6 Upgrading OIM-OAM Integrated Environments set up Manually

You can upgrade Oracle Identity Manager (OIM), Oracle Access Manager (OAM) integrated split domain highly available environments that are set up manually, from 11g Release 2 (11.1.2.3.0) to 12c (12.2.1.3.0) using the upgrade procedure described in this section.

Note:

The product Oracle Identity Manager is referred to as Oracle Identity Manager (OIM) and Oracle Identity Governance (OIG) interchangeably in the guide.

Topics

About the OIM-OAM Integrated HA Topology Set Up Manually

The sample topology is based on the split domain four node topology described in the Enterprise Deployment Guide for Oracle Identity and Access Management 11g Release 2 (11.1.2.3.0), that is deployed manually.

See Enterprise Deployment Guide for Oracle Identity and Access Management.

This topology and the accompanying procedures in this chapter are provided to serve as an example for upgrading a highly available, integrated Oracle Identity and Access Management environment. Your specific Oracle Identity and Access Management installation will vary, but this topology and upgrade procedure demonstrates the key elements of the upgrade process, which can be applied to your specific environment.

For a complete description of the topology diagram, refer to the Enterprise Deployment Guide for Oracle Identity and Access Management in the 11g Release 2 (11.1.2.3.0) Documentation Library.

Figure 6-1 OIM-OAM Integrated Topology Set Up Manually

Description of Figure 6-1 follows
Description of "Figure 6-1 OIM-OAM Integrated Topology Set Up Manually"

Supported Starting Points for Integrated HA Upgrade

Review the supported starting points for each of the components in your integrated environment in order to upgrade to 12c (12.2.1.3.0). If the components are in earlier versions, upgrade them to the version that is supported for 12c upgrade.

The following table lists the versions that are supported for upgrade of an integrated highly available environments.

Table 6-1 Supported Starting Point for Integrated HA Upgrade

Component Supported Starting Point

Oracle Identity Manager

11g Release 2 (11.1.2.3.0)

Oracle Access Manager

11g Release 2 (11.1.2.3.0)

Oracle SOA Suite

11g Release 1 (11.1.1.9.0)

Oracle WebLogic Server

10.3.6

Oracle Adaptive Access Manager is not part of the Oracle Identity and Access Management suite for 12c (12.2.1.3.0), and hence will not be upgraded to 12c. Oracle Adaptive Access Manager 11.1.2.3.0 is compatible with Oracle Access Manager 12c (12.2.1.3.0).

Roadmap for Upgrading OIM-OAM Integrated Highly Available Environments Set Up Manually

Refer to the roadmap for upgrading Oracle Identity Manager and Oracle Access Manager integrated highly available 11.1.2.3.0 environments that was set up manually, to 12c (12.2.1.3.0).

The following table describes the tasks that you must perform to upgrade an OIM-OAM integrated topology described in About the OIM-OAM Integrated HA Topology Set Up Manually.

Table 6-2 Tasks for Upgrading Integrated Environments Set Up Manually

Task Documentation

Review the OIM-OAM integrated topology.

See About the OIM-OAM Integrated HA Topology Set Up Manually.

Review the supported starting points for integrated environment upgrade.

See Supported Starting Points for Integrated HA Upgrade.

Ensure that the LDAP server and the Oracle Access Manager have the same lockout value configured before you start the upgrade. That is, the lockout threshold of libOVD, OAM, and LDAP should be the same, else the lock and unlock use cases fail after upgrade.

This is applicable for a OIM-OAM integrated single node setup as well.

See Setting the LockoutThreshold in Active Directory in the Oracle Fusion Middleware Deployment Guide for Oracle Identity and Access Management for 11g Release 2 (11.1.2.3.0).

If you have configured Node Manager, ensure that the Node Manager is stopped before you proceed with the upgrade.

See Stopping Servers and Processes.

Check if Oracle Access Manager (OAM) is integrated with Oracle Identity Manager (OIM) in a single domain

If Oracle Access Manager is integrated with Oracle Identity Manager (OIM), and if both the products are in a same domain, a separate OAM domain needs to be cloned that works with OIM in the source domain. It is the cloned OAM domain that needs to be upgraded to 12c.

See Checking if OAM is in a Different Domain to OAAM and OIM.

Also, complete any necessary pre-upgrade tasks for Oracle Access Manager.

See Completing the Pre-Upgrade Tasks for Oracle Access Manager.

Upgrade Oracle Access Manager to 12c (12.2.1.3.0).

You can choose to upgrade Oracle Identity Manager first too.

See Upgrading Oracle Access Manager Highly Available Environments.

Upgrade Oracle Identity Manager to 12c (12.2.1.3.0).

See Upgrading Oracle Identity Manager Highly Available Environments.

Note:

If you encounter any issues during upgrade, see Troubleshooting the Oracle Access Manager Upgrade.