Contents

List of Examples

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

What's New

• New Features for 11gR1 PS 6 (11.1.1.7)

1 Introduction to Identity Governance Framework

• 1.1 About the Identity Governance Framework
  • 1.1.1 Benefits to Organizations
  • 1.1.2 Benefits to Developers
• 1.2 About the Identity Governance Framework APIs
• 1.3 System Requirements and Certification

2 Using the Identity Directory API

• 2.1 About Identity Directory API
  • 2.1.1 About the Identity Directory Service
  • 2.1.2 Identity Directory Service Architecture
• 2.2 Configuring Identity Directory API
  • 2.2.1 Logical Entity Configuration
  • 2.2.2 Physical Identity Store Configuration
  • 2.2.3 Operational Configuration
• 2.3 Design Recommendations
  • 2.3.1 Keep the defaultFetch Attributes Minimal
  • 2.3.2 Initialize the Identity Directory Once
• 2.4 Examples
  • 2.4.1 Initialize and Obtain Identity Directory Handle
  • 2.4.2 Initialize and Obtain Identity Directory Handle from JPS Context
  • 2.4.3 Initialize and Obtain In-Memory Identity Directory Handle
  • 2.4.4 Add User
  • 2.4.5 Get User for Given Principal
  • 2.4.6 Modify User
  • 2.4.7 Get User for Given ID Value
  • 2.4.8 Search Users Using Complex Search Filter
  • 2.4.9 Change User Password
  • 2.4.10 Reset User Password
  • 2.4.11 Authenticate User
  • 2.4.12 Delete User
  • 2.4.13 Create Group
  • 2.4.14 Search Groups
  • 2.4.15 Get Management Chain
  • 2.4.16 Get Reportees of a User
  • 2.4.17 Add a Member to a Group
  • 2.4.18 Delete a Member From Group
  • 2.4.19 Get All The Groups User is a Member

3 Using the ArisID API

• 3.1 About ArisID API
• 3.2 Configuring ArisID API
  • 3.2.1 Configuring CARML Files
  • 3.2.2 Configuring the Identity Repository
  • 3.2.3 Configuring the Mapping File
• 3.3 Design Recommendations
  • 3.3.1 Choose a LoginID
  • 3.3.2 Choose a UniqueKey
  • 3.3.3 Specify Multiple Language Support
  • 3.3.4 Handle Large Results
  • 3.3.5 Secure the Application
    • 3.3.5.1 Domain Level Credentials
    • 3.3.5.2 Application Level Credentials
  • 3.3.6 Configure the Timeout Interval
• 3.4 Generating ArisID Beans
• 3.5 Sample Application Using IDX User and Role Beans
  • 3.5.1 SearchUsers.jsp
  • 3.5.2 SearchUsers.html
• 3.6 OpenLDAP Considerations

4 Migrating to Identity Directory API

• 4.1 Introduction
• 4.2 Migrate the Application
  • 4.2.1 API Initialization
  • 4.2.2 Getting UserManager and GroupManager Handle
  • 4.2.3 Search Filter
  • 4.2.4 CRUD Operations
    • 4.2.4.1 Finding a User
    • 4.2.4.2 Searching Users
    • 4.2.4.3 Creating a User
    • 4.2.4.4 Deleting a User
    • 4.2.4.5 Authenticating a User
    • 4.2.4.6 Modifying Users and Managing Related Entities
• 4.3 Comparison Between User and Role API and IDS API
  • 4.3.1 User-Related APIs
  • 4.3.2 Role-Related APIs