Contents

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Documentation Updates
• Conventions

What's New in Oracle Identity Manager Connector for Microsoft Active Directory?

• Software Updates
• Documentation-Specific Updates

1 About the Connector

• 1.1 Reconciliation Module
  • 1.1.1 Lookup Fields Reconciliation
  • 1.1.2 Group Reconciliation
  • 1.1.3 User Reconciliation
• 1.2 Provisioning Module
  • 1.2.1 Organization Provisioning
  • 1.2.2 Group Provisioning
  • 1.2.3 User Provisioning
• 1.3 Supported Functionality
• 1.4 Multilanguage Support
• 1.5 Files and Directories on the Installation Media
• 1.6 Determining the Release Number of the Connector

2 Deploying the Connector

• 2.1 Verifying Deployment Requirements
• 2.2 Configuring the Target System
  • 2.2.1 Ensuring That the Parent Organization Exists in Microsoft Active Directory
  • 2.2.2 Enabling or Disabling Password Policies on Microsoft Active Directory
• 2.3 Copying the Connector Files and External Code Files
• 2.4 Configuring the Oracle Identity Manager Server
  • 2.4.1 Changing to the Required Input Locale
  • 2.4.2 Clearing Content Related to Connector Resource Bundles from the Server Cache
  • 2.4.3 Enabling Logging
• 2.5 Importing the Connector XML Files
  • 2.5.1 Defining IT Resources
• 2.6 Configuring SSL
  • 2.6.1 Installing Certificate Services
  • 2.6.2 Enabling LDAPS
  • 2.6.3 Setting Up the Microsoft Active Directory Certificate As a Trusted Certificate
    • 2.6.3.1 Exporting the Microsoft Active Directory Certificate
    • 2.6.3.2 Importing the Microsoft Active Directory Certificate

3 Configuring the Connector

• 3.1 Configuring Reconciliation
  • 3.1.1 Configuring Trusted Source Reconciliation
  • 3.1.2 Partial Reconciliation
    • 3.1.2.1 CustomizedReconQuery Attribute
    • 3.1.2.2 CustomizedGroupReconQuery Attribute
  • 3.1.3 Batched Reconciliation
  • 3.1.4 Configuring the Reconciliation Scheduled Tasks
    • 3.1.4.1 Specifying Values for the Scheduled Task Attributes
  • 3.1.5 Enabling Reconciliation in Oracle Identity Manager Release 9.0.1
  • 3.1.6 Adding Custom Attributes for Reconciliation
• 3.2 Configuring Provisioning
  • 3.2.1 Adding Custom Attributes for Provisioning
• 3.3 Adding a Custom Object Class for Provisioning
• 3.4 Adding New Multivalued Fields for Target Resource Reconciliation
• 3.5 Adding New Multivalued Fields for Provisioning
• 3.6 Configuring the Connector for Oracle Identity Manager Release 9.0.1.3
• 3.7 Configuring the Connector for Multiple Installations of the Target System
• 3.8 Configuring the Connector and Password Synchronization Module
  • 3.8.1 Creating a Custom Attribute in Oracle Identity Manager
  • 3.8.2 Specifying Values for IT Resource Parameters
  • 3.8.3 Sequence of Events That Occur During a Password Change
  • 3.8.4 Configuring the xlconfig.xml File for the Password Synchronization Module

4 Testing and Troubleshooting

• 4.1 Testing Provisioning
• 4.2 Troubleshooting

5 Known Issues

A Attribute Mappings Between Oracle Identity Manager and Microsoft Active Directory

B Attributes of the Reconciliation Scheduled Task

C Special Characters Supported for Passwords

D Code for a Sample Transformation Class

Index