Learn about onboarding applications using the connector and the prerequisites for doing so.
2.1 Process Flow for Creating an Application By Using the Connector
From Oracle Identity Governance release 188.8.131.52.0 onward, connector deployment is handled using the application onboarding capability of Identity Self Service.
Figure 2-1 is a flowchart depicting high-level steps for creating an application in Oracle Identity Governance by using the connector installation package.
Figure 2-1 Overall Flow of the Process for Creating an Application By Using the Connector
Description of "Figure 2-1 Overall Flow of the Process for Creating an Application By Using the Connector"
2.2 Prerequisites for Creating an Application By Using the Connector
Learn about the tasks that you must complete before you create the application.
2.2.1 Configuring the Target System
Configuring the target system involves registering and generating a client application so that the connector can access Identity Cloud Service APIs. It also involves creating a target system account for connector operations.
Note:The detailed instructions for performing these tasks are available in the target system documentation. See Adding a Trusted Application in Oracle Cloud Administering Oracle Identity Cloud Service.
To configure the target system:
- Add a trusted application in Identity Cloud Service. Because the connector operates as a multitarget environment, the application needs to be registered on the Identity Cloud Service environment for authentication.
- Specify the permissions to choose an application type to configure your own application in the cloud. To do so:
- Select Resource Owner as the allowed grant type for this application.
- Select the Grant the client access to Identity Cloud Service Admin APIs checkbox.
- Select Identity Domain Administrator and Me. This provides administrator permissions to any third-party client using this application to perform identity operations such as User and Group management.
- On the Register the Resource of the Application page, select the Register Resources radio button.
- Create a target system account with administrative privileges to enable connector operations such as reconciliation and provisioning.
- Activate the application. The client ID and client secret values are displayed. You provide these values for the customAuthHeaders parameter (by creating a Base64 encoded string) in Basic Configuration Parameters.
2.2.2 Downloading the Connector Installation Package
You can obtain the installation package for your connector on the Oracle Technology Network (OTN) website.
- Navigate to the OTN website at http://www.oracle.com/technetwork/middleware/id-mgmt/downloads/connectors-101674.html.
- Click OTN License Agreement and read the license agreement.
- Select the Accept License Agreement option.You must accept the license agreement before you can download the installation package.
- Download and save the installation package to any directory on the computer hosting Oracle Identity Governance.
- Extract the contents of the installation package to any directory on the computer hosting Oracle Identity Governance. This creates a directory named CONNECTOR_NAME-RELEASE_NUMBER.
- Copy the CONNECTOR_NAME-RELEASE_NUMBER directory to the OIG_HOME/server/ConnectorDefaultDirectory directory.
2.3 Creating an Application By Using the Connector
You can onboard an application into Oracle Identity Governance from the connector package by creating a Target application. To do so, you must log in to Identity Self Service and then choose the Applications box on the Manage tab.
For detailed information on each of the steps in this procedure, see Creating Applications of Oracle Fusion Middleware Performing Self Service Tasks with Oracle Identity Governance.
- Create an application in Identity Self Service. The high-level steps are as follows:
- Log in to Identity Self Service either by using the System Administration account or an account with the ApplicationInstanceAdministrator admin role.
- Ensure that the Connector Package option is selected when creating an application.
- Update the basic configuration parameters to include connectivity-related information.
- If required, update the advanced setting parameters to update configuration entries related to connector operations.
- Review the default user account attribute mappings. If required, add new attributes or you can edit or delete existing attributes.
- Review the provisioning, reconciliation, organization, and catalog settings for your application and customize them if required. For example, you can customize the default correlation rules for your application if required.
- Review the details of the application and click Finish to submit the application details.The application is created in Oracle Identity Governance.
- When you are prompted whether you want to create a default request form, click Yes or No.If you click Yes, then the default form is automatically created and is attached with the newly created application. The default form is created with the same name as the application. The default form cannot be modified later. Therefore, if you want to customize it, click No to manually create a new form and attach it with your application.
- Verify reconciliation and provisioning operations on the newly created application.
Configuring the Identity Cloud Service Connector for details on basic configuration and advanced settings parameters, default user account attribute mappings, default correlation rules, and reconciliation jobs that are predefined for this connector
Configuring Oracle Identity Governance for details on creating a new form and associating it with your application, if you chose not to create the default form