Table of Contents

• List of Figures
• List of Tables
• Title and Copyright Information
• Preface
  • Audience
  • Documentation Accessibility
  • Related Documents
  • Conventions
• What's New In This Guide
  • Updates in April 2021 Documentation Refresh for 12c (12.2.1.3.0)
  • Updates in January 2021 Documentation Refresh for 12c (12.2.1.3.0)
  • Updates in July 2020 Documentation Refresh for 12c (12.2.1.3.0)
  • Updates in October 2019 Documentation Refresh for 12c (12.2.1.3.0)
  • Updates in October 2018 Documentation Refresh for 12c (12.2.1.3.0)
  • Updates in July 2018 Documentation Refresh for 12c (12.2.1.3.0)
  • Updates in April 2018 Documentation Refresh for 12c (12.2.1.3.0)
  • Updates in January 2018 Documentation Refresh for 12c (12.2.1.3.0)
  • Updates in December 2017 Documentation Refresh for 12c (12.2.1.3.0)
  • Updates in November 2017 Documentation Refresh for 12c (12.2.1.3.0)
  • Updates in September 2017 Documentation Refresh for 12c (12.2.1.3.0)
  • New and Changed Features for 12c (12.2.1.3.0)
  • Other Significant Changes in this Document for 12c (12.2.1.3.0)
• Part I Overview
  • 1 Product Overview for Oracle Identity Governance
    • 1.1 What is Oracle Identity Governance?
    • 1.2 What are the Different Modes of Oracle Identity Governance?
    • 1.3 How does Oracle Identity Governance Interact with Other IT Systems?
    • 1.4 How does Oracle Identity Governance Interact with Other Oracle Identity and Access Management Products?
    • 1.5 How do Users Interact with Oracle Identity Governance?
  • 2 Product Architecture of Oracle Identity Governance
    • 2.1 Oracle Identity Governance Components
    • 2.2 Multi-tiered Architecture of Oracle Identity Governance
      • 2.2.1 About the User Interface Tier
      • 2.2.2 About the Application Tier
      • 2.2.3 About the Database Tier
      • 2.2.4 About the Connector Tier
  • 3 Oracle Identity System Administration Interface
    • 3.1 Logging in to Oracle Identity System Administration
    • 3.2 Oracle Identity System Administration
      • 3.2.1 Layout of the Oracle Identity System Administration Interface
      • 3.2.2 Links in the Oracle Identity System Administration Interface
        • 3.2.2.1 About Accessibility Link
        • 3.2.2.2 About Sandboxes Link
        • 3.2.2.3 About Sign Out Link
      • 3.2.3 Left and Right Panes in the Oracle Identity System Administration Console
        • 3.2.3.1 About Policies
        • 3.2.3.2 About Provisioning Configuration
        • 3.2.3.3 About System Entities
        • 3.2.3.4 About System Configuration
        • 3.2.3.5 About Upgrade
        • 3.2.3.6 About Workflows
      • 3.2.4 Help in Oracle Identity System Administration
        • 3.2.4.1 About Top Pane in the Help Interface
        • 3.2.4.2 About Lower Left Pane in the Help Interface
        • 3.2.4.3 About Lower Right Pane in the Help Interface
• Part II Policy Administration
  • 4 Managing Workflows
    • 4.1 Understanding Workflow Rules
      • 4.1.1 About Workflow Rules
      • 4.1.2 About Request Process Flow
      • 4.1.3 About Request Lifecycle
        • 4.1.3.1 Various Request Stages
        • 4.1.3.2 Single Request Lifecycle
        • 4.1.3.3 Bulk Request Lifecycle
    • 4.2 Configuring Approval Workflow Rules
      • 4.2.1 About Approval Workflow Rules
      • 4.2.2 About Rule Conditions
      • 4.2.3 About System-Defined Operations and Rules
      • 4.2.4 Creating Approval Workflow Rules
      • 4.2.5 About Custom Rule Conditions
      • 4.2.6 Modifying Approval Workflow Rules
      • 4.2.7 Deleting Approval Workflow Rules
      • 4.2.8 About Approval Workflow Rule Evaluation
    • 4.3 Managing Request Approval in an Upgraded Deployment of Oracle Identity Governance
      • 4.3.1 About Request Approval in an Upgraded Deployment of Oracle Identity Governance
      • 4.3.2 About Request Process Flow With Approval Workflow Rules Disabled
      • 4.3.3 Migrating Approval Policies to Approval Workflow Rules
      • 4.3.4 Enabling Approval Workflow Rules
        • 4.3.4.1 Enabling the Approval Workflow Rules Feature
        • 4.3.4.2 About In-Flight Request Lifecycle
    • 4.4 Migrating Workflow Rules From Test to Production
      • 4.4.1 About Migration of Workflow Rules From Test to Production
      • 4.4.2 Moving Workflow Rules From Test to Production Using the Deployment Manager
    • 4.5 Running Oracle Identity Governance Without Workflows
      • 4.5.1 Disabling SOA Server
      • 4.5.2 About the Impact of Disabling Workflows
    • 4.6 Use Cases for Disabled or Deleted Proxy Users
• Part III Form Management
  • 5 Managing Forms
    • 5.1 Creating Forms By Using the Form Designer
    • 5.2 Searching Forms By Using the Form Designer
    • 5.3 Modifying Forms By Using the Form Designer
    • 5.4 Removing or Hiding Form Attributes
• Part IV System Entities
  • 6 Configuring Custom Attributes
    • 6.1 Creating a Custom Attribute
    • 6.2 Creating a Custom Child Form
    • 6.3 Creating a Custom Child Form Attribute
    • 6.4 Modifying a Custom Attribute
    • 6.5 Adding a Custom Attribute
      • 6.5.1 Displaying a UDF in Oracle Identity Self Service Page
      • 6.5.2 Enabling the Submit Button After Adding a UDF to the Modify User Form
      • 6.5.3 Adding a Custom Attribute Category into Create User Form
      • 6.5.4 Customizing Unauthenticated Page
    • 6.6 Adding a Custom Attribute to an Application Instance Form
      • 6.6.1 Regenerating View
      • 6.6.2 Updating the Application Instance Form By Using WebCenter Composer
    • 6.7 Moving UDFs from Test to Production
      • 6.7.1 Moving UDFs Added to Entities
        • 6.7.1.1 Exporting the UDF from the Test Environment
        • 6.7.1.2 Importing the UDF into the Production Environment
      • 6.7.2 Moving UDFs Added to Catalog Entities
    • 6.8 Synchronizing User-Defined Fields Between Oracle Identity Governance and LDAP
    • 6.9 Creating Cascaded LOVs
