Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

Part I Introduction and Preparation

1 Introduction to Identity and Access Management Deployment

• 1.1 Planning Your Deployment
• 1.2 Understanding Oracle Identity and Access Management Deployment Topologies
  • 1.2.1 About the Web Tier
    • 1.2.1.1 High Availability Provisions
    • 1.2.1.2 Security Provisions
  • 1.2.2 About the Application Tier
    • 1.2.2.1 About WebLogic Domains
    • 1.2.2.2 Security Provisions
  • 1.2.3 About the Database Tier
• 1.3 Products Deployed Using the Oracle Identity and Access Management Deployment Wizard
• 1.4 Reference Topologies Documented in This Version of the Guide
  • 1.4.1 Only Oracle Identity Manager in an HA Environment
  • 1.4.2 Only Oracle Access Management in an HA Environment

2 Preparing for Oracle Identity and Access Management Deployment

• 2.1 Hardware Requirements for Oracle Identity and Access Management Deployment
• 2.2 Software Requirements for Oracle Identity and Access Management Deployment
  • 2.2.1 Software Versions
  • 2.2.2 About Obtaining Software
  • 2.2.3 Summary of Oracle Homes
  • 2.2.4 Applying Patches and Workarounds
    • 2.2.4.1 Mandatory Patches Required for Installing Oracle Identity Manager
• 2.3 Verifying Java
• 2.4 Installing the Database
• 2.5 Preparing the Database for Repository Creation Utility (RCU)
• 2.6 Running Oracle Identity and Access Management Repository Creation Utility (Oracle Identity and Access Management RCU)
• 2.7 About the Lifecycle Management and Deployment Repository
  • 2.7.1 More Information About Shared and Local Storage
• 2.8 Installing the Oracle Identity and Access Management Lifecycle Tools

3 Preparing the Environment for Identity and Access Management Deployment on Multiple Hosts

• 3.1 Overview of Network Preparation
  • 3.1.1 More Information About Network Preparation
• 3.2 Overview of Storage Preparation
  • 3.2.1 More Information About Storage Preparation
• 3.3 Overview of Server Preparation
  • 3.3.1 More Information About Server Preparation
• 3.4 Overview of Database Preparation
  • 3.4.1 Backing up the Database

Part II Deploying Oracle Identity and Access Management

4 Creating a Deployment Response File

• 4.1 Overview of Deployment Response File
• 4.2 Starting the Identity and Access Management Deployment Wizard
• 4.3 Creating a Deployment Response File for a Single-Host Topology
• 4.4 Creating a Deployment Response File for a Multi-Host Topology
  • 4.4.1 Creating a Deployment Response File for Only Oracle Identity Manager with HA
    • 4.4.1.1 Welcome
    • 4.4.1.2 Specify Inventory Directory
    • 4.4.1.3 Choose IAM Installation Options
    • 4.4.1.4 Specify Security Updates
    • 4.4.1.5 Describe Response File
    • 4.4.1.6 Select IAM Products
    • 4.4.1.7 Select Topology
    • 4.4.1.8 Select Installation and Configuration Locations
    • 4.4.1.9 Configure Virtual Hosts (Optional)
    • 4.4.1.10 Set User Names and Passwords
    • 4.4.1.11 Configure Oracle HTTP Server
    • 4.4.1.12 Configure Oracle Identity Manager
    • 4.4.1.13 Configure Oracle Identity Manager Database
    • 4.4.1.14 Configure SOA
    • 4.4.1.15 Configure HTTP/HTTPS Load Balancer
    • 4.4.1.16 Summary
  • 4.4.2 Creating a Deployment Response File for Only Access Management with HA
    • 4.4.2.1 Welcome
    • 4.4.2.2 Specify Inventory Directory
    • 4.4.2.3 Choose IAM Installation Options
    • 4.4.2.4 Specify Security Updates
    • 4.4.2.5 Describe Response File
    • 4.4.2.6 Select IAM Products
    • 4.4.2.7 Select Topology
    • 4.4.2.8 Select Installation and Configuration Locations
    • 4.4.2.9 Configure Virtual Hosts
    • 4.4.2.10 Set User Names and Passwords
    • 4.4.2.11 Configure Oracle HTTP Server
    • 4.4.2.12 Configure Oracle Access Manager
    • 4.4.2.13 Configure Oracle Access Manager Database
    • 4.4.2.14 Configure HTTP/HTTPS Load Balancer
    • 4.4.2.15 Summary
• 4.5 Copying Required Artifacts to DMZ Hosts

