Contents

List of Examples

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

1 Introducing the Oracle Role Manager Integration Library

• 1.1 About the Oracle Role Manager Integration Library
• 1.2 Architecture

2 Installing the Oracle Role Manager Integration Library

• 2.1 Verifying Requirements
• 2.2 Before You Start
• 2.3 Overview of Installation and Deployment steps
• 2.4 Obtaining the Role Manager Integration Library Software
• 2.5 Distributing the Integration Library Software
• 2.6 The Integration Library Files and Directories
• 2.7 Determining the Release Number of the Integration Library

3 Configuring Oracle Role Manager

• 3.1 Deploying the Integration Library Configuration
• 3.2 Creating the oimSystem System Identity
• 3.3 Loading the oimSystem System Identity Relationship Data
• 3.4 Resetting the Password for the oimSystem System Identity
• 3.5 Configuring the Oracle Identity Manager Home Directory
• 3.6 Configuring Signed Messages (Encryption)
  • 3.6.1 Enabling Encryption
• 3.7 Modifying Component Configuration
  • 3.7.1 Obtaining the Standard Configuration Files
  • 3.7.2 Modifying the Batch Resolution Timer
    • 3.7.2.1 Batch Resolution Timer Configuration Settings
  • 3.7.3 Modifying the Role Membership Update Timer
    • 3.7.3.1 Role Membership Update Timer Configuration Settings
  • 3.7.4 Modifying the Incoming Event Manager
    • 3.7.4.1 Incoming Event Manager Settings
  • 3.7.5 Modifying the Outgoing Event Manager
    • 3.7.5.1 Outgoing Event Manager Settings
  • 3.7.6 Modifying the Business Logic for User Reconciliation
    • 3.7.6.1 Business Logic Settings
  • 3.7.7 Packaging Configuration Modifications

4 Configuring Oracle Identity Manager

• 4.1 Before You Configure
• 4.2 Creating the System User and User Group for Role Manager (WebLogic)
• 4.3 Creating the System User and User Group for Role Manager (JBoss)
• 4.4 Importing the Prepared Configuration
  • 4.4.1 Importing the Base Configuration
  • 4.4.2 Importing the Sample Configuration for Role Approvals
• 4.5 Assigning the System User to a User Group
• 4.6 Configuring the IT Resource System Property

5 Configuring WebLogic Server

• 5.1 Before You Configure
• 5.2 Configuring the Oracle Role Manager Server
  • 5.2.1 Configuring the JMS Connection Factory
  • 5.2.2 Configuring the Foreign JNDI Providers
  • 5.2.3 Configuring the Security Credentials
  • 5.2.4 (Clustered Mode Only) Configuring the Subdeployment of the Connection Factory
  • 5.2.5 (Clustered Mode Only) Disabling Authentication on the Oracle Role Manager Node
• 5.3 Configuring the Oracle Identity Manager Server
  • 5.3.1 Modifying the Identity Manager Startup Script
  • 5.3.2 Configuring the Classpath and Shared Libraries
  • 5.3.3 (Clustered Mode Only) Configuring JMS Queues and Connection Factories
  • 5.3.4 (Nonclustered Mode Only) Configuring JMS Queues and Connection Factories
  • 5.3.5 Configuring Foreign JMS Queues and Connection Factories
  • 5.3.6 Configuring Security Credentials
  • 5.3.7 (Clustered Mode Only) Adding the Integration Library System Properties
• 5.4 Deploying the Role Manager Integration Library Application

6 Configuring JBoss

• 6.1 Before You Configure
• 6.2 Configuring the Oracle Role Manager Server
• 6.3 Configuring the Oracle Identity Manager Server
  • 6.3.1 Modifying the Identity Manager Startup Command
• 6.4 Deploying the Role Manager Integration Library Application

7 Testing the Oracle Role Manager Integration Library Installation

• 7.1 Testing User Reconciliation
  • 7.1.1 Real-Time User Synchronization
  • 7.1.2 Scheduled Tasks for User Reconciliation
• 7.2 Testing Role and Role Membership Reconciliation
  • 7.2.1 User Provisioning through Role/User Group Membership
  • 7.2.2 User De-provisioning by Deleted or Inactivated Roles
• 7.3 Testing Approval Role Resolution
  • 7.3.1 Role Manager Setup
  • 7.3.2 Identity Manager Setup
  • 7.3.3 Performing the test

8 Troubleshooting

• 8.1 Log Files
• 8.2 Role Manager Application Server Console Errors
• 8.3 Identity Manager Application Server Console Errors

A Cron Expressions

Index