Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

What's New in Oracle Identity Manager Connector for Oracle E-Business Suite User Management?

• Software Updates
  • Software Updates in Release 11.1.1.5.0
• Documentation-Specific Updates
  • Documentation-Specific Updates in Release 11.1.1.5.0

About the Connector

• Introduction to the Connector
• Certified Components
• Usage Recommendation
• Certified Languages
• Connector Architecture
• Features of the Connector
  • Support for Target Resource Reconciliation
  • SoD Validation of Entitlement Provisioning
  • Support for an SSO-Enabled Target System Installation
  • Account Status Reconciliation and Provisioning
  • Account Password Management
  • Full and Incremental Reconciliation
  • Batched Reconciliation
  • Limited (Filtered) Reconciliation
  • Support for Connector Server
  • Connection Pooling
  • Support for SSL Communication Between the Target System and Oracle Identity Manager

Deploying the Connector

• Preinstallation
  • Creating a Target System User Account for Connector Operations
    • Privileges Granted to the User Account
  • Determining Values for the JDBC URL and Connection Properties Parameters
    • Supported JDBC URL Formats
    • Only SSL Communication Is Configured
    • Both Data Encryption and Integrity and SSL Communication Are Configured
• Installation
  • Understanding Installation
  • Running the Connector Installer
  • Configuring the IT Resource for the Target System
• Postinstallation
  • Configuring SoD
    • Configuring the Oracle Applications Access Controls Governor to Act As the SoD Engine
    • Specifying a Value for the TopologyName IT Resource Parameter
    • Disabling and Enabling SoD
      • Disabling SoD
      • Enabling SoD
  • Configuring Secure Communication Between the Target System and Oracle Identity Governance
    • Configuring Data Encryption and Integrity in Oracle Database
    • Configuring SSL Communication in Oracle Database
  • Configuring Oracle Identity Manager
    • Creating and Activating a Sandbox
    • Creating a New UI Form
    • Associating the Form with the Application Instance
    • Publishing a Sandbox
    • Harvesting Entitlements and Sync Catalog
    • Updating an Existing Application Instance with a New Form
  • Clearing Content Related to Connector Resource Bundles from the Server Cache
  • Managing Logging
    • Understanding Log Levels
    • Enabling logging
  • Setting up the Lookup Definition for Connection Pooling
  • Configuring the Connector for SSO
  • Localizing Field Labels in UI Forms
• Upgrading the Connector
  • Preupgrade Steps
  • Upgrade Steps
  • Postupgrade Steps
• Postcloning Steps

Using the Connector

• Lookup Definitions Used During Connector Operations
  • Lookup Definitions Synchronized with the Target System
  • Preconfigured Lookup Definitions
    • Lookup.Configuration.Oracle EBS UM
    • Lookup.Oracle EBS UM.UM.Configuration
    • Lookup.Oracle EBS UM.UM.ProvAttrMap
    • Lookup.Oracle EBS UM.UM.ReconAttrMap
    • Lookup.Oracle EBS UM.PartyType
    • Lookup.Oracle EBS UM.PasswordExpTypes
    • Lookup.Objects.EDIR User.Oracle EBS User Management.CopyAttributesMap
    • Lookup.Objects.LDAP User.Oracle EBS User Management.CopyAttributesMap
    • Lookup.Objects.OID User.Oracle EBS User Management.CopyAttributesMap
    • Lookup.Objects.AD User.Oracle EBS User Management.CopyAttributesMap
• Reconciliation Scheduled Jobs
  • Scheduled Jobs for Lookup Field Synchronization
  • Scheduled Job for Target User Reconciliation
  • Scheduled Job for Incremental Target User Reconciliation
  • Scheduled Job for Target User Delete Reconciliation
  • Configuring Scheduled Jobs
• Configuring Reconciliation
  • Reconciliation Queries
  • Reconciliation Rules
    • Reconciliation Rule for Target Resource Reconciliation
    • Viewing Reconciliation Rules for Target Resource Reconciliation
  • Reconciliation Action Rules
    • Target Resource Reconciliation Action Rule for the EBS User Management Connector
    • Viewing Reconciliation Action Rules for Target Resource Reconciliation in the Design Console
  • Performing Full and Incremental Reconciliation
  • Performing Limited Reconciliation
  • Performing Batched Reconciliation
• Configuring Provisioning
  • Provisioning Procedures
  • Provisioning Functions
  • Performing Provisioning Operations in Oracle Identity Manager
  • Provisioning Operations Performed in an SoD-Enabled Environment
    • Overview of the Provisioning Process in an SoD-Enabled Environment
    • Direct Provisioning in an SoD-Enabled Environment
• Uninstalling the Connector

Extending the Functionality of the Connector

• Adding New Attributes for Reconciliation and Provisioning
  • Summary of Steps to Add New Attributes for Reconciliation and Provisioning
  • Extending the Connector Schema
    • Understanding Connector Schema Extension
    • Adding New Attributes to the Connector Schema
  • Updating Connector Artifacts
    • Creating a Process Form Field
    • Updating the Oracle EBS User Management Resource Object
    • Updating the Oracle EBS UM User Process Definition
    • Updating the Lookup Definition for Reconciliation Attribute Mapping
    • Updating the Lookup Definition for Provisioning Attribute Mapping
    • Creating a Reconciliation Profile for the Oracle EBS User Management Resource Object
    • Enabling Provisioning Operations on the New Attribute
  • Updating the search.properties File
  • Updating the Procedures.properties File
• Adding New Multivalued Attributes for Reconciliation and Provisioning
  • Summary of Steps to Add New Multivalued Attributes for Reconciliation and Provisioning
  • Extending the Connector Schema
  • Extending Oracle Identity Manager Metadata
    • Creating Lookup Definitions
    • Creating Child Process Form
    • Updating the Parent Process Form
    • Updating the Lookup Definition for Reconciliation Attribute Mapping
    • Updating the Lookup Definition for Provisioning Attribute Mapping
    • Updating the Oracle EBS User Management Resource Object
    • Updating the Oracle EBS UM User Process Definition
    • Replicating Form Designer Changes to a New UI Form
    • Enabling Provisioning Operations on the New Attribute
  • Creating Scheduled Jobs
  • Updating the Connector Bundle
  • Adding APIs to Wrapper Packages
• Configuring Transformation of Data During User Reconciliation
• Configuring Validation of Data During Reconciliation and Provisioning

Sample SQL Queries for the UM_USER_RECON and UM_USER_SYNC SQL Query Names

• Sample SQL Queries Updated to Include Single-Valued Attributes
• Sample SQL Queries Updated to Include Multivalued Attributes

Sample Code Snippets for Extending the Connector Schema

Files and Directories in the EBS User Management Connector Package

Scheduled Jobs for Lookup Field Synchronization and Reconciliation