Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Documentation Updates
• Conventions

What's New in Oracle Identity Manager Connector for Oracle E-Business User Management?

• Software Updates
• Documentation-Specific Updates

1 About the Connector

• 1.1 Certified Components
• 1.2 Certified Languages
• 1.3 Connector Architecture
• 1.4 Features of the Connector
  • 1.4.1 Oracle E-Business User Management Connectors
    • 1.4.1.1 User Management
    • 1.4.1.2 User Management with HR Foundation
    • 1.4.1.3 User Management with TCA Foundation
    • 1.4.1.4 Similarities Between the Three Connectors
    • 1.4.1.5 Differences Between the Connectors
  • 1.4.2 Management of Entitlements
  • 1.4.3 SoD Validation of Entitlement Provisioning
  • 1.4.4 Support for an SSO-Enabled Target System Installation
  • 1.4.5 Reconciliation of Effective-Dated Events
  • 1.4.6 Account Status Reconciliation and Provisioning
  • 1.4.7 Configurable Reconciliation Queries
  • 1.4.8 Account Password Management
  • 1.4.9 Support for Full and Incremental Reconciliation
  • 1.4.10 Support for Limited (Filtered) Reconciliation
  • 1.4.11 Support for Batched Reconciliation
  • 1.4.12 Connection Pooling
• 1.5 Reconciliation Process
  • 1.5.1 Reconciliation Queries
  • 1.5.2 Target System Columns Used in Reconciliation
  • 1.5.3 Reconciliation Rule
  • 1.5.4 Reconciliation Action Rules for Target Resource Reconciliation
• 1.6 Provisioning Process
  • 1.6.1 Request-Based Provisioning of Entitlements
  • 1.6.2 Attribute Mappings for Provisioning
  • 1.6.3 Provisioning Functions
• 1.7 Lookup Definitions Used During Connector Operations
  • 1.7.1 Lookup Definitions That Are Common to All Three Connectors
  • 1.7.2 Lookup Definitions That Are Specific to the User Management Connector
  • 1.7.3 Lookup Definitions That Are Specific to the User Management with HR Foundation Connector
  • 1.7.4 Lookup Definitions That Are Specific to the User Management with TCA Foundation Connector
• 1.8 Roadmap for Deploying and Using the Connector

2 Deploying the Connector

• 2.1 Preinstallation
  • 2.1.1 Preinstallation on Oracle Identity Manager
    • 2.1.1.1 Files and Directories on the Installation Media
    • 2.1.1.2 Determining the Release Number of the Connector
    • 2.1.1.3 Using External Code Files
  • 2.1.2 Preinstallation on the Target System
    • 2.1.2.1 Creating a Target System User Account for Connector Operations
    • 2.1.2.2 Compiling Custom Wrapper Packages
    • 2.1.2.3 Setting the Employee Number Creation Mode
• 2.2 Installation
  • 2.2.1 Running the Connector Installer
  • 2.2.2 Copying Files to the Oracle Identity Manager Host Computer
• 2.3 Postinstallation
  • 2.3.1 Configuring SoD
    • 2.3.1.1 Configuring the Oracle Applications Access Controls Governor to Act As the SoD Engine
    • 2.3.1.2 Specify a Value for the TopologyName IT Resource Parameter
    • 2.3.1.3 Disabling and Enabling SoD
  • 2.3.2 Configuring Secure Communication Between the Target System and Oracle Identity Manager
    • 2.3.2.1 Configuring Data Encryption and Integrity in Oracle Database
    • 2.3.2.2 Configuring SSL Communication in Oracle Database
  • 2.3.3 Postinstallation on Oracle Identity Manager
    • 2.3.3.1 Enabling Request-Based Provisioning of Entitlements
    • 2.3.3.2 Modifying Dependent Lookup Query Properties for Lookup Fields on Microsoft SQL Server
    • 2.3.3.3 Clearing Content Related to Connector Resource Bundles from the Server Cache
    • 2.3.3.4 Enabling Logging
    • 2.3.3.5 Determining Values for the JDBC URL and Connection Properties Parameters
    • 2.3.3.6 Configuring the IT Resource

3 Using the Connector

• 3.1 Setting Up Lookup Definitions in Oracle Identity Manager
  • 3.1.1 Setting Up the Lookup.EBS.UM.Configurations Lookup Definition
  • 3.1.2 Setting Up the Lookup.EBS.UMHRMS.Configurations Lookup Definition
  • 3.1.3 Setting Up the Lookup.EBS.UMTCA.Configurations Lookup Definition
• 3.2 Scheduled Task for Lookup Field Synchronization
• 3.3 Configuring Reconciliation
  • 3.3.1 Reconciliation Time Stamp
  • 3.3.2 Batched Reconciliation
  • 3.3.3 Configuring Limited Reconciliation
  • 3.3.4 Reconciliation Scheduled Tasks
• 3.4 Configuring Scheduled Tasks
• 3.5 Attributes for Which You Can Specify Values During New Resource and Entitlement Provisioning
  • 3.5.1 Resource Provisioning Using the User Management Connector
  • 3.5.2 Resource Provisioning Using the User Management with TCA Foundation Connector
  • 3.5.3 Resource Provisioning Using the User Management with HR Foundation Connector
  • 3.5.4 Entitlement Provisioning Using All Three Connectors
• 3.6 Provisioning Operations Performed in an SoD-Enabled Environment
  • 3.6.1 Overview of the Provisioning Process in an SoD-Enabled Environment
  • 3.6.2 Direct Provisioning in an SoD-Enabled Environment
  • 3.6.3 Request-Based Provisioning in an SoD-Enabled Environment

4 Extending the Functionality of the Connector

• 4.1 Guidelines on Extending the Functionality of the Connector
  • 4.1.1 Guidelines for Configuring Queries Used in Lookup Field Synchronization
  • 4.1.2 Guidelines for Configuring Queries Used in Reconciliation
  • 4.1.3 Guidelines Common to Configuring Both Types of Queries
  • 4.1.4 Guidelines on Modifying Predefined Attribute Mappings for Provisioning
• 4.2 Adding or Removing Attributes for Reconciliation
  • 4.2.1 Adding New Attributes for Reconciliation
  • 4.2.2 Removing Attributes Used for Reconciliation
• 4.3 Adding or Removing Attribute Mappings for Provisioning
  • 4.3.1 Adding New Attributes for Provisioning
  • 4.3.2 Removing Attributes for Provisioning
• 4.4 Adding Filter Parameters in a Reconciliation Query
• 4.5 Modifying Field Lengths on the Process Form
• 4.6 Configuring the Connector for Multiple Installations of the Target System

5 Testing and Troubleshooting

• 5.1 Running Test Cases
• 5.2 Troubleshooting

6 Known Issues

A Special Characters Supported by Oracle E-Business Suite 11.5.10

Index