    • 6.10 Specifying Cascaded LOVs Without NULL Value
    • 6.11 Localizing Display Labels of UDFs
    • 6.12 Configuring a Field as Mandatory Attribute in the Request Catalog
• Part V Application Management
  • 7 Managing IT Resources
    • 7.1 Creating IT Resources
    • 7.2 Searching IT Resources
    • 7.3 Viewing IT Resources
    • 7.4 Modifying IT Resources
    • 7.5 Deleting IT Resources
  • 8 Managing Generic Connectors
    • 8.1 Creating Generic Technology Connectors
      • 8.1.1 Determining Provider Requirements for Creating Generic Technology Connectors
      • 8.1.2 Selecting the Providers for Creating Generic Technology Connectors
      • 8.1.3 Addressing the Prerequisites for Creating Generic Technology Connectors
      • 8.1.4 Creating the Connector Using Identity System Administration
      • 8.1.5 Configuring Reconciliation
      • 8.1.6 Configuring Provisioning
      • 8.1.7 Creating the Form and Publishing the Application Instance
      • 8.1.8 Enabling Log for the Generic Technology Connector
    • 8.2 Using Identity System Administration to Create the Connector
      • 8.2.1 Providing Basic Information for Generic Technology Connector
      • 8.2.2 Specifying Parameter Values for the Providers
        • 8.2.2.1 Run-Time Parameters for the Provider
        • 8.2.2.2 Design Parameters for the Provider
          • 8.2.2.2.1 About Design Parameters for the Provider
          • 8.2.2.2.2 Reconciliation Specific Design Parameters for the Provider
          • 8.2.2.2.3 Provisioning Specific Design Parameter for the Provider
        • 8.2.2.3 Sample Values for the Run-Time and Design Parameters
      • 8.2.3 Modifying Connector Configuration
        • 8.2.3.1 About Metadata for Generic Technology Connector
        • 8.2.3.2 Data Set for Generic Technology Connectors
        • 8.2.3.3 Mapping Parameters for Data Sets
        • 8.2.3.4 About Adding or Editing Fields in Data Sets
        • 8.2.3.5 Adding or Editing Fields in Data Sets
        • 8.2.3.6 Removing Fields from Data Sets
        • 8.2.3.7 Removing Mappings Between Fields
        • 8.2.3.8 Removing Child Data Sets
      • 8.2.4 Verifying Connector Form Names
      • 8.2.5 Verifying Connector Information
    • 8.3 Managing Generic Technology Connectors
      • 8.3.1 Modifying Generic Technology Connectors
      • 8.3.2 Exporting Generic Technology Connectors
      • 8.3.3 Importing Generic Technology Connectors
      • 8.3.4 Importing Connector XML File
  • 9 Managing Application Instances
    • 9.1 About Application Instances
    • 9.2 Application Instance Concepts
      • 9.2.1 Multiple Accounts Per Application Instance
      • 9.2.2 Entitlements
      • 9.2.3 Disconnected Application Instances
      • 9.2.4 Application Instance Security
    • 9.3 Managing Application Instances
      • 9.3.1 Creating Application Instances
      • 9.3.2 Searching Application Instances
      • 9.3.3 Modifying Application Instances
        • 9.3.3.1 Modifying Application Instance Attributes
        • 9.3.3.2 Managing Organizations Associated With Application Instances
          • 9.3.3.2.1 About Organizations Associated With Application Instances
          • 9.3.3.2.2 Publishing an Application Instance to Organizations
          • 9.3.3.2.3 Revoking Organizations From an Application Instance
        • 9.3.3.3 Managing Entitlements Associated With Application Instances
          • 9.3.3.3.1 Modifying Entitlement Attributes
          • 9.3.3.3.2 Publishing an Entitlement to an Organization
          • 9.3.3.3.3 Revoking an Entitlement from an Organization
      • 9.3.4 Understanding the Deletion of Application Instances
        • 9.3.4.1 About Deleting Application Instances
        • 9.3.4.2 Deleting an Application Instance
      • 9.3.5 Creating and Modifying Forms Associated With the Application Instances
        • 9.3.5.1 Creating Forms Associated With Application Instances
        • 9.3.5.2 Modifying Forms Associated With Application Instances
        • 9.3.5.3 Localizing Application Instance Form
    • 9.4 Configuring Application Instances
      • 9.4.1 Configuring a Resource Object
      • 9.4.2 Configuring IT Resource
      • 9.4.3 Configuring Password Policies for Application Instances
    • 9.5 Developing Entitlements
      • 9.5.1 About Entitlements
      • 9.5.2 Available Entitlements and Assigned Entitlements
      • 9.5.3 Entitlement Data Capture Process
      • 9.5.4 Marking Entitlement Attributes on Child Process Forms
      • 9.5.5 Duplicate Validation for Entitlements or Child Data
      • 9.5.6 Configuring Scheduled Tasks for Working with Entitlement Data
        • 9.5.6.1 Entitlement List
        • 9.5.6.2 Entitlement Assignments
      • 9.5.7 Deleting Entitlements
        • 9.5.7.1 About Entitlement Deletion
        • 9.5.7.2 Deleting Entitlement Post-Processing
      • 9.5.8 Refreshing the Entitlement List Post Delete for New Entries
      • 9.5.9 Disabling the Capture of Modifications to Assigned Entitlements
      • 9.5.10 Entitlement-Related Reports
        • 9.5.10.1 Entitlement Access List
        • 9.5.10.2 Entitlement Access List History
        • 9.5.10.3 User Resource Entitlement
        • 9.5.10.4 User Resource Entitlement History
    • 9.6 Managing Disconnected Resources
      • 9.6.1 About Disconnected Resources
      • 9.6.2 Disconnected Resources Architecture
      • 9.6.3 Managing Disconnected Application Instance
        • 9.6.3.1 Creating a Disconnected Application Instance
        • 9.6.3.2 Creating a Disconnected Application Instance for an Existing Disconnected Resource
      • 9.6.4 Provisioning Operations on a Disconnected Application Instance
      • 9.6.5 Configuring Entitlement Grant
      • 9.6.6 Status Changes in Manual Process Task Action
      • 9.6.7 Customizing Provisioning SOA Composite
        • 9.6.7.1 Customizing Human Task Assignment via SOA Composer
        • 9.6.7.2 Customizing by Modifying the Predefined Composite
