Oracle by Example brandingDeploying Oracle Identity Governance on Oracle Cloud Infrastructure

section 0Before You Begin

This 15-minute tutorial shows you how to deploy Oracle Identity Governance application on Oracle Cloud Infrastructure.

Background

Oracle Identity Governance application available on the Oracle Cloud Infrastructure Marketplace allows you to quickly deploy an instance of Oracle Identity Governance.

What Do You Need?

  • An Oracle Cloud compute instance
  • SSH key pair generated in OpenSSH format
  • A Linux host for running the idmcli utility

The idmcliutility is also available for Windows and Mac platforms. This tutorial covers running the idmcli utility on Linux.

section 1Creating an Oracle Cloud Infrastructure Compute Instance with Oracle Identity Governance Image

  1. Launch your browser and navigate to the OCI Marketplace at https://cloudmarketplace.oracle.com/marketplace/oci
  2. In the Applications tab, in the search box, enter identity management and click Go.
  3. In the Search Results page, click Oracle Identity Management. The Oracle Identity Management application listing page is displayed.
    OCI Marketplace web page displaying the Oracle Identity Management application in search results
    Description of the illustration
  4. Read the Usage Information and then, click Get App.
  5. In the Select OCI Region drop-down, select the OCI region where your compute instance is setup and then, click Sign In.
  6. On the Sign In page, select your cloud tenant, enter the user name and password and then, click Sign In.
  7. On the Oracle Identity Management app details page, select the Compartment to which you want to deploy the application.
  8. Select I have reviewed and accept the Oracle Standard Terms and Restrictions and then, click Launch Instance.
  9. In the Create Compute Instance page, enter a name for the instance.
  10. Select the Availability Domain.
  11. Select the Instance Type. In this case, select Virtual Machine.
  12. Under the Instance Shape section, click Change Shape.
  13. In the Browse All Shapes dialog box, select VM.Standard2.2 and then, click Select Shape.
  14. In the Configure networking section, select the Virtual cloud network compartment, Virtual cloud network, Subnet compartment, and the Subnet for the instance.
  15. In the Add SSH key section, select Choose SSH key file and then, click Choose Files.
  16. Select the public SSH key file (.pub) and click Open.. To know more about creating SSH keys, see Creating SSH Keys for Use with Oracle Cloud Services.
  17. Click Create. The instance is created and provisioning starts. The instance creation is complete when the status shows RUNNING. 
  18. Make note of the ip address of the instance displayed on the instance page.
    OCI Marketplace web page displaying the Oracle Identity Management application in search results
    Description of the illustration

section 2Configuring the Oracle Identity Governance Instance Using idmcli

After creating the compute instance in OCI, perform the rest of the configuration using the idmcli utility.

