5 Upgrading OIM-OAM Integrated Environments Manually

You can upgrade Oracle Identity Manager (OIM), Oracle Access Manager (OAM) integrated split domain highly available environments that are set up manually, from 11g Release 2 (11.1.2.3.0) to 12c (12.2.1.3.0) using the upgrade procedure described in this section.

Note:

The product Oracle Identity Manager is referred to as Oracle Identity Manager (OIM) and Oracle Identity Governance (OIG) interchangeably in the guide.

Topics

About the OIM-OAM Integrated HA Topology Set Up Manually

The sample topology is based on the split domain four node topology described in the Enterprise Deployment Guide for Oracle Identity and Access Management 11g Release 2 (11.1.2.3.0), that is deployed manually.

See Enterprise Deployment Guide for Oracle Identity and Access Management.

This topology and the accompanying procedures in this chapter are provided to serve as an example for upgrading a highly available, integrated Oracle Identity and Access Management environment. Your specific Oracle Identity and Access Management installation will vary, but this topology and upgrade procedure demonstrates the key elements of the upgrade process, which can be applied to your specific environment.

For a complete description of the topology diagram, refer to the Enterprise Deployment Guide for Oracle Identity and Access Management in the 11g Release 2 (11.1.2.3.0) Documentation Library.

Figure 5-1 OIM-OAM Integrated Topology Set Up Manually

Description of Figure 5-1 follows
Description of "Figure 5-1 OIM-OAM Integrated Topology Set Up Manually"

Supported Starting Points for Integrated HA Upgrade

Review the supported starting points for each of the components in your integrated environment in order to upgrade to 12c (12.2.1.3.0). If the components are in earlier versions, upgrade them to the version that is supported for 12c upgrade.

The following table lists the versions that are supported for upgrade of an integrated highly available environments.

Table 5-1 Supported Starting Point for Integrated HA Upgrade

Component Supported Starting Point

Oracle Identity Manager

11g Release 2 (11.1.2.3.0)

Oracle Access Manager

11g Release 2 (11.1.2.3.0)

Oracle Adaptive Access Manager

11g Release 2 (11.1.2.3.0)

Oracle SOA Suite

11g Release 1 (11.1.1.9.0)

Oracle WebLogic Server

10.3.6

Oracle Adaptive Access Manager is not part of the Oracle Identity and Access Management suite for 12c (12.2.1.3.0), and hence will not be upgraded to 12c. Oracle Adaptive Access Manager 11.1.2.3.0 is compatible with Oracle Access Manager 12c (12.2.1.3.0).

Roadmap for Upgrading OIM-OAM Integrated Highly Available Environments Set Up Manually

Refer the roadmap for upgrading Oracle Identity Manager and Oracle Access Manager integrated highly available 11.1.2.3.0 environments that was set up manually, to 12c (12.2.1.3.0).

The following table describes the tasks that you must perform to upgrade an OIM-OAM integrated topology described in About the OIM-OAM Integrated HA Topology Set Up Manually.

Table 5-2 Tasks for Upgrading Integrated Environments Set Up Manually

Task Documentation

Review the OIM-OAM integrated topology.

See About the OIM-OAM Integrated HA Topology Set Up Manually.

Review the supported starting points for integrated environment upgrade.

See, Supported Starting Points for Integrated HA Upgrade.

Ensure that the LDAP server and the Oracle Access Manager have the same lockout value configured before you start the upgrade. That is, the lockout threshold of libOVD, OAM, and LDAP should be the same, else the lock and unlock use cases fail after upgrade.

This is applicable for a OIM-OAM integrated single node setup as well.

See Setting the LockoutThreshold in Active Directory in the Oracle Fusion Middleware Deployment Guide for Oracle Identity and Access Management for 11g Release 2 (11.1.2.3.0).

If you have configured Node Manager, ensure that the Node Manager is stopped before you proceed with the upgrade.

See Stopping Servers and Processes.

Check if Oracle Access Manager (OAM) is integrated with Oracle Identity Manager (OIM) in a single domain

If Oracle Access Manager is integrated with Oracle Identity Manager (OIM), and if both the products are in a same domain, a separate OAM domain needs to be cloned that works with OIM in the source domain. It is the cloned OAM domain that needs to be upgraded to 12c.

See Checking if OAM and OAAM is in the Same Domain in an OAM-OAAM-OIM Integrated Setup.

Upgrade Oracle Access Manager to 12c (12.2.1.3.0).

In an integrated environment, you should always upgrade OAM first.

See Upgrading Oracle Access Manager Highly Available Environments.

Upgrade Oracle Identity Manager to 12c (12.2.1.3.0).

See Upgrading Oracle Identity Manager Highly Available Environments.

Note:

If you encounter any issues during the upgrade, see Troubleshooting the Oracle Identity Manager Upgrade.