Understanding Closed Loop Compliance

With the integration of Oracle Identity Analytics and Oracle Waveset, it is possible to directly revoke roles and entitlements from Oracle Waveset if the results of the certification process require it. This integration eliminates the need for manual de-provisioning of access for managed resources. In addition, the manual process of revoking roles and entitlements by leveraging the information stored in the remediation configuration module is also retained. This takes into account nonmanaged applications.

The following closed loop remediation diagram illustrates this process. (Note: In the diagram, Oracle Waveset is referred to by its previous name, Sun Identity Manager.)

To Configure Resources in Oracle Identity Analytics for Remediation

Every resource type in Oracle Identity Analytics can be separately configured for automatic or manual remediation.

1. Log in to Oracle Identity Analytics.

2. Choose Identity Warehouse > Resources.

3. Click the resource for which remediation action needs to be configured, and go to the Remediation tab.

4. Select the Select Provisioning Mode check box.

5. Choose the mode of provisioning desired for the particular resource.

   • Auto - Automatically send role/entitlement updates linked with this resource to Oracle Waveset.

     Select the appropriate connection name of the provisioning server and save the changes.

   • Manual - Use the manual steps for revocation of roles and entitlements using a text editor.

     List the steps to be followed for non-managed system remediation and save the changes.

To Configure Certifications in Oracle Identity Analytics for Remediation

1. Log in to Oracle Identity Analytics.

2. Choose Administration > Configuration.

3. Click Identity Certification.

4. Expand the Revoke and Remediation section and, under the Remediation section, choose one of the following options:

   • Display Remediation Instructions - Select to display instructions about how to perform manual remediation of nonmanaged resources.

   • Perform Closed Loop Remediation on - Select to specify that the remediation be completed by either the Certification End Date or the Certification Completion Date.