      • 9.6.8 Troubleshooting Disconnected Resources
  • 10 Managing Connector Lifecycle
    • 10.1 Lifecycle of a Connector
    • 10.2 Change Management Terminology
    • 10.3 Viewing Connector Details
    • 10.4 Installing Connectors
      • 10.4.1 Understanding the Connector Deployment Process
      • 10.4.2 Installing a Connector
      • 10.4.3 Postinstallation Steps
    • 10.5 Defining Connectors With Oracle Identity Governance
      • 10.5.1 About Defining a Connector
      • 10.5.2 Defining a Connector
    • 10.6 Cloning Connectors
      • 10.6.1 Guidelines for Cloning a Connector
      • 10.6.2 Creating the Connector XML File for the Cloned Connector
      • 10.6.3 Installing the Clone Connector
      • 10.6.4 Post-Cloning Steps
    • 10.7 Exporting Connector Object Definitions in Connector XML Format
      • 10.7.1 About Exporting Connector Object Definitions in Connector XML Format
      • 10.7.2 Exporting Connector Object Definitions in Connector XML Format
    • 10.8 Upgrading Connectors
      • 10.8.1 About Upgrading Connectors
      • 10.8.2 Upgrade Use Cases Supported by the Connector Upgrade Feature
      • 10.8.3 Connector Object Changes Supported by the Upgrade Connectors Feature
        • 10.8.3.1 Resource Object Changes
        • 10.8.3.2 Process Definition Changes
        • 10.8.3.3 Resource Bundle Changes
        • 10.8.3.4 Process Form Changes
        • 10.8.3.5 Lookup Definition Changes
        • 10.8.3.6 Adapter Changes
        • 10.8.3.7 Rule Changes
        • 10.8.3.8 IT Resource Type Changes
        • 10.8.3.9 IT Resource Changes
        • 10.8.3.10 Scheduled Task Changes
      • 10.8.4 What Happens When You Upgrade a Connector
      • 10.8.5 Summary of the Upgrade Procedure
        • 10.8.5.1 Guidelines for Upgrading Cloned Connectors
      • 10.8.6 Procedure to Upgrade a Connector
        • 10.8.6.1 Preupgrade Procedure
        • 10.8.6.2 Wizard Mode Upgrade in Staging Environment
        • 10.8.6.3 Silent Mode Upgrade in Staging and Production Environment
      • 10.8.7 Postupgrade Procedure
        • 10.8.7.1 Connector Code File Changes
        • 10.8.7.2 Running the PurgeCache Utility
        • 10.8.7.3 Running cancelProcessTask Utility
        • 10.8.7.4 Updating Access Policies
        • 10.8.7.5 Configuring the IT Resource
        • 10.8.7.6 Configuring the Scheduled Tasks
        • 10.8.7.7 Updating Adapters for Changes in IT Resource Type Definition Parameter
        • 10.8.7.8 Other Postupgrade Steps
      • 10.8.8 Procedure to Upgrade a 9.x Connector Version to an ICF Based Connector
    • 10.9 Uninstalling Connectors
      • 10.9.1 About Uninstalling Connectors Utility
      • 10.9.2 Use Cases Supported by the Uninstall Connectors Utility
      • 10.9.3 Overview of the Connector Uninstall Process
      • 10.9.4 Setting Up the Uninstall Connector Utility
      • 10.9.5 Uninstalling Connectors and Removing Connector Objects
        • 10.9.5.1 Uninstalling a Connector
        • 10.9.5.2 Removing Adapters, Lookup Definitions, Resource Objects, and Scheduled Tasks
      • 10.9.6 Running the Script to Uninstall Connectors and Connector Objects
        • 10.9.6.1 Preuninstall the Connectors and Connector Objects
        • 10.9.6.2 Uninstall the Connectors and Connector Objects
        • 10.9.6.3 Postuninstall the Connectors and Connector Objects
    • 10.10 Troubleshooting Connector Management Issues
  • 11 Managing Reconciliation
    • 11.1 About Reconciliation
    • 11.2 Reconciliation Based on the Object Being Reconciled
      • 11.2.1 Entities that are Reconciled in Oracle Identity Governance
      • 11.2.2 Trusted Source Reconciliation
      • 11.2.3 Account Reconciliation
        • 11.2.3.1 Scenario I: Account Reconciliation From a Target System
        • 11.2.3.2 Scenario II: Identity and Account Reconciliation
      • 11.2.4 Reconciliation Process Flow
    • 11.3 Mode of Reconciliation
    • 11.4 Approach Used for Reconciliation
    • 11.5 Managing Reconciliation Events
      • 11.5.1 About Reconciliation Events
      • 11.5.2 Searching Events
        • 11.5.2.1 Performing a Simple Search for Events
        • 11.5.2.2 Performing an Advanced Search for Events
      • 11.5.3 Displaying Event Details
      • 11.5.4 Determining Event Actions
      • 11.5.5 Re-evaluating Events
      • 11.5.6 Closing Events
      • 11.5.7 Linking Reconciliation Events
        • 11.5.7.1 Ad Hoc Linking
        • 11.5.7.2 Manual Linking
        • 11.5.7.3 Linking Orphan Accounts
          • 11.5.7.3.1 About Linking Orphan Accounts
          • 11.5.7.3.2 For an Event With Multiple Matches
          • 11.5.7.3.3 For an Event With No Matches
• Part VI Requests
  • 12 Managing the Access Request Catalog
    • 12.1 Access Request Catalog
      • 12.1.1 Access Request Challenges
      • 12.1.2 Access Request Catalog Concepts
      • 12.1.3 Access Request Catalog Use Cases
      • 12.1.4 Features and Benefits of Access Request Catalog
      • 12.1.5 Access Request Catalog Architecture
    • 12.2 Configuring the Access Request Catalog
      • 12.2.1 Adding More Attributes to the Default Search Form
      • 12.2.2 Configuring Application Selection Limit in Entitlement Search
      • 12.2.3 Configuring Catalog to Use a Custom Search Form
    • 12.3 Administering the Access Request Catalog
      • 12.3.1 Prerequisites of Catalog Administration
        • 12.3.1.1 Setting Up the Catalog Administrator
        • 12.3.1.2 Defining the Catalog Metadata
        • 12.3.1.3 Adding Attributes to the Catalog
      • 12.3.2 Common Tasks to be Performed by the Catalog Administrator
        • 12.3.2.1 Onboard Applications and Roles
          • 12.3.2.1.1 Prepare an Onboarding checklist
          • 12.3.2.1.2 Onboarding Roles
          • 12.3.2.1.3 About Onboard Application Instances
          • 12.3.2.1.4 Onboarding Application Instances
          • 12.3.2.1.5 About Onboard Entitlements
