Contents

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

1 Introduction

• 1.1 Latest Release Information
• 1.2 Purpose of this Document
• 1.3 System Requirements and Specifications
• 1.4 Certification Information
  • 1.4.1 Where to Find Oracle Fusion Middleware Certification Information
  • 1.4.2 Certification Exceptions
    • 1.4.2.1 Certification Information for Oracle Fusion Middleware 11g R2 with Oracle Database 11.2.0.1
    • 1.4.2.2 Excel Export Issue on Windows Vista Client
    • 1.4.2.3 Oracle Forms and Oracle Reports 11g Installer Issues In Windows Vista and Windows XP
    • 1.4.2.4 Restrictions on Specific Browsers
  • 1.4.3 JMSDELIVERYCOUNT Is Not Set Properly
  • 1.4.4 Viewer Plugin Required On Safari 4 To View Raw XML Source
• 1.5 Downloading and Applying Required Patches
• 1.6 Licensing Information

2 Installation and Configuration Issues for Oracle Identity and Access Management

• 2.1 General Issues and Workarounds
  • 2.1.1 Simple Security Mode Does Not Work on AIX
  • 2.1.2 Error Displayed in the Oracle Access Management Managed Server Logs
  • 2.1.3 Mandatory Patches for Enabling SSL on Oracle HTTP Server
  • 2.1.4 Optional: Setting log levels to SEVERE for WebLogic Servers in Identity and Access Management Domain
  • 2.1.5 Modifying the Server Side Property for Oracle Identity Manager
  • 2.1.6 "Identity and Access" Link Missing from the Enterprise Manager Console on Windows 2012
  • 2.1.7 OAM Server Startup Fails After Applying WebLogic Server Patches
  • 2.1.8 Applications Will Not Start After WebLogic Server is Updated
• 2.2 Installation Issues and Workarounds
  • 2.2.1 Error when Installing Oracle Identity Manager Design Console
  • 2.2.2 Mandatory Patches Required for Installing Oracle Identity Manager
  • 2.2.3 JPS Keystore Service Initialization Failure in Join Domain Scenario for Oracle Access Management Domain
  • 2.2.4 Prerequisite Checks Fails When Installing SOA on Windows 2012
  • 2.2.5 Oracle Universal Installer Fails to Apply One-off Patches if a 32-Bit JVM is in MW_HOME
  • 2.2.6 Opatch Errors When Applying One-off Patches During Oracle Identity and Access Management Installation
  • 2.2.7 Prerequisite Checks Fails When Installing Oracle Identity and Access Management on Oracle Enterprise Linux 6
  • 2.2.8 Prerequisite Checks Fails When Installing Oracle Identity and Access Management On Red Hat Enterprise Linux 6.x
  • 2.2.9 SOA-INFRA Component Fails to Start up After Installing SOA in Silent Mode
• 2.3 Configuration Issues and Workarounds
  • 2.3.1 Default Cache Directory Error
  • 2.3.2 Launching Oracle Identity Manager Configuration Wizard on AIX with JDK7
  • 2.3.3 Unable to Add Weblogic Password in the Fusion Middleware Configuration Wizard
  • 2.3.4 Mandatory Steps to Complete After Installing Oracle Access Management or Oracle Identity Manager
  • 2.3.5 Use Absolute Paths While Running configureSecurityStore.py With -m Join
  • 2.3.6 Security Store Join Fails on Windows
  • 2.3.7 Weblogic Server Configuration Wizard does not support JDK6 on AIX7
  • 2.3.8 Access Policy Manager Deployments Do Not Target Administration Server in Cluster Scenario
  • 2.3.9 Requests Fail with ClassCastException
  • 2.3.10 Modify PKCS11-Solaris Security Provider Before Running the configSecurityStore.py Command When Using Sun JDK 1.7
  • 2.3.11 Server Startup Failure
  • 2.3.12 OES Configuration Using JBoss as a Security Module Throws Error on AIX
  • 2.3.13 Configuring Database Security Store Fails with JVM Error
  • 2.3.14 Configuring SSL When Configuring Database Security Store

