Installing Oracle Identity Manager (Thor Xellerate)

Before installing Identity Manager, make yourself familiar with Oracle Identity Manager Concepts and Architecture explained in previous related post.

Oracle Identity Manager can only be installed on Web Server (OAS, Webspehere, Weblogic, Jboss) and Remote Manager and Design Console (for windows only) can exist on same or separate machines.

Steps for installing identity manager vary as per your application server and database but underlying concept remains same. Steps mentioned here are specific to, installing Oracle Identity Manager with Oracle Application Server as web server and oracle database as data store.

Generic Steps for Installing Oracle Identity Manager
—————————————————————————–
A) Install Web Server (OAS, Jboss, Webspahere)
B) Install & Configure Database for Identity Manager (Oracle, MS-Sql, sql server)
C) Install JDK (for OAS use JDK shipped with OAS)

A) Installing Web Server :
————————————
1. Download Oracle Application Server software (version 10.1.3.0.2 at time of writing this doc) from downloads.oracle.com
2. Select J2EE and Web Server option during installing OAS 10.1.3.X
3. Change RMI port in opmn.xml file to a specific port (from port range available in opmn.xml for RMI)
4. Set environment variable JAVA_HOME to $ORACLE_HOME/jdk/jre for user installing Identity Manager

B) Install and configure Database :
————————————————–
Identity Manager require database for storing policy data and metadata. before installing identity manager, you should install Web Server and Database server. In oracle database from list of databases, Oracle Identity Manager support both RAC and simple Oracle Database (without RAC). You can also use an existing oracle database as well.

1. Install oracle database software & create database (Follow oracle database installation Guide, You have option to create database while installing oracle database software via Oracle Universal installer)
2. Prepare your database for installing Oracle Identity Manager
—–2.1 Make sure JVM is configured & Query Rewrite is enabled (done in default database creation with database installer)
—–2.2 Enable XA Transaction Support
—–2.3 Create a tablespace for Oracle Identity Manager
—–2.4 Create database user for Oracle Identity Manager
or
You can do all these above steps using prepare_xl_db.sh (.bat for windows) shipped with Oracle Identity Manager software.

If you don’t want to install new oracle database, you can use existing database for configuring identity manager tablespace & schema.

C) Installing Oracle Identity Manager :
——————————————————-
Steps mentioned here are for installing Identity Manager on Unix
1. Before installing make sure
i) JAVA_HOME is set as mentioned above
ii) You are installing Oracle Identity Manager with same user who installed Application Server.
iii) uninstall commons-logging-1.0.2 from linux machine, if its there. To check if installed “rpm –qa grep commons-logging” To uninstall abobe package “rpm -e full_rpm_name”
iv) Database and application server already installed as mentioned above
2. start installer as sh install_server.sh (Installer will start in console mode & not GUI)
Supply requested information during installation.

It will prompt you for following details
–Password for OIM Administrator account
–Installation Type (Identity Manager or Identity Manager with Audit and Compliance Module)
–Directory where you wish to install Oracle Identity Manager
–Database Type
–Database Hostname, listener port, SID
–Database username/Password for OIM
–Authentication Mode (Default OIM authentication or SSO)
–Application Server Type
–Cluster information (Select if you wish to install OIM in clustered Application Server installation type)
Username/Password and Instance Name for Application Server
RMI port & OPMN port (If Application Server is Oracle Application Server)

Few things to note during installation
i) Choose different installation directory for various Identity Manager components (identity manager, remote manager, Design Console for windows)
ii) If you are installing Identity Manager using existing database, it will give you warning message

Start/Stopping Oracle Identity Manager Server
————————————————————–
Identity Manager is installed as part of Web Server and will start/stop by starting/stopping webserver.
– Make sure database configured for Identity Manager is Up
– Start Web Server (for Oracle Application Server use, opmnctl startall Similarly for stopping OIM, stop application server (opmnctl stopall) and shutdown database.

Accessing Oracle Identity Manager Administrative/User Console
—————————————————————-
http://hostname:domainname:port /xlWebApp


where
hostname.domainname is full name of Server (or virtual name) where Application Server is installed.
–port is web server/apache/http or https port number (7777 is default for oracle application server)

About the Author Masroof Ahmad

Leave a Comment:

15 comments
Paolo says August 2, 2007

I’m new in OIM. I install it on Jboss AS and SQL Server database and it works well. Now I want to customize the Administrative and User console webApp but I have many problems. The oracle’s documentation isn’t sufficient to do this customization. If I want to add a new field in the create user form, I’m able to do this but if I don’t want to use an existing field during the creation process I got an internal error during the visualization of an existing user’s profile. Could you help me? Where can I find more documentation about this argument?

Reply
Atul Kumar says August 3, 2007

Paolo,
For User manager console customizations visit

http://download.oracle.com/docs/cd/B32479_01/doc.903/b32452/toc.htm

Reply
Paolo says August 3, 2007

I already read this documentation but I can’t find any other informations. I have a problem with hiding fields in the user create page. If I hide an attribute reference in the file FormMetaData.xml, the application gives me an internal error when I view one user profile. How can I solve this problem?

Reply
Paolo says August 7, 2007

I committed a stupid error in OIM!! I deleted XELSYSADM user so I get an error if I try to login as xelsysadm in my xlwebapp console. How could I solve this problem? I wouldn’t reinstall the OIM software again…please help me!!

