4 Configuring Oracle Identity Navigator

This chapter explains how to configure Oracle Identity Navigator. It includes the following topics:

4.1 Important Note Before You Begin

Before you start installing and configuring Oracle Identity and Access Management products in any of the scenarios discussed in this guide, note that IAM_HOME is used to refer to the Oracle Home directory that includes Oracle Identity Manager, Oracle Access Management, Oracle Adaptive Access Manager, Oracle Entitlements Server, Oracle Identity Navigator, Oracle Privileged Account Manager, and Oracle Access Management Mobile and Social. You can specify any name for this Oracle Home directory.

4.2 Installation and Configuration Roadmap for Oracle Identity Navigator

Table 4-1 lists the tasks for installing and configuring Oracle Identity Navigator.

Table 4-1 Installation and Configuration Flow for Oracle Identity Navigator

No. Task Description

1

Review installation concepts in the Installation Planning Guide.

Read the Oracle Fusion Middleware Installation Planning Guide, which describes the process for various users to install or upgrade to Oracle Fusion Middleware 11g (11.1.2) depending on the user's existing environment.

2

Review the system requirements and certification documents to ensure that your environment meets the minimum installation requirements for the components you are installing.

For more information, see Section 2.1, "Reviewing System Requirements and Certification".

3

Obtain the Oracle Fusion Middleware Software.

For more information, see Section 3.2.1, "Obtaining the Oracle Fusion Middleware Software"

4

Review the Database requirements.

For more information, see Section 3.2.2, "Database Requirements".

5

Run Oracle Fusion Middleware Repository Creation Utility (RCU) to create and load the appropriate schemas for Oracle Identity and Access Management products.

For more information, see Section 3.2.3, "Creating Database Schema Using the Oracle Fusion Middleware Repository Creation Utility (RCU)".

6

Review WebLogic Server and Middleware Home requirements.

For more information, see Section 3.2.4, "WebLogic Server and Middleware Home Requirements".

7

Start the Oracle Identity and Access Management Installer.

For more information, see Section 3.2.6, "Starting the Oracle Identity and Access Management Installer".

8

Install the Oracle Identity and Access Management 11g software.

Oracle Identity Navigator is included in the Oracle Identity and Access Management Suite. You can use the Oracle Identity and Access Management 11g Installer to install Oracle Identity and Access Management Suite.

For more information, see Section 3.2.7, "Installing Oracle Identity and Access Management 11g Release 2 (11.1.2.2.0)".

9

Run the Oracle Fusion Middleware Configuration Wizard to configure your Oracle Identity and Access Management products in a new or existing WebLogic domain.

For more information, see Section 4.3, "Configuring Oracle Identity Navigator in a New WebLogic Domain".

10

Configure the Database Security Store.

For more information, see Section 3.2.10, "Configuring Database Security Store for an Oracle Identity and Access Management Domain".

11

Start the servers.

You must start the WebLogic Administration Server. For more information, see Section 4.4, "Starting the Servers".

12

Complete the post-installation tasks.

Complete the following post-installation tasks:

4.3 Configuring Oracle Identity Navigator in a New WebLogic Domain

This topic describes how to configure only Oracle Identity Navigator in a new WebLogic administration domain. It includes the following sections:

4.3.1 Appropriate Deployment Environment

Perform the configuration in this topic if you want to configure Oracle Identity Navigator with Oracle Identity Manager, Oracle Access Management, and Oracle Adaptive Access Manager in a new WebLogic domain and then run the Oracle Identity Navigator discovery feature. This feature populates links to the product consoles for Oracle Identity Manager, Oracle Access Management, and Oracle Adaptive Access Manager. You can then access those product consoles from within the Oracle Identity Navigator interface, without having to remember the individual console URLs.

4.3.2 Components Deployed

Performing the configuration in this section deploys the Oracle Identity Navigator application on a new WebLogic domain.

4.3.3 Dependencies

The configuration in this section depends on the following:

4.3.4 Procedure

Perform the following steps to configure only Oracle Identity Navigator in a new WebLogic domain:

  1. Start the Oracle Fusion Middleware Configuration Wizard by running the <IAM_HOME>/common/bin/config.sh script (on UNIX), or <IAM_HOME>\common\bin\config.cmd (on Windows).

    The Welcome screen of the Oracle Fusion Middleware Configuration Wizard appears.

    Note:

    IAM_HOME is used as an example here. You must run this script from your Oracle Identity and Access Management Home directory that contains Oracle Identity Manager, Oracle Access Management, Oracle Adaptive Access Manager, Oracle Entitlements Server, Oracle Identity Navigator, Oracle Privileged Account Manager, and Oracle Access Management Mobile and Social.

  2. On the Welcome screen, select Create a new WebLogic domain, and click Next. The Select Domain Source screen appears.

  3. On the Select Domain Source screen ensure that the Generate a domain configured automatically to support the following products: option is selected. Select Oracle Identity Navigator for Managed Server - 11.1.2.2.0 [IAM_Home], and click Next. The Specify Domain Name and Location screen appears.

