Contents

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

Part I Introduction and Preparation

1 Introduction

• 1.1 Overview of Oracle Identity and Access Management 11g Release 1 (11.1.1.7.0)
• 1.2 Additional 11g Release 1 (11.1.1.7.0) Deployment Information
  • 1.2.1 Upgrading to Oracle Identity and Access Management 11g Release 1 (11.1.1.7.0)
  • 1.2.2 Installing Oracle Identity and Access Management 11g Release 1 (11.1.1.7.0) for High Availability
• 1.3 Silent Installation
• 1.4 Understanding the State of Oracle Identity and Access Management Components After Installation
  • 1.4.1 Default SSL Configurations
  • 1.4.2 Default Passwords
• 1.5 Using This Guide

2 Preparing to Install

• 2.1 Reviewing System Requirements and Certification
• 2.2 Installing and Configuring Java Access Bridge (Windows Only)
• 2.3 Identifying Installation Directories
  • 2.3.1 Oracle Middleware Home Location
  • 2.3.2 Oracle Home Directory
  • 2.3.3 Oracle Common Directory
  • 2.3.4 Oracle WebLogic Domain Directory
  • 2.3.5 WebLogic Server Directory
• 2.4 Determining Port Numbers
• 2.5 Locating Installation Log Files
• 2.6 Optional: Updating the WebLogic Administrator Server User Name in Oracle Enterprise Manager Fusion Middleware Control (OIM Only)

Part II Installing and Configuring Oracle Identity and Access Management (11.1.1.7.0)

3 Installing and Configuring Oracle Identity and Access Management (11.1.1.7.0)

• 3.1 Installation and Configuration Roadmap
• 3.2 Installing and Configuring Oracle Identity and Access Management 11g Release 1 (11.1.1.7.0)
  • 3.2.1 Obtaining the Oracle Fusion Middleware Software
  • 3.2.2 Reviewing Database Requirements
    • 3.2.2.1 Oracle Database 11.1.0.7 Patch Requirements for Oracle Identity Manager
  • 3.2.3 Creating Database Schema Using the Oracle Fusion Middleware Repository Creation Utility (RCU)
  • 3.2.4 Reviewing WebLogic Server and Middleware Home Requirements
  • 3.2.5 Installing Oracle SOA Suite (Oracle Identity Manager Users Only)
  • 3.2.6 Starting the Oracle Identity and Access Management Installer
  • 3.2.7 Installing Oracle Identity and Access Management (11.1.1.7.0)
    • 3.2.7.1 Products Installed
    • 3.2.7.2 Dependencies
    • 3.2.7.3 Procedure
    • 3.2.7.4 Understanding the Directory Structure After Installation
  • 3.2.8 Configuring Oracle Identity and Access Management Products
  • 3.2.9 Starting the Servers

4 Configuring Oracle Identity Navigator

• 4.1 Important Note Before You Begin
• 4.2 Configuring Oracle Identity Navigator in a New WebLogic Domain
  • 4.2.1 Appropriate Deployment Environment
  • 4.2.2 Components Deployed
  • 4.2.3 Dependencies
  • 4.2.4 Procedure
• 4.3 Starting the Servers
• 4.4 Verifying Oracle Identity Navigator
• 4.5 Getting Started with Oracle Identity Navigator After Installation

