Skip Headers
Oracle® Identity Manager Connector Guide for RSA Authentication Manager
Release 9.1.0
E16663-02
Library
Product
Index
Next
Contents
List of Figures
List of Tables
Title and Copyright Information
Preface
Audience
Documentation Accessibility
Related Documents
Documentation Updates
Conventions
What's New in the Oracle Identity Manager Connector for RSA Authentication Manager?
Software Updates
Documentation-Specific Updates
1
About the Connector
1.1
Certified Components
1.2
Certified Languages
1.3
Connector Architecture
1.4
Features of the Connector
1.4.1
Support for Reconciliation and Provisioning of RSA Authentication Manager Accounts and Tokens
1.4.2
Mapping Standard and Custom Attributes for Reconciliation and Provisioning
1.4.3
Full and Incremental Reconciliation
1.4.4
Batched Reconciliation
1.4.5
Limited (Filtered) Reconciliation
1.4.6
Enabling and Disabling Accounts
1.4.7
Reconciliation of Deleted User Records
1.4.8
SOAP-Based Communication with the Target System
1.4.9
Specifying Accounts to Be Excluded from Reconciliation
1.4.10
Transformation and Validation of Account Data
1.4.11
Support for Setting a PIN and the Token Lost Attribute
1.5
Lookup Definitions Used During Connector Operations
1.5.1
Lookup Definitions Synchronized with the Target System
1.5.1.1
Lookup.RSA.AuthManager.Group
1.5.1.2
Lookup.RSA.AuthManager.IdentitySource
1.5.1.3
Lookup.RSA.AuthManager.SecurityDomain
1.5.1.4
Lookup.RSA.AuthManager.AdminRole
1.5.1.5
Lookup.RSA.AuthManager.LookupReconMapping
1.5.2
Preconfigured Lookup Definitions
1.6
Connector Objects Used During Reconciliation
1.6.1
User Attributes for Reconciliation
1.6.2
Token Attributes for Reconciliation
1.6.3
Reconciliation Rule for User Reconciliation
1.6.4
Reconciliation Rule for Token Reconciliation
1.6.5
Reconciliation Action Rules for Target Resource Reconciliation
1.7
Connector Objects Used During Provisioning
1.7.1
Provisioning Functions
1.7.2
User Attributes for Provisioning
1.7.3
Token Attributes for Provisioning
1.8
Roadmap for Deploying and Using the Connector
2
Deploying the Connector
2.1
Preinstallation
2.1.1
Files and Directories That Comprise the Connector
2.1.2
Determining the Release Number of the Connector
2.1.3
Creating a Backup of the Existing Common.jar File
2.1.4
Removing RSA Authentication Manager JAR Files from the IBM WebSphere Application Server Home Directory
2.2
Installation
2.3
Postinstallation
2.3.1
Changing to the Required Input Locale on the Oracle Identity Manager Host Computer
2.3.2
Clearing Content Related to Connector Resource Bundles from the Server Cache
2.3.3
Enabling Logging
2.3.3.1
Enabling Logging on Oracle Identity Manager Release 9.1.0.
x
2.3.3.2
Enabling Logging on Oracle Identity Manager Release 11.1.1
2.3.4
Modifying Dependent Lookup Query Properties for Lookup Fields on Microsoft SQL Server
2.3.5
Addressing Prerequisites for Using the Java API of RSA Authentication Manager
2.3.5.1
Exporting and Importing the Server Root Certificate
2.3.5.2
Setting the Command Client User Name and Password
2.3.6
Copying Target System Files on Oracle Identity Manager
2.3.7
Setting Values for JAVA_OPTIONS Parameters
2.3.7.1
Setting Values for JAVA_OPTIONS Parameters on IBM WebSphere Application Server
2.3.7.2
Setting Values for JAVA_OPTIONS Parameters on JBoss Application Server
2.3.7.3
Setting Values for JAVA_OPTIONS Parameters on Oracle Application Server
2.3.7.4
Setting Values for JAVA_OPTIONS Parameters on Oracle WebLogic Server
2.3.8
Creating a Target System Account for Connector Operations
2.3.9
Mapping New Connection Properties
2.3.10
Setting Up the Configuration Lookup Definition in Oracle Identity Manager
2.3.11
Setting Up the Lookup.RSA.AuthManager.ExclusionList Lookup Definition
2.3.12
Modifying the Process Form
2.3.13
Configuring Connection Parameters
2.3.14
Creating Authorization Policies for User Management
2.3.14.1
Creating an Authorization Policy for Provisioning
2.3.14.2
Creating an Authorization Policy for Reconciliation
2.3.15
Configuring Request-Based Provisioning
2.3.15.1
Copying Predefined Request Datasets
2.3.15.2
Importing Request Datasets into MDS
2.3.15.3
Enabling the Auto Save Form Feature
2.3.15.4
Running the PurgeCache Utility
3
Using the Connector
3.1
Performing First-Time Reconciliation
3.2
Scheduled Task for Lookup Field Synchronization
3.3
Guidelines on Performing Reconciliation
3.4
Configuring Reconciliation
3.4.1
Full Reconciliation
3.4.2
Limited Reconciliation
3.4.3
Batched Reconciliation
3.4.4
Reconciliation Scheduled Tasks
3.4.4.1
RSA Auth Manager User Recon
3.4.4.2
RSA Auth Manager Token Recon
3.5
Configuring the Scheduled Tasks
3.6
Guidelines on Performing Provisioning
3.7
Assigning Software Tokens to Users
3.8
Performing Provisioning Operations
3.8.1
Direct Provisioning
3.8.2
Request-Based Provisioning
3.8.2.1
End User's Role in Request-Based Provisioning
3.8.2.2
Approver's Role in Request-Based Provisioning
3.9
Switching Between Request-Based Provisioning and Direct Provisioning on Oracle Identity Manager Release 11.1.1
4
Extending the Functionality of the Connector
4.1
Determining Whether an Attribute Is an Identity Management Services or Authentication Manager Attribute
4.2
Adding New User or Token Attributes for Reconciliation
4.3
Adding New User or Token Attributes for Provisioning
4.4
Configuring Validation of Data During Reconciliation and Provisioning
4.5
Configuring Transformation of Data During Reconciliation
4.6
Modifying Field Lengths on the Process Form
4.7
Guideline for Importing the Connector XML File
4.8
Configuring the Connector for Multiple Installations of the Target System
5
Known Issues and Limitations
5.1
Known Issues
5.2
Limitations
Index