Table of Contents

• Title and Copyright Information
• Preface
  • Audience
  • Documentation Accessibility
  • Conventions
  • Related Documents
• 1 Introduction
  • 1.1 Latest Release Information
  • 1.2 Purpose of this Document
  • 1.3 System Requirements and Specifications
  • 1.4 Certification Information
  • 1.5 Oracle Support
• 2 What's New in Oracle Identity Management 12c (12.2.1.3.0)
  • 2.1 What's New in Oracle Access Management
  • 2.2 What's New in Oracle Identity Governance
  • 2.3 What's New in Oracle Unified Directory
  • 2.4 What’s New in Oracle Internet Directory
  • 2.5 What's New in Oracle Identity Management Integration
• 3 Oracle Access Management
  • 3.1 Access Management Known Issues and Workarounds
    • 3.1.1 Takes time to propagate a policy or any metadata change
    • 3.1.2 User name field in SME UI is case sensitive
    • 3.1.3 Unused References in OAM console
    • 3.1.4 Deprecated Java Policy
    • 3.1.5 Test-to-Production Not Supported in OAM
    • 3.1.6 chghost Tool does not Work with OAM
    • 3.1.7 Exception occurs while using OAM Access Tester Tool
  • 3.2 Access Management Configuration Issues and Workarounds
    • 3.2.1 Audit Integration with BI Publisher
  • 3.3 Access Management Console Issues
    • 3.3.1 OOB OAM console logout does not work
  • 3.4 Features Not Supported in Access Manager 12.2.1.3.0
• 4 Oracle Identity Governance
  • 4.1 General Issues and Workarounds
    • 4.1.1 The Request for Others Option is Available for All Users
    • 4.1.2 Session Time-out Warning Displayed When Using the Deployment Manager
    • 4.1.3 EditFailedException When Releasing Configuration from WebLogic Console
    • 4.1.4 LDAP Synchronization Not Supported
    • 4.1.5 Errors for Custom Attribute Values
  • 4.2 Multi-Language Support Issues and Workarounds
    • 4.2.1 Locale Drop Down Not Translated for My Information and Modify User Pages
    • 4.2.2 Search Result Message in the Export Configuration Page Not Translated
    • 4.2.3 Some Strings Not Translated on Application Onboarding Screens
  • 4.3 Documentation Errata
  • 4.4 Features Not Supported in Oracle Identity Governance 12c (12.2.1.3.0)
  • 4.5 Comparison of Oracle Identity Governance Applications Deployed in 11g and 12c
• 5 Oracle Unified Directory
  • 5.1 Supported Interfaces for Directory Virtualization Features
  • 5.2 Oracle Unified Directory System Requirements and Specifications
    • 5.2.1 Hardware Requirements
    • 5.2.2 Software Requirements
      • 5.2.2.1 File Descriptor Requirements (Linux Systems)
      • 5.2.2.2 Specific Requirements for Installation in Solaris Zones
    • 5.2.3 Certified Languages
  • 5.3 Software Environment Limitations and Recommendations
    • 5.3.1 OUD 12c (12.2.1.3.0) Limitations
    • 5.3.2 Viewing the Certification Matrix
    • 5.3.3 Software Recommendations
  • 5.4 Oracle Unified Directory (OUD) Known Issues and Workarounds
    • 5.4.1 PBKDF2WithHmacSHA512–based password storage schemes might fail due to JDK bug
    • 5.4.2 (Bug 25363559) Disabling the Deprecated File-Based Access, Admin Access, and Error Loggers
    • 5.4.3 (Bug 20109035) OUD upgrade fails to set the purging flag in the ds-sync-hist index
    • 5.4.4 (Bug 19786556) During modification of a large static group, the administrative limit might be exceeded
    • 5.4.5 (Bug 19778292) The dsreplication initialize-all command fails
    • 5.4.6 (Bug 19767906) ECL changes are delayed by the clock difference between servers in topology
    • 5.4.7 (Bug 19260923) Using the signal SIGSTOP causes failures
    • 5.4.8 (Bug 17874888) Removing the data-sync privilege for a user removes all privileges for that user
    • 5.4.9 (Bug 17797663) Pass-Through Authentication subject to limitations when configured with Kerberos authentication provider.