5 Configuring Oracle Identity Manager

• 5.1 Important Notes Before You Start Configuring Oracle Identity Manager
• 5.2 Creating a new WebLogic Domain for Oracle Identity Manager and SOA
  • 5.2.1 Appropriate Deployment Environment
  • 5.2.2 Components Deployed
  • 5.2.3 Dependencies
  • 5.2.4 Procedure
• 5.3 Starting the Servers
• 5.4 Overview of Oracle Identity Manager Configuration
  • 5.4.1 Before Configuring Oracle Identity Manager Server, Design Console, or Remote Manager
    • 5.4.1.1 Prerequisites for Configuring Oracle Identity Manager Server
    • 5.4.1.2 Prerequisites for Configuring Only Oracle Identity Manager Design Console on a Different Machine
    • 5.4.1.3 Prerequisites for Configuring Only Oracle Identity Manager Remote Manager on a Different Machine
  • 5.4.2 Oracle Identity Manager Configuration Scenarios
    • 5.4.2.1 Scope of Configuration Using the Oracle Identity Manager 11g Configuration Wizard
    • 5.4.2.2 Scenario 1: Oracle Identity Manager Server and Design Console on Different Machines
    • 5.4.2.3 Scenario 2: Oracle Identity Manager Server and Remote Manager on Different Machines
    • 5.4.2.4 Scenario 3: Oracle Identity Manager Server, Design Console, and Remote Manager on a Single Windows Machine
• 5.5 Starting the Oracle Identity Manager 11g Configuration Wizard
• 5.6 Configuring Oracle Identity Manager Server
  • 5.6.1 Appropriate Deployment Environment
  • 5.6.2 Components Deployed
  • 5.6.3 Dependencies
  • 5.6.4 Procedure
  • 5.6.5 Completing the Prerequisites for Enabling LDAP Synchronization
    • 5.6.5.1 Preconfiguring the Identity Store
    • 5.6.5.2 Creating Adapters in Oracle Virtual Directory
  • 5.6.6 Running the LDAP Post-Configuration Utility
  • 5.6.7 Verifying the LDAP Synchronization
  • 5.6.8 Post-Configuration Steps
  • 5.6.9 Setting oamEnabled Parameter for Identity Virtualization Library
  • 5.6.10 Enabling LDAP Sync after Installing and Configuring Oracle Identity Manager Server at a Later Point
• 5.7 Optional: Configuring Oracle Identity Manager Design Console
  • 5.7.1 Appropriate Deployment Environment
  • 5.7.2 Components Deployed
  • 5.7.3 Dependencies
  • 5.7.4 Procedure
  • 5.7.5 Post-Configuration Steps
  • 5.7.6 Updating the xlconfig.xml File to Change the Port for Design Console
  • 5.7.7 Configuring Design Console to Use SSL
• 5.8 Optional: Configuring Oracle Identity Manager Remote Manager
  • 5.8.1 Appropriate Deployment Environment
  • 5.8.2 Components Deployed
  • 5.8.3 Dependencies
  • 5.8.4 Procedure
• 5.9 Verifying the Oracle Identity Manager Installation
• 5.10 Setting Up Integration with Oracle Access Manager
• 5.11 List of Supported Languages
• 5.12 Using the Diagnostic Dashboard
• 5.13 Getting Started with Oracle Identity Manager After Installation

6 Configuring Oracle Access Manager

• 6.1 Important Note Before You Begin
• 6.2 Oracle Access Manager Domain Configuration Template
• 6.3 Oracle Access Manager in a New WebLogic Domain
  • 6.3.1 Appropriate Deployment Environment
  • 6.3.2 Components Deployed
  • 6.3.3 Dependencies
  • 6.3.4 Procedure
• 6.4 Starting the Servers
• 6.5 Optional Post-Installation Tasks
• 6.6 Verifying the Oracle Access Manager Installation
• 6.7 Setting Up Oracle Access Manager Agents
• 6.8 Setting Up Integration with Oracle Identity Manager
• 6.9 Getting Started with Oracle Access Manager After Installation

7 Configuring Oracle Adaptive Access Manager

• 7.1 Overview
• 7.2 Important Note Before You Begin
• 7.3 Configuring Oracle Adaptive Access Manager in a New WebLogic Domain
  • 7.3.1 Appropriate Deployment Environment
  • 7.3.2 Components Deployed
  • 7.3.3 Dependencies
  • 7.3.4 Procedure
• 7.4 Configuring Oracle Adaptive Access Manager (Offline)
  • 7.4.1 Components Deployed
  • 7.4.2 Dependencies
  • 7.4.3 Procedure
• 7.5 Starting the Servers
• 7.6 Post-Installation Steps
• 7.7 Verifying the Oracle Adaptive Access Manager Installation
• 7.8 Migrating Policy and Credential Stores
  • 7.8.1 Creating JPS Root
  • 7.8.2 Reassociating the Policy and Credential Store
• 7.9 Getting Started with Oracle Adaptive Access Manager After Installation

8 Installing and Configuring Oracle Entitlements Server

• 8.1 Important Note Before You Begin
• 8.2 Overview of Oracle Entitlements Server 11g Installation
• 8.3 Installation and Configuration Roadmap for Oracle Entitlements Server
• 8.4 Creating Schemas for Oracle Entitlement Server Policy Store (For Apache Derby Only)
• 8.5 Configuring Oracle Entitlements Server Administration Server
  • 8.5.1 Components Deployed
  • 8.5.2 Prerequisites
    • 8.5.2.1 Installing Oracle Entitlements Server
    • 8.5.2.2 Extracting Apache Derby Template (Optional)
  • 8.5.3 Configuring Oracle Entitlements Server in a New WebLogic Domain
  • 8.5.4 Starting the Administration Server
  • 8.5.5 Post-Configuration
  • 8.5.6 Verifying Oracle Entitlements Server Administration Server Configuration
• 8.6 Installing Oracle Entitlements Server Client
  • 8.6.1 Prerequisites
  • 8.6.2 Obtaining Oracle Entitlements Server Client Software
  • 8.6.3 Installing Oracle Entitlements Server Client
  • 8.6.4 Verifying Oracle Entitlements Server Client Installation
• 8.7 Configuring Oracle Entitlements Server Client
  • 8.7.1 Configuring Security Modules in a Controlled Mode (Quick Configuration)
    • 8.7.1.1 Configuring Java Security Module in a Controlled Mode
    • 8.7.1.2 Configuring RMI Security Module in a Controlled Mode
    • 8.7.1.3 Configuring Web Service Security Module in a Controlled Mode
    • 8.7.1.4 Configuring Oracle WebLogic Server Security Module in a Controlled Mode
  • 8.7.2 Configuring Distribution Modes
    • 8.7.2.1 Configuring Controlled Distribution
    • 8.7.2.2 Configuring Non-Controlled and Controlled Pull Distribution Mode
  • 8.7.3 Configuring Security Module
    • 8.7.3.1 Creating Java Security Module
    • 8.7.3.2 Creating Multi-Protocol Security Module
    • 8.7.3.3 Creating WebLogic Security Module
    • 8.7.3.4 Configuring the PDP Proxy Client
  • 8.7.4 Creating the OES Client Domain
  • 8.7.5 Locating Security Module Instances
  • 8.7.6 Using the Java Security Module
• 8.8 Getting Started with Oracle Entitlements Server After Installation

