1 Introduction to Oracle Identity and Access Management Upgrade

This chapter provides an overview of Oracle Identity and Access Management 11g Release 2 (11.1.2.2.0) upgrade process and the documentation roadmap. This chapters also describes the supported upgrade scenarios for 11.1.2.2.0.

This chapter includes the following topics:

1.1 Oracle Identity and Access Management Overview

Oracle Identity and Access Management components enable enterprises to manage the end-to-end lifecycle of user identities across all enterprise resources - both within and beyond the firewall. With Oracle Identity and Access Management, you can deploy applications faster, apply the most granular protection to enterprise resources, automatically eliminate latent access privileges, and much more.

Oracle Identity and Access Management 11g Release 2 (11.1.2.2.0) includes the following products:

  • Oracle Access Management, which includes the following components:

    • Oracle Access Management Access Manager

    • Oracle Access Management Identity Federation

    • Oracle Access Management Mobile and Social

    • Oracle Access Management Security Token Service

  • Oracle Adaptive Access Manager

  • Oracle Identity Manager

  • Oracle Entitlements Server

  • Oracle Privileged Account Manager

  • Oracle Identity Navigator

1.2 Upgrade Scenarios

The term Upgrade refers to the upgrade of existing Oracle Identity and Access Management 11g Release 1 and 11g Release 2 components to Oracle Identity and Access Management 11g Release 2 (11.1.2.2.0) on Oracle WebLogic Server. For each of these upgrade scenarios, you use the Oracle Identity and Access Management 11g Release 2 (11.1.2.2.0) installer to update your existing Oracle Home (IAM_HOME) to Oracle Identity and Access Management 11g Release 2 (11.1.2.2.0).

You can upgrade the following Oracle Identity and Access Management components to Oracle Identity and Access Management 11.1.2.2.0:

  • Oracle Identity and Access Management 11g Release 2 (11.1.2.1.0) Components

    • Oracle Access Manager 11.1.2.1.0

    • Oracle Adaptive Access Manager 11.1.2.1.0

    • Oracle Identity Manager 11.1.2.1.0

    • Oracle Entitlements Server 11.1.2.1.0

    • Oracle Privileged Account Manager 11.1.2.1.0

    • Oracle Identity Navigator 11.1.2.1.0

  • Oracle Identity and Access Management 11g Release 2 (11.1.2) Components

    • Oracle Access Manager 11.1.2

    • Oracle Adaptive Access Manager 11.1.2

    • Oracle Identity Manager 11.1.2

    • Oracle Entitlements Server 11.1.2

    • Oracle Privileged Account Manager 11.1.2

    • Oracle Identity Navigator 11.1.2

  • Oracle Identity and Access Management 11g Release 1 (11.1.1.7.0) Components

    • Oracle Access Manager 11.1.1.7.0

    • Oracle Adaptive Access Manager 11.1.1.7.0

    • Oracle Identity Manager 11.1.1.7.0

    • Oracle Identity Navigator 11.1.1.7.0

  • Oracle Identity and Access Management 11g Release 1 (11.1.1.5.0) Components

    • Oracle Access Manager 11.1.1.5.0

    • Oracle Adaptive Access Manager 11.1.1.5.0

    • Oracle Identity Manager 11.1.1.5.0

    • Oracle Entitlements Server 11.1.1.5.0

    • Oracle Identity Navigator 11.1.1.5.0

  • Oracle Identity Manager 9.1.x.x

Note:

This guide covers the procedures for all the upgrade scenarios described in this section.

1.3 Migration and Coexistence Scenarios

The term Migration refers to the migration of 10g version of Oracle Identity and Access Management components or Sun products to Oracle Identity and Access Management 11.1.2.2.0, scenarios where you migrate the following products to Oracle Identity and Access Management 11g Release 2 (11.1.2.2.0). In these migration scenarios, you must install a new 11g Release 2 (11.1.2.2.0) Oracle Home (IAM_HOME) and then migrate your configuration data from your previous installation to the new 11g Release 2 (11.1.2.2.0) Oracle Home.

  • Oracle Access Manager 10g

  • Oracle Adaptive Access Manager 10g

  • Oracle Single Sign-On 10g

  • Sun OpenSSO Enterprise 8.0

  • Sun Java System Access Manager 7.1

  • Oracle Identity Analytics

During migration, you can have both the old and the new deployments coexisting, such that some applications are protected by the old server, and the others are protected by the new server. The coexistence mode allows you to have seamless single sign-on experience when you navigate between applications protected by different servers.

