1 Introduction to Oracle Identity and Access Management Upgrade

This chapter provides an overview of the upgrade process for Oracle Identity and Access Management 11g Release 2 (11.1.2.3.0).

This chapter includes the following topics:

1.1 Introduction to Oracle Identity and Access Management 11g Release 2 (11.1.2.3.0)

Oracle Identity and Access Management components enable enterprises to manage the end-to-end lifecycle of user identities across all enterprise resources - both within and beyond the firewall. With Oracle Identity and Access Management, you can deploy applications faster, apply the most granular protection to enterprise resources, automatically eliminate latent access privileges, and much more.

Oracle Identity and Access Management 11g Release 2 (11.1.2.3.0) includes the following products:

  • Oracle Access Management, which includes the following components:

    • Oracle Access Management Access Manager

    • Oracle Access Management Identity Federation

    • Oracle Access Management Mobile and Social

    • Oracle Access Management Security Token Service

  • Oracle Adaptive Access Manager

  • Oracle Identity Manager

  • Oracle Entitlements Server

  • Oracle Privileged Account Manager

For information about new features and enhancements for Oracle Identity and Access Management 11g Release 2 (11.1.2.3.0), see New and Changed Features for 11g Release 2 (11.1.2.3.0).

1.2 Oracle Identity and Access Management Upgrade Overview

This guide describes how to upgrade Oracle Identity and Access Management 11g Release 1 (11.1.1.x.x) and 11g Release 2 (11.1.2.x.x) to 11g Release 2 (11.1.2.3.0) on Oracle WebLogic Server.

Note:

  • 11.1.1.x.x refers to 11.1.1.7.0 and 11.1.1.5.0.
  • 11.1.2.x.x refers to 11.1.2.2.0, 11.1.2.1.0, and 11.1.2.0.0.

Moving from 10g or previous versions to Oracle Identity and Access Management 11g Release 2 (11.1.2.3.0), and migrating from Sun product to Oracle Identity and Access Management are considered as migration scenarios, and are covered in Oracle Fusion Middleware Migration Guide for Oracle Identity and Access Management.

If you have deployed Oracle Identity and Access Management 11g Release 2 (11.1.2.2.0) using the Life Cycle Management (LCM) Tools, then you must use the automated upgrade tool to upgrade your existing Oracle Identity and Access Management environment to 11g Release 2 (11.1.2.3.0).

For information about the automated upgrade process, topologies supported for upgrade, and the documentation roadmap, see Chapter 2, "Understanding the Oracle Identity and Access Management Automated Upgrade".

If you have configured Oracle Identity and Access Management using the Oracle Identity and Access Management Oracle Universal Installer and Fusion Middleware Configuration Wizard, then you must use the manual upgrade procedure to upgrade your existing Oracle Identity and Access Management environment to 11g Release 2 (11.1.2.3.0).

For information about the manual upgrade process and the supported starting points, see Chapter 3, "Understanding the Oracle Identity and Access Management Manual Upgrade".

1.3 Migration and Coexistence Scenarios

The term Migration refers to migrating 10g version of Oracle Identity and Access Management components, or Sun products to Oracle Identity and Access Management 11.1.2.3.0. During migration, you must install a new 11g Release 2 (11.1.2.3.0) Oracle Home (IAM_HOME) and then migrate your configuration data from your previous installation to the new 11g Release 2 (11.1.2.3.0) Oracle Home.

The following are migration scenarios supported for 11g Release 2 (11.1.2.3.0):

  • Migrating Oracle Access Manager 10g to Oracle Access Management 11.1.2.3.0

  • Migrating Oracle Adaptive Access Manager 10g to Oracle Adaptive Access Manager 11.1.2.3.0

  • Migrating Oracle Single Sign-On 10g to Oracle Access Management 11.1.2.3.0

  • Migrating Sun OpenSSO Enterprise 8.0 to Oracle Access Management 11.1.2.3.0

  • Migrating Sun Java System Access Manager 7.1 to Oracle Access Management 11.1.2.3.0

  • Migrating Oracle Identity Federation to Oracle Access Management 11.1.2.3.0

  • Migrating the certifications of Oracle Identity Analytics to Oracle Identity Manager 11.1.2.3.0

During migration, you can have both the old and the new deployments coexisting, such that some applications are protected by the old server, and the others are protected by the new server. The coexistence mode allows you to have seamless single sign-on experience when you navigate between applications protected by different servers.

For example, Sun OpenSSO Enterprise 8.0 and Oracle Access Management Access Manager 11.1.2.3.0 servers can coexist and work together, so that the you have seamless single sign-on experience when you navigate between applications protected by Sun OpenSSO Enterprise 8.0 and Oracle Access Management Access Manager 11.1.2.3.0 Servers.

The following are the coexistence scenarios supported in 11g Release 2 (11.1.2.3.0):

  • Coexistence of Oracle Access Manager 10g with Oracle Access Management Access Manager 11.1.2.3.0

  • Coexistence of Sun OpenSSO Enterprise 8.0 with Oracle Access Management Access Manager 11.1.2.3.0

  • Coexistence of Sun Java System Access Manager 7.1 with Oracle Access Management Access Manager 11.1.2.3.0

Note:

This guide does not cover the migration and coexistence scenarios.

For information about the migration and coexistence scenarios supported for 11g Release 2 (11.1.2.3.0), see Oracle Fusion Middleware Migration Guide for Oracle Identity and Access Management.