4 Performing Postconfiguration Tasks for the Salesforce Connector
These are the tasks that you must perform after creating an application in Oracle Identity Governance.
4.1 Configuring Oracle Identity Governance
During application creation, if you did not choose to create a default form, then you must create a UI form for the application that you created by using the connector.
Note:
Perform the procedures described in this section only if you did not choose to create the default form during creating the application.4.1.1 Creating and Activating a Sandbox
You must create and activate a sandbox to begin using the customization and form management features. You can then publish the sandbox to make the customizations available to other users.
See Creating a Sandbox and Activating a Sandbox in Oracle Fusion Middleware Developing and Customizing Applications for Oracle Identity Governance.
4.1.2 Creating a New UI Form
You can use Form Designer in Oracle Identity System Administration to create and manage application instance forms.
See Creating Forms By Using the Form Designer in Oracle Fusion Middleware Administering Oracle Identity Governance.
While creating the UI form, ensure that you select the resource object corresponding to the newly created application that you want to associate the form with. In addition, select the Generate Entitlement Forms check box.
4.1.3 Publishing a Sandbox
Before publishing a sandbox, perform this procedure as a best practice to validate all sandbox changes made till this stage as it is difficult to revert the changes after a sandbox is published.
-
In Identity System Administration, deactivate the sandbox.
-
Log out of Identity System Administration.
-
Log in to Identity Self Service using the xelsysadm user credentials and then activate the sandbox that you deactivated in Step 1.
-
In the Catalog, ensure that the application instance form for your resource appears with correct fields.
-
Publish the sandbox. See Publishing a Sandbox in Oracle Fusion Middleware Developing and Customizing Applications for Oracle Identity Governance.
4.1.4 Creating an Application Instance
Create an application instance as follows:
See Managing Application Instances in Oracle Fusion Middleware Administering Oracle Identity Governance.
4.1.5 Updating an Existing Application Instance with a New Form
For any changes that you do in the schema of your application in Identity Self Service, you must create a new UI form and update the changes in an application instance.
To update an existing application instance with a new form:
-
Create and activate a sandbox.
-
Create a new UI form for the resource.
-
Open the existing application instance.
-
In the Form field, select the new UI form that you created.
-
Save the application instance.
-
Publish the sandbox.
See Also:
-
Creating a Sandbox and Activating a Sandbox in Oracle Fusion Middleware Developing and Customizing Applications for Oracle Identity Governance
-
Creating Forms By Using the Form Designer in Oracle Fusion Middleware Administering Oracle Identity Governance
-
Publishing a Sandbox in Oracle Fusion Middleware Developing and Customizing Applications for Oracle Identity Governance
4.2 Harvesting Entitlements and Sync Catalog
- Run the scheduled jobs for lookup field synchronization listed in Reconciliation Jobs.
- Run the Entitlement List scheduled job to populate Entitlement Assignment schema from child process form table.
- Run the Catalog Synchronization Job scheduled job.
See Also:
Predefined Scheduled Tasks in Oracle Fusion Middleware Administering Oracle Identity Governance for a description of the Entitlement List and Catalog Synchronization Job scheduled jobs
4.3 Managing Logging
Oracle Identity Governance uses the Oracle Diagnostic Logging (ODL) logging service for recording all types of events pertaining to the connector.
4.3.1 Understanding Log Levels
When you enable logging, Oracle Identity Governance automatically stores in a log file information about events that occur during the course of provisioning and reconciliation operations.
ODL is the principle logging service used by Oracle Identity Governance and is based on java.util.logger. To specify the type of event for which you want logging to take place, you can set the log level to one of the following:
-
SEVERE.intValue()+100
This level enables logging of information about fatal errors.
-
SEVERE
This level enables logging of information about errors that might allow Oracle Identity Governance to continue running.
-
WARNING
This level enables logging of information about potentially harmful situations.
-
INFO
This level enables logging of messages that highlight the progress of the application.
-
CONFIG
This level enables logging of information about fine-grained events that are useful for debugging.
-
FINE, FINER, FINEST
These levels enable logging of information about fine-grained events, where FINEST logs information about all events.
These message types are mapped to ODL message type and level combinations as shown in Table 4-1.