          • 12.3.2.1.6 Onboarding Entitlements
        • 12.3.2.2 Bootstrapping the Catalog
          • 12.3.2.2.1 About Bootstrapping the Catalog
          • 12.3.2.2.2 Bootstrapping the Catalog with Roles
          • 12.3.2.2.3 Bootstrapping the Catalog with Application Instances
          • 12.3.2.2.4 Bootstrapping the Catalog with Entitlements
        • 12.3.2.3 Ongoing Synchronization
        • 12.3.2.4 Enrich the Catalog
          • 12.3.2.4.1 About Enriching the Catalog
          • 12.3.2.4.2 Editing a Catalog Item Online
          • 12.3.2.4.3 Enriching the Catalog in Bulk from External Sources
          • 12.3.2.4.4 Loading data from an external source
        • 12.3.2.5 Managing Catalog Items
          • 12.3.2.5.1 Deleting a Catalog Items of Type Roles
          • 12.3.2.5.2 Deleting Catalog Items of Type Application Instances
          • 12.3.2.5.3 Deleting Catalog Items of type Entitlements
      • 12.3.3 Catalog Auditing
        • 12.3.3.1 About Catalog Auditing
        • 12.3.3.2 Configuring Catalog Auditing
      • 12.3.4 Configuring Hierarchical Attributes of Entitlements
        • 12.3.4.1 About Hierarchical Attributes of Entitlements
        • 12.3.4.2 Enabling the Display of Additional Details of the Entitlements
      • 12.3.5 Database Best Practices for Access Request Catalog
        • 12.3.5.1 About Database Best Practices for Access Request Catalog
        • 12.3.5.2 One-Time Optimizations for Oracle Text Index
          • 12.3.5.2.1 Storage of Text Index
          • 12.3.5.2.2 KEEP Pool Settings for Text Index
        • 12.3.5.3 Text Index Optimization
        • 12.3.5.4 Frequently Asked Questions about the Access Request Catalog
    • 12.4 Managing the Lifecycle of the Catalog
      • 12.4.1 Overview of Catalog Customization
      • 12.4.2 Test to Production Procedures for Catalog Customizations
        • 12.4.2.1 About Test to Production Procedures for Catalog Customizations
        • 12.4.2.2 Exporting Using the Sandbox and Deployment Manager
          • 12.4.2.2.1 Exporting Using the Sandbox
          • 12.4.2.2.2 Exporting Using the Deployment Manager
        • 12.4.2.3 Importing Using the Sandbox and Deployment Manager
          • 12.4.2.3.1 Importing Using the Sandbox
          • 12.4.2.3.2 Importing Using the Deployment Manager
      • 12.4.3 Limitations of the Test to Production Procedures
    • 12.5 Troubleshooting Access Request Catalog
      • 12.5.1 Catalog Synchronization Issues
      • 12.5.2 Catalog Security Issues
      • 12.5.3 Catalog Search Issues
      • 12.5.4 Common Reasons for Request Failure
• Part VII System Configuration
  • 13 Managing the Home Organization Policy
    • 13.1 About Home Organization Policy
    • 13.2 Use Cases for the Home Organization Policy
      • 13.2.1 Self-Registration Use Case Using Default Rule
      • 13.2.2 Self-Registration Use Case Using Simple Rule
      • 13.2.3 Self-Registration Use Case Using Complex Rule
      • 13.2.4 Use Case for Rule Evaluation Order
      • 13.2.5 Self-Registration Use Case When SOA is Off
    • 13.3 Creating a Rule in Home Organization Policy
    • 13.4 Modifying a Rule in Home Organization Policy
    • 13.5 Deleting a Rule in Home Organization Policy
  • 14 Managing Self Service Capability Policy
    • 14.1 About Self Service Capability Rule
    • 14.2 Default Self Service Capability Rule
    • 14.3 Example of Self Service Capability Rules and Rule Evaluation Order
    • 14.4 Creating a Rule in Self Service Capability Policy
    • 14.5 Modifying a Rule in Self Service Capability Policy
    • 14.6 Deleting a Rule in Self Service Capability Policy
  • 15 Managing Lookups
    • 15.1 Searching a Lookup Type
    • 15.2 Creating a Lookup Type
    • 15.3 Modifying a Lookup Type
  • 16 Managing Role Categories
    • 16.1 About Role Category
    • 16.2 Creating a Role Category
    • 16.3 Searching Role Categories
    • 16.4 Modifying a Role Category
    • 16.5 Deleting a Role Category
  • 17 Managing the Scheduler
    • 17.1 About Scheduler
    • 17.2 Configuring the oim-config.xml File
    • 17.3 Start and Stop the Scheduler
      • 17.3.1 About Starting and Stopping the Scheduler
      • 17.3.2 Starting and Stopping the Scheduler
      • 17.3.3 Controlling Scheduler Start or Stop in a Clustered Environment
        • 17.3.3.1 Adding the Server Side Property for Oracle Identity Governance
        • 17.3.3.2 Restarting Oracle Identity Governance Managed Servers from the Node Manager
        • 17.3.3.3 Modifying the Server Side Property for Oracle Identity Governance
    • 17.4 Scheduled Tasks
      • 17.4.1 About Scheduled Tasks
      • 17.4.2 Predefined Scheduled Tasks
      • 17.4.3 Creating Custom Scheduled Tasks
    • 17.5 Managing Jobs
      • 17.5.1 Creating Jobs
      • 17.5.2 Searching Jobs
        • 17.5.2.1 Performing a Simple Search for Jobs
        • 17.5.2.2 Performing an Advanced Search for Jobs
      • 17.5.3 Viewing Jobs
      • 17.5.4 Modifying Jobs
      • 17.5.5 About Disabling and Enabling Jobs
      • 17.5.6 Disabling and Enabling Jobs
      • 17.5.7 Starting and Stopping Jobs
      • 17.5.8 Deleting Jobs
    • 17.6 Diagnosing Scheduled Jobs
      • 17.6.1 Schedule Job Errors
      • 17.6.2 Resolving the Schedule Job Errors
  • 18 Managing Notification Service
    • 18.1 About Notification Providers
    • 18.2 Managing Notification Providers
      • 18.2.1 Using UMS for Notification
        • 18.2.1.1 About UMS for Notification
        • 18.2.1.2 Enabling Oracle Identity Governance to Use UMS for Notification
        • 18.2.1.3 Applying OWSM Policy to the UMS Web Service
          • 18.2.1.3.1 Attaching Server-Side Policy to the UMS Web Service
          • 18.2.1.3.2 Attaching Server-Side Username and Password
        • 18.2.1.4 Changing UMS Client Connection Pooling
      • 18.2.2 Using SMTP for Notification
        • 18.2.2.1 Configuring the SMTP Email Notification Provider Properties