9 Lifecycle Management

• 9.1 How Lifecycle Events Impact Integrated Components
• 9.2 LCM for Oracle Identity Manager
• 9.3 LCM for Oracle Access Manager
• 9.4 LCM for Oracle Adaptive Access Manager
• 9.5 LCM for Oracle Identity Navigator
• 9.6 References

Part III Appendixes

A Oracle Identity and Access Management 11.1.1.7.0 Software Installation Screens

• A.1 Welcome
• A.2 Install Software Updates
• A.3 Prerequisite Checks
• A.4 Specify Installation Location
• A.5 Installation Summary
• A.6 Installation Progress
• A.7 Installation Complete

B Oracle Identity Manager Configuration Screens

• B.1 Welcome
• B.2 Components to Configure
• B.3 Database
• B.4 WebLogic Admin Server
• B.5 OIM Server
• B.6 BI Publisher
• B.7 LDAP Server
• B.8 LDAP Server Continued
• B.9 Configuration Summary

C Starting or Stopping the Oracle Stack

• C.1 Starting the Stack
• C.2 Stopping the Stack
• C.3 Restarting Servers

D Preconfiguring Oracle Directory Server Enterprise Edition (ODSEE)

E Deinstalling and Reinstalling Oracle Identity and Access Management

• E.1 Deinstalling Oracle Identity and Access Management
  • E.1.1 Deinstalling the Oracle Identity and Access Management Oracle Home
  • E.1.2 Deinstalling the Oracle Common Home
• E.2 Reinstalling Oracle Identity and Access Management

F Performing a Silent Installation

• F.1 What is a Silent Installation?
• F.2 Before Performing a Silent Installation
  • F.2.1 UNIX Systems: Creating the oraInst.loc File
  • F.2.2 Windows Systems: Creating the Registry Key
• F.3 Creating Response Files
  • F.3.1 OID, OVD, ODSM, ODIP, and OIF
  • F.3.2 OIM, OAM, OAAM, OES, and OIN
  • F.3.3 Securing Your Silent Installation
• F.4 Performing a Silent Installation
• F.5 Installer Command Line Parameters

G Troubleshooting the Installation

• G.1 General Troubleshooting Tips
• G.2 Installation Log Files
• G.3 Configuring OIM Against an Existing OIM 11g Schema
• G.4 Need More Help?

H OAAM Partition Schema Reference

• H.1 Overview
• H.2 Partition Add Maintenance
  • H.2.1 Sp_Oaam_Add_Monthly_Partition
  • H.2.2 Sp_Oaam_Add_Weekly_Partition
• H.3 Partition Maintenance Scripts
  • H.3.1 drop_monthly_partition_tables.sql
  • H.3.2 drop_weekly_partition_tables.sql
  • H.3.3 add_monthly_partition_tables.sql
  • H.3.4 add_weekly_partition_tables.sql

I Software Deinstallation Screens

• I.1 Welcome
• I.2 Select Deinstallation Type
  • I.2.1 Option 1: Deinstall Oracle Home
    • I.2.1.1 Deinstall Oracle Home
  • I.2.2 Option 2: Deinstall ASInstances managed by WebLogic Domain
    • I.2.2.1 Specify WebLogic Domain Detail
    • I.2.2.2 Select Managed Instance
    • I.2.2.3 Deinstallation Summary (Managed Instance)
  • I.2.3 Option 3: Deinstall Unmanaged ASInstances
    • I.2.3.1 Specify Instance Location
    • I.2.3.2 Deinstallation Summary (Unmanaged ASInstance)
• I.3 Deinstallation Progress
• I.4 Deinstallation Complete