Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

What’s New in Oracle Identity Manager Connector for Oracle Identity Cloud Service?

• Software Updates
• Documentation-Specific Updates

1 About the Oracle Identity Cloud Service Connector

• 1.1 Introduction to the Oracle Identity Cloud Service Connector
• 1.2 Certified Components for the Oracle Identity Cloud Service Connector
• 1.3 Certified Languages for the Oracle Identity Cloud Service Connector
• 1.4 Architecture of the Oracle Identity Cloud Service Connector
• 1.5 Use Cases Supported by the Oracle Identity Cloud Service Connector
• 1.6 Features of the Oracle Identity Cloud Service Connector
  • 1.6.1 Support for Account and Group Provisioning
  • 1.6.2 Full and Incremental Reconciliation
  • 1.6.3 Limited Reconciliation
  • 1.6.4 Support for Batched Reconciliation
  • 1.6.5 Transformation and Validation of Account Data
  • 1.6.6 Reconciliation of Deleted User Accounts and Groups
  • 1.6.7 Support for the Connector Server
• 1.7 Lookup Definitions Used During Connector Operations
  • 1.7.1 Lookup Definitions Synchronized With the Target System
  • 1.7.2 Preconfigured Lookup Definitions
    • 1.7.2.1 Lookup.IDCS.Configuration
    • 1.7.2.2 Lookup.IDCS.GM.Configuration
    • 1.7.2.3 Lookup.IDCS.GM.ProvAttrMap
    • 1.7.2.4 Lookup.IDCS.GM.ReconAttrMap
    • 1.7.2.5 Lookup.IDCS.UM.Configuration
    • 1.7.2.6 Lookup.IDCS.UM.ProvAttrMap
    • 1.7.2.7 Lookup.IDCS.UM.ReconAttrMap
    • 1.7.2.8 Lookup.IDCS.UserTypes
    • 1.7.2.9 Lookup.IDCS.Organizations
• 1.8 Connector Objects Used During Target Resource Reconciliation
  • 1.8.1 User Fields for Target Resource Reconciliation
  • 1.8.2 Group Fields for Reconciliation
  • 1.8.3 Reconciliation Rules for Target Resource Reconciliation
    • 1.8.3.1 Reconciliation Rule for Users
    • 1.8.3.2 Reconciliation Rule for Groups
    • 1.8.3.3 Viewing Reconciliation Rules in the Design Console
  • 1.8.4 Reconciliation Action Rules for Oracle Identity Cloud Service
    • 1.8.4.1 Reconciliation Action Rules
    • 1.8.4.2 Viewing Reconciliation Action Rules Reconciliation in Design Console
• 1.9 Connector Objects Used During Provisioning
  • 1.9.1 Provisioning Functions
  • 1.9.2 User Fields for Provisioning
  • 1.9.3 Group Fields for Provisioning
• 1.10 Roadmap for Deploying and Using the Connector

2 Deploying the Oracle Identity Cloud Service Connector

• 2.1 Preinstallation
• 2.2 Installation
  • 2.2.1 Understanding Installation of the Oracle Identity Cloud Service Connector
  • 2.2.2 Installing the Connector in Oracle Identity Manager
    • 2.2.2.1 Running the Connector Installer
    • 2.2.2.2 Configuring the IT Resource for the Target System
      • 2.2.2.2.1 IT Resource Parameters
      • 2.2.2.2.2 Specifying Values for the IT Resource Parameters
  • 2.2.3 Deploying the Connector in a Connector Server
• 2.3 Postinstallation
  • 2.3.1 Postinstallation on Oracle Identity Manager
    • 2.3.1.1 Configuring Oracle Identity Manager
      • 2.3.1.1.1 Creating and Activating a Sandbox
      • 2.3.1.1.2 Creating a New UI Form
      • 2.3.1.1.3 Creating an Application Instance
      • 2.3.1.1.4 Publishing a Sandbox
      • 2.3.1.1.5 Harvesting Entitlements and Sync Catalog
      • 2.3.1.1.6 Updating an Existing Application Instance with a New Form
    • 2.3.1.2 Clearing Content Related to Connector Resource Bundles from the Server Cache
    • 2.3.1.3 Managing Logging for Oracle Identity Cloud Service Connector
      • 2.3.1.3.1 Understanding Log Levels
      • 2.3.1.3.2 Enabling Logging
    • 2.3.1.4 Localizing Field Labels in UI Forms
    • 2.3.1.5 Configuring SSL for Oracle Identity Cloud Service
  • 2.3.2 Creating the IT Resource for the Connector Server

3 Using the Oracle Identity Cloud Service Connector

• 3.1 Scheduled Job for Lookup Field Synchronization for Oracle Identity Cloud Service Connector
• 3.2 Configuring Reconciliation for Oracle Identity Cloud Service Connector
  • 3.2.1 Performing Full Reconciliation
  • 3.2.2 Performing Batched Reconciliation
  • 3.2.3 Performing Limited Reconciliation
  • 3.2.4 Reconciliation Scheduled Jobs for Oracle Identity Cloud Service Connector
    • 3.2.4.1 IDCS User Reconciliation
    • 3.2.4.2 IDCS Delete User Reconciliation
    • 3.2.4.3 IDCS Group Reconciliation
    • 3.2.4.4 IDCS Delete Group Reconciliation
• 3.3 Configuring Scheduled Jobs
• 3.4 Performing Provisioning Operations
• 3.5 Uninstalling the Connector

4 Extending the Functionality of the Oracle Identity Cloud Service Connector

• 4.1 Adding New User or Group Attributes for Reconciliation
  • 4.1.1 Adding New Attributes on the Process Form
  • 4.1.2 Adding Attributes to Reconciliation Fields
  • 4.1.3 Creating Reconciliation Field Mapping
  • 4.1.4 Creating Entries in Lookup Definitions
  • 4.1.5 Performing Changes in a New UI Form
• 4.2 Adding New User or Group Attributes for Provisioning
  • 4.2.1 Adding New Attributes for Provisioning
  • 4.2.2 Creating Entries in Lookup Definitions for Provisioning
  • 4.2.3 Creating a Task to Enable Update Operations
  • 4.2.4 Replicating Form Designer Changes to a New UI Form
• 4.3 Configuring Validation of Data During Reconciliation and Provisioning
• 4.4 Configuring Transformation of Data During User Reconciliation
• 4.5 Configuring the Connector for Multiple Installations of the Target System
• 4.6 Defining the Connector

A Files and Directories on the Installation Media