1 Introduction

This chapter introduces Oracle Fusion Middleware Release Notes for Identity Management, 11g Release 2 (11.1.2.3).

It includes the following topics.

1.1 Latest Release Information

This document is accurate at the time of publication. Oracle will update the release notes periodically after the software release. You can access the latest information and additions to these release notes on the Oracle Help Center.

http://docs.oracle.com/en/

1.2 Purpose of this Document

This document contains the release information for Oracle Fusion Middleware 11g Release 2 (11.1.2.3). It describes differences between Oracle Fusion Middleware and its documented functionality. Oracle recommends you review its contents before installing, or working with the product.

1.3 System Requirements and Specifications

Oracle Fusion Middleware installation and configuration will not complete successfully unless users meet the hardware and software pre-requisite requirements before installation. For more information, see "Review System Requirements and Specifications" in the Oracle Fusion Middleware Installation Planning Guide.

1.4 Certification Information

This section contains the following information.

1.4.1 Where to Find Oracle Fusion Middleware Certification Information

The latest certification information for Oracle Fusion Middleware 11g Release 2 (11.1.2.3) is available at the Oracle Fusion Middleware Supported System Configurations Central Hub:

http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html

1.4.2 Regarding Websphere Application Server Support

Oracle Identity Management no longer supports servers running on Websphere Application Server. See the Oracle Fusion Middleware support matrix for the most current supported system configurations. A direct link to the support matrix is in Section 1.4.1, "Where to Find Oracle Fusion Middleware Certification Information."

1.4.3 Certification Exceptions

This section describes known issues (exceptions) and workarounds associated with Oracle Fusion Middleware 11g certifications. For a list of known issues associated with specific Oracle Fusion Middleware 11g Release 2 (11.1.2.3) components, see the Release Notes chapter for that component. This section contains the following topics:

1.4.3.1 Certification Information for Oracle Fusion Middleware 11g R2 with Oracle Database 11.2.0.1

If you choose to configure Oracle Internet Directory with Database vault, do the following:

  1. Apply patch 8897382 to fix bug 8897382.

    Note:

    The following workaround is required only if the Oracle Fusion Middleware version is 11.1.1.1.0 (11gR1). This issue will be fixed in 11.1.1.2.0.
  2. Apply the workaround for bug 8987186 by editing <OH>/ldap/datasecurity/dbv_oid_command_rules.sql file and find the following declaration:

    /declare
     begin
          dvsys.dbms_macadm.CREATE_COMMAND_RULE(
          command => 'CONNECT'
          ,rule_set_name => 'OID App Access'
          ,object_owner => '%'
          ,object_name => '%'
          ,enabled => 'Y');
     commit;
    end;/
    

    and change the line that is indicated in bold:

    /declare
     begin
          dvsys.dbms_macadm.CREATE_COMMAND_RULE(
          command => 'CONNECT'
          ,rule_set_name => 'OID App Access'
          ,object_owner => '%'
          ,object_name => '%'
          ,enabled => 'Y');
     commit;
    end;/
    

1.4.3.2 Excel Export Issue on Windows Vista Client

Vista prevents applets from creating files in the local file system if the User Account Control (UAC) system is turned on. You can experience this problem if you have the UAC setting enabled on Vista and if you use a component like Discoverer Plus. If you start Discoverer Plus and if you try exporting a worksheet to a specified directory, the exporting succeeds but you cannot see the exported file in the directory. The available workarounds is to disable UAC and set protection mode to OFF. Refer to Bugs 8410655 and 7328867 for additional information.

1.4.3.3 Oracle Forms and Oracle Reports 11g Installer Issues In Windows Vista and Windows XP

Only the design-time environments (Builders) are supported for Oracle Forms and Oracle Reports in Windows Vista and Windows XP.However, in the Configure Components screen in the Oracle Installer, the Server Components, Management Components and System Components are selected by default, but Developer Tools is deselected. When installing Oracle Forms Builder, or Oracle Reports Builder on Windows Vista and Windows XP computers, you must:

  • Select Developer Tools, such as Oracle Forms Builder or Oracle Reports Builder. Their respective server components are automatically selected.

  • Deselect all System Components and Management Components.

  • Deselect the Portal and Discoverer tools. Two of the Discoverer components – Discoverer Admin and Discoverer Desktop – will be installed even if you do not select Discoverer in the Configure Components screen of the installer. This is the correct, expected behavior in 11.1.1.1.0.

For Oracle Forms, since the System Components including Oracle HTTP Server are not supported in Windows Vista and Windows XP, the following features are not supported:

  1. Oracle Forms and Reports integration.

  2. The creation of virtual directories.

1.4.3.4 JMSDELIVERYCOUNT Is Not Set Properly

When using AQ JMS with Oracle Database 11.2.0.1, JMXDELIVERYCOUNT is not set correctly.