Reply
Anonymous says September 7, 2007

You can try to recreate user by executing sql to create such user in database.
LIKE INSERT INTO IDMDBUSER.USR ( USR_KEY, ACT_KEY, USR_LAST_NAME, USR_FIRST_NAME, USR_MIDDLE_NAME, USR_MANAGER,
USR_TYPE, USR_LOCATION, USR_FSS, USR_TODO, USR_PASSWORD, USR_DISABLED, USR_PWD_CANT_CHANGE,
USR_PWD_MUST_CHANGE, USR_PWD_NEVER_EXPIRES, USR_UPDATE_AD, USR_CREATED, USR_STATUS, USR_EMP_TYPE,
USR_LOGIN, USR_DISABLED_BY_PARENT, USR_PWD_EXPIRE_DATE, USR_PWD_WARN_DATE, USR_MANAGER_KEY,
USR_POLICY_UPDATE, USR_PWD_WARNED, USR_PWD_EXPIRED, USR_START_DATE, USR_END_DATE,
USR_PROVISIONING_DATE, USR_DEPROVISIONING_DATE, USR_PROVISIONED_DATE, USR_DEPROVISIONED_DATE,
USR_EMAIL, USR_LOCKED, USR_LOGIN_ATTEMPTS_CTR, USR_PWD_RESET_ATTEMPTS_CTR, USR_DATA_LEVEL,
USR_CREATE, USR_CREATEBY, USR_UPDATE, USR_UPDATEBY, USR_NOTE,
USR_ROWVER ) VALUES (
1, 1, ‘Administrator’, ‘USR_LOCKED’, NULL, NULL, ‘End-User Administrator’, NULL, NULL
, NULL, ‘DDXzeDB6IeeJKqc1aNmp/A==’, ‘0’, NULL, NULL, NULL, NULL, TO_Date( ’09/05/2007 11:24:04 AM’, ‘MM/DD/YYYY HH:MI:SS AM’)
, ‘Active’, ‘Full-Time’, ‘XELSYSADM’, NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL
, NULL, NULL, NULL, NULL, NULL, NULL, ‘0’, 0, 0, 2, TO_Date( ’09/05/2007 11:24:04 AM’, ‘MM/DD/YYYY HH:MI:SS AM’)
, 1, TO_Date( ’09/05/2007 11:24:04 AM’, ‘MM/DD/YYYY HH:MI:SS AM’), 1, NULL, ‘0000000000000000’);

Reply
Atul Kumar says September 7, 2007

Thanks Anonymous, Reader will be very happy to see your name.

Reply
jim says April 22, 2009

For UI change tips one can also visit

http://oim-idm.com

Reply
Denny says April 29, 2009

i am a beginer to use OIM Please help me if i get trouble

Reply
madhuvaranreddy says November 28, 2009

hi can any n epls provide reverse proxy code to integrate idm and access manager
i am using jboss apllication server
and ohs webserver

Reply
Vinod says January 29, 2010

I installed OIM, now I am trying to log into the Admin console, what is the UserID and Password I am supposed to use.

Thanks,
Vinod Santhanam

Reply
Atul Kumar says January 29, 2010

@ Vinod,

Try xelsysadm/xelsysadm

Reply
srini says May 13, 2010

Hi Atul,
I desperately need ur help
I are doing OIM 9101 installation on Red Hat Linux 5.4 64-bit version. I’m using Oracle Database 11g Release 1 and weblogic 10.3.0. The OIM installation fails with the following error.

Error Detais

weblogic-setup.xml – line 196

***************Exact Error from setup_weblogic.log**********************
BUILD FAILED
/oracle/OIM_Server/xellerate/setup/setup.xml:443: The following error occurred while executing this line:
/oracle/OIM_Server/xellerate/setup/weblogic-setup.xml:196: Could not create task or type of type: wlst.
Ant could not find the task or a class this task relies upon.

This is common and has a number of causes; the usual
solutions are to read the manual pages then download and
install needed JAR files, or fix the build file:
– You have misspelt ‘wlst’.
Fix: check your spelling.
– The task needs an external JAR file to execute
and this is not found at the right place in the classpath.
Fix: check the documentation for dependencies.
Fix: declare the task.
– The task is an Ant optional task and the JAR file and/or libraries
implementing the functionality were not found at the time you
yourself built your installation of Ant from the Ant sources.
Fix: Look in the ANT_HOME/lib for the ‘ant-‘ JAR corresponding to the
task and make sure it contains more than merely a META-INF/MANIFEST.MF.
If all it contains is the manifest, then rebuild Ant with the needed
libraries present in ${ant.home}/lib/optional/ , or alternatively,
download a pre-built release version from apache.org
– The build file was written for a later version of Ant
Fix: upgrade to at least the latest release version of Ant
– The task is not an Ant core or optional task
and needs to be declared using .
– You are attempting to use a task defined using
or but have spelt wrong or not
defined it at the point of use

Remember that for JAR files to be visible to Ant tasks implemented
in ANT_HOME/lib, the files must be in the same directory or on the
classpath
********************************************

I have set all the needed envi variables, such as JAVA_HOME, ORACLE_HOME, ANT_HOME and much more before running install_server.sh.

I can understand that the problem lies with the ANT version and JAR files. The Ant version We are using is 1.6.5. But, our earlier attempts at resolving the issue has mostly ended in vain.

Kindly Help me resolve the issue.

Regards
Srini

Reply
srinivas says January 30, 2012

how to add new field in adminstrator and user console?

Reply
Mabeliana says August 27, 2012

Hello

1. how to add new field in adminstrator and user console?
2. how to add new user for enter to the console OIM?

Thanks

Reply
Add Your Reply