Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

What's New in Oracle Identity Manager Connector for BMC User Management?

• Software Updates
  • Software Updates in Release 11.1.1.6.0
    • Support for Performing Reconciliation and Provisioning Operations on Custom Forms
    • Support for Performing Lookup Field Synchronization Against Custom Forms
    • Issues Resolved in Release 11.1.1.6.0
  • Software Updates in Release 11.1.1.5.0
    • Identity Connector Framework Based Implementation
    • Support for New Versions of the Target System
    • Dependency on Native Libraries Eliminated
    • Support for Oracle Identity Manager 11g Release 2 BP04 or Later
    • Transformation and Validation of Account Data
• Documentation-Specific Updates
  • Documentation-Specific Updates in Release 11.1.1.6.0
  • Documentation-Specific Updates in Release 11.1.1.5.0

1 About the Connector

• 1.1 Certified Components
• 1.2 Usage Recommendation
• 1.3 Certified Languages
• 1.4 Connector Architecture
• 1.5 Features of the Connector
  • 1.5.1 Support for Both Target Resource and Trusted Source Reconciliation
  • 1.5.2 Full and Incremental Reconciliation
  • 1.5.3 Limited Reconciliation
  • 1.5.4 Batched Reconciliation
  • 1.5.5 Reconciliation of Deleted User Records
  • 1.5.6 Transformation and Validation of Account Data
  • 1.5.7 Support for Connector Server
  • 1.5.8 Connection Pooling
• 1.6 Lookup Definitions Used During Reconciliation and Provisioning
  • 1.6.1 Lookup Definitions Synchronized with the Target System
  • 1.6.2 Preconfigured Lookup Definitions
    • 1.6.2.1 Lookup.BMC.Configuration
    • 1.6.2.2 Lookup.BMC.Configuration.Trusted
    • 1.6.2.3 Lookup.BMC.UM.Configuration
    • 1.6.2.4 Lookup.BMC.UM.Configuration.Trusted
    • 1.6.2.5 Lookup.BMC.UM.ProvAttrMap
    • 1.6.2.6 Lookup.BMC.UM.ReconAttrMap
    • 1.6.2.7 Lookup.BMC.UM.ReconAttrMap.Trusted
    • 1.6.2.8 Lookup.BMC.UM.ReconDefaults.Trusted
    • 1.6.2.9 Lookup.BMC.ARLicenseType
    • 1.6.2.10 Lookup.BMC.ClientType
    • 1.6.2.11 Lookup.BMC.SupportStaff
    • 1.6.2.12 Lookup.BMC.VIP
    • 1.6.2.13 Lookup.BMC.ClientSensitivity
    • 1.6.2.14 Lookup.BMC.ProfileStatus
    • 1.6.2.15 Lookup.BMC.HourlyRate
• 1.7 Connector Objects Used During Target Resource Reconciliation
  • 1.7.1 User Fields for Target Resource Reconciliation
  • 1.7.2 Reconciliation Rule for Target Resource Reconciliation
    • 1.7.2.1 Target Resource Reconciliation Rule
    • 1.7.2.2 Viewing Target Resource Reconciliation Rules
  • 1.7.3 Reconciliation Action Rules for Target Resource Reconciliation
    • 1.7.3.1 Target Resource Reconciliation Action Rules
    • 1.7.3.2 Viewing Target Resource Reconciliation Action Rules
• 1.8 Connector Objects Used During Provisioning
  • 1.8.1 Provisioning Functions
  • 1.8.2 User Fields for Provisioning
• 1.9 Connector Objects Used During Trusted Source Reconciliation
  • 1.9.1 User Fields for Trusted Source Reconciliation
  • 1.9.2 Reconciliation Rule for Trusted Source Reconciliation
    • 1.9.2.1 Trusted Source Reconciliation Rule
    • 1.9.2.2 Viewing Trusted Source Reconciliation Rule
  • 1.9.3 Reconciliation Action Rules for Trusted Source Reconciliation
    • 1.9.3.1 Trusted Source Reconciliation Action Rules
    • 1.9.3.2 Viewing Trusted Source Reconciliation Action Rules