3 Upgrade and Migration Issues for Oracle Identity and Access Management

• 3.1 Upgrade Issues
  • 3.1.1 Upgrade Issues and Workarounds
    • 3.1.1.1 Upgrade User Form Does Not Upgrade UDF of Type LOV Correctly
    • 3.1.1.2 Updating System Mbean Configuration
    • 3.1.1.3 SOA Email Notification Does Not Work
    • 3.1.1.4 AD User Management Connector Issues
    • 3.1.1.5 Harmless Error After Applying Interim Patch 14481477
    • 3.1.1.6 Delete WebLogic Server TMP Directories
    • 3.1.1.7 Classpath Issue While Patching Oracle Identity Manager Middle Tier
    • 3.1.1.8 OAuth Service Policy is Missing After Upgrade
    • 3.1.1.9 "Prerequisite check "CheckApplicable" failed" and "Required component(s) missing" Messages in Access Manager Upgrade Logs
    • 3.1.1.10 Errors While Starting OIM Server After Successful Upgrade
    • 3.1.1.11 obLockedOn Attribute Missing From Oracle Internet Directory After Upgrading Access Manager to 11.1.2.2.0
    • 3.1.1.12 Exception When Upgrading Oracle Identity Manager Middle Tier
    • 3.1.1.13 Active Directory User Management 11.1.1.5.0 Connector May Not Work After Upgrading Oracle Identity Manager to 11.1.2.2.0
    • 3.1.1.14 Error While Starting OIM Server After Upgrading OIM 9.1.x.x to 11.1.2.2.0
    • 3.1.1.15 Warning Message While Logging in to OAAM Admin or OAAM Offline Server After Upgrade
    • 3.1.1.16 Error in Upgrade log file After Upgrading OAAM Admin and OAAM Offline Servers
    • 3.1.1.17 Error Message While Starting OAAM Admin and Managed Servers After Upgrade
    • 3.1.1.18 Some Apps are in Prepared State After Upgrade
    • 3.1.1.19 Error When Accessing OAAM
    • 3.1.1.20 Grant/Revoke Requests Cannot be Viewed After OIM Upgrade
    • 3.1.1.21 Error During REQUEST_TYPE Upgrade
    • 3.1.1.22 Exception in Log File After OAAM Upgrade
    • 3.1.1.23 OAAM Administration Server Shows Version 11.1.2.1.0 After Upgrade
    • 3.1.1.24 OAAM Admin Redeploy Does Not Work When Upgrading OAAM to 11.1.2.2.0
    • 3.1.1.25 Identifying and Recompiling INVALID Schema Objects After Upgrading Oracle Identity Manager to 11.1.2.2.0
    • 3.1.1.26 Error While Executing ConfigureSecurityStore.py
    • 3.1.1.27 Error Message While Starting Oracle Identity Manager Managed Server After Upgrade
    • 3.1.1.28 LabelExistsException While Starting Oracle Identity Manager Server After Upgrade
    • 3.1.1.29 Null Pointer Exception While Creating IDS or ESSO Profile After Upgrading Oracle Access Manager
    • 3.1.1.30 Error When Accessing My Entitlements Page After Upgrading Oracle Identity Manager to 11.1.2.2.0
    • 3.1.1.31 Exception When you Click on 'Edit' link After Creating Application Instance
    • 3.1.1.32 'Generate Entitlement Forms' Option not Available on Clicking 'Regenerate View' After Upgrading Oracle identity Manager
    • 3.1.1.33 Error While Upgrading Oracle Identity Manager Binaries Due to Wrong OPatch version
    • 3.1.1.34 Pre-Upgrade Report for OIM Detects Your Existing OIM version as 11.1.2.0.0 Though the Actual Version is 11.1.2.1.0
    • 3.1.1.35 Exception When Opening a User After Upgrading Oracle Identity Manager
    • 3.1.1.36 Exception When Upgrading Oracle Access Manager System Configurations Using upgradeConfig() Command
    • 3.1.1.37 IllegalArgumentException When Upgrading Oracle SOA Suite as Part of Oracle Identity Manager Upgrade
• 3.2 Migration Issues
  • 3.2.1 Migration Issues and Workarounds
    • 3.2.1.1 osso.conf Files may be Copied to Alternate File Location If Upgrading Oracle Single Sign-On 10g Fails
    • 3.2.1.2 Server Logs and Assessment Report for Certain Scenarios Show Only English Messages
    • 3.2.1.3 Registering Policy Agent 2.2 Using RREG Fails Due to Unavailability of Agent Template
    • 3.2.1.4 Assessment Report for OAM 10g Incremental Migration Shows Artifacts that are not Selected
    • 3.2.1.5 Assessment Report for OAM 10g Delta Migration Shows Artifacts that are not Selected
    • 3.2.1.6 Oracle Access Management 11g Release 2 (11.1.2.0.0) Coexistence, Upgrade, and Migration Supplement

4 Oracle Fusion Middleware Administration

• 4.1 General Issues and Workarounds
  • 4.1.1 Clarification About Path for OPMN
  • 4.1.2 Fusion Middleware Control May Return Error in Mixed IPv6 and IPv4 Environment
  • 4.1.3 Limitations in Moving from Test to Production
• 4.2 Configuration Issues and Workarounds
  • 4.2.1 Configuring Fusion Middleware Control for Windows Native Authentication
• 4.3 Documentation Errata
  • 4.3.1 Documentation Errata for the Oracle Fusion Middleware Administrator's Guide
  • 4.3.2 Documentation Errata for the Oracle Fusion Middleware High Availability Guide
    • 4.3.2.1 JRockit SDK Not Certified for IDM

