Contents

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Documentation Updates
• Conventions

What's New in Oracle Identity Manager Connector for Webservices?

• Software Updates
  • Software Update in Release 11.1.1.5.0
• Documentation-Specific Updates
  • Documentation-Specific Update in Release 11.1.1.5.0

1 About the Connector

• 1.1 Certified Components
• 1.2 Certified Languages
• 1.3 Connector Architecture
• 1.4 Features of the Connector
  • 1.4.1 Support for Configuring the Connector for a New Target System
  • 1.4.2 Support for Securing the Connector
  • 1.4.3 Support for Multiple Instances and Multiple Versions of Target Systems
  • 1.4.4 Support for Both Target Resource and Trusted Source Reconciliation
  • 1.4.5 Support for Both Full and Incremental Reconciliation
  • 1.4.6 Support for Limited Reconciliation
  • 1.4.7 Support for Batched Reconciliation
  • 1.4.8 Validation of Data
  • 1.4.9 Transformation of Data
  • 1.4.10 Support for Resource Exclusion Lists
• 1.5 Lookup Definitions Used During Connector Operations
  • 1.5.1 Lookup Definitions Synchronized with the Target System
  • 1.5.2 Preconfigured Lookup Definitions
    • 1.5.2.1 Configuration Lookup Definitions
    • 1.5.2.2 Lookup.ACME.UM.Configuration
    • 1.5.2.3 Lookup.ACME.UM.Configuration.Trusted
    • 1.5.2.4 Lookup.ACME.UM.ProvAttrMap
    • 1.5.2.5 Lookup.ACME.UM.ReconAttrMap
    • 1.5.2.6 Lookup.ACME.UM.ReconAttrMap.Trusted
    • 1.5.2.7 Lookup.ACME.UM.ReconDefaults.Trusted
• 1.6 Connector Objects Used During Reconciliation
• 1.7 Connector Objects Used During Provisioning
  • 1.7.1 User Provisioning Functions
  • 1.7.2 User Attributes for Provisioning

2 Preinstallation Steps

• 2.1 Prerequisites
• 2.2 Building the Connector Bundle
• 2.3 Creating a SOA Composite for the Target Webservice
  • 2.3.1 Configuring the Partner Link
  • 2.3.2 Configuring the Create Operation
  • 2.3.3 Configuring the Create Operation for SPML
    • 2.3.3.1 Prerequisites for Configuring the Create Operation for SPML
    • 2.3.3.2 Configuring the Create Operation for a Sample CreateUser SPML Request
  • 2.3.4 Configuring the Delete Operation
  • 2.3.5 Configuring the Update Operation
    • 2.3.5.1 Prerequisites for Configuring the Update Operation
    • 2.3.5.2 Configuring the UpdateOperation in the SOA Composite
  • 2.3.6 Configuring the Enable and Disable Operations for Provisioning
  • 2.3.7 Configuring the Search Operation
    • 2.3.7.1 Configuring the Search Operation in SOA Composite
    • 2.3.7.2 Mapping Simple Child Table Values in the SOA Composite
  • 2.3.8 Configuring the Enable and Disable Operations for Reconciliation
  • 2.3.9 Configuring the Lookup Search Operation
  • 2.3.10 Configuring the Reset Password Operation
• 2.4 Handling Faults
  • 2.4.1 Understanding Fault Handling
  • 2.4.2 Configuring Fault Handling
  • 2.4.3 Handling Faults with Catch Blocks
• 2.5 Deploying and Testing the Webservice SOA Composite

3 Deploying the Connector

• 3.1 Installation
  • 3.1.1 Running the Connector Installer
  • 3.1.2 Configuring the IT Resource
• 3.2 Postinstallation
  • 3.2.1 Configuring Oracle Identity Manager 11.1.2 or Later
    • 3.2.1.1 Creating and Activating a Sandbox
    • 3.2.1.2 Creating a New UI Form
    • 3.2.1.3 Creating an Application Instance
    • 3.2.1.4 Publishing a Sandbox
    • 3.2.1.5 Harvesting Entitlements and Sync Catalog
    • 3.2.1.6 Updating an Existing Application Instance with a New Form
  • 3.2.2 Managing Logging
    • 3.2.2.1 Understanding Log Levels
    • 3.2.2.2 Enabling logging
  • 3.2.3 Setting up the Lookup Definition for Connection Pooling
  • 3.2.4 Changing to the Required Input Locale
  • 3.2.5 Clearing Content Related to Connector Resource Bundles from the Server Cache
  • 3.2.6 Disabling Child Tables
  • 3.2.7 Removing Bulk Attribute Update Task
  • 3.2.8 Localizing Field Labels in UI Forms