For example, Sun OpenSSO Enterprise 8.0 and Oracle Access Management Access Manager 11.1.2.2.0 servers can coexist and work together, so that the you have seamless single sign-on experience when you navigate between applications protected by Sun OpenSSO Enterprise 8.0 and Oracle Access Management Access Manager 11.1.2.2.0 Servers.

The following are the coexistence scenarios supported in 11g Release 2 (11.1.2.2.0):

  • Coexistence of Oracle Access Manager 10g with Oracle Access Management Access Manager 11.1.2.2.0

  • Coexistence of Sun OpenSSO Enterprise 8.0 with Oracle Access Management Access Manager 11.1.2.2.0

  • Coexistence of Sun Java System Access Manager 7.1 with Oracle Access Management Access Manager 11.1.2.2.0

Note:

This guide covers only the upgrade scenarios described in Section 1.2, "Upgrade Scenarios".

The migration and coexistence scenarios are covered in the Oracle Fusion Middleware Migration Guide for Oracle Identity and Access Management.

1.4 Supported Starting Points for Upgrade on Single Node

This section describes the supported starting points for Oracle Identity and Access Management upgrade on a single node.

This section contains the following sub-sections:

1.4.1 Supported Starting Points for Oracle Access Manager Upgrade

Table 1-1 lists the supported starting points for upgrading Oracle Access Manager to 11g Release 2 (11.1.2.2.0) on a single node:

Table 1-1 Oracle Access Manager Releases Supported for Upgrade

Release Supported Bundle Patch

11g Release 2 (11.1.2.1.0)

  • Bundle Patch 11.1.2.1.1

11g Release 2 (11.1.2)

  • Bundle Patch 11.1.2.0.3

  • Bundle Patch 11.1.2.0.2

  • Bundle Patch 11.1.2.0.1

11g Release 1 (11.1.1.7.0)

  • Bundle Patch 11.1.1.7.0 OAM-FAREL8-BP

  • Bundle Patch 11.1.1.7.0 OAM-FAREL7-BP

11g Release 1 (11.1.1.5.0)

  • Bundle Patch 11.1.1.5.5

  • Bundle Patch 11.1.1.5.4

  • Bundle Patch 11.1.1.5.3

  • Bundle Patch 11.1.1.5.2

  • Bundle Patch 11.1.1.5.1

10g (10.1.4.3)

This version is supported for migration.


Note:

Moving from Oracle Access Manager 10g to Oracle Access Management Access Manager 11.1.2.2.0 is referred to as migration, and the procedure is documented in the Oracle Fusion Middleware Migration Guide for Oracle Identity and Access Management.

1.4.2 Supported Starting Points for Oracle Adaptive Access Manager Upgrade

Table 1-2 lists the supported starting points for upgrading Oracle Adaptive Access Manager to 11g Release 2 (11.1.2.2.0) on a single node:

Table 1-2 Oracle Adaptive Access Manager Releases Supported for Upgrade

Release Supported Bundle Patch

11g Release 2 (11.1.2.1.0)

  • All Bundle Patches are supported

11g Release 2 (11.1.2)

  • All Bundle Patches are supported

11g Release 1 (11.1.1.7.0)

  • All Bundle Patches are supported

11g Release 1 (11.1.1.5.0)

  • Bundle Patch 11.1.1.5.1

  • Bundle Patch 11.1.1.5.2

10g (10.1.4.5)

  • Bundle Patch 15


Note:

Moving from Oracle Adaptive Access Manager 10g (10.1.4.5) to Oracle Adaptive Access Manager 11.1.2.2.0 is referred to as migration, and the procedure is documented in the Migration Guide for Oracle Identity and Access Management.

