Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

What's New in Oracle Identity Manager Connector for Microsoft Exchange?

• Software Updates
  • Software Updates in Release 11.1.1.6.0
    • Support for Multiple Domains
    • Support for Multi-valued Attributes
    • Support for Minimum Privileges for Exchange Server 2010
    • Performance Improvements During Target Resource Reconciliation with Distribution Groups
    • Support for Reconciliation from a Particular Organization Unit
    • Support for Reconciliation from a Particular Mailbox Database
    • Resolved Issues in Release 11.1.1.6.0
  • Software Updates in Release 11.1.1.5.0
    • ICF Based Connector
    • Enhanced Performance
    • Support for Multiple Domains
    • Support for Addition of New Fields
    • Support for Transformation and Validation of Data
    • Support for Running Scripts
    • Support for Connection Pooling
• Documentation-Specific Updates
  • Documentation-Specific Updates in Release 11.1.1.6.0
  • Documentation-Specific Updates in Release 11.1.1.5.0

1 About the Connector

• 1.1 Certified Components
• 1.2 Usage Recommendation
• 1.3 Certified Languages
• 1.4 Connector Architecture
  • 1.4.1 Architecture of the Microsoft Exchange Connector
  • 1.4.2 Reconciliation and Provisioning of Mailboxes Across Multiple Domains
• 1.5 Features of the Connector
  • 1.5.1 Full and Incremental Reconciliation
  • 1.5.2 Limited Reconciliation
  • 1.5.3 Reconciliation of Deleted User Records
  • 1.5.4 Reconciliation of Lookup Definitions
  • 1.5.5 Support for Multiple Domains
  • 1.5.6 Transformation and Validation of Account Data
  • 1.5.7 Support for Running Custom PowerShell Scripts
• 1.6 Lookup Definitions Used During Connector Operations
  • 1.6.1 Lookup.Exchange.Configuration
  • 1.6.2 Lookup.Exchange.UM.Configuration
  • 1.6.3 Lookup Definitions for Attribute Mappings
  • 1.6.4 Lookup.Exchange.DistributionGroups
  • 1.6.5 Lookup.Exchange.MailboxDatabase
  • 1.6.6 Lookup.Exchange.RecipientType.Options
• 1.7 Target Resource Reconciliation
  • 1.7.1 Mailbox Fields for Target Resource Reconciliation
  • 1.7.2 Reconciliation Rule
    • 1.7.2.1 Reconciliation Rule for the Connector
    • 1.7.2.2 Viewing Reconciliation Rules
  • 1.7.3 Reconciliation Action Rules
    • 1.7.3.1 Reconciliation Action Rules for the Connector
    • 1.7.3.2 Viewing Reconciliation Action Rules
• 1.8 Provisioning
  • 1.8.1 Mailbox Provisioning Functions Supported by the Connector
  • 1.8.2 Mailbox Fields for Provisioning