The workaround is to apply patch 9932143 to Oracle Database 11.2.0.1. For more information, contact Oracle Support.

1.4.3.5 OIM Installation on Oracle Database 12c with Non-CDB Requires Execution of xaview.sql Script

To create the Oracle Identity Manager (OIM) schema on Oracle Database 12c with non-container database (non-CDB), you must execute the database's xaview.sql script to create XAVIEW objects on the database prior to running RCU. These objects are required to create the Oracle Identity Manager schema.

For Oracle Database 10g and 11g databases, these objects are automatically created by RCU if they are not already in place. Oracle Database 12c databases have a new XAVIEW structure that requires the explicit creation of these objects.

To create these objects on Oracle Database 12c, perform the following steps before running RCU to create the OIM schema:

  1. Log on to sqlplus as the SYS database user.

  2. Execute the following command:

    @xaview.sql
    

    The xaview.sql script resides in the ORACLE_HOME/rdbms/admin directory. ORACLE_HOME is the Oracle home directory on the database host where the database is installed.

1.4.3.6 Oracle Database 12c (12.1.0.x) with PDB is not Supported in 11g Release 2 (11.1.2.3)

Oracle Database 12c (12.1.0.x) database with PDB (pluggable database) is not supported in Oracle Identity and Access Management 11g Release 2 (11.1.2.3). Non-container database (Non-CDB) is the only supported database type for this release.

1.5 Restrictions on Specific Browsers

The following browser issues have been observed.

1.5.1 Internet Explorer Browser Goes Blank When Adding Portlets in Oracle Webcenter

If you add portlets in Oracle Webcenter by using Internet Explorer, then the page can go blank. When it does go blank, a download message appears on the browser's status bar. However, nothing is downloaded and the browser remains blank until you click the browser's back button. If this problem occurs, the portlets will appear only when you hit the browser's back button. This issue does not occur with Firefox.

As a workaround, click the browser's back button.

1.5.2 Unable to View the Output of a JSPX Page in Internet Explorer 7

When a JSPX page is deployed and is then accessed using Internet Explorer 7 (IE7), the XHTML source is displayed instead of the page contents. This occurs in both normal and osjp.next modes.

The workaround is to instruct application users to access the application with Firefox or Safari.

1.5.3 Unable to View the Output of SVG files in Internet Explorer 7

When a page using Scalar Vector Graphics is deployed and is then accessed using Internet Explorer 7 (IE7), the source is displayed instead of the page's graphic contents. This occurs in both normal and osjp.next modes.

The workaround for this issue is that Application developers should avoid using SVG graphics in their applications, as it is not natively supported in IE7. If they are used, a warning similar to the following should be added:

All current browsers, with the exception of Internet Explorer, support SVG files. Internet Explorer requires a plug-in to display SVG files. The plug-ins are available for free, for example, the Adobe SVG Viewer at http://www.adobe.com/svg/viewer/install/.

1.5.4 Java Plugin for Discoverer Plus Not Downloaded Automatically on Firefox

When you attempt to connect to Discoverer Plus by using the Mozilla Firefox browser on a computer that does not have Java 1.6 installed, Firefox does not download the JRE 1.6 plug-in automatically. Instead, Firefox displays the following message: "Additional plugins are required to display this page..."

The workaround is to download the JRE 1.6 plug-in by clicking the Install Missing Plugin link to install it manually.

1.5.5 Viewer Plugin Required On Safari 4 To View Raw XML Source

You need a Safari plugin to view raw XML. If there is no plugin installed, you will see unformatted XML which will be difficult to read. This is because Safari applies a default stylesheet, which only displays the text nodes in the XML document.

As a workaround, go to View > View Source in the Safari menu bar to see the full XML of the metadata document. Also, selecting File > Save and choosing XML Files as the file type, will correctly save the XML metadata file with all the markup intact.

1.6 Downloading and Applying Required Patches

After you install and configure Oracle Fusion Middleware 11g Release 2 (11.1.2.3), there might be cases where additional patches are required to address specific known issues. Patches for Oracle Fusion Middleware 11g are available from My Oracle Support:

https://myoraclesupport.com/

Table 1-1 lists some of the specific Oracle Fusion Middleware patches available at the time these Release Notes were published.

Note:

There are some mandatory patches that must be applied for installing and configuring Oracle Identity Manager. For information about these patches, see Section 1.6.1, "Mandatory Patches Required for Installing Oracle Identity Manager."

Along with the Oracle Identity Manager patches, some of the Oracle Database versions require patches. To identify the patches required for Oracle Identity Manager 11g Release 2 (11.1.2.3) configurations that use Oracle Databases, see Section 10.1, "Patch Requirements."

