Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

What's New in Security Integration

• New Features in 11g Release 1 (11.1.1.5.0)

1 Introduction

• 1.1 About Oracle Identity Management
• 1.2 Objectives of Integration
• 1.3 Types of Integration
  • 1.3.1 Integration Among Oracle Identity Management Components
  • 1.3.2 Integration for other Oracle products
  • 1.3.3 Integration for Third-Party products
• 1.4 Key Integration Scenarios
• 1.5 How to Use this Book

2 Web Access Management

• 2.1 Oracle Access Manager for Oracle Identity Management
• 2.2 Oracle Access Manager for Oracle Fusion Middleware
• 2.3 Oracle Access Manager for Other Oracle Applications
• 2.4 Oracle Access Manager for Third-Party Applications

3 Enterprise Single Sign-On

• 3.1 Enterprise Single Sign-On Logon Manager
• 3.2 Enterprise Single Sign-On Synchronization
• 3.3 Enterprise Single Sign-On Provisioning Gateway
• 3.4 Enterprise Single Sign-On Authentication Manager
• 3.5 Enterprise Single Sign-On Universal Authentication Manager

4 Federation

• 4.1 Oracle Identity Federation for Oracle Identity Management
• 4.2 Oracle Identity Federation for Oracle Fusion Middleware
• 4.3 Oracle Identity Federation Authentication Engines
• 4.4 Oracle Identity Federation Service Provider Integration Modules

5 Risk Management

• 5.1 Oracle Adaptive Access Manager for Oracle Identity Management
• 5.2 Oracle Adaptive Access Manager for Custom Applications

6 User, Account, and Entitlement Provisioning

• 6.1 Oracle Identity Manager Connectors for Oracle Identity Management
• 6.2 Oracle Identity Manager Connectors for Databases
• 6.3 Oracle Identity Manager Connectors for Oracle Applications
• 6.4 Oracle Identity Manager Connectors for Third-Party Applications

7 Identity Governance

• 7.1 Oracle Identity Analytics for Oracle Identity Management
• 7.2 Oracle Identity Analytics for Third-Party Products

8 Password Management

• 8.1 Oracle Identity Manager Password Management Support for Oracle Identity Management
• 8.2 Oracle Identity Manager Password Management through Connectors
• 8.3 Oracle Enterprise Single Sign-On Suite ESSO-PR for Password Reset

9 Database Security

• 9.1 Oracle Database Net Services LDAP Naming
• 9.2 Oracle Database Enterprise User Security with LDAP

10 Fine-Grained Access Control

• 10.1 Oracle Entitlements Server for Oracle Identity Management
• 10.2 Oracle Entitlements Server for Oracle Fusion Middleware and Oracle SOA
• 10.3 Oracle Entitlements Server for Third-Party products

11 Configuring an Identity Store with Multiple Directories

• 11.1 Overview of Configuring Multiple Directories as an Identity Store
• 11.2 Using idmConfigTool configOVD to Configure Oracle Virtual Directory
• 11.3 Configuring Multiple Directories as an Identity Store: Split Profile
  • 11.3.1 Prerequisites
  • 11.3.2 Repository Descriptions
  • 11.3.3 Setting Up Oracle Internet Directory as a Shadow Directory
  • 11.3.4 Directory Structure Overview - Shadow Join
  • 11.3.5 Configuring Oracle Virtual Directory Adapters for Split Profile
  • 11.3.6 Configuring a Global Consolidated Changelog Plug-in
  • 11.3.7 Validating the Oracle Virtual Directory Changelog
• 11.4 Configuring Multiple Directories as an Identity Store: Distinct User and Group Populations in Multiple Directories
  • 11.4.1 Directory Structure Overview for Distinct User and Group Populations in Multiple Directories
  • 11.4.2 Configuring Oracle Virtual Directory Adapters for Distinct User and Group Populations in Multiple Directories
    • 11.4.2.1 Create Enterprise Directory Adapters
    • 11.4.2.2 Create Application Directory Adapters
  • 11.4.3 Creating a Global Plug-in
• 11.5 Additional Configuration Tasks

A Using the idmConfigTool Command

• A.1 Syntax
• A.2 Parameters
  • A.2.1 preConfigIDStore
  • A.2.2 prepareIDStore Parameters
  • A.2.3 configPolicyStore Parameters
  • A.2.4 configOAM Parameters
  • A.2.5 configOIM Parameters
  • A.2.6 postProv Parameters
  • A.2.7 Validate IDStore parameters
  • A.2.8 PolicyStore parameters
  • A.2.9 Validate OAM Configuration
  • A.2.10 Validate OIM
• A.3 Examples

B Verifying Adapters for Multiple Directory Identity Stores by Using ODSM

• B.1 Verifying Oracle Virtual Directory Adapters for Split Profile by Using ODSM
  • B.1.1 Verifying User Adapter for Active Directory Server
  • B.1.2 Verifying Shadowjoiner User Adapter
  • B.1.3 Verifying JoinView Adapter
  • B.1.4 Verifying User/Role Adapter for Oracle Internet Directory
  • B.1.5 Verifying Changelog adapter for Active Directory Server
  • B.1.6 Verifying Changelog Adapter for Oracle Internet Directory
  • B.1.7 Configuring a Global Consolidated Changelog Plug-in
  • B.1.8 Validate Oracle Virtual Directory Changelog
• B.2 Verifying Adapters for Distinct User and Group Populations in Multiple Directories by Using ODSM
  • B.2.1 User/Role Adapter A1
  • B.2.2 User/Role Adapter A2
  • B.2.3 Changelog Adapter C1
  • B.2.4 Changelog Adapter for Active Directory
  • B.2.5 Changelog Adapter C2
  • B.2.6 Verifying Oracle Virtual Directory Global Plug-in
  • B.2.7 Configuring a Global Consolidated Changelog Plug-in

Index