Populating Oracle Identity Manager With Roles Information From Oracle Identity Analytics

See the use cases in this section if you have user accounts in Oracle Identity Analytics that you want to use to populate the Identity Manager repository.

Roles defined in Oracle Identity Analytics can be exported to OIM on a scheduled basis, once role definition/management is completed.

This use case will perform the following exports into OIM:

1. Export Oracle Identity Analytics roles to OIM groups.

2. Export the Oracle Identity Analytics policy definition and its entitlements from Oracle Identity Analytics into OIM Access Policies. If the policy does not exist it would create the new policy as Access Policies within OIM.

3. Export the Oracle Identity Analytics Policy-Resource relationship as OIM Access Policy- ITResource relationship.

4. Export the Oracle Identity Analytics Role-Policy relationship as OIM Group-Access Policy relationship.

5. Export the Oracle Identity Analytics Role-User relationship to OIM Group-User relationship.

Note : During initial integration this is done on a scheduled basis. A recommended long-term solution is to update OIM as definitions are changed in Oracle Identity Analytics on a real-time basis.

Use Case 1: Exporting Roles From Oracle Identity Analytics to Identity Manager

Note - Roles in Oracle Identity Analytics correspond to Groups in Identity Manager.

To Export Roles to Identity Manager

1. Log in to Oracle Identity Analytics.

2. Choose Administration > Configuration.

3. Click Import/Export.

4. To start a new export job, choose Schedule Job > Export> Export Roles.

5. Under Data Selection Source, select the appropriate Connection Name and click Next.

6. Complete the form by entering the Name and Description of the Job.

7. Choose one of the following:

   • To run the job immediately, select the Run the Job Now option.

   • To schedule the job for later, clear the Run the Job Now option and enter the details of the scheduled job.

8. Click Finish to create the Import Job.

   The job runs on the scheduled date and time.

9. Verify that the roles were properly exported to Identity Manager by opening Identity Manager and clicking the User Group -> Manage link on the left pane.