1.4.3 Supported Starting Points for Oracle Identity Manager Upgrade

Table 1-3 lists the supported starting points for upgrading Oracle Identity Manager to 11g Release 2 (11.1.2.2.0) on a single node:

Table 1-3 Oracle Identity Manager Releases Supported for Upgrade

Release Supported Bundle Patch

11g Release 2 (11.1.2.1.0)

  • All Bundle Patches are supported

11g Release 2 (11.1.2)

  • All Bundle Patches are supported

11g Release 1 (11.1.1.7.0)

  • All Bundle Patches are supported

11g Release 1 (11.1.1.5.0)

  • All Bundle Patches are supported

9.1.x.x

  • Bundle Patches 9.1.0.1 and higher


1.4.4 Supported Starting Points for Oracle Entitlements Server Upgrade

Table 1-4 lists the supported starting points for upgrading Oracle Entitlements Server to 11g Release 2 (11.1.2.2.0) on a single node:

Table 1-4 Oracle Entitlements Server Releases Supported for Upgrade

Release Supported Bundle Patch

11g Release 2 (11.1.2.1.0)

  • All Bundle Patches are supported

11g Release 2 (11.1.2)

  • All Bundle Patches are supported

11g Release 1 (11.1.1.5.0)

  • Bundle Patch 11.1.1.5.1


1.4.5 Supported Starting Points for Oracle Privileged Account Manager Upgrade

Table 1-5 lists the supported starting points for upgrading Oracle Privileged Account Manager to 11g Release 2 (11.1.2.2.0):

Table 1-5 Oracle Privileged Account Manager Releases Supported for Upgrade

Release Supported Bundle Patch

11g Release 2 (11.1.2.1.0)

  • All Bundle Patches are supported

11g Release 2 (11.1.2)

  • All Bundle Patches are supported


1.4.6 Supported Starting Points for Oracle Identity Navigator Upgrade

Table 1-6 lists the supported starting points for upgrading Oracle Entitlements Server to 11g Release 2 (11.1.2.2.0) on a single node:

Table 1-6 Oracle Identity Navigator Releases Supported for Upgrade

Release Supported Bundle Patch

11g Release 2 (11.1.2.1.0)

  • All Bundle Patches are supported

11g Release 2 (11.1.2)

  • All Bundle Patches are supported

11g Release 1 (11.1.1.7.0)

  • All Bundle Patches are supported

11g Release 1 (11.1.1.5.0)

  • All Bundle Patches are supported


1.5 Supported Starting Points for Upgrading High Availability Environments

Table 1-7 lists the supported starting points for upgrading high availability environments of various components of Oracle Identity and Access Management to 11g Release 2 (11.1.2.2.0):

Table 1-7 Oracle Identity and Access Management Releases Supported for High Availability Upgrade

Component Supported Starting Point

Oracle Access Manager

  • 11g Release 2 (11.1.2.1.0)

  • 11g Release 1 (11.1.1.5.0)

Oracle Adaptive Access Manager

  • 11g Release 2 (11.1.2.1.0)

  • 11g Release 1 (11.1.1.5.0)

Oracle Identity Manager

  • 11g Release 2 (11.1.2.1.0)

  • 11g Release 2 (11.1.2)

  • 11g Release 1 (11.1.1.5.0)

Oracle Entitlements Server

  • 11g Release 2 (11.1.2.1.0)

Oracle Privileged Account Manager

  • 11g Release 2 (11.1.2.1.0)


1.6 Documentation Roadmap

This section provides the documentation roadmap for all the upgrade scenarios on Oracle WebLogic Server.

Note:

For information about upgrading Oracle Identity and Access Management components on IBM WebSphere, see Oracle Fusion Middleware Third-Party Application Server Guide for Oracle Identity and Access Management.

Table 1-8 lists all the upgrade scenarios, and the chapters in which the respective upgrade procedure is described. Depending on the upgrade scenario, go to the respective chapter, and follow the procedure.

Table 1-8 Documentation Roadmap for Oracle Identity and Access Management Upgrade

Upgrade Scenarios Chapter

Oracle Identity and Access Management 11.1.2.1.0 and 11.1.2 Upgrade on a Single Node

 

Oracle Access Management Access Manager 11.1.2.1.0 to Oracle Access Management Access Manager 11.1.2.2.0 Upgrade

Oracle Access Management Access Manager 11.1.2 to Oracle Access Management Access Manager 11.1.2.2.0 Upgrade

Chapter 3, "Upgrading Oracle Access Manager 11g Release 2 (11.1.2.x.x) Environments"

Oracle Adaptive Access Manager 11.1.2.1.0 to Oracle Adaptive Access Manager 11.1.2.2.0 Upgrade

Oracle Adaptive Access Manager 11.1.2 to Oracle Adaptive Access Manager 11.1.2.2.0 Upgrade

Chapter 4, "Upgrading Oracle Adaptive Access Manager 11g Release 2 (11.1.2.x.x) Environments"