    • 5.4.10 (Bug 17689711) Enabling the changelog for a suffix on two servers will unexpectedly enable replication on the suffix
    • 5.4.11 (Bug 14772631) If an AddOutboundTransformation definition contains a dot, then a search request might fail
    • 5.4.12 (Bug 14080885) The moveplan interface does not have a field to update the path for keystore pin file
    • 5.4.13 (Bug 14652478) The runInstaller command fails to check for appropriate OS
    • 5.4.14 (Bug 14065106) Translation is not supported for some error message and online Help
    • 5.4.15 (Bug 14055062) If the value for parameter -j,--rootUserPasswordFile is provided as a relative path, commands fail
    • 5.4.16 (Bug 13996369) The gicadm command does not import a catalog
    • 5.4.17 (Bug 13965857) If you specify an alternative location for a cloned server instance, the cloned server instance is not completely configured
    • 5.4.18 (Bug 13954545) The ldapsearch.bat client incorrectly handles a trailing asterisk character
    • 5.4.19 (Bug 12291860) No SNMP trap is sent if the server is stopped using the stop-ds command with no credentials
    • 5.4.20 (Bug 12280658) The ModDN operation is not supported if DNs are indexed in the global index catalog (GIC)
    • 5.4.21 (Bug 12266690) Load balancing routes are deleted without warning
    • 5.4.22 (Bug 11718654) Error Occurs in Replicated Topology with a Heavy Workload
  • 5.5 Oracle Unified Directory Services Manager (Oracle Unified Directory Services Manager) Known Issues and Workarounds
    • 5.5.1 (Bug 17582404) ADF error is displayed in WebLogic Server logs.
    • 5.5.2 (Bugs 18789805/18915580/18905879/18884612/18874750) Modification Issues with Join Workflow Element
    • 5.5.3 (Bug 18871434) Join DN attribute does not return in Advanced Search in OUDSM
    • 5.5.4 (Bug 19028533) Adv Search: Issue with Search in pick attributes table
    • 5.5.5 (Bug 17462792) Subtabs may not display as designed on Solaris
    • 5.5.6 (Bug 17262682) Default browser settings may not allow OUDSM URL to be accessible on Windows 2008 R2
    • 5.5.7 (Bug 16946878) Alerts not sent as designed
    • 5.5.8 (Bug 16056177) On the Advanced Search page, when you click an entry in the Search Results table, some buttons do not behave as expected
    • 5.5.9 (Bug 15928439) Java NullPointer exception occurs if a changelog entry does not contain a specified objectclass
    • 5.5.10 (Bug 12363352) In the screenreader mode, focus for some buttons does not work as expected
  • 5.6 Related Oracle Directory Components Known Issues and Workarounds
    • 5.6.1 Oracle Directory Integration Platform
      • 5.6.1.1 General Oracle Directory Integration Platform Issues and Workarounds
        • 5.6.1.1.1 Enabling the Domain-Wide Administration Port on Oracle WebLogic Server Prevents use of the DIP Command Line Interface
        • 5.6.1.1.2 LDIF Files That Contain Non-ASCII Characters Will Cause the testProfile Command Option to Fail if the LDIF File has Native Encoding
        • 5.6.1.1.3 Running the testProfile Command with LDIF Files Option Fails in Advance Mode
        • 5.6.1.1.4 Some Changes May Not Get Synchronized Due to Race Condition in Heavily-Loaded Source Directory
        • 5.6.1.1.5 manageSyncProfiles Utility Prompts for Connected Directory Password
        • 5.6.1.1.6 The Oracle Password Filter for Microsoft Active Directory Installation Screens Displays 11g Version
        • 5.6.1.1.7 Resource Usage Charts will not be Displayed
