Table of Contents

• List of Figures
• List of Tables
• Title and Copyright Information
• Preface
  • Audience
  • Documentation Accessibility
  • Related Documents
  • Documentation Updates
  • Conventions
• What's New in Oracle Identity Manager Connector for RSA Authentication Manager?
  • Software Updates
    • Software Updates in Release 11.1.1.5.0
  • Documentation-Specific Updates
    • Documentation Updates in Release 11.1.1.5.0
• 1 About the RSA Authentication Manager Connector
  • 1.1 Introduction to RSA Authentication Manager Connector
  • 1.2 Certified Components
  • 1.3 Usage Recommendation
  • 1.4 Certified Languages
  • 1.5 Connector Architecture
  • 1.6 Features of the Connector
    • 1.6.1 Support for Reconciliation and Provisioning of RSA Authentication Manager User Accounts and Tokens
    • 1.6.2 Full and Incremental Reconciliation
    • 1.6.3 Batched Reconciliation
    • 1.6.4 Limited (Filtered) Reconciliation
    • 1.6.5 Enable and Disable User Accounts and Tokens
    • 1.6.6 Reconciliation of Deleted User Accounts and Unassigned Tokens
    • 1.6.7 EJB-Based Communication with the Target System
    • 1.6.8 Standard and Custom Attribute Mapping for Reconciliation and Provisioning
    • 1.6.9 Transformation and Validation of Account Data
    • 1.6.10 Support for Setting a PIN and the Token Lost Attribute
    • 1.6.11 Connection Pooling
  • 1.7 Lookup Definitions Used During Reconciliation and Provisioning
    • 1.7.1 About Lookup Field Synchronization
    • 1.7.2 Lookup Definitions Synchronized with the Target System
      • 1.7.2.1 Lookup.RSAAM.UserGroup
      • 1.7.2.2 Lookup.RSAAM.IdentitySource
      • 1.7.2.3 Lookup.RSAAM.SecurityDomain
      • 1.7.2.4 Lookup.RSAAM.AdminRole
      • 1.7.2.5 Lookup.RSAAM.TokenSerial
      • 1.7.2.6 Lookup.RSAAM.RadiusProfile
    • 1.7.3 Preconfigured Lookup Definitions
      • 1.7.3.1 Lookup.RSAAM.Configuration
      • 1.7.3.2 Lookup.RSAAM.UM.Configuration
      • 1.7.3.3 Lookup.RSAAM.UM.ProvAttrMap
      • 1.7.3.4 Lookup.RSAAM.UM.ReconAttrMap
      • 1.7.3.5 Lookup.RSAAM.Token.Configuration
      • 1.7.3.6 Lookup.RSAAM.Token.ProvAttrMap
      • 1.7.3.7 Lookup.RSAAM.Token.ReconAttrMap
      • 1.7.3.8 Lookup.RSAAM.Hours
      • 1.7.3.9 Lookup.RSAAM.Minutes
  • 1.8 Connector Objects Used During Reconciliation
    • 1.8.1 User Fields for Target Resource Reconciliation
    • 1.8.2 Reconciliation Rule for User Target Resource Reconciliation
    • 1.8.3 Viewing Reconciliation Rule for User Target Resource Reconciliation
    • 1.8.4 Reconciliation Action Rules for User Target Resource Reconciliation
    • 1.8.5 Viewing Reconciliation Action Rules for User Target Resource Reconciliation
    • 1.8.6 Token Fields for Target Resource Reconciliation
    • 1.8.7 Reconciliation Rule for Token Target Resource Reconciliation
    • 1.8.8 Viewing Reconciliation Rule for Token Target Resource Reconciliation
    • 1.8.9 Reconciliation Action Rules for Token Target Resource Reconciliation
    • 1.8.10 Viewing Reconciliation Action Rules for Token Target Resource Reconciliation
  • 1.9 Connector Objects Used During Provisioning
    • 1.9.1 Provisioning Functions
    • 1.9.2 User Fields for Provisioning
    • 1.9.3 Token Fields for Provisioning
  • 1.10 Roadmap for Deploying and Using the Connector
• 2 Deploying the RSA Authentication Manager Connector
  • 2.1 Preinstallation
    • 2.1.1 Copying the External Code Files
    • 2.1.2 Creating a Target System Account for Connector Operations
  • 2.2 Installation
    • 2.2.1 Understanding Installation
    • 2.2.2 Installing the Connector in Oracle Identity Manager
      • 2.2.2.1 Running the Connector Installer
      • 2.2.2.2 Configuring the IT Resource for the Target System
    • 2.2.3 Deploying the Connector in a Connector Server