Oracle Identity Manager 11.1.2.1.0 to Oracle Identity Manager 11.1.2.2.0 Upgrade

Oracle Identity Manager 11.1.2 to Oracle Identity Manager 11.1.2.2.0 Upgrade

Chapter 5, "Upgrading Oracle Identity Manager 11g Release 2 (11.1.2.x.x) Environments"

Oracle Entitlements Server 11.1.2.1.0 to Oracle Entitlements Server 11.1.2.2.0 Upgrade

Oracle Entitlements Server 11.1.2 to Oracle Entitlements Server 11.1.2.2.0 Upgrade

Chapter 6, "Upgrading Oracle Entitlements Server 11g Release 2 (11.1.2.x.x) Environments"

Oracle Privileged Account Manager 11.1.2.1.0 to Oracle Privileged Account Manager 11.1.2.2.0 Upgrade

Oracle Privileged Account Manager 11.1.2 to Oracle Privileged Account Manager 11.1.2.2.0 Upgrade

Chapter 7, "Upgrading Oracle Privileged Account Manager 11g Release 2 (11.1.2.x.x) Environments"

Oracle Identity Navigator 11.1.2.1.0 to Oracle Identity Navigator 11.1.2.2.0 Upgrade

Oracle Identity Navigator 11.1.2.1.0 to Oracle Identity Navigator 11.1.2.2.0 Upgrade

Chapter 8, "Upgrading Oracle Identity Navigator 11g Release 2 (11.1.2.x.x) Environments"

   

Oracle Identity and Access Management 11.1.1.7.0, 11.1.1.5.0, and 9.1.x.x Upgrade on a Single Node

 

Oracle Access Manager 11.1.1.7.0 to Oracle Access Management Access Manager 11.1.2.2.0 Upgrade

Oracle Access Manager 11.1.1.5.0 to Oracle Access Management Access Manager 11.1.2.2.0 Upgrade

Chapter 9, "Upgrading Oracle Access Manager 11g Release 1 (11.1.1.x.x) Environments"

Oracle Adaptive Access Manager 11.1.1.7.0 to Oracle Adaptive Access Manager 11.1.2.2.0 Upgrade

Oracle Adaptive Access Manager 11.1.1.5.0 to Oracle Adaptive Access Manager 11.1.2.2.0 Upgrade

Chapter 10, "Upgrading Oracle Adaptive Access Manager 11g Release 1 (11.1.1.x.x) Environments"

Oracle Identity Manager 11.1.1.7.0 to Oracle Identity Manager 11.1.2.2.0 Upgrade

Oracle Identity Manager 11.1.1.5.0 to Oracle Identity Manager 11.1.2.2.0 Upgrade

Oracle Identity Manager 9.1.x.x to Oracle Identity Manager 11.1.2.2.0 Upgrade

Chapter 11, "Upgrading Oracle Identity Manager 11g Release 1 (11.1.1.x.x) Environments"

Chapter 14, "Upgrading Oracle Identity Manager 9.1.x.x Environments"

Oracle Entitlements Server 11.1.1.5.0 to Oracle Entitlements Server 11.1.2.2.0 Upgrade

Chapter 12, "Upgrading Oracle Entitlements Server 11g Release 1 (11.1.1.5.0) Environment"

Oracle Identity Navigator 11.1.1.7.0 to Oracle Identity Navigator 11.1.2.2.0 Upgrade

Oracle Identity Navigator 11.1.1.5.0 to Oracle Identity Navigator 11.1.2.2.0 Upgrade

Chapter 13, "Upgrading Oracle Identity Navigator 11g Release 1 (11.1.1.x.x) Environments"

   

Oracle Identity and Access Management High Availability Upgrade

 

Oracle Access Manager High Availability Upgrade

Chapter 15, "Upgrading Oracle Access Manager High Availability Environments"

Oracle Adaptive Access Manager High Availability Upgrade

Chapter 16, "Upgrading Oracle Adaptive Access Manager High Availability Environments"

Oracle Identity Navigator High Availability Upgrade

Chapter 17, "Upgrading Oracle Identity Manager High Availability Environments"

Oracle Entitlements Server High Availability Upgrade

Chapter 18, "Upgrading Oracle Entitlements Server High Availability Environments"

Oracle Privileged Account Manager High Availability Upgrade

Chapter 19, "Upgrading Oracle Privileged Account Manager High Availability Environments"