Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Documentation Updates
• Conventions

What's New in the Oracle Identity Manager Connector for PeopleSoft User Management?

• Software Updates
• Documentation-Specific Updates

1 About the Connector

• 1.1 Certified Components
• 1.2 Certified Languages
• 1.3 Connector Architecture
  • 1.3.1 Reconciliation
    • 1.3.1.1 Lookup Reconciliation
    • 1.3.1.2 Full Reconciliation
    • 1.3.1.3 Incremental Reconciliation
  • 1.3.2 Provisioning
  • 1.3.3 Deployment Options
• 1.4 Features of the Connector
  • 1.4.1 Full and Incremental Reconciliation
  • 1.4.2 Support for Standard PeopleSoft Messages
  • 1.4.3 Support for Resending Messages That Are Not Processed
  • 1.4.4 Target Authentication
  • 1.4.5 SoD Validation of Entitlement Provisioning
  • 1.4.6 Validation and Transformation of Account Data
  • 1.4.7 Connection Pooling
  • 1.4.8 Durable Entitlements
  • 1.4.9 Adding New ID Types
  • 1.4.10 Deleting User Accounts
  • 1.4.11 Specifying Accounts to Be Excluded from Reconciliation and Provisioning Operations
  • 1.4.12 Support for Multiple Versions of the Target System
• 1.5 Lookup Definitions Used During Connector Operations
  • 1.5.1 Lookup Definitions Synchronized with the Target System
  • 1.5.2 Preconfigured Lookup Definitions
    • 1.5.2.1 Lookup Definitions Used to Process USER_PROFILE Messages
    • 1.5.2.2 Lookup Definitions Used to Process DELETE_USER_PROFILE Messages
    • 1.5.2.3 Other Lookup Definitions
• 1.6 Connector Objects Used During Reconciliation
  • 1.6.1 User Attributes for Reconciliation
  • 1.6.2 Reconciliation Rules
    • 1.6.2.1 Overview of the Reconciliation Rule
    • 1.6.2.2 Viewing the Reconciliation Rules in the Design Console
  • 1.6.3 Reconciliation Action Rules
    • 1.6.3.1 Overview of the Reconciliation Action Rules
    • 1.6.3.2 Viewing the Reconciliation Action Rules in the Design Console
• 1.7 Connector Objects Used During Provisioning
  • 1.7.1 User Provisioning Functions
  • 1.7.2 User Attributes for Provisioning
• 1.8 Roadmap for Deploying and Using the Connector

2 Deploying the Connector

• 2.1 Preinstallation
  • 2.1.1 Preinstallation on Oracle Identity Manager
    • 2.1.1.1 Files and Directories on the Installation Media
    • 2.1.1.2 Determining the Release Number of the Connector
    • 2.1.1.3 Creating a Backup of the Existing Common.jar File
  • 2.1.2 Preinstallation on the Target System
    • 2.1.2.1 Importing a Project from Application Designer
    • 2.1.2.2 Creating a Target System User Account for Connector Operations
• 2.2 Installation
  • 2.2.1 Installation on Oracle Identity Manager
    • 2.2.1.1 Running the Connector Installer
    • 2.2.1.2 Copying the Connector Files and External Code Files
    • 2.2.1.3 Configuring the IT Resource
    • 2.2.1.4 Configuring the Connector to Support Multiple Versions of the Target System
    • 2.2.1.5 Deploying the PeopleSoft Listener
    • 2.2.1.6 Removing the PeopleSoft Listener
  • 2.2.2 Installation on the Target System
    • 2.2.2.1 Configuring the Target System for Lookup Reconciliation
    • 2.2.2.2 Configuring the Target System for Full Reconciliation
    • 2.2.2.3 Configuring the Target System for Incremental Reconciliation
    • 2.2.2.4 Configuring the Target System for Provisioning
    • 2.2.2.5 Configuring Oracle Identity Manager Server as a Non-Proxy Host on PeopleSoft Server
• 2.3 Postinstallation
  • 2.3.1 Postinstallation on Oracle Identity Manager
    • 2.3.1.1 Clearing Content Related to Connector Resource Bundles from the Server Cache
    • 2.3.1.2 Enabling Logging
    • 2.3.1.3 Setting Up the Lookup.PSFT.UM.ExclusionList Lookup Definition
    • 2.3.1.4 Setting Up the Lookup.PSFT.UM.UserProfile.UserStatus Lookup Definition
    • 2.3.1.5 Setting Up the Lookup.PSFT.Configuration Lookup Definition
    • 2.3.1.6 Configuring SSL
    • 2.3.1.7 Configuring SoD
    • 2.3.1.8 Enabling Request-Based Provisioning
  • 2.3.2 Postinstallation on the Target System

3 Using the Connector

• 3.1 Summary of Steps to Use the Connector
• 3.2 Configuring the Scheduled Tasks for Lookup Field Synchronization
• 3.3 Configuring Reconciliation
  • 3.3.1 Performing Lookup Reconciliation
  • 3.3.2 Performing Full Reconciliation
    • 3.3.2.1 Generating XML Files
    • 3.3.2.2 Importing XML Files into Oracle Identity Manager
  • 3.3.3 Performing Incremental Reconciliation
  • 3.3.4 Limited Reconciliation
• 3.4 Resending Messages That Are Not Received by the PeopleSoft Listener
• 3.5 Performing Provisioning Operations
  • 3.5.1 Direct Provisioning on Oracle Identity Manager
    • 3.5.1.1 Prerequisites
    • 3.5.1.2 Performing Direct Provisioning
  • 3.5.2 Request-Based Provisioning in Oracle Identity Manager
    • 3.5.2.1 End User's Role in Request-Based Provisioning
    • 3.5.2.2 Approver's Role in Request-Based Provisioning
• 3.6 Configuring Scheduled Tasks
• 3.7 Provisioning Operations Performed in an SoD-Enabled Environment
  • 3.7.1 Overview of the Provisioning Process in an SoD-Enabled Environment
  • 3.7.2 Direct Provisioning in an SoD-Enabled Environment
  • 3.7.3 Request-Based Provisioning in an SoD-Enabled Environment
    • 3.7.3.1 End-User's Role in Request-Based Provisioning
    • 3.7.3.2 Approver's Role in Request-Based Provisioning
• 3.8 Switching Between Request-Based Provisioning and Direct Provisioning on Oracle Identity Manager Release 11.1.1

4 Extending the Functionality of the Connector

• 4.1 Adding New Attributes for Provisioning
• 4.2 Enabling Update on a New Attribute for Provisioning
• 4.3 Adding New Attributes for Reconciliation
• 4.4 Adding New ID Types for Provisioning
• 4.5 Enabling Update on a New ID Type for Provisioning
• 4.6 Adding New ID Type for Reconciliation
• 4.7 Configuring Validation of Data During Reconciliation
• 4.8 Configuring Transformation of Data During Reconciliation
• 4.9 Configuring Validation of Data During Provisioning
• 4.10 Modifying Field Lengths on the Process Form
• 4.11 Configuring the Connector for Multiple Installations of the Target System
• 4.12 Enabling the Dependent Lookup Fields Feature
  • 4.12.1 Updating the UD_PSFT_BAS Form
  • 4.12.2 Updating the UD_PS_EMAIL Form
  • 4.12.3 Updating the UD_PSROLES Form

5 Testing and Troubleshooting

• 5.1 Testing Reconciliation
• 5.2 Testing Provisioning
• 5.3 Troubleshooting

6 Known Issues

A Determining the Root Audit Action Details

B Setting Up SSL on Oracle WebLogic Server

Index