Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

 What's New in Oracle Identity Manager Connector for Database Application Tables?

• Software Updates
  • Software Updates in Release 11.1.1.6.0
    • Support for Using the Connector with a Target System Containing Autoincrement Columns
    • Additional Properties Related to Scripting Have Been Added
  • Software Updates in Release 11.1.1.5.0
• Documentation-Specific Updates
  • Documentation-Specific Updates in Release 11.1.1.6.0
  • Documentation-Specific Updates in Release 11.1.1.5.0

About the Database Application Tables Connector

• Introduction to the Database Application Tables Connector
• Understanding Target System Discovery in the DBAT Connector
• Certified Components for the DBAT Connector
• Usage Recommendation for the DBAT Connector
• About Certified Languages for the DBAT Connector
• About Supported Data Types
• DBAT Connector Architecture
• Flowchart of the DBAT Connector Deployment Process
• Understanding the DBAT Connector Features
  • Full and Incremental Reconciliation
  • Limited (Filtered) Reconciliation
  • Support for Both Target Resource and Trusted Source Reconciliation
  • Support for Reconciliation of Deleted User Records
  • Transformation and Validation of Account Data
  • Support for Adding User-Defined Fields for Reconciliation and Provisioning
  • Support for Configuring the Connector for Stored Procedures

Generating the Database Application Tables Connector

• Overview of Configuring the Groovy File
  • About the Groovy File
  • Configuring the DBATConfiguration.groovy File
  • Entries in the Predefined Sections
    • itResourceDefName
    • itResourceName
    • connectorDir
    • xmlFile
    • configFile
    • propertiesFile
    • version
    • trusted
    • provisionDatasetFile
    • modifyResourceDatasetFile
    • requestDMDatasetsFile
    • bundleJar
    • config
    • alias
    • prepopulate
  • Configuring the DBATConfiguration.groovy File for a Target System with an Autoincrement Primary Key
  • Determining the Value for the jdbcUrlTemplate Property
    • jdbcUrlTemplate Property for IBM DB2
    • jdbcUrlTemplate Property for Microsoft SQL Server
    • jdbcUrlTemplate Property for MySQL
    • jdbcUrlTemplate Property for Oracle Database
    • jdbcUrlTemplate Property for Oracle RAC
    • jdbcUrlTemplate Property for Sybase Adaptive Server Enterprise
• Discover the Schema and Generate the Connector
  • Running the DBAT Generator
  • Understanding the Generated Connector Package

Installing and Configuring the Database Application Tables Connector

• Prerequisites for Installing the DBAT Connector
  • About Creating the Target System User Account for Connector Operations
  • About Configuring IBM DB2 Running on IBM z/OS
  • About Configuring Oracle Database
• Overview of Installing DBAT Connector
  • Installing the Connector in Oracle Identity Manager
  • About Deploying the Connector Bundle in a Connector Server
    • Installing and Configuring the Connector Server
    • Running the Connector Server
    • Installing the Connector on the Connector Server
• Postinstallation
  • Configuring the IT Resource for the Target System
  • Configuring the Connector for Date Format
  • Configuring the Connector for a Target System with an Autoincrement Primary Key
  • About Configuring Oracle Identity Manager
    • Creating and Activating a Sandbox
    • Creating a New UI Form
    • Creating an Application Instance
    • Publishing a Sandbox
    • Harvesting Entitlements and Sync Catalog
  • Localizing Field Labels in UI Forms
  • Clearing Content Related to Connector Resource Bundles from the Server Cache
  • Managing Logging
    • Understanding Log Levels
    • Enabling Logging
  • Using Lookup Definitions
  • Setting Up Process Form Fields as Entitlements
  • Configuring Process Form Fields as Date Fields
  • About Configuring Secure Communication Between the Target System and Oracle Identity Manager
    • Configuring Secure Communication Between IBM DB2 and Oracle Identity Manager
    • Configuring Secure Communication Between Microsoft SQL Server and Oracle Identity Manager
    • Configuring Secure Communication Between MySQL and Oracle Identity Manager
    • Configuring Secure Communication Between Oracle Database and Oracle Identity Manager
      • Configuring Data Encryption and Integrity in Oracle Database
      • Configuring SSL Communication in Oracle Database
    • Configuring Secure Communication Between Sybase Adaptive Server Enterprise and Oracle Identity Manager
  • Configuring Secure Communication Between the Connector Server and Oracle Identity Manager
  • Configuring the Connector for Stored Procedures and Groovy Scripts
• Upgrading the DBAT Connector