5 Oracle Access Management

• 5.1 General Issues and Workarounds
  • 5.1.1 General Issues and Workarounds: Access Manager
    • 5.1.1.1 BasicScheme Does Not Redirect to Failure URL when Using Internet Explorer Browser
    • 5.1.1.2 Error During Federation Configuration After Upgrade From PS1 to PS2
    • 5.1.1.3 Time Between Access Manager and Mobile Device Must Be Synced
    • 5.1.1.4 User Account Not Locked After Invalid Attempts
    • 5.1.1.5 UseCaseInsensitiveResourceMatch Doesn't Work in PS2
    • 5.1.1.6 Additional Setting Required for Case Insensitive Policy Resource Matching
    • 5.1.1.7 Cookie Based Session Management Available Only for 11g WebGates
    • 5.1.1.8 Logout URL Value in DCC Profile Doesn't Clear Browser Session
    • 5.1.1.9 Automated Policy Synchronization Not Enabled and Supports Only Policy Artifacts
    • 5.1.1.10 Not All User Attributes Are Available For Post Authentication Rules
    • 5.1.1.11 Partner Registration Fails When Using WebSphere Application Server
    • 5.1.1.12 Attributes That Have No Value Defined Substituted With NULL
    • 5.1.1.13 Access Denied When LDAP Authentication Module Changed to OID
    • 5.1.1.14 SHA2 Support Limitations
    • 5.1.1.15 Granular Timeout Doesn't Work If Cookie-based SME Enabled
    • 5.1.1.16 OCSP Not Available for x509 Plugin on WAS
    • 5.1.1.17 upgradeConfig() Fails On WebSphere Application Server
    • 5.1.1.18 JDK7 Required for OAM 10g/OAM 11g Coexistence
    • 5.1.1.19 X.509 Minimum Keylength Increases with JDK 7u 40
    • 5.1.1.20 LDR_PRELOAD64 Flag Required For 64-bit Platform Non-OHS WebGate Agents on IBM Power AIX 6.1 & 7.1
    • 5.1.1.21 ASDK Returns Incorrect Version Details
    • 5.1.1.22 Benign Exceptions Observed
    • 5.1.1.23 Can't Use WLST Commands For Federated SSO Password Policy
    • 5.1.1.24 Exception Logged on Accessing Resource
    • 5.1.1.25 Can't Get Static Method UserSession.getSessionAttributes()
    • 5.1.1.26 Consecutive Logins in Multiple Tabs Doesn't Work for WebGate
    • 5.1.1.27 Unsupported Items in WebSphere Trust Association Interceptor
    • 5.1.1.28 Logged Error During OAM Server Configuration Test
    • 5.1.1.29 Simple Policy Not Migrated After Complete Migration
    • 5.1.1.30 Available Services Page Won't Open In Localized Internet Explorer 9
    • 5.1.1.31 RSA Plugin Removed From System
    • 5.1.1.32 Create Provider Manually When Extending OIM Domain
    • 5.1.1.33 Unable to Access "/" Context Root if Protected by OSSO Agent for 11g OHS
    • 5.1.1.34 Starting Access Manager When Protected by Oracle Entitlements Server Throws Exception
    • 5.1.1.35 Access Tester Does Not Work with Non-ASCII Agent Names
    • 5.1.1.36 Authentication Fails: WNA Challenge, Active Directory, Users with Non-ASCII Characters
    • 5.1.1.37 Simple Mode is Not Supported for JDK 1.6 and AIX
    • 5.1.1.38 User Might Need to Supply Credentials Twice with DCC-Enabled WebGate
  • 5.1.2 General Issues and Workarounds: Security Token Service
    • 5.1.2.1 STS Does Not Honor The Lifetime Sent In RequestSecurityToken
    • 5.1.2.2 Click On Security Token Service Column Throws Exception
    • 5.1.2.3 Issues with Searches and Non-English Browser Settings
  • 5.1.3 General Issues and Workarounds: Identity Federation
    • 5.1.3.1 Errors when WebGate has Credential Collector Option Enabled
  • 5.1.4 General Issues and Workarounds: OAuth Services, and Mobile and Social
    • 5.1.4.1 Mobile and Social Does not Support the Native Android OS Browser
    • 5.1.4.2 Internet Explorer Users Need to Enable Protected Mode
    • 5.1.4.3 Google Language Menu can Cause the Sign-in Page Flow to Display in Multiple Languages
    • 5.1.4.4 The Mobile and Social Settings Pane can be Dragged out of View
    • 5.1.4.5 The White Pages App Requires at Least Version 11.1.2.2.2 of Oracle Access Management
  • 5.1.5 General Issues and Workarounds: Access Portal Service
    • 5.1.5.1 Credentials Not Captured In Basic Authentication (Modal) Dialogs
• 5.2 Configuration Issues and Workarounds
  • 5.2.1 Configuration Issues and Workarounds: Access Manager
    • 5.2.1.1 OAM Migration Doesn't Create All Data Sources
    • 5.2.1.2 Password Validation Scheme Defaults to LDAP after Upgrade
    • 5.2.1.3 Using Plugins Between IBM HTTP Server and WebSphere
    • 5.2.1.4 Using ObAccessClient Results in SDK Initialization Failure
    • 5.2.1.5 Configuring oamtai.xml for Multiple WebGates
    • 5.2.1.6 obLockedOn Attribute Missing From Oracle Internet Directory
    • 5.2.1.7 OAM 10g WebGates Used with OAM 11g Need JavaScript
    • 5.2.1.8 Enabling OpenSSO Agent Configuration Hotswap
  • 5.2.2 Configuration Issues and Workarounds: Security Token Service
    • 5.2.2.1 Create Like (Duplicate) Does Not Copy All Properties of Original Template
    • 5.2.2.2 No Console Support Removing Partner Encryption or Signing Certificates
  • 5.2.3 Configuration Issues and Workarounds: Identity Federation
    • 5.2.3.1 Provider Search Text Fields do an Exact Match Search
    • 5.2.3.2 Incorrect Error Message when an Invalid Signing Certificate is Uploaded
  • 5.2.4 Configuration Issues and Workarounds: OAuth Services, and Mobile and Social
    • 5.2.4.1 The OAuth 3-Legged Flow With External LDAP Requires a WebGate Proxy
    • 5.2.4.2 OAuth Scope Supersets Should be Defined Before Subsets
    • 5.2.4.3 Steps Required to Localize the Register Page
    • 5.2.4.4 Mobile Clients do not Translate Error Messages Sent by the Server
    • 5.2.4.5 Yahoo Identity Provider Does not Return First Name and Last Name
    • 5.2.4.6 Once Set, Jail Breaking "Max OS Version" Setting Cannot be Empty
• 5.3 Oracle Access Management Console Issues
  • 5.3.1 Content Missing from Help Screens
  • 5.3.2 Messages Sent From the Server to the Client Can Appear in a Foreign Language
• 5.4 Documentation Errata
  • 5.4.1 Oracle Fusion Middleware Administrator's Guide for Oracle Access Management
    • 5.4.1.1 Max Session Time Description Update
    • 5.4.1.2 Creds Parameter Lists 10g and 11g Format Without Specifics
    • 5.4.1.3 Incorrect OpenSSO Agent Configuration Directory Documented
    • 5.4.1.4 "Integrating Microsoft SharePoint Server With Access Manager" Chapter Requires an Update
  • 5.4.2 Oracle Fusion Middleware Developer's Guide for Oracle Access Management