Table 1-1 Patches to Fix Specific Issues with Oracle Fusion Middleware 11g

Oracle Fusion Middleware Product or Component Bug/Patch Number Description

Oracle Virtual Directory

16943171

This patch is critical if you are using Oracle Unified Directory in active-active mode, as shown in Oracle Fusion Middleware Enterprise Deployment Guide for Oracle Identity Management. Failure to apply this patch might result in data inconsistency in the event of a failover.

Oracle IDM Tools

17008132

This patch corrects ACI issues affecting Oracle Unified Directory.

Oracle WebLogic Server

14182177

Fixes the error: StuckThreads in AdminServer.

Oracle Unified Directory

18461856

Fixes "Run LDAP User Create and Update Reconciliation job" failure.

Oracle Identity Manager

23172221

Fixes the error: When user tries to login for the the first time, after setting up challenge questions and password, the user is asked to login again.


1.6.1 Mandatory Patches Required for Installing Oracle Identity Manager

This section describes the necessary patches that you must apply for installing and configuring Oracle Identity Manager.

Note:

This section provides the mandatory patches that were available at the time of publishing the release notes. For additional changes and revised patch requirements, see My Oracle Support Document ID 1966494.1.

Table 1-2provides information about the mandatory patches required for Oracle Identity Manager. Note that these patches can be applied in any order.

For information about any additional patches that you might have to apply, see Section 1.6, "Downloading and Applying Required Patches."

Table 1-2 Patches Required to Fix Specific Issues with Oracle Identity Manager 11g Release 2 (11.1.2.3.0)

Oracle Fusion Middleware Product or Component Patch Number/Name When to Apply? Description

Oracle WebLogic Server

18398295

After installing Oracle Identity and Access Management

This Oracle WebLogic Server patch is required only if you are using Multi Byte Character Set.

Follow the README.txt file for patching instructions.

Oracle WebLogic Server

14404715

After installing Oracle Identity and Access Management

This is a mandatory Oracle WebLogic Server patch.

Follow the README.txt file for patching instructions.

Oracle WebLogic Server

16844206

After installing Oracle Identity and Access Management

This is a mandatory Oracle WebLogic Server patch.

Follow the README.txt file for patching instructions.

Oracle WebLogic Server

13964737

After installing Oracle Identity and Access Management

This is a mandatory Oracle WebLogic Server patch when running WebLogic Server with Oracle JDK 7 Update 40 or later. Follow the README.txt file for patching and post-patching instructions.

After you apply this patch, you must start the Node Manager with Java Secure Socket Extension (JSSE) enabled. To start the Node Manager with JSSE enabled, see "Set the Node Manager Environment Variables" in Node Manager Administrator's Guide for Oracle WebLogic Server.

After starting Node Manager with JSSE enabled, you must start the WebLogic Administration Server and Managed Servers with JSSE enabled. For more information, see "Using the JSSE-Enabled SSL Implementation" in Securing Oracle WebLogic Server.

Oracle WebLogic Server

20780171

After installing Oracle Identity and Access Management

This is a mandatory Oracle WebLogic Server patch when running WebLogic Server with Oracle JDK 7.

Follow the README.txt file for patching instructions.

Oracle WebLogic Server

13351178

After installing Oracle Identity and Access Management

This is a mandatory Oracle WebLogic Server patch.

Follow the README.txt file for patching instructions.

Oracle Identity and Access Management Life Cycle Management (LCM) Tools

22083030

After installing Oracle Identity and Access Management LCM Tools

This Oracle Identity and Access Management LCM Bundle Patch 11.1.2.3.160419 patch is required if you are using the LCM Tools.

Follow the README.txt file for patching instructions.

Oracle Identity and Access Management

22675286

After installing Oracle Identity and Access Management

This is a mandatory Oracle Identity Management Suite Bundle Patch 11.1.2.3.160419 patch.

Follow the README.txt file for patching instructions.

Oracle Identity Manager

23172221

After installing Oracle Identity and Access Management

This is a mandatory Oracle Identity Manager patch.

Follow the README.txt file for patching instructions.


To download the patches, do the following:

  1. Log in to My Oracle Support.

  2. Click Patches & Updates.

  3. Select Patch Name or Number.

  4. Enter the patch number.

  5. Click Search.

  6. Download and install the patch.

Patching Instructions

The patching instructions are mentioned in the README.txt file that is provided with each patch.

1.7 Licensing Information

Licensing information for Oracle Fusion Middleware is available at:

http://oraclestore.oracle.com

Detailed information regarding license compliance for Oracle Fusion Middleware is available at:

http://www.oracle.com/technetwork/middleware/ias/overview/index.html