  1. While the instance is being created, click the View Usage Instructions.
    OCI Marketplace web page displaying the Oracle Identity Management application in search results
    Description of the illustration
  2. In the Usage Instructions page, navigate to Configuring OIG By Using the idmcli utility. Click the link to download idmcli.zip to your local host.
  3. Extract the contents of the zip file.
  4. Provide the execute permission for the executable file. 
    chmod +x idmcli
  5. Make a copy of config-template.yaml and name if config.yaml.
  6. Edit config.yaml and provide the ip address of the instance and the location of the private SSH key.
    OCI Marketplace web page displaying the Oracle Identity Management application in search results
    Description of the illustration
  7. Save and close the config.yaml file.
  8. In a Linux terminal run the idmcli command: 
    ./idmcli oig single-node --config ./config.yaml
  9. When prompted for password, enter a password of your choice. This is a common password used for all of the configuration. The password must consist of alphanumeric or specific special characters ($, #, or _). The password cannot begin with a special character or a number. The utility takes approximately 45minutes to complete. 
    [2019-09-13 05:23:52] Using parameters from file /home/opc/params.prop
[2019-09-13 05:23:52] 
[2019-09-13 05:23:52] ==================================================
[2019-09-13 05:23:52] Creating database
[2019-09-13 05:23:52] --------------------------------------------------
[2019-09-13 05:23:52] 
Copying database files
1% complete
......
Creating and starting Oracle instance
35% complete
......
Completing Database Creation
56% complete
......
Executing Post Configuration Actions
    [2019-09-13 05:30:31] ==================================================
[2019-09-13 05:30:31] Executing @xaview.sql
[2019-09-13 05:30:31] --------------------------------------------------
......
[2019-09-13 05:30:31] @xaview.sql execution completed successfully
[2019-09-13 05:30:31] ==================================================
......
[2019-09-13 05:30:31] ==================================================
[2019-09-13 05:30:31] Executing RCU
[2019-09-13 05:30:31] --------------------------------------------------
......
    [2019-09-13 05:34:11] ==================================================
[2019-09-13 05:34:11] Creating silent domain creation scripts from template
......
[2019-09-13 05:34:11] ==================================================
[2019-09-13 05:34:11] Creating domain
......
    [2019-09-13 05:40:14] --------------------------------------------------
[2019-09-13 05:40:14] Domain creation completed successfully
[2019-09-13 05:40:14] ==================================================
    ......
    [2019-09-13 05:40:14] ==================================================
[2019-09-13 05:40:14] Executing offlineConfigManager
[2019-09-13 05:40:14] --------------------------------------------------
    ......
    [2019-09-13 05:41:01] ==================================================
[2019-09-13 05:41:01] Starting servers
[2019-09-13 05:41:01] --------------------------------------------------
......
[2019-09-13 05:41:01] Starting Admin server
......
[2019-09-13 05:42:41] Admin Server started
[2019-09-13 05:42:41] Starting SOA server
......
[2019-09-13 05:44:52] SOA Server started
[2019-09-13 05:44:52] Starting OIG server
......
[2019-09-13 05:48:58] OIM Server started
[2019-09-13 05:48:58] --------------------------------------------------
[2019-09-13 05:48:58] Servers started successfully
[2019-09-13 05:48:58] ==================================================
  10. At the end the various console urls and the usernames are displayed. 
    ......
    [2019-09-13 06:00:21] Oracle home: /u01/app/oracle/product/middleware/
[2019-09-13 06:00:21] OIG domain home: /u01/idm_data/user_projects/governance_domain
......
[2019-09-13 06:00:21] Weblogic Console non-secure URL: http://100.111.93.34:7001/console
[2019-09-13 06:00:21] Weblogic Console secure URL: https://100.111.93.34:7003/console
[2019-09-13 06:00:21] Weblogic Adminstrator username: weblogic
......
[2019-09-13 06:00:21] OIG System Administrator non-secure URL: http://100.111.93.34:14000/sysadmin
[2019-09-13 06:00:21] OIG self-service non-secure URL: http://100.111.93.34:14000/identity
[2019-09-13 06:00:21] OIG System Administrator secure URL: https://100.111.93.34:14003/sysadmin
[2019-09-13 06:00:21] OIG self-service secure URL: https://100.111.93.34:14003/identity
[2019-09-13 06:00:21] OIG Adminstrator username: xelsysadm
......
[2019-09-13 06:00:21] SOA non-secure URL: http://100.111.93.34:8001/integration/service/IdentityService/identity/
[2019-09-13 06:00:21] SOA secure URL: https://100.111.93.34:8003/integration/service/IdentityService/identity/
...... 
[2019-09-13 06:00:21] --------------------------------------------------
[2019-09-13 06:00:21] OIG setup completed successfully
[2019-09-13 06:00:21] ==================================================

section 3Accessing the Oracle Identity Governance Consoles

  1. Launch your browser and navigate to the Weblogic console of the instance you just deployed. The secure url for the Weblogic console is of the format: 
    https://<ip address of the instance>:7003/console
    OCI Marketplace web page displaying the Oracle Identity Management application in search results
    Description of the illustration
    You can specify the private or the public address of the instance in the url.
  2. Launch your browser and navigate to the Oracle Identity Governance System Administration console. The secure url for the OIG System Administration console is of the format:
    https://<ip address of the instance>:14003/sysadmin
  3. Launch your browser and navigate to the Oracle Identity Governance Self-Service console. The secure url for the OIG Self-Service console is of the format:
    https://<ip address of the instance>:14003/identity

more informationWant to Learn More?

feedbackFeedback

To provide feedback on this tutorial, please contact Identity Management User Assistance.