4 Using the Connector

• 4.1 Configuring Reconciliation
  • 4.1.1 Performing Full Reconciliation
  • 4.1.2 Performing Limited Reconciliation
  • 4.1.3 Performing Batched Reconciliation
  • 4.1.4 Configuring the Target System As a Trusted Source
• 4.2 Scheduled Tasks
  • 4.2.1 Scheduled Task for Lookup Field Synchronization
  • 4.2.2 Scheduled Tasks for Reconciliation
  • 4.2.3 Delete User Target Reconciliation
  • 4.2.4 Adding defaultBatchSize as a Configuration Property
  • 4.2.5 Configuring Scheduled Jobs
• 4.3 Configuring Provisioning in Oracle Identity Manager Release 11.1.1
  • 4.3.1 Configuring Direct Provisioning
  • 4.3.2 Configuring Request-Based Provisioning
    • 4.3.2.1 End User's Role in Request-Based Provisioning
    • 4.3.2.2 Approver's Role in Request-Based Provisioning
    • 4.3.2.3 Enabling the Auto Save Form Feature
    • 4.3.2.4 Running the PurgeCache Utility
  • 4.3.3 Switching Between Request-Based Provisioning and Direct Provisioning
    • 4.3.3.1 Switching From Request-Based Provisioning to Direct Provisioning
    • 4.3.3.2 Switching From Direct Provisioning to Request-Based Provisioning
• 4.4 Configuring Provisioning in Oracle Identity Manager Release 11.1.2
• 4.5 Uninstalling the Connector

5 Extending the Functionality of the Connector

• 5.1 Securing the Connector
  • 5.1.1 Handling Passwords
    • 5.1.1.1 Custom Webservice Policy and Guidelines for Passcode
    • 5.1.1.2 Configuring the Custom Webservice Policy
  • 5.1.2 Configuring Webservice Security Policy
  • 5.1.3 Passing Credentials Using CSF
  • 5.1.4 Passing Credentials Using Custom Headers
  • 5.1.5 Importing SSL Certificate for HTTPS-based Target Webservice
• 5.2 Adding Custom Attributes for Provisioning
  • 5.2.1 Adding Custom Attributes for Provisioning in Oracle Identity Manager
  • 5.2.2 Adding Custom Attributes for Provisioning in SOA Composite
  • 5.2.3 Adding Custom Attribute for Update Operation
• 5.3 Adding Custom Attributes for Reconciliation
  • 5.3.1 Adding Custom Attributes for Reconciliation in Oracle Identity Manager
  • 5.3.2 Adding Custom Attributes for Reconciliation in SOA Composite
  • 5.3.3 Adding Custom Attributes for Reconciling _UID_ Field
• 5.4 Adding Custom Child Forms
  • 5.4.1 Adding Custom Child Forms in Oracle Identity Manager
  • 5.4.2 Adding Custom Child Forms in SOA Composite
• 5.5 Adding Child Form Data
• 5.6 Mapping Timestamp Attribute
• 5.7 Configuring the Connector for Multiple Instances and Multiple Versions of the Target System
• 5.8 Configuring Validation of Data During Reconciliation and Provisioning
• 5.9 Configuring Transformation of Data During User Reconciliation
• 5.10 Configuring Resource Exclusion Lists
• 5.11 Reconciliation of Complex Child Forms With Multiple Attributes
  • 5.11.1 Mapping Child Tables with Attributes
  • 5.11.2 Configuring Reconciliation of Complex Child Tables

6 Troubleshooting

7 Known Issues and Workarounds

• 7.1 Request Datasets are Not Generated
• 7.2 Translations Missing for Some Connector Fields

A Sample WSDL for ACME Webservice

B Sample Outbound Policy

C Sample WSDL for Security Policy

D Sample XSDs

• D.1 Sample SPML XSD
• D.2 Sample DSML XSD