6 Oracle Entitlements Server

• 6.1 General Issues and Workarounds
  • 6.1.1 Searching for a Resource Created in the Authorization Policy Manager of a Derby Template Domain Gives an Error
  • 6.1.2 Grant Missing Manage and View Permissions for a Delegated Administrator
• 6.2 Configuration Issues and Workarounds
  • 6.2.1 x.509 Certificates Key Length Limitation for JDK1.7.0_40 and Later
• 6.3 Documentation Errata

7 Oracle Adaptive Access Manager

• 7.1 OAAM Admin Issues and Workarounds
  • 7.1.1 Session Details
    • 7.1.1.1 Searching for Devices May Not Work Correctly in Some Cases
    • 7.1.1.2 Sorting by "Last Used On Date" Does Not Work for Devices
    • 7.1.1.3 Session Details Are Not Displayed Correctly
    • 7.1.1.4 Labeling Issues
    • 7.1.1.5 User Interface Issues
  • 7.1.2 Bulk Editing for Closing CSR Cases Shows Agent Case Dispositions
• 7.2 OAAM Command Line Tool (CLI) Issues and Limitations
  • 7.2.1 OAAM CLI Scripts Failing If File-Based CSF Is Used
• 7.3 Multi-Language Support Issues and Limitations
  • 7.3.1 OAAM Admin Console Contains Garbled Characters When Supplementary Characters are Used
  • 7.3.2 KBA Multi-Language Support Issues
• 7.4 Test to Production (T2P) Issues and Limitations
  • 7.4.1 During the OAAM Plug-in Paste Configuration Process an Incorrect Message Is Shown When Steps are Skipped
• 7.5 API Issues
  • 7.5.1 setUserDevices API Does Not Work Correctly in Some Cases
  • 7.5.2 getUserDevices API Returns Success Status for Invalid User ID
• 7.6 Documentation Errata

