Table of Contents

• List of Examples
• List of Figures
• List of Tables
• Title and Copyright Information
• Preface
  • Audience
  • Documentation Accessibility
  • Related Documents
  • Conventions
• What's New
  • New and Changed Features for 12c (12.2.1.3.0)
• Part I IdM Integration Topology
  • 1 Introduction to IdM Suite Components Integration
    • 1.1 Prerequisites to Integrating Oracle Identity Management Suite Components
      • 1.1.1 Understanding the Installation Roadmap
      • 1.1.2 Understanding Deployment Topologies
      • 1.1.3 Understanding the Identity Store
      • 1.1.4 Understanding Integration Between LDAP Identity Store and Oracle Identity Governance
      • 1.1.5 Common Environment Variables
      • 1.1.6 Operating System
    • 1.2 Understanding Oracle Identity Management Integration Topologies
      • 1.2.1 About the Basic Integration Topology
        • 1.2.1.1 About the Three Tier Architecture
        • 1.2.1.2 Understanding the Web Tier
        • 1.2.1.3 Understanding the Application Tier
        • 1.2.1.4 Understanding the Data Tier
      • 1.2.2 About the Enterprise Integration Topology
      • 1.2.3 Using Multiple Directories for an Identity Store
      • 1.2.4 Integration Terminology
    • 1.3 Overview of Oracle Identity Management Components Used in the Integration
      • 1.3.1 Oracle Unified Directory
      • 1.3.2 Oracle Internet Directory
      • 1.3.3 Oracle Virtual Directory
      • 1.3.4 Oracle Access Management Access Manager
        • 1.3.4.1 A Note About IDMDomain Agents and Webgates
      • 1.3.5 Oracle Identity Governance
      • 1.3.6 Oracle Access Management Identity Federation
    • 1.4 IdM Integration Quick Links
    • 1.5 Common Access Manager and Oracle Identity Governance Integration Scenarios
      • 1.5.1 About Password Management Scenarios
        • 1.5.1.1 About Access Manager Integrated with Oracle Identity Governance
        • 1.5.1.2 About Self-Registration
        • 1.5.1.3 About Password Change
        • 1.5.1.4 About Forgot Password
        • 1.5.1.5 About Account Lock and Unlock
        • 1.5.1.6 About Challenge Setup
      • 1.5.2 About Managing Mobile Security Accounts and Applications Using Identity Self-Service
    • 1.6 System Requirements and Certification
    • 1.7 Using My Oracle Support for Additional Troubleshooting Information
• Part II Core Integrations
  • 2 Integrating Access Manager and Oracle Identity Governance
  • 3 Integrating Access Manager, OAAM, and Oracle Identity Governance
• Part III External SSO Solutions
  • 4 Integrating with Identity Federation
    • 4.1 Introduction to Identity Federation with Oracle Access Manager
      • 4.1.1 About Oracle Access Management Identity Federation
      • 4.1.2 About Deployment Options for Identity Federation
    • 4.2 Integrating Access Manager 11gR2 with Identity Federation 11gR1
      • 4.2.1 About SP and Authentication Integration Modes
      • 4.2.2 Access Manager and Oracle Identity Federation Integration Overview
      • 4.2.3 Prerequisites to Integrating Access Manager with Oracle Identity Federation
      • 4.2.4 Verifying Servers are Running and a Resource is Protected
      • 4.2.5 Registering Oracle HTTP Server WebGate with Access Manager for Access Manager and OIF Integration
      • 4.2.6 Configuring Oracle Identity Federation for Access Manager and OIF Integration
        • 4.2.6.1 Verifying the Oracle Identity Federation User Data Store
        • 4.2.6.2 Configuring the Oracle Identity Federation Authentication Engine
        • 4.2.6.3 Configuring the Oracle Identity Federation SP Integration Module
      • 4.2.7 Configuring Access Manager for Integration with Oracle Identity Federation
        • 4.2.7.1 Configuring Access Manager to Redirect Users to Oracle Identity Federation
        • 4.2.7.2 Registering Oracle Identity Federation as a Trusted Access Manager Partner
          • 4.2.7.2.1 Registering Oracle Identity Federation for Use in SP Mode
          • 4.2.7.2.2 Registering Oracle Identity Federation for Use in Authentication Mode
      • 4.2.8 Configuring Access Manager to Protect a Resource with the OIFScheme
      • 4.2.9 Testing the Access Manager and Oracle Identity Federation Integration Configuration
