Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

What’s New in Oracle Identity Manager Connector for CA ACF2?

• Software Updates
• Documentation-Specific Updates

1 About the Connector

• Introduction to the Connector
• Certified Components
• Certified Languages
• Connector Architecture
  • Connector Components
  • Connector Operations
    • Full Reconciliation Process
    • Incremental Reconciliation Process
    • Provisioning Process
• Use Cases Supported by the CA ACF2 Connector
• Features of the Connector
  • Target Resource Reconciliation
  • Full and Incremental Reconciliation
  • Limited (Filtered) Reconciliation
  • Encrypted Communication Between the Target System and Oracle Identity Manager
  • High Availability
• Connector Objects Used During Reconciliation and Provisioning
  • Supported Functions for Reconciliation
  • Supported Functions for Provisioning
  • User Attributes for Target Resource Reconciliation and Provisioning
    • Resource Rule Attributes for Target Resource Provisioning
    • Access Rule Attributes for Target Resource Provisioning
    • Privilege Attribute for Target Resource Reconciliation and Provisioning
  • Reconciliation Rule
  • Reconciliation Action Rules
  • Lookup Definitions Used for Provisioning and Reconciliation

2 Deploying the Agents of the CA ACF2 Connector on the Target System

• Deployment Requirements
• Installing the Mainframe Agents
• Configuring the Mainframe Agents
  • Configuring the Provisioning Agent
  • Configuring the Reconciliation Agent
• Activating and Deactivating Reconciliation Exits
  • Activating Reconciliation Exits
  • Deactivating Reconciliation Exits
• Operator Interface for Mainframe Agents
  • Provisioning Agent Commands
  • About Reconciliation Agent Commands
• Uninstalling the Mainframe Agents

3 Installing and Configuring the LDAP Gateway

• System Requirements
• LDAP Gateway Concepts
  • About Encrypting Data
  • About Caching Layer
  • About Scheduled Recon Utility
  • About Parsing Grammar Protocol 1.0
• Files and Directories that Comprise the LDAP Gateway
• Installing the LDAP Gateway
• Configuring the LDAP Gateway
  • Creating a Connector Configuration
  • Editing the System Administrator Credentials for Target
  • Configuring the LDAP Gateway with Multiple Connectors
  • Overriding the System Configuration
  • Configuring the Adapter
• Configuring Windows Service
  • Installing and Configuring the Windows Service for the LDAP Gateway
  • Uninstalling the Windows Service for the LDAP Gateway
  • Configuring Memory Pool Settings
• Starting the LDAP Gateway

4 Connector Deployment on Oracle Identity Manager

• Files and Directories in the CA_ACF2_Connector.zip
• Running the Connector Installer
• Configuring the IT Resource
• Configuring Oracle Identity Manager
  • Creating and Activating a Sandbox
  • Creating a New UI Form
  • Creating an Application Instance
  • Publishing a Sandbox
  • Updating an Existing Application Instance with a New Form
• Enabling Logging

5 Using the Connector

• Guidelines on Using the Connector
• Performing Full Reconciliation
• Performing Filtered (Limited) Reconciliation
• Reconciling Internal LDAP Users to Oracle Identity Manager
• Reconciling Deleted Users to Oracle Identity Manager
• Configuring Resource and Access Rule PrePopulation Scheduled Tasks
• Reconciling Internal LDAP Users to Oracle Identity Manager
• Uninstalling the Connector

6 Extending the Functionality of the Connector

• Adding New Attributes for Target Resource Reconciliation
  • Adding Custom Fields for Full Reconciliation
  • Adding Custom Fields to Oracle Identity Manager
• Adding New Attributes for Provisioning
• Removing Attributes Mapped for Target Resource Reconciliation and Provisioning
• Configuring the Connector for Provisioning to Multiple Installations of the Target System

7 Troubleshooting

A Files and Directories in the ACF2 Connector Installation Media

B Reconciliation Agent (Voyager) Messages

C Provisioning Agent (Pioneer) Messages

D Authorized Libraries

E Relationship between the Pioneer (DDs), Voyager (DDs) and the INDDs