        • 18.2.2.2 Adding the CSF Key
      • 18.2.3 Using SOA Composite for Notification
        • 18.2.3.1 Creating a SOA Composite with Notification Activity
        • 18.2.3.2 Deploying the SOA Composite on the SOA Server Manually
        • 18.2.3.3 Setting Workflow Notification Properties
        • 18.2.3.4 Configuring the SOA Email Notification Provider Properties
        • 18.2.3.5 Configuring the User Messaging Drivers
      • 18.2.4 Configuring Custom Notification Provider
      • 18.2.5 Disabling and Enabling Notification Providers
    • 18.3 Managing Notification Templates
      • 18.3.1 Default Notification Template
      • 18.3.2 Searching for a Notification Template
        • 18.3.2.1 Performing Simple Search for a Notification Template
        • 18.3.2.2 Performing Advanced Search for a Notification Template
      • 18.3.3 Creating a Notification Template
      • 18.3.4 Modifying a Notification Template
      • 18.3.5 Disabling a Notification Template
      • 18.3.6 Enabling a Notification Template
      • 18.3.7 Adding Locales to a Notification Template
      • 18.3.8 Removing Locales from a Notification Template
      • 18.3.9 Deleting a Notification Template
      • 18.3.10 Configuring Notification for a Proxy
    • 18.4 Configuring Email in Provisioning Workflow
    • 18.5 Configuring SOA Email Notification
      • 18.5.1 Configuring Actionable Email Notification on SOA
      • 18.5.2 Troubleshooting SOA Email Notification
    • 18.6 Disabling Oracle Identity Governance Email Notifications
      • 18.6.1 About Disabling Oracle Identity Governance Email Notifications
      • 18.6.2 Disabling Sending Email Notification by Removing the SelfServiceNotificationHandler
      • 18.6.3 Disabling Sending Email Notification by Removing the PasswordNotificationHandler
    • 18.7 Troubleshooting Notification
      • 18.7.1 Issues Related to Incorrect URL
      • 18.7.2 Incorrect Outgoing Server EMail Driver Properties
      • 18.7.3 Error Generated at the SOA Server
      • 18.7.4 Authentication Failure
      • 18.7.5 Issues Related to Failed Email Delivery Not Reported Through EM
  • 19 Configuring Oracle Identity Governance
    • 19.1 About System Properties
    • 19.2 Types of System Properties
      • 19.2.1 Default System Properties in Oracle Identity Governance
      • 19.2.2 Non-Default System Properties in Oracle Identity Governance
    • 19.3 Managing System Properties
      • 19.3.1 Searching for System Properties
        • 19.3.1.1 Performing a Simple Search for System Properties
        • 19.3.1.2 Performing an Advanced Search for System Properties
      • 19.3.2 Modifying System Properties
      • 19.3.3 Purging Cache
    • 19.4 Configuring Oracle Identity Governance Components
      • 19.4.1 Configuring Product Options
      • 19.4.2 Configuring the URL for Challenge Questions
      • 19.4.3 Configuring the URL for Change Password
      • 19.4.4 Enabling Challenge Questions
      • 19.4.5 Configuring Username Generation
      • 19.4.6 Configuring User ID Reuse
      • 19.4.7 Configuring Delayed Delete Interval
    • 19.5 Configuring the Access Request Catalog
      • 19.5.1 Configuring Additional Information
      • 19.5.2 Configuring Search Results
      • 19.5.3 Configuring the Sort By Attributes
      • 19.5.4 Configuring Custom Search
    • 19.6 Configuring the Identity Provider
      • 19.6.1 Configuring Attribute Reservation
      • 19.6.2 Configuring Common Name Generation
      • 19.6.3 Configuring LDAP Reservation
      • 19.6.4 Configuring Referential Integrity
  • 20 Moving From Test to Production
    • 20.1 About Test to Production Migration
    • 20.2 Migrating Incrementally Using the Deployment Manager
      • 20.2.1 About the Deployment Manager
      • 20.2.2 Features of the Deployment Manager
      • 20.2.3 Enabling Deployment Manager in SSL Mode
      • 20.2.4 About Exporting Deployments
      • 20.2.5 Exporting Deployments
      • 20.2.6 About Importing Deployments
      • 20.2.7 Importing Deployments
      • 20.2.8 Best Practices for Using the Deployment Manager
        • 20.2.8.1 Do Not Export System Objects
        • 20.2.8.2 Exporting Related Groups of Objects
        • 20.2.8.3 Using Logical Naming Conventions for Versions of a Form
        • 20.2.8.4 Exporting Root to Preserve a Complete Organizational Hierarchy
        • 20.2.8.5 Providing Clear Export Descriptions
        • 20.2.8.6 Checking Dependencies Before Exporting Data
        • 20.2.8.7 Matching Scheduled Task Parameters
        • 20.2.8.8 Deployment Manager Actions on Reimported Scheduled Tasks
        • 20.2.8.9 Compiling Adapters and Enable Scheduled Tasks
        • 20.2.8.10 Checking Permissions for Roles
        • 20.2.8.11 Creating a Backup of the Database
        • 20.2.8.12 Importing Data When the System Is Quiet
        • 20.2.8.13 Exporting and Importing Data in Bulk
        • 20.2.8.14 Exporting Entity Publications
      • 20.2.9 Troubleshooting the Deployment Manager
  • 21 Migrating Application and Database Binaries
    • 21.1 Migrating Application Binaries to a New Host With Existing Database
      • 21.1.1 Moving the Application Binary Files
      • 21.1.2 Postconfiguration Changes on the Target Host
      • 21.1.3 Updating EndPoint Address in SOA Composites
    • 21.2 Migrating the Database and Application Binaries to a New Host
      • 21.2.1 Moving the Database to Another Environment
      • 21.2.2 Postconfiguration Changes on the Target Environment
• Part VIII Auditing and Reporting
  • 22 Configuring Auditing
    • 22.1 About Auditing
    • 22.2 User Profile Auditing
      • 22.2.1 Data Collected for User Profile Audits
        • 22.2.1.1 About Data Collected for User Profile Audits
        • 22.2.1.2 Capture of User Profile Audit Data
        • 22.2.1.3 Storage of Snapshots for User Profile Audit
        • 22.2.1.4 Trigger for Taking Snapshots for User Profile Audit
      • 22.2.2 Post-Processor Used for User Profile Auditing