        • 4.2.9.1 Testing the SP Mode Configuration
        • 4.2.9.2 Testing the Authentication Mode Configuration
    • 4.3 Running Access Manager-OIF Integration Scripts to Automate Tasks
      • 4.3.1 Performing Prerequisite Steps Before Integration
      • 4.3.2 Verifying WebLogic and Oracle Identity Federation Servers are Running
      • 4.3.3 Executing the Automated Procedure for Access Manager-OIF Integration
        • 4.3.3.1 Tasks Performed by Federation Configuration Scripts
        • 4.3.3.2 Copying the Access Manager-OIF Integration Scripts to the Access Manager Machine
        • 4.3.3.3 Understanding Inputs to the Access Manager-OIF Integration Scripts
        • 4.3.3.4 Running the Access Manager-OIF Integration Scripts
• Part IV Additional Identity Store Configuration
  • 5 Configuring an Identity Store with Multiple Directories
    • 5.1 Overview of Configuring Multiple Directories as an Identity Store
    • 5.2 Configuring Multiple Directories as an Identity Store: Split Profile
      • 5.2.1 Prerequisites to Configuring Multiple Directories as an Identity Store
      • 5.2.2 Repository Descriptions
      • 5.2.3 Setting Up Oracle Internet Directory as a Shadow Directory
      • 5.2.4 Directory Structure Overview - Shadow Join
      • 5.2.5 Configuring Oracle Virtual Directory Adapters for Split Profile
      • 5.2.6 Configuring a Global Consolidated Changelog Plug-in
      • 5.2.7 Validating the Oracle Virtual Directory Changelog
    • 5.3 Configuring Multiple Directories as an Identity Store: Distinct User and Group Populations in Multiple Directories
      • 5.3.1 Directory Structure Overview for Distinct User and Group Populations in Multiple Directories
      • 5.3.2 Configuring Oracle Virtual Directory Adapters for Distinct User and Group Populations in Multiple Directories
        • 5.3.2.1 Creating Enterprise Directory Adapters
        • 5.3.2.2 Creating Application Directory Adapters
      • 5.3.3 Creating a Global Plug-in
    • 5.4 Additional Configuration Tasks When Reintegrating Oracle Identity Governance With Multiple Directories
• Part V Appendices
• A Verifying Adapters for Multiple Directory Identity Stores by Using ODSM
  • A.1 Verifying Oracle Virtual Directory Adapters for Split Profile by Using ODSM
    • A.1.1 Verifying User Adapter for Active Directory Server
    • A.1.2 Verifying Shadowjoiner User Adapter
    • A.1.3 Verifying JoinView Adapter
    • A.1.4 Verifying User/Role Adapter for Oracle Internet Directory
    • A.1.5 Verifying Changelog Adapter for Active Directory Server
    • A.1.6 Verifying Changelog Adapter for Oracle Internet Directory
    • A.1.7 Configuring a Global Consolidated Changelog Plug-in
    • A.1.8 Validating Oracle Virtual Directory Changelog
  • A.2 Verifying Adapters for Distinct User and Group Populations in Multiple Directories by Using ODSM
    • A.2.1 Verifying the User Adapter on the Oracle Virtual Directory Instances
    • A.2.2 Verifying the Plug-In of the User/Role Adapter A1
    • A.2.3 Verifying the Plug-In of the User/Role Adapter A2
    • A.2.4 Verifying the Changelog Adapter C1 Plug-In
    • A.2.5 Verifying the Changelog Adapter for Active Directory
    • A.2.6 Verifying Changelog Adapter C2
    • A.2.7 Verifying Oracle Virtual Directory Global Plug-in
    • A.2.8 Configuring a Global Consolidated Changelog Plug-in
• B Using the idm.conf File
  • B.1 About the idm.conf File
  • B.2 Example idm.conf File
• C Enabling LDAP Synchronization in Oracle Identity Governance
• D Configuring Oracle Virtual Directory for Integration with Oracle Access Management Access Manager
  • D.1 Creating and Configuring Oracle Virtual Directory Adapters
    • D.1.1 Creating and Configuring an LDAP Adapter
      • D.1.1.1 Configuring LDAP Adapter General Settings
      • D.1.1.2 Managing Certificate Authorities for LDAP Adapters Secured by SSL
    • D.1.2 Creating and Configuring a Database Adapter
    • D.1.3 Configuring Custom Adapters
  • D.2 Using the OAMPolicyControl Plug-In with Oracle Access Manager 10g
    • D.2.1 Preparing to Deploy the OAMPolicyControl Plug-in
    • D.2.2 Configuration Parameters of the OAMPolicyControl Plug-in