Contents

List of Examples

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Documentation Updates
• Conventions

1 Introduction to Oracle Identity Manager Auditing

• 1.1 Auditing Design Components
• 1.2 Profile Auditing
• 1.3 Standard and Customized Reports
• 1.4 Secondary Data Source Reporting

2 Audit Engine

• 2.1 Audit Engine
  • 2.1.1 Audit Levels
  • 2.1.2 Post-Processors
  • 2.1.3 Creating Custom Post-Processors
• 2.2 Tables Used for Storing Information About Auditors
• 2.3 Issuing Audit Messages

3 User Profile Auditing

• 3.1 Data Collected for Audits
  • 3.1.1 Capture and Archiving of User Profile Audit Data
  • 3.1.2 XML Representation of Snapshots and Changes to Snapshots
    • 3.1.2.1 XML Representation of User Profile Snapshots
    • 3.1.2.2 XML Representation of Changes to User Profile Snapshots
  • 3.1.3 Storage of Snapshots
  • 3.1.4 Trigger for Taking Snapshots
• 3.2 Post-Processor Used for User Profile Auditing
• 3.3 Tables Used for User Profile Auditing

4 Group Profile Auditing

• 4.1 Data Collected for Audits
  • 4.1.1 Capture and Archiving of Group Profile Audit Data
  • 4.1.2 XML Representation of Snapshots and Changes to Snapshots
    • 4.1.2.1 XML Representation of Group Profile Snapshots
    • 4.1.2.2 XML Representation of Changes to Group Profile Snapshots
  • 4.1.3 Storage of Snapshots
  • 4.1.4 Trigger for Taking Snapshots
• 4.2 Tables Used for Group Profile Auditing

5 Oracle Identity Manager Reporting

• 5.1 Reporting Features
  • 5.1.1 Data Layer
  • 5.1.2 XML Metadata
  • 5.1.3 API Layer
• 5.2 List of Reports
• 5.3 Exception Reports
  • 5.3.1 Using the UPA Form Data Upgrade Utility
• 5.4 How to Create a Report
  • 5.4.1 Writing the Stored Procedure
    • 5.4.1.1 Generic Parameters
    • 5.4.1.2 Specific Parameters
    • 5.4.1.3 Other Stored Procedure Notes
    • 5.4.1.4 Example of a Stored Procedure Signature
  • 5.4.2 Creating the Report XML Metadata
    • 5.4.2.1 StoredProcedure Element
    • 5.4.2.2 ReturnColumns tag
  • 5.4.3 Creating an REP Entry and Providing Access to the Report
    • 5.4.3.1 Creating a New Entry in the REP Table
    • 5.4.3.2 Loading XML Metadata
    • 5.4.3.3 Providing a User Group with Access to a Report
  • 5.4.4 Modifying Property Files for Translating Label Names, Report Names, and Report Descriptions
    • 5.4.4.1 Adding Properties for Translating Label Names
    • 5.4.4.2 Adding Properties for Translating Report Names and Descriptions
• 5.5 Working with Third-Party Reporting Tools
• 5.6 Date Ranges in Historical Reports
• 5.7 Limitations

6 Secondary Datasource Reporting

• 6.1 Writing User Profile Audits to a Secondary Datasource
• 6.2 Steps to Set Up a Secondary Data Source
• 6.3 Using JBoss Application Server with a Secondary Data Source
  • 6.3.1 Cluster Configuration for JBoss Application Server
• 6.4 Using Oracle WebLogic Server with a Secondary Data Source
  • 6.4.1 Cluster Configuration for Oracle WebLogic Server
• 6.5 Using IBM WebSphere Application Server with a Secondary Data Source
  • 6.5.1 Cluster Configuration for IBM WebSphere Application Server
• 6.6 Using Oracle Application Server with a Secondary Data Source
  • 6.6.1 Cluster Configuration for Oracle Application Server

A Sample Code for a Custom Post-Processor

Index