Oracle Identity & Access Management II

Oracle Identity and Access Management can logically be divided into three main categories

– Directory Service (OID, Virtual Directory, DIP)
– Access Management (Access Manager, Identity Federation, AS SSO, OeSSO)
– Identity Management (Identity Manager & DAS)

1) Directory Services – overview including OID, I have already covered in past at OID overview.

2) Access Management:
A) Access Manager – Controlling User Access to Enterprise resources. It also provides web based Identity Administration & access control to applications & resources. Provides User, password and group management. User access policies can be defined and enforced with high granularity.

B) Identity Federation – Allows companies to operate independently and enable cross domain user provisioning.

C) Single Sign-on – It provides built in integration with customer’s IM
and addressing key challenges (for cross domain access) like automatic mapping, identity mapping access control navigation.

D) eSSO – Enterprise SSO is upcoming product which provide true SSO for all application and resource in an enterprise, without modifying existing
applications.

3) Identity Management:

A) Identity Manager – Allows automated user identity provisioning and deprovisioning. Key features of Identity Manager are password management, workflow & policy management, Identity reconciliation, reporting and Auditing. Identity manager also supports attestation (confirming access rights by user or system manager periodically). This is requirement from SoX compliance.

B) DAS – Delegating Administrative Services provides trusted proxy based
administration at User or Administrator level.

What is available to download & Install ?
There are two packages available which you can download & install based on requirement
– Oracle Identity Management and Access Management Suite (OID, Virtual Directory, Access Manager, Federation and Identity Manager)
– Oracle Application Server Infrastructure Component (OID, DIP, SSO, DAS)

More on Oracle Access Manager (Formerly Oblix) including Webgate, Webpass, Access & Identity System and Policy Manager coming soon ..

http://teachMeOracle.com/forum

About the Author Masroof Ahmad

Leave a Comment:

8 comments
Alexandre Oliveira says September 9, 2011

Hello Atul,

Can you tell us what’s the main difference between OIM and OAM.

The docs from Oracle are somehow vague, so I cannot understand what one can do in which the other cannot do (apart from the fact that the OAM provides Single Sign On solution).

Thanks in advance
Alexandre

Reply
Atul Kumar says September 12, 2011

@ Alexandre Oliveira ,
OAM as you said is access management solution and recommended Signel Sign-On solution.

OIM is identity management (includes password policy, user profile update) software and also user provisioning and reconciliation software. You can use OIM to provision account on almost all applications including SAP, Oracle, Microsoft, Novell using OIM connectors.

Reply
Susmit says August 8, 2012

Hi Atul,

I am trying to setup a SSO Solution with Ebiz R12.1.3 (DB 11.1.0.7) with Oracle Identity management 11g Solutions.
I checked and got:-Integrating Oracle E-Business Suite Release 12 with Oracle Access Manager 11gR1 (11.1.1.5) using Oracle E-Business Suite AccessGate [ID 1309013.1]

Until now i have completed the below steps:-

1. Installed WLS 10.3.5
2. Installed Oracel DB 11.2.0.1
3. Using RCU created OID Schema
4. Installed Oracle Identiity management 11.1.1.2
5. Patched it to 11.1.1.5
6. Configured OID with WLS Admin,ODSM,DIP.

Now start my confusions. Can anybody clarify me the below ponits:-

I assume now i need to follow the same steps until 1-4 For Oracle Identity and Access Management 11.1.1.5. But:-

* Do i need to install Oracle Identity and Access Management 11.1.1.5 on the same host where Oracle Identity Management 11.1.1.5 has been installed and configured?? Or i can use different host and separate WLS Insatnce?? (DB will be same for schemas).

* What componants i need to configure on Oracle Identity and Access Management 11.1.1.5 side ?? (OAM i understand,what else)??

* Do i need OVD anywhere in this setup??

Reply
    Atul Kumar says August 8, 2012

    I assume now i need to follow the same steps until 1-4 For Oracle Identity and Access Management 11.1.1.5. But:-

    * Do i need to install Oracle Identity and Access Management 11.1.1.5 on the same host where Oracle Identity Management 11.1.1.5 has been installed and configured?? Or i can use different host and separate WLS Insatnce?? (DB will be same for schemas).

    AK: No, installing Oracle Identity and Access Management 11.1.1.5 on same host as Oracle Identity Management is not mandatory. You can keep these two components on different hosts as well.

    * What componants i need to configure on Oracle Identity and Access Management 11.1.1.5 side ?? (OAM i understand,what else)??
    AK: If all you need is SSO then SOA is not required. During configuration select OAM only with EM (domain template screen in the book during weblogic domain creation). You need to then reply on EBS for password change and forgot password (Our suggestion would be to use OIM for that but then you need SOA too for OIM)

    * Do i need OVD anywhere in this setup??
    AK: OVD is not required if all your users are in single LDAP server like OID.

    Reply
Piyush says January 2, 2014

We are trying to create attestation process in OIM 11gr2. the requirement is to run attestation on roles (to check who all are member of that particular role). Actually there are roles associated with each users which have to be reconciled from DB.(there are two tables in DB one with user detail and other child table contains role associated with each user). requirement is get get attestation reports based on roles.

Reply
Sadiq says January 3, 2014

Hi Atul,
I was looking out for online training on your website for OIM, the content of the training, version, cost and the scheduled dates.
I have left a query few days ago on focus thread however have not got any response till now. Could you let me know whether there is any training scheduled for OIM or i have to go with OAM which i guess starts on 18th of this month. Awaiting your response.

Reply
Sadiq says January 3, 2014

Just to add a side note, I am a dba so i am looking more from dba perspective.

Regards,
Sadiq

Reply
Sadiq says January 12, 2014

Hi Atul,
I will be enrolling myself for the oam training which is going to start on 18th Jan, 2014. However, I have few doubts which started popping up when i went through few documents.

1) I am a dba, a new bee to oracle identity and access management. what is a role of a dba apart from installation and configuration in oam/oim.

2) The training which i am going to enroll does it cover oracle identity and access management or only oracle access management. I mean is it IDAM.

3)I have very little development experience, more into administration will it help or is there a minimal prerequisite

4) What version are we getting trained on and on what platform. Do we need to download any software in advance before the training starts.

5) Any kind of minimal system requirement necessary or any software like oracle virtual box or vmware need to be installed and configured.

6) Do we get a training manual.

Kindly reply so that i can make a informed decision and any email id where i can post my technical questions if ever it pops up before the training.

Regards,
Sadiq

Reply
Add Your Reply