Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

What's New in Oracle Identity Manager Connector for AS400?

• Software Updates
• Documentation-Specific Updates

1   About the Connector

• 1.1 Certified Components
• 1.2 Usage Recommendation
• 1.3 Certified Languages
• 1.4 Connector Architecture
• 1.5 Features of the Connector
  • 1.5.1 User Attributes for Target Resource Reconciliation and Provisioning
  • 1.5.2 Process Form Fields Used for Target Provisioning and Reconciliation
  • 1.5.3 Reconciliation
    • 1.5.3.1 Common Reconciliation Parameters
    • 1.5.3.2 Full and Incremental Reconciliation Modes
    • 1.5.3.3 Delete Reconciliation
    • 1.5.3.4 Group Lookup Reconciliation
  • 1.5.4 Full or Incremental Reconciliation
    • 1.5.4.1 Delete Reconciliation
    • 1.5.4.2 Lookup Reconciliation
  • 1.5.5 Support for Reconciliation of Account Status
  • 1.5.6 Features Provided by the Identity Connector Framework
  • 1.5.7 Support for Scheduled Tasks
  • 1.5.8 Connection Pooling
  • 1.5.9 Support for the Connector Server
• 1.6 Lookup Definitions Used During Connector Operations
  • 1.6.1 AS400 Connector Lookup Definitions Overview
  • 1.6.2 Lookup.Configuration.AS400 Definition
  • 1.6.3 Lookup.AS400.UM.Configuration Definition
  • 1.6.4 Lookup.AS400.UM.ProvAttrMap Definition
  • 1.6.5 Lookup.AS400.UM.ReconAttrMap Definition
  • 1.6.6 Lookup.Configuration.AS400.Trusted Definition
  • 1.6.7 Lookup.AS400.UM.ReconAttrMap.Trusted Definition
  • 1.6.8 Lookup.AS400.UM.Configuration.Trusted Definition
  • 1.6.9 Lookup.AS400.UM.TrustedDefaults Definition
  • 1.6.10 Lookup.AS400.Groups Definition for Reconciliation for Groups
• 1.7 Resource Objects Used for Provisioning and Reconciliation
  • 1.7.1 User Provisioning Functions
  • 1.7.2 Reconciliation Rules
    • 1.7.2.1 Viewing Reconciliation Rules in the Design Console
  • 1.7.3 Reconciliation Action Rules
    • 1.7.3.1 Reconciliation Action Rules for Reconciliation
    • 1.7.3.2 Viewing Reconciliation Action Rules in the Design Console
• 1.8 Roadmap for Deploying and Using the Connector

2 Deploying the Connector

• 2.1 AS400 Connector Deployment Architecture With the Connector Server
• 2.2 Preinstallation
  • 2.2.1 Preinstallation on Oracle Identity Manager
    • 2.2.1.1 Files and Directories on the Installation Media
    • 2.2.1.2 Downloading and Installing the JTOpen Library
  • 2.2.2 Preinstallation on the Target System
    • 2.2.2.1 Creating a Target System User Account for AS400 Connector Operations
  • 2.2.3 Installing and Configuring the Connector Server
  • 2.2.4 Running the Connector Server
    • 2.2.4.1 Running the Connector Server on UNIX and Linux Systems
    • 2.2.4.2 Running the Connector Server on Windows Systems
• 2.3 Installation
  • 2.3.1 Installing the AS400 Connector in Oracle Identity Manager
  • 2.3.2 Deploying the Connector Bundle in a Connector Server
• 2.4 Postinstallation
  • 2.4.1 Configuring Oracle Identity Manager 11.1.2 or Later
    • 2.4.1.1 Creating and Activating a Sandbox
    • 2.4.1.2 Creating a New UI Form
    • 2.4.1.3 Creating an Application Instance
    • 2.4.1.4 Publishing a Sandbox
    • 2.4.1.5 Harvesting Entitlements and Sync Catalog
    • 2.4.1.6 Updating an Existing Application Instance with a New Form
  • 2.4.2 Enabling the Reset Password Option in Oracle Identity Manager 11.1.2.1.0 or Later
  • 2.4.3 Configuring Password Changes for Newly Created Accounts
  • 2.4.4 Enabling Request-Based Provisioning
    • 2.4.4.1 Copying Predefined Request Datasets
    • 2.4.4.2 Importing Request Datasets into MDS
    • 2.4.4.3 Enabling the Auto Save Form Feature
    • 2.4.4.4 Running the PurgeCache Utility
  • 2.4.5 Changing to the Required Input Locale
  • 2.4.6 Clearing Content Related to Connector Resource Bundles from the Server Cache
  • 2.4.7 Enabling Logging
  • 2.4.8 Configuring the IT Resource
    • 2.4.8.1 Creating a New IT Resource
    • 2.4.8.2 Specifying Values for the IT Resource Parameters
  • 2.4.9 Configuring SSL for the Connector
  • 2.4.10 Creating the IT Resource for the Connector Server
  • 2.4.11 Localizing Field Labels in UI Forms
• 2.5 Upgrading the Connector
• 2.6 Postcloning Steps

3 Using the Connector

• 3.1 Scheduled Job for Lookup Field Synchronization
• 3.2 Configuring Reconciliation
  • 3.2.1 Limited Reconciliation
  • 3.2.2 Reconciliation Scheduled Jobs
• 3.3 Configuring Scheduled Jobs
• 3.4 Configuring Action Scripts
• 3.5 Configuring Provisioning in Oracle Identity Manager Release 11.1.1
  • 3.5.1 Direct Provisioning
  • 3.5.2 Request-Based Provisioning
    • 3.5.2.1 End User's Role in Request-Based Provisioning
    • 3.5.2.2 Approver's Role in Request-Based Provisioning
  • 3.5.3 Switching Between Request-Based Provisioning and Direct Provisioning
• 3.6 Configuring Provisioning in Oracle Identity Manager Release 11.1.2
• 3.7 Uninstalling the Connector

4 Extending the Functionality of the Connector

• 4.1 Adding Target System Attributes
  • 4.1.1 Adding Target System Attributes for Provisioning
  • 4.1.2 Adding Target System Attributes for Target Reconciliation
  • 4.1.3 Adding Target System Attributes for Trusted Reconciliation
• 4.2 Configuring Validation and Transformation
  • 4.2.1 Configuring Validation for Provisioning
  • 4.2.2 Configuring Validation for Reconciliation
  • 4.2.3 Configuring Reconciliation Transformation
• 4.3 Configuring Connection Pooling
• 4.4 Modifying Field Lengths on the Process Form
• 4.5 Configuring the Connector for Multiple Installations of the Target System
• 4.6 Defining the Connector
• 4.7 Enabling Ad-Hoc Linking

5 Troubleshooting

• 5.1 Troubleshooting

6 Known Issues

A Policies for OS/400 Accounts Migration

Index