8 Oracle Privileged Account Manager

• 8.1 General Issues and Workarounds
  • 8.1.1 No Translation (Messages or Help) Support for OPAM Command Line Tools
  • 8.1.2 idmconfigtool Does Not Create OPAM Admin Roles in Groups Container
  • 8.1.3 Deprecated Features for Oracle Privileged Account Manager Restful API
  • 8.1.4 Thread Count Continuously Increases During Oracle Privileged Session Manager Session Checkouts
  • 8.1.5 Unlimited Tablespace Privilege Missing When Using Oracle Database 12.1
  • 8.1.6 Session Checkout Does Not Appear In "My Checkouts"
  • 8.1.7 Improve User and Group Search Performance
  • 8.1.8 Database Connections Leaked from Oracle Privileged Account Manager Server
• 8.2 Configuration Issues and Workarounds
  • 8.2.1 Use Absolute Paths While Running configureSecurityStore.py With -m Join
  • 8.2.2 Upgrade: CSF Mapping Does Not Get Imported
• 8.3 Documentation Errata
  • 8.3.1 Oracle Fusion Middleware Administrator's Guide for Oracle Privileged Account Manager
  • 8.3.2 Oracle Fusion Middleware High Availability Guide
  • 8.3.3 Oracle Fusion Middleware Patching Guide for Identity and Access Management