      • 22.2.3 Tables Used for User Profile Auditing
      • 22.2.4 Archiving User Profile Audit Data
    • 22.3 Role Profile Auditing
      • 22.3.1 About Role Profile Auditing
      • 22.3.2 Capture and Archiving of Role Profile Audit Data
      • 22.3.3 Storage of Snapshots for Role Profile Auditing
      • 22.3.4 Trigger for Taking Snapshots for Role Profile Auditing
    • 22.4 Catalog Auditing
    • 22.5 Enabling and Disabling Auditing in Oracle Identity Governance
      • 22.5.1 Disabling Auditing in Oracle Identity Governance
      • 22.5.2 Enabling Auditing in Oracle Identity Governance
    • 22.6 Lightweight Audit
      • 22.6.1 About Lightweight Audit
      • 22.6.2 Audit Logging Configuration
  • 23 Using Reporting Features
    • 23.1 About Reporting in Oracle Identity Governance
    • 23.2 Supported Output Formats for Reports
    • 23.3 Classification of Oracle Identity Governance Reports
      • 23.3.1 Access Policy Reports
        • 23.3.1.1 Access Policy Details
        • 23.3.1.2 Access Policy List by Role
      • 23.3.2 Request and Approval Reports
        • 23.3.2.1 Approval Activity Report
        • 23.3.2.2 Request Details Report
        • 23.3.2.3 Request Summary Report
        • 23.3.2.4 Task Assignment History
      • 23.3.3 Role and Organization Reports
        • 23.3.3.1 Role Membership History
        • 23.3.3.2 Role Membership Profile
        • 23.3.3.3 Role Membership
        • 23.3.3.4 Organization Details
        • 23.3.3.5 User Membership History
      • 23.3.4 Password Reports
        • 23.3.4.1 Password Expiration Summary Report
        • 23.3.4.2 Password Reset Summary Report
        • 23.3.4.3 Resource Password Expiration Report
      • 23.3.5 Resource and Entitlement Reports
        • 23.3.5.1 Account Activity In Resource
        • 23.3.5.2 Delegated Admins and Permissions by Resource
        • 23.3.5.3 Delegated Admins by Resource
        • 23.3.5.4 Entitlement Access List
        • 23.3.5.5 Entitlement Access List History
        • 23.3.5.6 Financially Significant Resource Details
        • 23.3.5.7 Resource Access List History
        • 23.3.5.8 Resource Access List
        • 23.3.5.9 Resource Account Summary
        • 23.3.5.10 Resource Activity Summary
        • 23.3.5.11 User Resource Access History
        • 23.3.5.12 User Resource Access
        • 23.3.5.13 User Resource Entitlement
        • 23.3.5.14 User Resource Entitlement History
      • 23.3.6 User Reports
        • 23.3.6.1 User Creation
        • 23.3.6.2 User Profile History
        • 23.3.6.3 User Summary
        • 23.3.6.4 Users Deleted
        • 23.3.6.5 Users Disabled
        • 23.3.6.6 Users Unlocked
      • 23.3.7 Certification Reports
      • 23.3.8 Identity Audit Reports
      • 23.3.9 Exception Reports
        • 23.3.9.1 About Exception Reports
        • 23.3.9.2 Fine Grained Entitlement Exceptions By Resource
        • 23.3.9.3 Orphaned Account Summary Report
        • 23.3.9.4 Rogue Accounts By Resource
    • 23.4 Required Scheduled Tasks for BI Publisher Reports
    • 23.5 Best Practices for Running Oracle Identity Governance Reports
  • 24 Using the Archival and Purge Utilities for Controlling Data Growth
    • 24.1 About Archival and Purge Utilities
    • 24.2 Archival and Purge Concepts
      • 24.2.1 Purge Only Solution Versus Purge and Archive Solution for Entities
      • 24.2.2 Archival of Data in Oracle Identity Governance
      • 24.2.3 Purging of Data in Oracle Identity Governance
      • 24.2.4 Real-Time Purging in Oracle Identity Governance
      • 24.2.5 Retention Period in Oracle Identity Governance
      • 24.2.6 Modes of Archival Purge Operations
    • 24.3 Using Real-Time Purge and Archival Option in Oracle Identity Governance
      • 24.3.1 About Real-Time Data Purge and Archival
      • 24.3.2 Configuring Real-Time Purge and Archival
      • 24.3.3 About the Orchestration Purge Utility
      • 24.3.4 Collecting Diagnostic Data of the Online Archival and Purge Operations
    • 24.4 Using Command-Line Option of the Archival Purge Utilities in Oracle Identity Governance
      • 24.4.1 About Command-Line Utilities
      • 24.4.2 Using the Reconciliation Archival Utility
        • 24.4.2.1 About the Reconciliation Archival Utility
        • 24.4.2.2 Prerequisite for Running the Reconciliation Archival Utility
        • 24.4.2.3 Archival Criteria for Reconciliation Data
        • 24.4.2.4 Running the Reconciliation Archival Utility
        • 24.4.2.5 Log File Generated by the Reconciliation Archival Utility
        • 24.4.2.6 Troubleshooting Scenario for Reconciliation Archival Utility
      • 24.4.3 Using the Task Archival Utility
        • 24.4.3.1 About the Task Archival Utility
        • 24.4.3.2 Preparing Oracle Database for the Task Archival Utility
        • 24.4.3.3 Running the Task Archival Utility
        • 24.4.3.4 Reviewing the Output Files Generated by the Task Archival Utility
      • 24.4.4 Using the Requests Archival Utility
        • 24.4.4.1 About the Requests Archival Utility
        • 24.4.4.2 Prerequisites for Running the Requests Archival Utility
        • 24.4.4.3 Input Parameters used by the Requests Archival Utility
        • 24.4.4.4 Running the Requests Archival Utility
        • 24.4.4.5 Log Files Generated by the Utility
    • 24.5 Using the Audit Archival and Purge Utility
      • 24.5.1 About Audit Archival and Purge Utility
      • 24.5.2 Audit Data Growth Control Measures in Lightweight Audit Framework
        • 24.5.2.1 About Audit Data Growth Control Measures in Lightweight Audit Framework
        • 24.5.2.2 Overview of Partition Based Approach
        • 24.5.2.3 Prerequisites for Partitioning the AUDIT_EVENT Table
        • 24.5.2.4 Preparing the AUDIT_EVENT Table for Archival and Purge
        • 24.5.2.5 Archiving or Purging the AUDIT_EVENT Data Using Partitions
        • 24.5.2.6 Ongoing Partition Maintenance