Using the Database Application Tables Connector

• Guidelines to Apply While Using the DBAT Connector
• Overview of Lookup Definitions Used During Connector Operations
  • About Predefined Lookup Definitions
    • Lookup.Configuration.RESOURCE
    • Lookup.RESOURCE.UM.Configuration
    • Lookup.RESOURCE.UM.ReconAttrMap
    • Lookup.RESOURCE.UM.ProvAttrMap
    • Lookup.RESOURCE.UM.ReconAttrMap.Defaults
  • Understanding Custom Lookup Definitions Synchronized with the Target System
• Understanding Reconciliation Scheduled Jobs
  • Scheduled Job for Lookup Field Synchronization
  • About Attributes of the Scheduled Jobs
    • Scheduled Jobs for Reconciliation of User Records
    • Scheduled Jobs for Reconciliation of Deleted Users Records
    • Scheduled Jobs for Incremental Reconciliation
      • Configuring the Connector for Incremental Reconciliation
  • About Configuring Scheduled Jobs for DBAT Connector
    • Scheduled Jobs for Lookup Field Synchronization and Reconciliation
    • Configuring Scheduled Jobs
• About Configuring Reconciliation for DBAT Connector
  • Connector Objects Used During Target Resource Reconciliation and Provisioning
    • User Attributes for Target Resource Reconciliation and Provisioning
    • Supported Target Resource Reconciliation Functions
    • Understanding Reconciliation Rule for Target Resource Reconciliation
      • Reconciliation Rule for Target Resource Reconciliation
      • Viewing Reconciliation Rules for Target Resource Reconciliation
    • About Reconciliation Action Rules for Target Resource Reconciliation
      • Reconciliation Action Rules for Target Resource Reconciliation
      • Viewing Reconciliation Action Rules for Target Resource Reconciliation in the Design Console
    • Understanding Provisioning Functions
  • Overview of Connector Objects Used During Trusted Source Reconciliation
    • User Attributes for Trusted Source Reconciliation
    • Viewing Reconciliation Rule for Trusted Source Reconciliation
    • Viewing the Reconciliation Action Rules for Trusted Source Reconciliation
      • Action Rules for Trusted Source Reconciliation
      • View Reconciliation Action Rules for Trusted Source Reconciliation
  • About Performing Full Reconciliation and Incremental Reconciliation
  • About Performing Limited Reconciliation
    • Specifying a Value for the Filter Attribute
    • Specifying a Value for the customizedQuery Parameter
• Performing Provisioning Operations
• Configuring Action Scripts
  • About Action Scripts
  • Lookup Entries for Running Action Scripts
  • Running a CMD Script Before a Create Operation
• About Uninstalling the DBAT Connector

Extending the Functionality of the Database Application Tables Connector

• Adding Custom OIM User Fields for Trusted Source Reconciliation
• Adding Custom Fields for Target Resource Reconciliation
• Adding Custom Fields for Provisioning
• Configuring Transformation of Data During User Reconciliation
• Configuring Validation of Data During Reconciliation and Provisioning

Known Issues and Workarounds

• The Custom Schema Feature of IBM DB2 is not Supported

Sample Stored Procedures and Groovy Scripts

• Sample Groovy Script for a Create Provisioning Operation
• Sample Groovy Script for an Update Provisioning Operation
• Sample Groovy Script for a Delete Provisioning Operation
• Sample Groovy Script for an Add Child Data Provisioning Operation
• Sample Stored Procedure and Groovy Script for a Delete Child Data Provisioning Operation
• Sample Stored Procedure and Groovy Script for Lookup Field Synchronization
• Sample Stored Procedure and Groovy Script for Full or Filter Reconciliation
• Sample Stored Procedure and Groovy Script for Incremental Reconciliation
• Tables Used for Sample Groovy and Configuration Scripts

Performing Common Connector Operations

• Running Incremental Trusted Source Reconciliation
• Running Incremental Target Resource Reconciliation
• Configuring and Performing Lookup Field Synchronization
• Provisioning Child Data

Files and Directories in the Database Application Tables Connector

• Files and Directories in the DBAT Connector Installation Media
• Files and Directories in the Generated Connector Package