What's New in the Oracle Identity Manager Connector for Database User Management?

This chapter provides an overview of the updates made to the software and documentation for release 11.1.1.8.0 of the Database User Management connector.

Note:

Release 11.1.1.8.0 of the connector comes after release 11.1.1.6.0. Release number 11.1.1.7.0 has not been used.

The updates discussed in this chapter are divided into the following categories:

Software Updates

The following sections discuss software updates:

Software Updates in Release 11.1.1.8.0

The following are issues resolved in release 11.1.1.8.0:

Bug Number Issue Resolution

16476930

16476913

16476900

16476884

16474781

The Entitlement, AccountName, and AccountID properties of fields on the process form for all target systems supported by this connector were not tagged.

The "Entitlement" property of child form attributes was not set to true. This resulted in attributes not being displayed in the catalog. This prevented users from adding such entitlements provided by the connector to the shopping cart.

The "AccountName" property of a process form field that represented the login ID of an account in the target system was not set to true. As a result of this, the Account Name column on the Accounts tab of the My Access page in the Self Service console for a user displayed the database numeric key, instead of the correct account name.

The "AccountID" property of a process form field that represented the immutable GUID of the account (if one exists) was not set to true. This prevented integrating Oracle Identity Manager with Oracle Identity Analytics.

This issue has been resolved. The Entitlement, AccountName, and AccountID properties of fields on the process form have been tagged. In other words, the values of the Entitlement, AccountName, and AccountID properties have been set to true.

16491431

The following issue was observed if you are using MySQL as the target system:

The Revoke Privilege provisioning task had a dependency on the Add Privilege provisioning task. As a result, if you granted multiple privileges to a user and one of the Add Privilege tasks did not complete successfully, then none of the assigned privileges were revoked. In addition, the Revoke Privilege task remained in the "Waiting" state.

This issue has been resolved.

15955807

The connector failed to update password in UpdateApiOp with MySQL database. In addition, no errors were reported.

This issue has been resolved. The connector updates the password in UpdateApiOp with MySQL database.

16085209

The following exception was encountered when you ran the connector test:

DBUM Connector Test Fails JRF Portability Layer exception

This issue has been resolved.

15919151

The connector failed in SearchApiOp with MySQL database running on UNIX computer. This failure was due to table names being case sensitive in UNIX MySQL.

This issue has been resolved.

15895008

Changing the password of a user account in Sybase resulted in the failure of a stored procedure.

This issue has been resolved.

Software Updates in Release 11.1.1.6.0

The following is a software update in release 11.1.1.6.0:

Support for MySQL, DB2, and Sybase Databases

From this release onward, the connector supports the following additional databases:

Software Updates in Release 11.1.1.5.0

The following are the software updates in release 11.1.1.5.0:

ICF Based Connector

The Identity Connector Framework (ICF) is a component that provides basic provisioning, reconciliation, and other functions that all Oracle Identity Manager and Oracle Waveset connectors require.

The Oracle Identity Manager Connector for Database User Management is an ICF-based connector. The ICF uses classpath isolation, which allows the Database User Management connector to co-exist with legacy versions of the connector.

For more information about the ICF, see Understanding the Identity Connector Framework in Oracle Fusion Middleware Developing and Customizing Applications for Oracle Identity Manager.

Connector Bundle

From this release onward, all connector operations such as provisioning, reconciliation, and search, are performed by running SQL scripts stored in connector bundle.

In the previous release, reconciliation scripts were present in the filesystem and changes were expected for converting from full to incremental reconciliation.

From this release onwards, the script execution is more intelligent. It dynamically switches to incremental mode after first execution. In addition, no changes are required on script for limited reconciliation. They can all be managed from scheduled jobs.

Removing script loading from filesystem also reduces file synchronization issues in cluster deployment scenarios.

See Connector Architecture for more information about the connector bundle.