9 Oracle Identity Navigator

10 Oracle Identity Manager

• 10.1 Patch Requirements
  • 10.1.1 Obtaining Patches From My Oracle Support (Formerly OracleMetaLink)
  • 10.1.2 Patch Requirements for Oracle Database 11g (11.1.0.7)
  • 10.1.3 Patch Requirements for Oracle Database 11g (11.2.0.1.0)
  • 10.1.4 Patch Requirements for Oracle Database 11g (11.2.0.2.0)
  • 10.1.5 Patch Requirements for Oracle Database 11g (11.2.0.3.0)
  • 10.1.6 Patch Requirements for Oracle Database 11g (11.2.0.4.0)
  • 10.1.7 Patch Requirements for Oracle Database 10g (10.2.0.3, 10.2.0.4, and 10.2.0.5)
  • 10.1.8 Patch Upgrade Requirement
  • 10.1.9 Patch Requirement for BI Publisher 11.1.1.7.1
  • 10.1.10 Patch Requirement for SOA 11.1.1.7.0
  • 10.1.11 Patch Requirement for SSL with JDK 7u40 or Later
  • 10.1.12 Obtaining the Latest Bundle Patch
• 10.2 What's New in Oracle Identity Manager 11g Release 2 (11.1.2.2)
  • 10.2.1 Access Policy Harvesting for Reconciled Accounts
  • 10.2.2 Dynamic Organization Membership
  • 10.2.3 Hierarchical Entitlements
  • 10.2.4 Catalog Auditing
  • 10.2.5 Archiving/Purge Support for Entities
  • 10.2.6 Draft Request Support
  • 10.2.7 Additional Information in Requests
  • 10.2.8 Account and Entitlement Dependency Handling
  • 10.2.9 Entitlement Form Support
  • 10.2.10 Sunrise/Sunset of Accounts and Entitlements
  • 10.2.11 Flexible Certification
  • 10.2.12 Improved Diagnostic Console via Oracle Enterprise Manager
  • 10.2.13 Enable Taskflows for Customization
  • 10.2.14 FVC Utility Enhancements
  • 10.2.15 BI Publisher Certification for IBM WebSphere Application Server
• 10.3 General Issues and Workarounds
  • 10.3.1 Auto-Logged In User is Logged Out After the Cookie Expiry Interval of 120 Seconds
  • 10.3.2 Localized Display Name Not Reconciled in Oracle Identity Manager Via User/Role Incremental Reconciliation
  • 10.3.3 Organizations Not Created Because of AD Organization Reconciliation Run
  • 10.3.4 The SodCheckViolation Field of the Process Form is Not Updated for Request Provisioning
  • 10.3.5 Blank Page Displayed for Approval Details
  • 10.3.6 Modification of Disabled Account and Requesting Entitlement for the Account is Allowed
  • 10.3.7 The Refresh Button is Truncated in Some Pages of the Oracle Identity Self Service
  • 10.3.8 Provisioning of Application Instance with AD User Resource Object Does not Work
  • 10.3.9 Some Attestation Pages Do Not Work in Mozilla Firefox and Google Chrome
  • 10.3.10 Custom Scheduled Jobs Fail Because of Dependency on Legacy APIs
  • 10.3.11 Catalog Tag Cannot Store More Than 256 Characters
  • 10.3.12 Self Registration Request Fails After Request Approval
  • 10.3.13 Soft-Deleted Entitlement is Provisioned by Access Policy-Based Provisioning
  • 10.3.14 Interrupted Scheduled Job Run Fails on Restarting
  • 10.3.15 Bulk Request for Multiple Entities Fails After Approval
  • 10.3.16 Import of Disconnected Application Instance Fails
  • 10.3.17 Existing Data for Administrators Role Grant Does Not Sync After Applying Patch 14591093
  • 10.3.18 The Reset Button in the Resource Object Lookup Redirects to Basic Search
  • 10.3.19 IT Resource Definition Not Displayed in Dependency List
  • 10.3.20 Error in Entitlement Provisioning for Manually Created Resource Object
  • 10.3.21 QBE Returns No Result When User Has No Permission on Organization of the Requester
  • 10.3.22 Checkbox UDF Displayed as Boolean Field
  • 10.3.23 Lookup for Entitlements Must Be Searchable and Searchable Lookup
  • 10.3.24 Dependent Lookup Does Not Work With Pick List Component
  • 10.3.25 Cascading Lookups Display Limited Number of Values
  • 10.3.26 Catalog Search With Special Characters Fail
  • 10.3.27 Lookup Search Does Not Support Asterisk Wildcard Character
  • 10.3.28 Errors Not Displayed in Form Designer
  • 10.3.29 User Creation Fails if Default Password Policy is Removed
  • 10.3.30 Exception Displayed Intermittently
  • 10.3.31 Benign unknownplatformexception Error
  • 10.3.32 Error in Searching for Data Components
  • 10.3.33 Retry Provisioning Task Fails
  • 10.3.34 Multiple Entries Displayed for the Same Provisioning Task
  • 10.3.35 Length of Attribute Value Changes on Updating the Form Field
  • 10.3.36 Input Data Lost in Request Catalog
  • 10.3.37 Error on Publishing Sandbox
  • 10.3.38 Import/Export of Organization and Role Without UDFs
  • 10.3.39 Possible Suboptimal SQL in Target Resource Reconciliation Run
  • 10.3.40 Multiple Child Tables Cannot Be Used in Requests
  • 10.3.41 Session Failover Issues
  • 10.3.42 Error in Adding Data for Process Instance to Child Form
  • 10.3.43 Last Entitlement Not Removed
  • 10.3.44 Manual Fulfillment Task Not Initiated for Entitlement Provisioning
  • 10.3.45 Form Fields Displayed For Disable/Enable/Revoke Manual Provisioning Task
  • 10.3.46 Duplicate Rows in Request Tracking
  • 10.3.47 Help Desk Cannot Use Request Tracking
  • 10.3.48 Use Request Details to Approve Requests That Require Mandatory Information
  • 10.3.49 Benign Error Messages
  • 10.3.50 Accessibility Compliance
  • 10.3.51 Password Policy Not Enforced
  • 10.3.52 Form Designer Failure Not Displayed
  • 10.3.53 Request for Application Instance Fails If Related Sandbox is Not Published
  • 10.3.54 Application Instance Administrator Cannot Create Forms
  • 10.3.55 Delete Reconciliation Does Not Work With libOVD and ODSEE
  • 10.3.56 Lookup Values Not Saved on the My Information Page
  • 10.3.57 Benign Error for Missing Matching Rule Data
  • 10.3.58 User Type Attribute Value Not Populated
  • 10.3.59 Approval Page Customization Not Supported
  • 10.3.60 Enable, Sequence, and Description for Lookup Values Not Supported
  • 10.3.61 Cannot Add Radio Button
  • 10.3.62 Indirect Role Membership Error
  • 10.3.63 Created UDFs Not Listed in Customization View
  • 10.3.64 Attributes Cannot Be Marked Required Using Form Designer
  • 10.3.65 Cascading LOV Not Working
  • 10.3.66 Number Type Lookup Code Not Supported
  • 10.3.67 Customizing the Self Registration Page Does Not Work
  • 10.3.68 Some Help Links Do Not Work
  • 10.3.69 Unpublished Entities Provisioned Via Access Policies
  • 10.3.70 Certificate-Based Digital Signatures Not Supported
  • 10.3.71 Entitlements Provisioned to Users Not Displayed After Upgrade
  • 10.3.72 Labels in Query Panel Cannot be Customized
  • 10.3.73 UMS Fails to Send Notification While Provisioning Account
  • 10.3.74 Error on Creating Subtask
  • 10.3.75 Running the pasteConfig Script Displays Incorrect Error Message
  • 10.3.76 Error Logged While Exporting Metadata of oracle.security.apm Application
  • 10.3.77 Error Logged While Exporting Metadata of oim Application
  • 10.3.78 Benign ApplicationDB Connection Pool Errors
  • 10.3.79 Reconciliation Archival Utility Throws Errors
  • 10.3.80 Latency in Auto Closing the Tab After Acting on the Task
  • 10.3.81 Filters on Some Columns Not Supported
  • 10.3.82 Disconnected Resource Child Table Tasks Not Autocreated
  • 10.3.83 Field Added to a Page Might Not Be Displayed
  • 10.3.84 Auto-Unlock Feature Does Not Work
  • 10.3.85 Self Registration Request Fails
  • 10.3.86 Catalog Synchronization Job Overrides Certifier/Approver/Fulfillment User
  • 10.3.87 Certification Creation Fails With Incorrect SSL Configuration
  • 10.3.88 Role Certification Creation Fails With Only Certify Policy Option Selected
  • 10.3.89 Duplicate Attribute Labels Displayed
  • 10.3.90 Error in Clone Log During PasteConfig Operation
  • 10.3.91 Slow Database Connection
  • 10.3.92 Scheduled Job Does Not Run
  • 10.3.93 QBE and User Membership Rule Work for Lookup Fields Only for Encoded Values
  • 10.3.94 Role Name Displayed as Null
  • 10.3.95 Empty Results Displayed in the Organization Hierarchy and Management Hierarchy Tabs
  • 10.3.96 Request Approval Tasks Not Displayed in the Inbox With SSL Enabled
  • 10.3.97 Error Logged for Some OUD Operations When LDAP Synchronization is Enabled
  • 10.3.98 Error Thrown When Oracle Identity Manager Uses Database in Oracle Enterprise Linux 6
  • 10.3.99 The Design Console Hangs Intermittently
  • 10.3.100 Lookup UDF Created with Maximum Length of 4000 Characters
  • 10.3.101 UDF Not Removed From the Add Fields List
  • 10.3.102 Deployment Manager Does Not Open After Updating to Java 7 Update 51
  • 10.3.103 Periodic Scheduled Job Throws NullPointerException
  • 10.3.104 Notification Sent Although Notification Template Status is Disabled
  • 10.3.105 OUD Changlelogs Purged Before Incremental Reconciliation Runs
  • 10.3.106 Icon Not Displayed in Internet Explorer 11
  • 10.3.107 Offline Certification Not Supported in Internet Explorer 11
  • 10.3.108 Deployment Manager Fails to Import or Export
  • 10.3.109 Error Message Logged When Creating a Disconnected Application Instance
  • 10.3.110 Error When Exporting Artifact Using Deployment Manager
• 10.4 Configuration Issues and Workarounds
  • 10.4.1 Benign Connection Error From OIA For SoD Check
  • 10.4.2 Use Absolute Paths While Running configureSecurityStore.py With -m Join
  • 10.4.3 Oracle Identity Manager Fails to Find orclPwdExpirationDate
  • 10.4.4 Design Console Login Failure With SSL Enabled
  • 10.4.5 Create User Event Fails in Integrated Environment
  • 10.4.6 Insufficient Memory Causes Server Startup Failure
  • 10.4.7 OIMSignatureAuthenticator Not Configured for Oracle Identity Manager Domain Security Realm
• 10.5 Multi-Language Support Issues and Limitations
  • 10.5.1 UI Components are Displayed in English on non-English Web Browsers
  • 10.5.2 BI Publisher 11g Reports Displayed in English Although Translation Files Are Available
  • 10.5.3 Date Format in BI Publisher Report Not Displayed Per Report Locale Setting
  • 10.5.4 Translated Values Not Displayed for User Type and Locale
  • 10.5.5 Catalog Search With Special Non-ASCII Characters Do Not Work Correctly
  • 10.5.6 Polish Translation of BI Publisher Files Do Not Work
  • 10.5.7 Localized String for Cart is Truncated in the Catalog Search Results Page
  • 10.5.8 Values Not Displayed Per Browser Language Setting
  • 10.5.9 Challenge Questions and Password Policy Messages Displayed in Server Locale
  • 10.5.10 Values for Organization Type and Status Displayed in English
  • 10.5.11 MLS and MR Support Not Available
  • 10.5.12 Error Displayed If User Login Contains Special Character
  • 10.5.13 Task Stage Name and Task Assignee Label Displayed in English
  • 10.5.14 Escalating Request Displayed Warning in Server Locale
  • 10.5.15 Some Predefined View Names Cannot Be Translated
  • 10.5.16 Request Task Details Displayed in Server Locale
  • 10.5.17 Oracle Identity Manager Operation Names Not Translated in Enterprise Manager
  • 10.5.18 Display Label Not Shown Correctly When Browser Language is Switched
  • 10.5.19 User Type Values Not Translated
  • 10.5.20 Online Help Translated in Nine Languages
• 10.6 Documentation Errata