      • 24.5.3 Partition-Based Approach for Audit Growth Control Measures in Legacy Audit (UPA) Framework
        • 24.5.3.1 About Audit Data Growth Control Measures in Legacy Audit Framework
        • 24.5.3.2 Prerequisites for Using the Utility
        • 24.5.3.3 Preparing the UPA Table for Archival and Purge
        • 24.5.3.4 Archiving or Purging the UPA Table
          • 24.5.3.4.1 Partitions That Must Not Be Archived or Purged
          • 24.5.3.4.2 Ongoing Partition Maintenance
          • 24.5.3.4.3 Archiving or Purging Partitions in the UPA Table
    • 24.6 Using the Real-Time Certification Purge in Oracle Identity Governance
      • 24.6.1 Understanding Real-Time Certification Purge Job
      • 24.6.2 Configuring Real-Time Certification Purge Job
• Part IX Lifecycle Management
  • 25 Handling Lifecycle Management Changes
    • 25.1 URL Changes Related to Oracle Identity Governance
      • 25.1.1 Oracle Identity Governance Host and Port Changes
        • 25.1.1.1 Changing OimFrontEndURL in Oracle Identity Governance Configuration
        • 25.1.1.2 Changing backOfficeURL in Oracle Identity Governance Configuration
        • 25.1.1.3 Changing Task Details URL in Human Task Configuration
        • 25.1.1.4 Changing OIG Server Port on WebLogic Administrative Console
      • 25.1.2 Oracle Identity Governance Database Host and Port Changes
        • 25.1.2.1 Modifying Datasource oimJMSStoreDS Configuration
        • 25.1.2.2 Modifying Datasource soaOIMLookupDB Configuration
        • 25.1.2.3 Modifying Datasource oimOperationsDB Configuration
        • 25.1.2.4 Modifying Datasource ApplicationDB Configuration
        • 25.1.2.5 Modifying Datasource Related to Oracle Identity Governance Meta Data Store
        • 25.1.2.6 Modifying OIMAuthenticationProvider Configuration
        • 25.1.2.7 Modifying DirectDB Configuration
        • 25.1.2.8 Modifying the Oracle Identity Governance Database Host and Port in BI Publisher
        • 25.1.2.9 Changing Incorrect Database Configuration
      • 25.1.3 Changing Oracle Virtual Directory Host and Port
      • 25.1.4 Changing BI Publisher Host and Port
      • 25.1.5 Changing SOA Host and Port
      • 25.1.6 Changing OAM Host and Port
    • 25.2 Password Changes Related to Oracle Identity Governance
      • 25.2.1 Updating Oracle WebLogic Administrator Credentials
      • 25.2.2 Changing Oracle WebLogic Administrator Password
      • 25.2.3 Changing Oracle Identity Governance Administrator Password
      • 25.2.4 Changing Oracle Identity Governance Administrator Database Password
        • 25.2.4.1 Resetting Oracle Identity Governance Password
        • 25.2.4.2 Resetting System Administrator Database Password in Oracle Identity Governance Deployment
        • 25.2.4.3 Resetting System Administrator Database Password When Oracle Identity Governance Deployment is Integrated With Access Manager
      • 25.2.5 Changing Oracle Identity Governance Database Password
        • 25.2.5.1 Changing Datasource oimJMSStoreDS Configuration
        • 25.2.5.2 Changing Datasource ApplicationDB Configuration
        • 25.2.5.3 Changing Datasource soaOIMLookupDB Configuration
        • 25.2.5.4 Changing Datasource oimOperationsDB Configuration
        • 25.2.5.5 Changing Datasource Related to Oracle Identity Governance Meta Data Store
        • 25.2.5.6 Changing OIMAuthenticationProvider Configuration
        • 25.2.5.7 Changing Domain Credential Store Configuration
        • 25.2.5.8 Changing the Oracle Identity Governance Database Password in BI Publisher
      • 25.2.6 About Credential Store Framework Keys
      • 25.2.7 Changing Oracle Identity Governance Passwords in the Credential Store Framework
      • 25.2.8 Changing OVD Password
      • 25.2.9 Changing Oracle Identity Governance Administrator Password in LDAP
      • 25.2.10 Unlocking Oracle Identity Governance Administrator Password in LDAP
      • 25.2.11 Changing Schema Passwords
    • 25.3 Configuring SSL for Oracle Identity Governance
      • 25.3.1 Generating Custom Key Stores (Optional)
        • 25.3.1.1 Creating the Custom Identity Store
        • 25.3.1.2 Self Signing the Certificates of Custom identity keystore
        • 25.3.1.3 Exporting the Certificate From Custom Identity Keystore
        • 25.3.1.4 Importing the Certificate of Custom Identity to Trust Store
      • 25.3.2 Configuring Custom Key Stores (Optional)
      • 25.3.3 Enabling SSL for Oracle Identity Governance and SOA Servers
        • 25.3.3.1 Enabling SSL for Oracle Identity Governance
          • 25.3.3.1.1 Enabling SSL for Oracle Identity Governance By Using Default Setting
          • 25.3.3.1.2 Enabling SSL for Oracle Identity Governance By Using Custom Identity and Custom Trust
        • 25.3.3.2 Changing OimFrontEndURL to Use Oracle Identity Governance SSL Port
        • 25.3.3.3 Changing backOfficeURL to Use SOA SSL Port
        • 25.3.3.4 Changing SOA Server URL to Use SOA SSL Port
      • 25.3.4 Enabling SSL for Oracle Identity Governance DB
        • 25.3.4.1 Creating KeyStores and Certificates
          • 25.3.4.1.1 Creating a Root CA Wallet
          • 25.3.4.1.2 Creating DB Server Side Wallet
          • 25.3.4.1.3 Creating Client Side Wallet
        • 25.3.4.2 Setting Up Database in Server-Authentication SSL Mode
        • 25.3.4.3 Updating Oracle Identity Governance
        • 25.3.4.4 Updating WebLogic Server
          • 25.3.4.4.1 Updating Datasource oimOperationsDB Configuration
          • 25.3.4.4.2 Updating Oracle Identity Governance Authenticators
      • 25.3.5 Enabling SSL for SOA Approval Composites
      • 25.3.6 Configuring SSL for Design Console
      • 25.3.7 Configuring SSL for Oracle Identity Governance Utilities
    • 25.4 Using Ready App
      • 25.4.1 About Ready App
      • 25.4.2 Registering Your Applications with Ready App
      • 25.4.3 Using Ready App with an EAR
      • 25.4.4 Using Ready App with a WAR
