Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

What's New in Oracle Identity Manager Connector for BMC User Management?

• Software Updates
• Documentation-Specific Updates

1 About the Connector

• 1.1 Certified Components
• 1.2 Usage Recommendation
• 1.3 Certified Languages
• 1.4 Connector Architecture
• 1.5 Features of the Connector
  • 1.5.1 Support for Both Target Resource and Trusted Source Reconciliation
  • 1.5.2 Full and Incremental Reconciliation
  • 1.5.3 Limited Reconciliation
  • 1.5.4 Batched Reconciliation
  • 1.5.5 Reconciliation of Deleted User Records
  • 1.5.6 Transformation and Validation of Account Data
  • 1.5.7 Support for Connector Server
  • 1.5.8 Connection Pooling
• 1.6 Lookup Definitions Used During Reconciliation and Provisioning
  • 1.6.1 Lookup Definitions Synchronized with the Target System
  • 1.6.2 Preconfigured Lookup Definitions
    • 1.6.2.1 Lookup.BMC.Configuration
    • 1.6.2.2 Lookup.BMC.Configuration.Trusted
    • 1.6.2.3 Lookup.BMC.UM.Configuration
    • 1.6.2.4 Lookup.BMC.UM.Configuration.Trusted
    • 1.6.2.5 Lookup.BMC.UM.ProvAttrMap
    • 1.6.2.6 Lookup.BMC.UM.ReconAttrMap
    • 1.6.2.7 Lookup.BMC.UM.ReconAttrMap.Trusted
    • 1.6.2.8 Lookup.BMC.UM.ReconDefaults.Trusted
    • 1.6.2.9 Lookup.BMC.ARLicenseType
    • 1.6.2.10 Lookup.BMC.ClientType
    • 1.6.2.11 Lookup.BMC.SupportStaff
    • 1.6.2.12 Lookup.BMC.VIP
    • 1.6.2.13 Lookup.BMC.ClientSensitivity
    • 1.6.2.14 Lookup.BMC.ProfileStatus
    • 1.6.2.15 Lookup.BMC.HourlyRate
• 1.7 Connector Objects Used During Target Resource Reconciliation
  • 1.7.1 User Fields for Target Resource Reconciliation
  • 1.7.2 Reconciliation Rule for Target Resource Reconciliation
  • 1.7.3 Reconciliation Action Rules for Target Resource Reconciliation
• 1.8 Connector Objects Used During Provisioning
  • 1.8.1 Provisioning Functions
  • 1.8.2 User Fields for Provisioning
• 1.9 Connector Objects Used During Trusted Source Reconciliation
  • 1.9.1 User Fields for Trusted Source Reconciliation
  • 1.9.2 Reconciliation Rule for Trusted Source Reconciliation
  • 1.9.3 Reconciliation Action Rules for Trusted Source Reconciliation
• 1.10 Roadmap for Deploying and Using the Connector

2 Deploying the Connector

• 2.1 Preinstallation
  • 2.1.1 Preinstallation on Oracle Identity Manager
    • 2.1.1.1 Files and Directories On the Installation Media
    • 2.1.1.2 Copying the External Code Files
  • 2.1.2 Preinstallation on the Target System
    • 2.1.2.1 Creating a Target System User Account for Connector Operations
    • 2.1.2.2 Configuring Encryption Security
• 2.2 Installation
  • 2.2.1 Installing the Connector in Oracle Identity Manager
    • 2.2.1.1 Running the Connector Installer
    • 2.2.1.2 Configuring the IT Resource for the Target System
  • 2.2.2 Deploying the Connector in a Connector Server
    • 2.2.2.1 Installing and Configuring the Connector Server
    • 2.2.2.2 Running the Connector Server
    • 2.2.2.3 Installing the Connector on the Connector Server
• 2.3 Postinstallation
  • 2.3.1 Postinstallation on Oracle Identity Manager
    • 2.3.1.1 Configuring Oracle Identity Manager 11.1.2 or Later
    • 2.3.1.2 Clearing Content Related to Connector Resource Bundles from the Server Cache
    • 2.3.1.3 Enabling Logging
    • 2.3.1.4 Setting up the Lookup Definition for Connection Pooling
    • 2.3.1.5 Configuring Oracle Identity Manager for Request-Based Provisioning
    • 2.3.1.6 Localizing Field Labels in UI Forms
  • 2.3.2 Creating the IT Resource for the Connector Server
• 2.4 Upgrading the Connector
  • 2.4.1 Preupgrade Steps
  • 2.4.2 Upgrade Steps
  • 2.4.3 Postupgrade Steps

3 Using the Connector

• 3.1 Performing First-Time Reconciliation
• 3.2 Scheduled Job for Lookup Field Synchronization
• 3.3 Configuring Reconciliation
  • 3.3.1 Performing Full Reconciliation
  • 3.3.2 Limited Reconciliation
  • 3.3.3 Batched Reconciliation
  • 3.3.4 Reconciliation Scheduled Jobs
    • 3.3.4.1 Scheduled Jobs for Reconciliation of User Records
    • 3.3.4.2 Scheduled Job for Reconciliation of Deleted Users Records
• 3.4 Configuring Scheduled Jobs
• 3.5 Performing Provisioning Operations in Oracle Identity Manager Release 11.1.1.x
  • 3.5.1 Direct Provisioning
  • 3.5.2 Request-Based Provisioning
    • 3.5.2.1 End User's Role in Request-Based Provisioning
    • 3.5.2.2 Approver's Role in Request-Based Provisioning
  • 3.5.3 Switching Between Request-Based Provisioning and Direct Provisioning
• 3.6 Performing Provisioning Operations in Oracle Identity Manager Release 11.1.2 or Later
• 3.7 Uninstalling the Connector

4 Extending the Functionality of the Connector

• 4.1 Adding New Attributes for Target Resource Reconciliation
• 4.2 Adding New Attributes for Provisioning
  • 4.2.1 Enabling Update of New Attributes for Provisioning
• 4.3 Configuring Validation of Data During Reconciliation and Provisioning
• 4.4 Configuring Transformation of Data During Reconciliation
• 4.5 Configuring the Connector for Multiple Installations of the Target System
• 4.6 Configuring the Connector for Performing Reconciliation and Provisioning Operations on Custom Forms
• 4.7 Configuring the Connector for Performing Lookup Field Synchronization on Custom Forms

5 Testing the Connector

6 Known Issues and Workarounds

• 6.1 Lookup Field Synchronization Fails

Index