11 Oracle Identity Management Integration

• 11.1 Integrating Access Manager and Oracle Adaptive Access Manager
  • 11.1.1 The setupOAMTAPIntegration Script Fails with Permissions Issues
  • 11.1.2 Login to a Protected Resource May Fail in an Access Manager Release 2 PS2 and Oracle Adaptive Access Manager Release 2 TAP Integrated Environment
  • 11.1.3 Lock User is Unable to Unlock Self in an Access Manager, Oracle Adaptive Access Manager, and Oracle Identity Manager Integrated Environment
  • 11.1.4 Invalid Class Exception When Password Policy Fails
  • 11.1.5 User Unlock Exception Occurs in Change Password/Forgot Password Flow
  • 11.1.6 ChangePassword.credentials.enum Not Found Error Occurs in Change Password Flow
  • 11.1.7 Access Manager and Oracle Adaptive Access Manager Integrations Using OAAMBasic and OAAMAdvanced Schemes Deprecated
  • 11.1.8 Multiple Sessions Created Instead of Unified Session for an Access Manager - OAAM TAP Integrated Environment
• 11.2 Natively Integrating Oracle Adaptive Access Manager
  • 11.2.1 generateOTP() API Has Been Deprecated
• 11.3 Documentation Errata
  • 11.3.1 Remove oaam.oim.passwordflow.unlockuser Property from the Documentation
  • 11.3.2 The oaam.uio.oam.authenticate.withoutsession Property Setting