      • 25.4.5 Testing Ready App
  • 26 Securing a Deployment
    • 26.1 Authorizing and Hardening
    • 26.2 Configuring Secure Cookies
      • 26.2.1 About Secure Cookies
      • 26.2.2 Configuring a New Deployment Plan
        • 26.2.2.1 Sample Deployment Plans
        • 26.2.2.2 Configuring the Deployment
      • 26.2.3 Updating an Existing Deployment Plan
• Part X Diagnostics and Troubleshooting
  • 27 Using Enterprise Manager for Managing Oracle Identity Governance
    • 27.1 Managing Oracle Identity Governance Configuration
      • 27.1.1 Using MBeans for Configuration Changes
      • 27.1.2 Exporting and Importing Configuration Files
    • 27.2 Using the OrchestrationEngine MBean
      • 27.2.1 Accessing the OrchestrationEngine MBean
      • 27.2.2 About the Operations Supported by the MBean
      • 27.2.3 About Diagnosis of Operation Failures Using the Orchestration Engine
      • 27.2.4 Diagnosing Operation Failures Using the Orchestration Engine
    • 27.3 Configuring Log Services for Oracle Identity Governance
      • 27.3.1 Logging in Oracle Identity Governance By Using ODL
        • 27.3.1.1 About Oracle Diagnostic Logging
        • 27.3.1.2 Message Types and Levels in Oracle Identity Governance
        • 27.3.1.3 Log Handler and Logger Configuration
        • 27.3.1.4 Configuring Log Handlers
        • 27.3.1.5 Log Handler Configuration Tools
        • 27.3.1.6 About Configuring Loggers
        • 27.3.1.7 Configuring Loggers in Oracle Identity Governance
        • 27.3.1.8 Sample ODL Log Output
      • 27.3.2 Logging in Oracle Identity Governance By Using log4j
        • 27.3.2.1 Log Levels for log4j
        • 27.3.2.2 Loggers in Third-Party Applications
        • 27.3.2.3 Configuring and Enabling Logging
      • 27.3.3 Setting Warning State
      • 27.3.4 Switching Down the Log Level
  • 28 Using the PL/SQL Unified Diagnostic Logging and Debugging Framework
    • 28.1 Understanding the PL/SQL Unified Diagnostic Logging and Debugging Framework
      • 28.1.1 About the PL/SQL Unified Diagnostic Logging and Debugging Framework
      • 28.1.2 Features of the Framework
      • 28.1.3 Configurable Diagnostic Levels Provided in the Framework
      • 28.1.4 Configurable System Properties to Control Logging
    • 28.2 Configuring the Diagnostic Level
    • 28.3 Understanding the Data Captured by PL/SQL Diagnostic Logging Tables
    • 28.4 Collecting Data Captured by PL/SQL Diagnostic Logging Tables
    • 28.5 Controlling Data Growth of PL/SQL Diagnostic Logging Tables
• Part XI Appendixes
• A Default User Accounts
• B Configuring SSO Providers for Oracle Identity Governance
  • B.1 Common Prerequisites for Integration With Third-Party SSO Solutions
  • B.2 Enabling Oracle Identity Governance to Work With OpenSSO
    • B.2.1 Prerequisites for Integrating Oracle Identity Governance with OpenSSO
    • B.2.2 Integrating Oracle Identity Governance with OpenSSO
      • B.2.2.1 Integrating Oracle Identity Governance with OpenSSO Procedure
      • B.2.2.2 Adding OpenSSO Agent Filter to Oracle Identity Governance Web-apps
      • B.2.2.3 Configuring SSO in Oracle Identity Governance
    • B.2.3 Running Validation Tests to Verify the Configuration
  • B.3 Enabling Oracle Identity Governance to Work With IBM Tivoli Access Manager
    • B.3.1 Prerequisites for Integrating Oracle Identity Governance with IBM Tivoli Access Manager
    • B.3.2 Integrating Oracle Identity Governance with IBM Tivoli Access Manager
    • B.3.3 Running Validation Tests to Validate the Configuration
  • B.4 Enabling Oracle Identity Governance to Work With CA SiteMinder
    • B.4.1 Prerequisites for Integrating Oracle Identity Governance with CA SiteMinder
    • B.4.2 Integrating Oracle Identity Governance with CA SiteMinder
    • B.4.3 Running Validation Tests to Validate the Configuration
  • B.5 Configuring Basic SSO Using OAM
    • B.5.1 Prerequisites for Configuring SSO Logout and the Authenticator
    • B.5.2 Configuring SSO Logout and the Authenticator
    • B.5.3 Running Validation Tests to Validate the Configuration
  • B.6 Simplifying Third-Party SSO Integration
  • B.7 Using Configurable Login ID Support for SSO Integration
  • B.8 Configuring Login ID Support for SSO Integration
  • B.9 Integrating Oracle Identity Governance with Identity Providers using SAML2 Asserter
    • B.9.1 Prerequisites for Integrating Oracle Identity Governance with Identity Providers
    • B.9.2 Configuring the SAML2 Asserter in the Oracle Identity Governance Domain
    • B.9.3 Configuring Identity Federation Settings on Oracle Identity Goverance
    • B.9.4 Exporting the Identity Federation Document
    • B.9.5 Configuring the Identity Provider for Federation With Oracle Identity Governance
    • B.9.6 Exporting the Identity Provider Metadata
    • B.9.7 Configuring the Identity Provider Metadata on Oracle Identity Governance
    • B.9.8 Updating Identity Self Service, System Administration, and FacadeWebApp to Change the Session Cookie
    • B.9.9 Testing the SAML2.0 Flow with Identity Self Service and System Administration Pages
• C Using Database Roles/Grants for Oracle Identity Governance Database
• D Enabling Transparent Data Encryption
  • D.1 Types of Data Encryption
  • D.2 Configuring TDE for New Installation of Oracle Identity Governance
  • D.3 Configuring TDE for an Existing Installation of Oracle Identity Governance
  • D.4 Deconfiguring TDE for Oracle Identity Governance
• E Troubleshooting Clustered OIM and Eclipselink Cache Coordination
  • E.1 Startup Procedure for Clustered Installation of Oracle Identity Governance
  • E.2 Setting Deployment Mode to Cluster
  • E.3 Configuring Multicast Addressing for Oracle Identity Governance
  • E.4 Multicast Addressing for Eclipselink
  • E.5 Testing Multicast Network Testing
  • E.6 Enabling Additional Logging for Eclipselink
  • E.7 Testing Multicast Connectivity Between Oracle Identity Governance Nodes