      • 2.2.3.1 About the Connector Server
      • 2.2.3.2 Installing and Configuring the Connector Server
      • 2.2.3.3 Running the Connector Server
      • 2.2.3.4 Installing the Connector on the Connector Server
  • 2.3 Postinstallation
    • 2.3.1 Postinstallation on Oracle Identity Manager
      • 2.3.1.1 Configuring Self-Request Provisioning
      • 2.3.1.2 Configuring Oracle Identity Manager
        • 2.3.1.2.1 Creating and Activating a Sandbox
        • 2.3.1.2.2 Creating a New UI Form
        • 2.3.1.2.3 Creating an Application Instance
        • 2.3.1.2.4 Upgrading User Form in Oracle Identity Manager
        • 2.3.1.2.5 Publishing a Sandbox
        • 2.3.1.2.6 Harvesting Entitlements and Sync Catalog
        • 2.3.1.2.7 Updating an Existing Application Instance with a New Form
      • 2.3.1.3 Clearing Content Related to Connector Resource Bundles from the Server Cache
      • 2.3.1.4 Managing Logging for RSA Authentication Manager Connector
        • 2.3.1.4.1 Understanding Log Levels
        • 2.3.1.4.2 Enabling Logging
      • 2.3.1.5 Setting up the Lookup Definition for Connection Pooling
        • 2.3.1.5.1 Understanding Connection Pooling Properties
        • 2.3.1.5.2 Adding Connection Pooling Properties
      • 2.3.1.6 Setting up the Lookup Definition for Different Time Zones
        • 2.3.1.6.1 Time Zone Properties
        • 2.3.1.6.2 Setting up the Time Zone Properties
      • 2.3.1.7 Localizing Field Labels in UI Forms
      • 2.3.1.8 Addressing Prerequisites for Using the Java API of RSA Authentication Manager
        • 2.3.1.8.1 Required Java System Properties
        • 2.3.1.8.2 Exporting and Importing the Server Root Certificate
        • 2.3.1.8.3 Setting the Command Client User Name and Password
    • 2.3.2 Creating the IT Resource for the Connector Server
  • 2.4 About Upgrading the RSA Authentication Manager Connector
  • 2.5 Postcloning the RSA Authentication Manager
    • 2.5.1 About Postcloning
    • 2.5.2 Updating Child Table Mappings
• 3 Using the RSA Authentication Manager Connector
  • 3.1 Performing First-Time Reconciliation
  • 3.2 Scheduled Job for Lookup Field Synchronization
  • 3.3 Configuring Reconciliation
    • 3.3.1 Full Reconciliation
    • 3.3.2 Limited Reconciliation
    • 3.3.3 Batched Reconciliation
    • 3.3.4 Reconciliation Scheduled Jobs
      • 3.3.4.1 Scheduled Jobs for Reconciliation of Token and User Records
      • 3.3.4.2 Scheduled Jobs for Reconciliation of Deleted Token and User Records
  • 3.4 Scheduled Jobs
    • 3.4.1 Scheduled Jobs for Lookup Field Synchronization and Reconciliation
    • 3.4.2 Configuring Scheduled Jobs
  • 3.5 Guidelines On Performing Provisioning Operations
  • 3.6 Performing Provisioning Operations
  • 3.7 Uninstalling the Connector
• 4 Extending the Functionality of the RSA Authentication Manager Connector
  • 4.1 Determining Whether an Attribute Is an Identity Management Services or Authentication Manager Attribute
  • 4.2 Adding New User or Token Attributes for Reconciliation
    • 4.2.1 Adding New Attributes
    • 4.2.2 Adding Attributes to Reconciliation Fields
    • 4.2.3 Creating Reconciliation Field Mapping
    • 4.2.4 Creating Entries in Lookup Definitions
    • 4.2.5 Performing Changes in a New UI Form
  • 4.3 Adding New User or Token Attributes for Provisioning
    • 4.3.1 Adding New Attributes
    • 4.3.2 Creating Entries in Lookup Definitions
    • 4.3.3 Creating a Task to Enable Update
    • 4.3.4 Performing Changes in a New UI Form
  • 4.4 Configuring Validation of Data During Reconciliation and Provisioning
  • 4.5 Configuring Transformation of Data During Reconciliation
• 5 Troubleshooting the RSA Authentication Manager Connector
• A Files and Directories On the Installation Media