Support for Connection Pooling

From this release onward, connection pooling is supported. Oracle Identity Manager connectors can use these connections to communicate with target systems. See Connection Pooling for more information about connection pooling.

Support for Running the Connector Remotely Using ICF Remote Connector Server

This release of the connector supports running the connector remotely using ICF remote connector server. See Installing the Connector on the Connector Server in the connector guide for more information.

Support for Multiple Instances and Multiple Versions of Target System

This release of the connector supports multiple instances and multiple versions of target system. You can deploy a single connector bundle on Oracle Identity Manager and create multiple IT resources for multiple instances and multiple versions of a target system. Then, you can use Oracle Identity Manager to manage accounts on these target systems.

See the following sections in the connector guide for more information:

Support for Running Pre/Post Action Scripts

From this release onward, you can run pre/post action scripts on a computer where the DBUM connector is deployed. These scripts can be of type SQL/StoredProc/Groovy. You can configure the scripts to run before or after the create, update, or delete an account provisioning operations. See the following sections for more information:

Support for Transformation and Validation

You can configure transformation of data, such as process form field data or any other object, that is brought into Oracle Identity Manager during reconciliation. In addition, you can configure validation of data that is brought into or sent from Oracle Identity Manager during reconciliation and provisioning. See the following sections for more information:

Support for Resource Exclusion Lists

From this release onward, you can specify a list of accounts that must be excluded from reconciliation and provisioning operations. Accounts whose user IDs you specify in the exclusion list are not affected by reconciliation and provisioning operations.

See the following sections in the connector guide for more information:

Improved Trusted Reconciliation

From this release onward, the connector artifacts are provided OOB for trusted reconciliation. The incremental reconciliation is more simplified as user does not need to change queries file anymore to switch to incremental mode.

Support for Incremental and Limited Reconciliation

The release 11.1.1.5.0 supports incremental and limited reconciliation for the MSSQL database. See Reconciliation from MSSQL for more information.

Support for JDBC-Based Database Customization

The connector supports JDBC Based Database Customization against your target system. You can configure the connector to support the JDBC-based database by performing the required instructions. See Configuring the Connector for a JDBC-Based Database for more information about required instructions.

Documentation-Specific Updates

The following sections discuss documentation-specific updates:

Documentation-Specific Updates in Release 11.1.1.8.0

The following is a documentation-specific update in revision "14" of release 11.1.1.8.0:

The description for reservedWordsList and unsupportedChars Code Keys have been modified in using-and-extending-connector-oracle-database.htm#GUID-3DF68A98-2CCE-4570-A4E0-DC227D757361__GUID-F4F10AC5-A530-4097-BA25-975DBBC98735.

The following is a documentation-specific update in revision "13" of release 11.1.1.8.0:

The "Oracle Identity Governance or Oracle Identity Manager" row of connector.htm#GUID-C2D995F1-879C-4568-A002-394B33262D5B__BABEJCJF has been updated to include support for Oracle Identity Governance 12c (12.2.1.4.0).

The following is a documentation-specific update in revision "12" of release 11.1.1.8.0:

Information specific to Oracle Identity Manager 11g Release 2 PS3 (11.1.2.3.0) has been modified in Usage Recommendation to include the phrase "any later BP in this release track".

The following are documentation-specific update in revision "11" of release 11.1.1.8.0:

The following are documentation-specific updates in revision "10" of release 11.1.1.8.0:

The following are documentation-specific updates in revision "9" of release 11.1.1.8.0:

The following are documentation-specific updates in revision "8" of release 11.1.1.8.0:

The following are documentation-specific updates in revision "7" of release 11.1.1.8.0:

The following are documentation-specific updates in revision "6" of release 11.1.1.8.0:

Documentation-Specific Updates in Release 11.1.1.6.0

The following is the documentation-specific update in revision "4" of release 11.1.1.6.0:

Documentation-Specific Updates in Release 11.1.1.5.0

There are no documentation-specific updates in this release.