12 Oracle Fusion Middleware on IBM WebSphere

• 12.1 General Issues and Workarounds
  • 12.1.1 Additional Debug/TRACE Details in Exception Message
  • 12.1.2 Cell Creation Fails When Multiple Templates are Selected With Oracle Identity Manager in the Same Session
  • 12.1.3 Opening Identity Directory Service Profile Displays Warning Popup in Oracle Entitlements Server
  • 12.1.4 Cannot Create CSF Mapping in IBM WebSphere with Target Domain in WebLogic Server
  • 12.1.5 OIMAdmin Keys Credential Might Be Lost
  • 12.1.6 Warnings, Errors and Stack Traces Appear in oaam_admin Log File of OAAM Configured on IBM WebSphere
  • 12.1.7 Task Details Page Might Throw ADFC-12000 Errors
  • 12.1.8 Oracle Identity Federation Audit Records Not Moved to Database
  • 12.1.9 All Channels Cannot be SSL Enabled between OIM and Database Server on Websphere
  • 12.1.10 Enterprise Manager Does Not Reflect the State of WebSphere Cell
  • 12.1.11 End User Names with Character "#" Created in Oracle Identity Manager Cannot Login to Oracle Privileged Account Manager
  • 12.1.12 Error Generated When Launching Patch Set Assistant on Solaris 10 Machines Configured with WebSphere
  • 12.1.13 Provisioning of GTC-Based Connector Fails with Error
  • 12.1.14 Error on Closing the Request Tab When Inbox is Open
  • 12.1.15 Identity and Access Option Not Available in EM After Upgrade
• 12.2 Configuration Issues and Workarounds
  • 12.2.1 SSLHandshakeException Error for Google and Yahoo IdP Partners
  • 12.2.2 Controlled-Push Policy Distribution Fails on Oracle Entitlements Server Administration Server
  • 12.2.3 Shell Syntax Error Seen When Configuring Fusion Middleware Products on IBM Websphere Application Server on Solaris SPARC64 5.10 Machines
  • 12.2.4 Error Displayed When Accessing DMS Spy for Oracle Access Manager on IBM Websphere
  • 12.2.5 Oracle Identity Manager Server Configuration on IBM WebSphere Fails If Sun JDK is Used During Installation
  • 12.2.6 Error Generated When Extending an OAAM WebSphere Cell to Include OIM Template
  • 12.2.7 Configuration Fails When Performing Silent Installation of Identity and Access Management Components on Solaris Sparc64 with WebSphere
  • 12.2.8 Configuring Database Security Store Fails When the -D Path Contains "\r"
  • 12.2.9 New IDS Profile Requires OES Server Restart
  • 12.2.10 Oracle Identity Manager Silent Installation Fails Without the -force Option
  • 12.2.11 Prerequisite Check Fails in Oracle Identity Manager Silent Installation
  • 12.2.12 The wsadmin Script Throws MissingResourceException
• 12.3 Upgrade Issues and Workarounds
  • 12.3.1 Errors Displayed When Running Patch Set Assistant on Solaris 10
  • 12.3.2 Some Approval Policies Not Deleted After Upgrade
  • 12.3.3 Exception When Upgrading Oracle Identity Manager Middle Tier
• 12.4 Documentation Errata
  • 12.4.1 Online Help for IBM WebSphere Options in the Oracle Identity Manager Configuration Assistant

13 High Availability and Enterprise Deployment

• 13.1 Configuration Issues and Workarounds
  • 13.1.1 Log in to Authorization Policy Manager Fails
  • 13.1.2 NullPointerException Occurs and Policy Does Not Save When OAAM Server Fails Over
  • 13.1.3 NullPointerException Occurs and Transaction Does Not Save When OAAM Server Fails Over
• 13.2 Documentation Errata
  • 13.2.1 New Topic for Configuring High Availability for Identity and Access Management Components Chapter

14 Platform-Specific Issues and Workarounds

• 14.1 Installation Issues and Workarounds
• 14.2 Configuration Issues and Workarounds
• 14.3 Deployment Issues and Workarounds
  • 14.3.1 Errors Displayed When Deploying Oracle Identity and Access Management on HP Itanium64
  • 14.3.2 Identity and Access Management Deployment Fails During Configuration Phase with Out of Memory Error on IBM AIX
  • 14.3.3 Identity and Access Management Deployment Fails During Preconfigure Phase on IBM AIX

15 Deployment Issues and Workarounds

• 15.1 Fields Not Defaulted To Blank On Unchecking Configure Virtual Hosts Option
• 15.2 Oracle Identity and Access Management Deployment Fails During Preconfiguration Phase on HPIA64
• 15.3 Additional Documentation