      • 5.6.1.2 Oracle Directory Integration Platform Configuration Issues and Workarounds
        • 5.6.1.2.1 Specify the Service Name While Creating Synchronization Profiles
        • 5.6.1.2.2 If Oracle Internet Directory is the Back-End Directory then do not use localhost as Oracle Internet Directory Hostname When Configuring Oracle Directory Integration Platform
        • 5.6.1.2.3 You may Need to Restart the Directory Integration Platform After Running dipConfigurator Against Oracle Unified Directory
        • 5.6.1.2.4 When Configuring a Profile, you may Need to Scroll Past a Section of Whitespace to View Mapping Rules
        • 5.6.1.2.5 Specify the Host Name and Port Number for an Oracle RAC Database
      • 5.6.1.3 Provisioning Issues
        • 5.6.1.3.1 Modification may not Propagate Using Interface Protocol (Inbound) Version 3.0
        • 5.6.1.3.2 Provisioning from Oracle Internet Directory (Back-End Directory) to an Application May Fail
    • 5.6.2 Oracle Identity Governance Framework
      • 5.6.2.1 LibOVD Known Issues and Workarounds
        • 5.6.2.1.1 libovdconfig.bat script Does Not Support a Space in File Path
        • 5.6.2.1.2 Users with Same Name in Multiple Identity Stores
      • 5.6.2.2 Oracle Identity Governance Framework Documentation Changes
• 6 Oracle Internet Directory
  • 6.1 General Oracle Internet Directory Issues and Workarounds
    • 6.1.1 (Bug 25875893) ODS Schema details not getting auto-filled using Schemas Option
    • 6.1.2 (Bug 25814730) OID12cPS3: Startup fails because low system shared memory on Solaris
    • 6.1.3 (Bug 26564247)PS3 OID: Help link on ODSM URL does not work
    • 6.1.4 (Bug 19898973)Substring Filter Not Supported for Collective Attributes
    • 6.1.5 (Bug 14079791) Search on rootDSE lastchangenumber Attribute Works For One Attribute At A Time
    • 6.1.6 (Bug 17348090) Search with Filter Containing AND Operation of Collective Attributes Not Supported
    • 6.1.7 (Bug 17435510) Oracle Database Requires Patch to Fix Purge Job Problems
    • 6.1.8 (Bug 18196425) ODSM Adds Fake Entries to the Chained Container and Displays Duplicate Entries During Export
    • 6.1.9 (Bug 18695967) ODSM Does Not Create Entry of Custom objectclass With Custom Mandatory Field
    • 6.1.10 (Bug 19521548) Oracle Internet Directory Upgrade from 10.1.4.3 to 11.1.1.9.0 Fails During Configuration on AIX
    • 6.1.11 (Bug 12833947) ODSM Problems in Internet Explorer 7
    • 6.1.12 (Bug 16964666) Cloned Oracle Internet Directory Instance Fails or Runs Slowly
    • 6.1.13 (Bug 16498988) Oracle Internet Directory Fails to Start on Solaris SPARC System Using ISM
    • 6.1.14 ODSM Browser Window Becomes Unusable
    • 6.1.15 (Bug 9050432) Bulkmodify Might Generate Errors
    • 6.1.16 (Bug 8464130)Turkish Dotted I Character is Not Handled Correctly
    • 6.1.17 (Bug 10383377) SQL of OPSS ldapsearch Might Take High CPU%
    • 6.1.18 Unable to set up OID replication in Oracle Enterprise Manager
    • 6.1.19 Unable to estimate OID tuning and sizing needs in Oracle Enterprise Manager
    • 6.1.20 Unable to manage wallet for OID in Oracle Enterprise Manager
  • 6.2 Oracle Internet Directory Configuration Issues and Workarounds
    • 6.2.1 Accept TLS Protocol for SSL support
    • 6.2.2 Warning When Creating a Remote Oracle Internet Directory Instance
  • 6.3 Documentation Errata
    • 6.3.1 Replication Instructions in Tutorial for Identity Management are Incomplete
• 7 Oracle Identity Management Integration
  • 7.1 Oracle Identity Management Integration Issues and Workarounds