5 Performing Oracle Identity and Access Management Deployment

• 5.1 Performing Deployment on a Single-Node
  • 5.1.1 Introduction to the Deployment Process
    • 5.1.1.1 Oracle Identity and Access Management Deployment Stages
    • 5.1.1.2 Tasks Performed During Deployment Stages
  • 5.1.2 Performing Deployment by Running the Deployment Tool
  • 5.1.3 Performing Deployment Using the Oracle Identity and Access Management Deployment Wizard
    • 5.1.3.1 Choose IAM Installation Options
    • 5.1.3.2 Describe Response File
    • 5.1.3.3 Select Installation and Configuration Locations
    • 5.1.3.4 Review Deployment Configuration
    • 5.1.3.5 Summary
    • 5.1.3.6 Prerequisite Checks
    • 5.1.3.7 Installation
    • 5.1.3.8 Preconfigure
    • 5.1.3.9 Configure
    • 5.1.3.10 Configure Secondary
    • 5.1.3.11 Postconfigure
    • 5.1.3.12 Startup
    • 5.1.3.13 Validation
    • 5.1.3.14 Install Complete
• 5.2 Performing Deployment on Multiple Hosts Using the Command Line Deployment Tool
  • 5.2.1 Introduction to the Deployment Process
    • 5.2.1.1 Deployment Stages
    • 5.2.1.2 Tasks Performed During OIM-Only Deployment
    • 5.2.1.3 Tasks Performed During OAM-Only Deployment
  • 5.2.2 Deployment Procedure
    • 5.2.2.1 Running the Deployment Commands
    • 5.2.2.2 Creating Backups
• 5.3 Deploying Identity and Access Management Without a Common LCM_HOME
• 5.4 Additional Information on Oracle HTTP Server Configuration Files

Part III Post-Deployment Tasks and Troubleshooting

6 Post Deployment Tasks

• 6.1 Post Deployment Tasks for Oracle Identity Manager
  • 6.1.1 Add an Oracle Identity Manager Property
  • 6.1.2 Post-Deployment Steps for the E-mail Server Configuration
• 6.2 Post Deployment Task for Accessing Help on the WebLogic Administration Console
• 6.3 Starting and Stopping Components

7 Validating Deployment

• 7.1 Validating the Administration Server
  • 7.1.1 Verifying Connectivity
    • 7.1.1.1 Verifying Connectivity for Oracle Identity Manager
    • 7.1.1.2 Verifying Connectivity for Oracle Access Management
  • 7.1.2 Validating Failover
• 7.2 Validating the Access Manager Configuration
• 7.3 Validating Oracle Identity Manager
• 7.4 Validating SOA Instance from the WebTier
• 7.5 Validating WebGate and the Access Manager Single Sign-On Setup

8 Troubleshooting Oracle Identity and Access Management Deployment

• 8.1 Getting Started with Troubleshooting
  • 8.1.1 Using the Log Files
  • 8.1.2 Recovering From Oracle Identity and Access Management Deployment Failure
• 8.2 Resolving Common Problems
  • 8.2.1 Null Error Occurs When WebLogic Patches Are Applied
  • 8.2.2 Identity Management Patch Manager progress Command Shows Active Session After Deployment
  • 8.2.3 Oracle Identity and Access Management Deployment Wizard Hangs (Linux and UNIX)
  • 8.2.4 Error Occurs When Running RCU on 64-bit Linux
  • 8.2.5 Other Identity and Access Management Deployment Issues
• 8.3 Using My Oracle Support for Additional Troubleshooting Information

A Cleaning Up an Environment Before Rerunning IAM Deployment