2 Deploying the Connector

• 2.1 Preinstallation
  • 2.1.1 Copying the External Code Files
  • 2.1.2 Creating a Target System User Account for Connector Operations
  • 2.1.3 Understanding and Configuring Encryption Security
    • 2.1.3.1 Understanding the Encryption Security Options on the Encryption Tab
    • 2.1.3.2 Understanding the Encryption Options in the New Encryption Settings Section
      • 2.1.3.2.1 Security Policy
      • 2.1.3.2.2 Data Key Details
      • 2.1.3.2.3 Public Key Details
    • 2.1.3.3 Configuring Encryption
• 2.2 Installation
  • 2.2.1 Installing the Connector in Oracle Identity Manager
    • 2.2.1.1 Running the Connector Installer
    • 2.2.1.2 Configuring the IT Resource for the Target System
  • 2.2.2 Deploying the Connector in a Connector Server
    • 2.2.2.1 Installing and Configuring the Connector Server
    • 2.2.2.2 Running the Connector Server
    • 2.2.2.3 Installing the Connector on the Connector Server
• 2.3 Postinstallation
  • 2.3.1 Configuring Oracle Identity Manager 11.1.2 or Later
    • 2.3.1.1 Creating and Activating a Sandbox
    • 2.3.1.2 Creating a New UI Form
    • 2.3.1.3 Creating an Application Instance
    • 2.3.1.4 Publishing a Sandbox
    • 2.3.1.5 Harvesting Entitlements and Sync Catalog
    • 2.3.1.6 Configuring the Password Form Field
  • 2.3.2 Clearing Content Related to Connector Resource Bundles from the Server Cache
  • 2.3.3 Managing Logging
    • 2.3.3.1 Understanding Log Levels
    • 2.3.3.2 Enabling Logging
  • 2.3.4 Setting up the Lookup Definition for Connection Pooling
  • 2.3.5 Configuring Oracle Identity Manager for Request-Based Provisioning
    • 2.3.5.1 Importing Request Datasets
      • 2.3.5.1.1 Importing Request Datasets into MDS
      • 2.3.5.1.2 Importing Request Datasets Using Deployment Manager
    • 2.3.5.2 Enabling the Auto Save Form Feature
    • 2.3.5.3 Running the PurgeCache Utility
  • 2.3.6 Localizing Field Labels in UI Forms
  • 2.3.7 Creating the IT Resource for the Connector Server
• 2.4 Upgrading the Connector
  • 2.4.1 Preupgrade Steps
  • 2.4.2 Upgrade Steps
  • 2.4.3 Postupgrade Steps

3 Using the Connector

• 3.1 Performing First-Time Reconciliation
• 3.2 Scheduled Job for Lookup Field Synchronization
• 3.3 Configuring Reconciliation
  • 3.3.1 Performing Full Reconciliation
  • 3.3.2 Performing Limited Reconciliation
  • 3.3.3 Performing Batched Reconciliation
  • 3.3.4 Reconciliation Scheduled Jobs
    • 3.3.4.1 Scheduled Jobs for Reconciliation of User Records
    • 3.3.4.2 Scheduled Job for Reconciliation of Deleted Users Records
• 3.4 Configuring Scheduled Jobs
• 3.5 Performing Provisioning Operations in Oracle Identity Manager Release 11.1.1.x
  • 3.5.1 Direct Provisioning
  • 3.5.2 Request-Based Provisioning
    • 3.5.2.1 End User's Role in Request-Based Provisioning
    • 3.5.2.2 Approver's Role in Request-Based Provisioning
  • 3.5.3 Switching Between Request-Based Provisioning and Direct Provisioning
    • 3.5.3.1 Switching From Request-Based Provisioning to Direct Provisioning
    • 3.5.3.2 Switching From Direct Provisioning to Request-Based Provisioning
• 3.6 Performing Provisioning Operations in Oracle Identity Manager Release 11.1.2 or Later
• 3.7 Uninstalling the Connector

4 Extending the Functionality of the Connector

• 4.1 Adding New Attributes for Target Resource Reconciliation
• 4.2 Adding New Attributes for Provisioning
  • 4.2.1 Enabling Update of New Attributes for Provisioning
• 4.3 Configuring Validation of Data During Reconciliation and Provisioning
• 4.4 Configuring Transformation of Data During Reconciliation
• 4.5 Configuring the Connector for Multiple Installations of the Target System
• 4.6 Configuring the Connector for Performing Reconciliation and Provisioning Operations on Custom Forms
• 4.7 Configuring the Connector for Performing Lookup Field Synchronization on Custom Forms

5 Testing the Connector

6 Known Issues and Workarounds

• 6.1 Lookup Field Synchronization Fails

A Files and Directories On the Installation Media

B Scheduled Jobs for Lookup Field Synchronization and Reconciliation