Table 4-1 Log Levels and ODL Message Type:Level Combinations
Java Level | ODL Message Type:Level |
---|---|
SEVERE.intValue()+100 |
INCIDENT_ERROR:1 |
SEVERE |
ERROR:1 |
WARNING |
WARNING:1 |
INFO |
NOTIFICATION:1 |
CONFIG |
NOTIFICATION:16 |
FINE |
TRACE:1 |
FINER |
TRACE:16 |
FINEST |
TRACE:32 |
The configuration file for OJDL is logging.xml, which is located at the following path:
DOMAIN_HOME/config/fmwconfig/servers/OIM_SERVER/logging.xml
Here, DOMAIN_HOME and OIM_SERVER are the domain name and server name specified during the installation of Oracle Identity Governance.
4.4 Configuring the IT Resource for the Connector Server
If you have used the Connector Server, you must configure values for the parameters of the Connector Server IT resource.
Note:
This procedure is optional and is required only when the Connector Server is being used.
To configure or modify the IT resource for the Connector Server:
-
Log in to Oracle Identity System Administration.
-
Create and activate a sandbox. For detailed instructions on creating and activating a sandbox, see Managing Sandboxes in Oracle Fusion Middleware Developing and Customizing Applications for Oracle Identity Governance.
-
In the left pane, under Configuration, click IT Resource.
-
In the IT Resource Name field on the Manage IT Resource page, enter
SalesForce
and then click Search. Figure 4-1 shows the Manage IT Resource page.Figure 4-1 Manage IT Resource Page for Connector Server IT Resource
Description of "Figure 4-1 Manage IT Resource Page for Connector Server IT Resource" -
Click the edit icon corresponding to the Connector Server IT resource.
-
From the list at the top of the page, select Details and Parameters.
-
Specify values for the parameters of the Connector Server IT resource. Figure 4-2 shows the Edit IT Resource Details and Parameters page.
Figure 4-2 Edit IT Resource Details and Parameters Page for the Connector Server IT Resource
Description of "Figure 4-2 Edit IT Resource Details and Parameters Page for the Connector Server IT Resource"Table 4-2 provides information about the parameters of the IT resource.
Table 4-2 Parameters of the IT Resource for the Salesforce Connector Server
Parameter Description Host
Enter the host name or IP address of the computer hosting the Connector Server.
Sample value:
HostName
Key
Enter the key for the Connector Server.
Port
Enter the number of the port at which the Connector Server is listening.
Default value:
8763
Timeout
Enter an integer value which specifies the number of milliseconds after which the connection between the Connector Server and Oracle Identity Governance times out.
If the value is zero or if no value is specified, the timeout is unlimited.
Sample value:
0
(recommended value)UseSSL
Enter
true
to specify that you will configure SSL between Oracle Identity Governance and the Connector Server. Otherwise, enterfalse.
Default value:
false
-
To save the values, click Update.
4.5 Localizing Field Labels in UI Forms
You can localize UI form field labels by using the resource bundle corresponding to the language you want to use. Resource bundles are available in the connector installation media.
4.6 Configuring SSL for the Connector
Configure SSL to secure data communication between Oracle Identity Governance and Salesforce.
Note:
If you are using this connector along with a Connector Server, then there is no need to configure SSL. You can skip this section.Importing the Certificate
Use the keytool command to import the SSL certificate from the target system into the identity keystore in Oracle Identity Governance.
keytool -import -alias alias -trustcacerts -file file-to-import -keystore keystore-name -storepass keystore-password
In the following example, the certificate file supportcert.pem
is imported to the identity keystore client_store.jks
with password example_password
:
keytool -import -alias serverwl -trustcacerts -file supportcert.pem -keystore client_store.jks -storepass example_password
Note:
Change the parameter values passed to the keytool command according to your requirements. Ensure that there is no line break in the keytool arguments.4.7 Obtaining GUID of Roles
You must obtain the GUID of roles from the target system to populate the Code Key values of the Lookup.Salesforce.Roles lookup definition.
00E800000016mY
is the GUID of the selected role:
https://cs40.salesforce.com.00E800000016mY.setupid=Roles