Understand the Provisioning Bridge

The Provisioning Bridge provides a link between your on-premises apps (such as Oracle Internet Directory or Oracle E-Business Suite) and Oracle Identity Cloud Service. Through synchronization, account data that’s created and updated directly on the apps is pulled into Oracle Identity Cloud Service and stored for the corresponding Oracle Identity Cloud Service users and groups. As a result, any changes to these records will be transferred into Oracle Identity Cloud Service. So, if a user is deleted in one of your apps, then this change will be propagated into Oracle Identity Cloud Service. Because of this, the state of each record is synchronized between your apps and Oracle Identity Cloud Service.

After users are synchronized from your on-premises apps to Oracle Identity Cloud Service, you can also use the Provisioning Bridge to provision users to these apps. Provisioning allows you to use Oracle Identity Cloud Service to manage the lifecycle of users in the apps. This includes creating, modifying, deactivating, activating, and removing users and their profiles across the apps. Any changes that you make to users or their profiles in Oracle Identity Cloud Service are propagated to the apps through the Provisioning Bridge.

Suppose you're using an on-premises app such as Oracle Internet Directory as an authoritative source for your company's users and groups. This app lies within your company's firewall. For a Provisioning Bridge to communicate with on-premises apps, it must leverage Identity Connector Framework (ICF) connectors to access the associated apps. As a result, the Provisioning Bridge can poll the on-premises apps for changes to users and groups in the apps, and synchronize these changes with Oracle Identity Cloud Service. You can configure a Provisioning Bridge so that Oracle Identity Cloud Service can synchronize users and groups from one or multiple apps.

Figure 15-1 Directory Synchronization

Description of Figure 15-1 follows
Description of "Figure 15-1 Directory Synchronization"

In the diagram above, Charles Wilcox is a user from Example Corp who's been synchronized from Oracle E-Business Suite to Oracle Identity Cloud Service through the Provisioning Bridge. In Oracle Identity Cloud Service, an administrator deactivates Charles' account because he's on vacation. Also, because Charles received a promotion, he belongs to different roles, including the Executive Overview and Training Administrator roles. The Provisioning Bridge can be used to propagate these changes to Oracle E-Business Suite.

Both the Provisioning Bridges and your on-premises apps are in your Microsoft Windows or generic environment. A generic environment consists of any machine that has Java 8 installed on it and supports Bash shell.

Each Provisioning Bridge uses a client network to access the on-premises apps with which you want to synchronize Oracle Identity Cloud Service users and groups. Because Oracle Identity Cloud Service is an Oracle Cloud service, it's in an Oracle environment.

Figure 15-3 Provisioning Bridge Security

Description of Figure 15-3 follows
Description of "Figure 15-3 Provisioning Bridge Security"

The Synchronize Users from Oracle Internet Directory to Oracle Identity Cloud Service video shows you how to configure on-premises apps such as Oracle Internet Directory so that the Provisioning Bridge can use the associated ICF connectors to poll the apps for changes to users and groups in the apps, and synchronize these changes with Oracle Identity Cloud Service.

The Synchronize and Provision Users Between Oracle E-Business Suite and Oracle Identity Cloud Service video shows you how use Oracle Identity Cloud Service to manage the lifecycle of users in on-premises apps such as Oracle E-Business Suite.

Certified Components

With the Provisioning Bridge, Oracle Identity Cloud Service can connect to your on-premises apps.

The following table lists the certified versions for Oracle Identity Cloud Service, the versions of the on-premises apps with which Oracle Identity Cloud Service will synchronize or provision by using Provisioning Bridges, and the features of these apps that the bridges support.

Oracle Identity Cloud Service On-Premises App Supported Features
19.3.3 Oracle Internet Directory 12c PS3
  • Synchronization
19.3.3 Oracle E-Business Suite 12.1.1 -12.1.3, 12.2.x
  • Synchronization
  • Provisioning

Statuses

There are two statuses for a Provisioning Bridge client:
There are also two statuses for a Provisioning Bridge:
  • Active: The Provisioning Bridge is installed, started, and activated. It’s available to poll the apps to which the Provisioning Bridge is assigned for changes to users and groups in the apps, and synchronize these changes with Oracle Identity Cloud Service. You can also use this Provisioning Bridge to provision users to the apps. Provisioning allows you to use Oracle Identity Cloud Service to manage the lifecycle of users in the apps. This includes creating, modifying, deactivating, activating, and removing users and their profiles across the apps. See Activate Provisioning Bridges.

  • Inactive: The Provisioning Bridge is installed and configured, but it's deactivated. It’s not available either to retrieve users and groups from the apps to which the Provisioning Bridge is assigned or to provision users to the apps. For performance reasons, this is done. See Deactivate Provisioning Bridges.