5 Known Issues and Workarounds
  • The oimpwdsync.log File is Retained with Reinstallation or Reconfiguration of Password Synchronization Connector
  • Issue with ASCII Characters in User Names
  • Microsoft Active Directory Password Synchronization Connector Creates a Dummy User During Installation
• A PrepAD.ldif