    Note:

    When you select the Oracle Identity Navigator for Managed Server- 11.1.2.2.0 [IAM_Home] option, the following options are also selected, by default:

    • Oracle Platform Security Service 11.1.1.0 [IAM_Home]

    • Oracle JRF 11.1.1.0 [oracle_common]

  4. Enter a name and a location for the domain to be created, and click Next. The Configure Administrator User Name and Password screen appears.

  5. Configure a user name and a password for the administrator. The default user name is weblogic. Click Next.

  6. The Configure Server Start Mode and JDK screen appears. Choose a JDK from the Available JDKs and select a WebLogic Domain Startup Mode. Click Next.

  7. On the Configure JDBC Component Schema screen, select a component schema, such as the OPSS Schema that you want to modify.

    You can set values for Schema Owner, Schema Password, Database and Service, Host Name, and Port. Click Next. The Test JDBC Component Schema screen appears. After the test succeeds, click Next. The Select Optional Configuration screen appears.

  8. On the Select Optional Configuration screen, you can configure the following:

    • Administration Server

    • Managed Servers, Clusters and Machines

    • Deployments and Services

    • RDBMS Security Store

    Select the desired options, and click Next.

    Note:

    The default managed server name where Oracle Identity Navigator is deployed is opam_server1.

  9. Optional: Configure the following Administration Server parameters:

    • Name

    • Listen address

    • Listen port

    • SSL listen port

    • SSL enabled or disabled

  10. Optional: Assign the Administration Server to a machine.

  11. Optional: Select Deployments, such as applications and libraries, and Services to target them to a particular cluster or server.

  12. Optional: Configure RDBMS Security Store, as required.

  13. On the Configuration Summary screen, you can view summaries of your configuration for deployments, application, and service. Review the domain configuration, and click Create to start creating the domain.

A new WebLogic domain to support Oracle Identity Navigator is created in the <MW_HOME>\user_projects\domains directory (on Windows). On UNIX, the domain is created in the <MW_HOME>/user_projects/domains directory.

Note:

After configuring Oracle Identity Navigator in a new WebLogic administration domain, you must configure the Database Security Store. For more information, see Section 3.2.10, "Configuring Database Security Store for an Oracle Identity and Access Management Domain".

4.4 Starting the Servers

After installing and configuring Oracle Identity Navigator, you must start the Oracle WebLogic Administration Server and the Managed Server for Oracle Identity Navigator, as described in Appendix C, "Starting the Stack".

4.5 Verifying Oracle Identity Navigator

To verify the installation of Oracle Identity Navigator, complete the following steps:

  1. Log in to the Administration Console for Oracle Identity Navigator using the following URL:

    http://<managedserver-host>:<managedserver-nonsslport>/oinav/faces/idmNag.jspx

    The Oracle Identity Navigator dashboard and the resource catalog are displayed.

  2. Click the Customize link on the upper right corner of the screen to switch to the Edit mode.

  3. Click the Add Content button on the page. A resource catalog pops up.

  4. In the pop-up dialog, click the Open link for the folder IDM Product Launcher. The Launcher task flow pops up.

  5. In the pop-up dialog, click the Add link. Verify that the Launcher portlet is added to the page content. Continue to add News task flows to the page, without closing the pop-up dialog. Click the up arrow at the upper left corner. The top folder layout is displayed again. Click the Open link for the folder News. The News and Announcements task flow pops up.

  6. In the News and Announcements pop-up dialog, click the Add link. Verify that the Report portlet is added to the page content. Continue to add Reports task flows to the page, without closing the pop-up dialog. Click the up arrow at the upper left corner. The top folder layout is displayed again. Click the Open link for the folder My Reports. Click the Add link and the Close button (X). All the three workflows are added to the page content.

  7. Change the default layout, if necessary, by clicking the Pencil icon located on the upper right area of the screen.

  8. To exit the Edit mode, click the Close button.

    If the task flows are properly added to the page content, the screen displays the task flow content.

  9. Test the Product Registration functionality as follows:

    1. Create, edit, or delete the product information by clicking the Administration tab.

    2. To add a new product, click the Create image icon in the Product Registration section. The New Product Registration dialog pops up.

    3. Enter the relevant information in this dialog, and the new product registration is updated accordingly. The new product registration data is updated on the Launcher portlet after you click the Dashboard tab.

    4. Click the product link and ensure that a new browser window or tab opens with the registered product URL.

  10. Test the News functionality as follows:

    1. Click the refresh icon to update the RSS feed content.

    2. Click the news item link to open the source of content in a new browser window or tab.

  11. Test the Reports functionality as follows:

    1. Add a report by clicking the Add icon. The Add Report dialog pops up.

    2. In this dialog, select a report to add, and click the Add Report button. Verify that the report is added.

    3. Run a report by clicking the report icon. The report opens in a new browser window or tab.

4.6 Getting Started with Oracle Identity Navigator After Installation

After installing Oracle Identity Navigator, refer to the "Using Identity Navigator" chapter in the Oracle Fusion Middleware Administrator's Guide for Oracle Identity Navigator.