Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Documentation Updates
• Conventions

What's New in the Oracle Identity Manager Connector for RSA Authentication Manager?

• Software Updates
• Documentation-Specific Updates

1 About the Connector

• 1.1 Certified Components
• 1.2 Certified Languages
• 1.3 Connector Architecture
• 1.4 Features of the Connector
  • 1.4.1 Support for Reconciliation and Provisioning of RSA Authentication Manager Accounts and Tokens
  • 1.4.2 Mapping Standard and Custom Attributes for Reconciliation and Provisioning
  • 1.4.3 Full and Incremental Reconciliation
  • 1.4.4 Batched Reconciliation
  • 1.4.5 Limited (Filtered) Reconciliation
  • 1.4.6 Enabling and Disabling Accounts
  • 1.4.7 Reconciliation of Deleted User Records
  • 1.4.8 SOAP-Based Communication with the Target System
  • 1.4.9 Specifying Accounts to Be Excluded from Reconciliation
  • 1.4.10 Transformation and Validation of Account Data
  • 1.4.11 Support for Setting a PIN and the Token Lost Attribute
• 1.5 Lookup Definitions Used During Connector Operations
  • 1.5.1 Lookup Definitions Synchronized with the Target System
    • 1.5.1.1 Lookup.RSA.AuthManager.Group
    • 1.5.1.2 Lookup.RSA.AuthManager.IdentitySource
    • 1.5.1.3 Lookup.RSA.AuthManager.SecurityDomain
    • 1.5.1.4 Lookup.RSA.AuthManager.AdminRole
    • 1.5.1.5 Lookup.RSA.AuthManager.LookupReconMapping
  • 1.5.2 Preconfigured Lookup Definitions
• 1.6 Connector Objects Used During Reconciliation
  • 1.6.1 User Attributes for Reconciliation
  • 1.6.2 Token Attributes for Reconciliation
  • 1.6.3 Reconciliation Rule for User Reconciliation
  • 1.6.4 Reconciliation Rule for Token Reconciliation
  • 1.6.5 Reconciliation Action Rules for Target Resource Reconciliation
• 1.7 Connector Objects Used During Provisioning
  • 1.7.1 Provisioning Functions
  • 1.7.2 User Attributes for Provisioning
  • 1.7.3 Token Attributes for Provisioning
• 1.8 Roadmap for Deploying and Using the Connector

2 Deploying the Connector

• 2.1 Preinstallation
  • 2.1.1 Files and Directories That Comprise the Connector
  • 2.1.2 Determining the Release Number of the Connector
  • 2.1.3 Creating a Backup of the Existing Common.jar File
  • 2.1.4 Removing RSA Authentication Manager JAR Files from the IBM WebSphere Application Server Home Directory
• 2.2 Installation
• 2.3 Postinstallation
  • 2.3.1 Changing to the Required Input Locale on the Oracle Identity Manager Host Computer
  • 2.3.2 Clearing Content Related to Connector Resource Bundles from the Server Cache
  • 2.3.3 Enabling Logging
    • 2.3.3.1 Enabling Logging on Oracle Identity Manager Release 9.1.0.x
    • 2.3.3.2 Enabling Logging on Oracle Identity Manager Release 11.1.1
  • 2.3.4 Modifying Dependent Lookup Query Properties for Lookup Fields on Microsoft SQL Server
  • 2.3.5 Addressing Prerequisites for Using the Java API of RSA Authentication Manager
    • 2.3.5.1 Exporting and Importing the Server Root Certificate
    • 2.3.5.2 Setting the Command Client User Name and Password
  • 2.3.6 Copying Target System Files on Oracle Identity Manager
  • 2.3.7 Setting Values for JAVA_OPTIONS Parameters
    • 2.3.7.1 Setting Values for JAVA_OPTIONS Parameters on IBM WebSphere Application Server
    • 2.3.7.2 Setting Values for JAVA_OPTIONS Parameters on JBoss Application Server
    • 2.3.7.3 Setting Values for JAVA_OPTIONS Parameters on Oracle Application Server
    • 2.3.7.4 Setting Values for JAVA_OPTIONS Parameters on Oracle WebLogic Server
  • 2.3.8 Creating a Target System Account for Connector Operations
  • 2.3.9 Mapping New Connection Properties
  • 2.3.10 Setting Up the Configuration Lookup Definition in Oracle Identity Manager
  • 2.3.11 Setting Up the Lookup.RSA.AuthManager.ExclusionList Lookup Definition
  • 2.3.12 Modifying the Process Form
  • 2.3.13 Configuring Connection Parameters
  • 2.3.14 Creating Authorization Policies for User Management
    • 2.3.14.1 Creating an Authorization Policy for Provisioning
    • 2.3.14.2 Creating an Authorization Policy for Reconciliation
  • 2.3.15 Configuring Request-Based Provisioning
    • 2.3.15.1 Copying Predefined Request Datasets
    • 2.3.15.2 Importing Request Datasets into MDS
    • 2.3.15.3 Enabling the Auto Save Form Feature
    • 2.3.15.4 Running the PurgeCache Utility

3 Using the Connector

• 3.1 Performing First-Time Reconciliation
• 3.2 Scheduled Task for Lookup Field Synchronization
• 3.3 Guidelines on Performing Reconciliation
• 3.4 Configuring Reconciliation
  • 3.4.1 Full Reconciliation
  • 3.4.2 Limited Reconciliation
  • 3.4.3 Batched Reconciliation
  • 3.4.4 Reconciliation Scheduled Tasks
    • 3.4.4.1 RSA Auth Manager User Recon
    • 3.4.4.2 RSA Auth Manager Token Recon
• 3.5 Configuring the Scheduled Tasks
• 3.6 Guidelines on Performing Provisioning
• 3.7 Assigning Software Tokens to Users
• 3.8 Performing Provisioning Operations
  • 3.8.1 Direct Provisioning
  • 3.8.2 Request-Based Provisioning
    • 3.8.2.1 End User's Role in Request-Based Provisioning
    • 3.8.2.2 Approver's Role in Request-Based Provisioning
• 3.9 Switching Between Request-Based Provisioning and Direct Provisioning on Oracle Identity Manager Release 11.1.1

4 Extending the Functionality of the Connector

• 4.1 Determining Whether an Attribute Is an Identity Management Services or Authentication Manager Attribute
• 4.2 Adding New User or Token Attributes for Reconciliation
• 4.3 Adding New User or Token Attributes for Provisioning
• 4.4 Configuring Validation of Data During Reconciliation and Provisioning
• 4.5 Configuring Transformation of Data During Reconciliation
• 4.6 Modifying Field Lengths on the Process Form
• 4.7 Guideline for Importing the Connector XML File
• 4.8 Configuring the Connector for Multiple Installations of the Target System

5 Known Issues and Limitations

• 5.1 Known Issues
• 5.2 Limitations

Index