2 Deploying the Connector

• 2.1 Preinstallation
  • 2.1.1 Preinstallation on the Target System
    • 2.1.1.1 Privileges for Exchange 2007 Service Account
    • 2.1.1.2 Privileges for Exchange 2010 Service Account
    • 2.1.1.3 Privileges for Exchange 2013 Service Account
    • 2.1.1.4 Privileges for Exchange 2016 Service Account
  • 2.1.2 Installing, Configuring, and Running the Connector Server
    • 2.1.2.1 Prerequisites for the Connector Server
    • 2.1.2.2 Installing the Connector Server
    • 2.1.2.3 Configuring the Connector Server
    • 2.1.2.4 Enabling Logging
    • 2.1.2.5 Configuring Log File Rotation
    • 2.1.2.6 Running the Connector Server
• 2.2 Installation
  • 2.2.1 Installing the Connector in Oracle Identity Manager
    • 2.2.1.1 Running the Connector Installer
    • 2.2.1.2 Configuring the IT Resource for the Target System
  • 2.2.2 Deploying the Connector Bundle on the Connector Server
    • 2.2.2.1 Copying and Extracting the Connector Bundle to the Connector Server
    • 2.2.2.2 Configuring the IT Resource for the Connector Server
• 2.3 Postinstallation
  • 2.3.1 Configuring Oracle Identity Manager 11.1.2 or Later
    • 2.3.1.1 Creating and Activating a Sandbox
    • 2.3.1.2 Creating a New UI Form
    • 2.3.1.3 Creating an Application Instance
    • 2.3.1.4 Publishing a Sandbox
    • 2.3.1.5 Harvesting Entitlements and Sync Catalog
    • 2.3.1.6 Updating an Existing Application Instance with a New Form
  • 2.3.2 Localizing Field Labels in UI Forms
  • 2.3.3 Clearing Content Related to Connector Resource Bundles from the Server Cache
  • 2.3.4 Linking the Exchange Resource Object with the AD User Resource Object
  • 2.3.5 Configuring Oracle Identity Manager for Request-Based Provisioning
    • 2.3.5.1 Importing Request Datasets Using Deployment Manager
    • 2.3.5.2 Copying Predefined Request Datasets
    • 2.3.5.3 Importing Request Datasets into MDS
    • 2.3.5.4 Enabling the Auto Save Form Feature
    • 2.3.5.5 Running the PurgeCache Utility
  • 2.3.6 Configuring SSL Between Oracle Identity Manager and Connector Server
    • 2.3.6.1 Installing Certificate Services on Windows Server 2003
    • 2.3.6.2 Installing Certificate Services for Windows Server 2008
    • 2.3.6.3 Exporting the Certificate
    • 2.3.6.4 Configuring the Connector Server for SSL
    • 2.3.6.5 Configuring Oracle Identity Manager for SSL
  • 2.3.7 Setting up the Lookup Definition for Connection Pooling
• 2.4 Upgrading the Connector
  • 2.4.1 Preupgrade Steps
  • 2.4.2 Upgrade Steps
  • 2.4.3 Postupgrade Steps
• 2.5 About Cloning the Connector

3 Using the Connector

• 3.1 Guidelines on Using the Connector
  • 3.1.1 Guidelines on Configuring Reconciliation
  • 3.1.2 Guidelines on Performing Provisioning Operations
• 3.2 Scheduled Tasks for Lookup Field Synchronization
• 3.3 Configuring Reconciliation
  • 3.3.1 Performing Full Reconciliation and Incremental Reconciliation
  • 3.3.2 Limited Reconciliation By Using Filters
  • 3.3.3 Reconciliation Scheduled Tasks
    • 3.3.3.1 Exchange Target Resource User Reconciliation
    • 3.3.3.2 Exchange Target Resource Delete User Reconciliation
    • 3.3.3.3 Exchange Leave Of Absence Update Task
• 3.4 Configuring Scheduled Tasks
• 3.5 Configuring Provisioning in Oracle Identity Manager Release 11.1.1
  • 3.5.1 Using the Connector for Provisioning
  • 3.5.2 Performing Provisioning Operations
    • 3.5.2.1 Direct Provisioning
    • 3.5.2.2 Request-Based Provisioning
      • 3.5.2.2.1 End User's Role in Request-Based Provisioning
      • 3.5.2.2.2 Approver's Role in Request-Based Provisioning
  • 3.5.3 Switching Between Request-Based Provisioning and Direct Provisioning
    • 3.5.3.1 Switching From Request-Based Provisioning to Direct Provisioning
    • 3.5.3.2 Switching From Direct Provisioning to Request-Based Provisioning
• 3.6 Configuring Provisioning in Oracle Identity Manager Release 11.1.2
• 3.7 Configuring Action Scripts
  • 3.7.1 About Configuring Action Scripts
  • 3.7.2 Running a Custom PowerShell Script

4 Extending the Functionality of the Connector

• 4.1 Adding New Fields for Target Resource Reconciliation
• 4.2 Adding New Multivalued Fields for Target Resource Reconciliation
  • 4.2.1 Adding New Multivalued Fields
  • 4.2.2 Adding Secondary Email Addresses as Multivalued Fields
  • 4.2.3 Defining Lookup Definition for Custom Multivalued Attributes in Oracle Identity Manager 11.1.2
• 4.3 Adding New Fields for Provisioning
• 4.4 Adding New Multivalued Fields for Provisioning
• 4.5 Configuring Validation of Data During Reconciliation and Provisioning
• 4.6 Configuring Transformation of Data During User Reconciliation

5 Troubleshooting

6 Frequently Asked Questions

• 6.1 FAQs Related to Exchange 2007 or Later
• 6.2 FAQs Related to Exchange 2010 or Later
• 6.3 FAQs Related to Exchange 2007

A Files and Directories On the Connector Installation Media

B Special Characters Supported for Alias Name

C Microsoft Exchange Fields Supported for Reconciliation and Provisioning