The image shows an icon representing end user administrators. There is a bilateral arrow with an authentication label between end user administrators and Oracle Identity and Access Management (OAM). End user administrators also interact with OCI IAM. OCI IAM uses federated single sign-on to authenticate with OAM.

There is a box with Oracle Identity Governance (OIG) and OIG connectors which connects to multiple objects in this diagram including:

• Access Governance (connected by certification and an Access Governance Agent)
• Target Applications (connected by a provisioning and target reconciliation arrow)
  • Target Applications include: SAP, Microsoft Office 365, Siebel, ServiceNow, Oracle e-Business Suite, Azure Active Directory, Amazon Web Services, Salesforce.
• An Active Directory Domain, which is comprised of an AD Connector, .NET ICF Server, and Active Directory. A Credentials Store is connected to the Active Directory Domain. The Active Directory domain connects to the OIG and OIG connectors area with provisioning and target reconciliation.
• A Trusted Reconciliation box, with a Trusted Source. This box connects to the OIG and OIG Connectors box with Identity Reconciliation.

There is an icon of Oracle Access Governance that connects via certification and an Access Governance Agent to Oracle Identity Governance (OIG) and OIG connectors. There is a bilateral arrow between OIG and OIG Connectors to Oracle Identity Role Intelligence (OIRI). OIG and OIG Connectors uses provisioning and target reconciliation to connect to a