OIM 11g How to add Challenge Questions
Oracle Identity Manager (OIM) 11g by default comes with 4 challenge questions and user must set three challenge questions during first time login . These challenge questions are used to authenticate user in forgot password use case. You can also integrate OIM with OAAM to delegate challenge questions to OAAM For more on OIM challenge […]
Read MoreOracle Identity Analytics (OIA) : Global Users vs OIA Users : 1Z0-545 Security Models in OIA
Oracle Identity Analytics (OIA) is an application from Oracle Identity Management Suite that provides role management and automates identity based controls. OIA was earlier Sun Role Manager (SRM)and before that it was Vaau‘s RBACX. More on OIA Architecture here and high level OIA installation steps here In this post I am going to cover two type of […]
Read MoreValidate OES 10g policy xml against XSD
In our OES 10g environment there is an application policy xml which is around 2 MB size containing around 35k lines. So it is a nightmare to edit the xml for any attributes or policies for syntax issues. However there are editors such as Eclipse to validate the xml document which may not produce expected […]
Read MoreOIM 11g Challenge Questions – Everything you must know
I discussed about challenge questions in OIM here , In this post I am going to cover everything you must know about challenge questions in OIM. Oracle Identity Management (OIM) is an identity provisioning and identity management software from Oracle Identity & Access Management Suite. User’s password reset and forgot password functionality is provided by OIM. […]
Read MoreWeekend Batch – Online Oracle Weblogic Administrator Training industry experts commencing on 20 October 2012
Join now to reap the benefits of Oracle Weblogic Administrator Training which is constantly in great demand. This is a course tailor made for you keeping in mind the latest in the world of Oracle. Please find the course details mentioned below: Commencement Date : 20 October 2012 Training Schedule : 20, 21, 27, 28 […]
Read MoreOAAM Login image missing on AuthentiPad (TextPad) Login Screen oaam_images : setDomainEnv.sh
When you integrate OIM/OAM/OAAM (using Advanced Integration via TAP) more information here , username/password is collected by Oracle Adaptive Access Manager (OAAM) and then OAAM passes this username/password to Oracle Access Manager (OAM) for authentication. To protect users from phishing, pharming and malware, OAAM provides virtual authentication device (VAD) (TextPad, PinPad, QuestionPad, and KeyPad). Image on TextPad is […]
Read MoreAccount Lock in OIM OAM OAAM, OID & WebLogic 11g because of Failed Login Attempts
When you integrate OAM, OIM, OID, OAAM so that a) OAM is used as Single Sign-On for user login to OIM b) OAAM is used to strong authentication (like multi-factor authentication, One Time Password – OTP, Knowledge Based Authentication – KBA) c) OID is used as user store for OAM & OAAM. Users between OIM […]
Read MoreOID 11g LDAP based Multi Master replication : Configuration Entries you must know
I discussed about OID multi-master replication (LDAP based) in OID 11g here , In this post I am going to answer some of the question about OID replication that an OID administrator must know Where is OID replication configuration stored in DIT (Directory Information Tree) ? What user two OID nodes (part of replication group) uses […]
Read MoreStep by Step configuration of OID Multi Master Replication – LDAP based in OID 11g
I discussed about OID replication concepts like supplier, consumer , replication agreement , ASR (Database Advanced Server Replication) vs LDAP based replication here and here You can see Mahendra’s post on OID Multi-Master replication here and steps to configure OID 11g LDAP based multi-master replication here Steps to configure OID in multi-master replication with screenshots […]
Read More“Failed to modify policy! : The subject field in a rule cannot be longer than 2000 characters” error while importing OES policies in 10g
The requirement is to add an authorization policy for permissions (containing Roles + LDAP Groups) for a resource against an action. I have exported the policy XML from the OES using policyIX.sh and tried updating the authorization policy. The ATZ policy XML block will be as shown below: <xb:authorization_policy_entry> <xb:policy_effect value=”grant”/> <xb:policy_actions> <xb:policy_action_entry value=”MyAction”/> </xb:policy_actions> […]
Read More