Connector Architecture

1.5 Connector Architecture

The Oracle Primavera is implemented by using the Identity Connector Framework (ICF).

The ICF is a component that is required to use Identity Connector. ICF provides basic reconciliation and provisioning operations that are common to all Oracle Identity Governance connectors. In addition, ICF provides common features that developers would otherwise need to implement on their own, such as, buffering, time outs, and filtering. ICF is distributed together with Oracle Identity Governance. Therefore, you do not need to configure or modify ICF.

The following figure shows the architecture of the Oracle Primavera.

Figure 1-1 Oracle Primavera Connector Architecture

The connector is configured to run in one of the following modes:

Account management
Account management is also known as target resource management. In this mode, the target system is used as a target resource and the connector enables the following operations:
- Provisioning
  Provisioning involves creating and updating users on the target system through Oracle Identity Governance. During provisioning, the Adapters invoke ICF operation, ICF in turn invokes create operation on the Oracle Primavera Identity Connector Bundle and then the bundle calls the target system API (Primavera API) for provisioning operations. The API on the target system accepts provisioning data from the bundle, carries out the required operation on the target system, and returns the response from the target system back to the bundle, which passes it to the adapters.
- Target resource reconciliation
  ICF invokes a search operation on the Oracle Primavera Identity Connector Bundle and then the bundle calls Primavera API for Reconciliation operation. The API extracts user records that match the reconciliation criteria and hands them over through the bundle and ICF back to the scheduled task, which brings the records to Oracle Identity Governance.
  
  Each record fetched from the target system is compared with Oracle Primavera resources that are already provisioned to OIM Users. If a match is found, then the update made to the Oracle Primavera record from the target system is copied to the Oracle Primavera resource in Oracle Identity Governance. If no match is found, then the Name of the record is compared with the User Login of each OIM User. If a match is found, then data in the target system record is used to provision an Oracle Primavera resource to the OIM User.

The Oracle Primavera Identity Connector Bundle communicates with the Primavera API using the HTTPS protocol. The Primavera API provides programmatic access to Oracle Primavera through REST API endpoints. Apps can use the REST API to perform create, read, update operations on directory data and directory objects, such as users, roles.