{"id":2964,"date":"2012-03-29T18:19:25","date_gmt":"2012-03-29T22:19:25","guid":{"rendered":"http:\/\/onlineappsdba.com\/?p=2964"},"modified":"2017-12-18T08:31:40","modified_gmt":"2017-12-18T12:31:40","slug":"oracle-ebs-integration-with-oim-identity-manager-things-you-should-know","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2012\/03\/29\/oracle-ebs-integration-with-oim-identity-manager-things-you-should-know\/","title":{"rendered":"Oracle EBS Integration with OIM (Identity Manager) : Things you should know"},"content":{"rendered":"

 <\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

This post covers Oracle E-Business Suite (EBS or Apps) integration with Oracle Identity Manager (OIM) for User Provisioning and Reconciliation. OIM is Identity Management and Identity\u00a0Provisioning\/Reconciliation<\/a>\u00a0software from Oracle. OIM 11g Architecture & Administration is also covered in my book Oracle Identity and Access Manager for Administrators<\/a>.<\/p>\n

 <\/p>\n

Here are key things you should know if you are planning to use OIM to provision accounts to EBS<\/strong> or reconcile users from EBS to OIM<\/strong>.
\n1.<\/strong> There are mainly three type of users<\/strong> in Oracle E-Business Suite<\/p>\n

a) EBS Accounts<\/strong> – is an entry in FND_USER that represents an Oracle E-Business Suite Account. To login to E-Business Suite user must have record in FND_USER<\/strong><\/p>\n

b) HRMS \/ PERSON Record<\/strong> – Some applications in EBS (like iExpense<\/strong>) require user to have HRMS<\/strong> (Person) record. PERSON<\/strong> record can be of different type like Employee, Part-time worker, Contractor, etc. Person records are stored in table\u00a0PER_ALL_PEOPLE_F<\/strong><\/p>\n

c) Customer\/Vendor Record<\/strong> – Some applications in EBS (like iStore<\/strong> or iProcurement<\/strong>) require user to have TCA<\/strong> record (Trading Community Architecture<\/strong>) that are representative or employees of customers and vendors . TCA record is in stored in table\u00a0HZ_PARTIES<\/strong><\/p>\n

2.<\/strong>\u00a0OIM uses pre-built\u00a0connectors<\/strong> to provision accounts or reconcile users with LDAP Servers, Databases, Operating Systems and Business Applications including Oracle E-Business Suite.<\/p>\n

3. <\/strong>There are two type<\/strong> of OIM connector for EBS<\/p>\n

a) Oracle e-Business Employee Reconciliation (ER)<\/strong> – In this integration Oracle E-Business Suite HRMS acts as an authoritative source (aka trusted source<\/strong>) for OIM. In this configuration (trusted source) of connector, person records<\/strong> are created and modified only on EBS HRMS. Information about these users is then reconciled in to OIM. This connector has a Reconciliation Process<\/strong>.<\/p>\n

\"\"<\/a><\/p>\n

Note: You can NOT use EBS ER connector to provision accounts from OIM to EBS (FND_USER), if you need to provision accounts in EBS (FND_USER) from OIM then you should use EBS User Management (UM) connector.<\/span><\/p>\n

b) Oracle e-Business User Management (UM)<\/strong> – In this integration Oracle E-Business Suite acts as managed resource<\/strong> (target resource) for OIM. Users in OIM can be provisioned to EBS. Using this connector, users created or modified directly on Oracle E-Business Suite can also be reconciled in to OIM. \u00a0There are two processes in this connector Reconciliation Process<\/strong> and Provisioning Process<\/strong>.<\/p>\n

\"\"
\n<\/a><\/p>\n

4.<\/strong> There are three versions of EBS-UM<\/strong> Connector
\na)<\/strong> User Management (FND_USER)
\nb)<\/strong> User Management with HR Foundation (FND_USER & HRMS\/PER)
\nc)<\/strong> User Management with TCA Foundation (FND_USER & TCA\/HZ_PARTIES)<\/p>\n

5.<\/strong> EBS-UM connector can be configured in any one or combination of<\/p>\n

a) User Management<\/strong> : Use this to create FND_USER record (in EBS) for OIM User and to grant roles and responsibilities to this EBS Record (FND_USER).<\/p>\n

b) User Management with HR Foundation<\/strong> : \u00a0Use this connector to create FND_USER record in EBS (same as User Management) but you can also create basic HRMS user<\/strong> in EBS and link record in HRMS with record in FND_USER (EMPLOYEE_ID column in FND_USER table is linked with PERSON_ID column of PER_ALL_PEOPLE_F table<\/span>). Use this version of connector if you wish to create record in FND_USER (of EBS) and HRMS (of EBS) from OIM.<\/p>\n

c) User Management with TCA Foundation<\/strong> : Use this connector to create \u00a0FND_USER record in EBS (same as User Management) but you can also create basic TCA<\/strong> person-type party record in EBS and link it with record in FND_USER (PERSON_PARTY_ID column in FND_USER table is linked with PARTY_ID column of HZ_PARTIES table<\/span>). Use this version of connector if you wish to create record in FND_USER (of EBS) and TCA (of EBS) from OIM.<\/p>\n

<\/div>\n
6.<\/strong> Documentation for connector<\/div>\n

a) EBS User Management<\/strong> Connector installation & configuration document is available here<\/a><\/p>\n

b) EBS Employee Reconciliation<\/strong> Connector installation & configuration document is available here<\/a><\/p>\n

7.<\/strong> It is recommended NOT<\/strong> to configure Oracle e-Business Employee Reconciliation<\/strong> and Oracle e-Business User Management with HRMS<\/strong> (HRF or HR Foundation) both at same time.<\/p>\n

If you have not yet downloaded\u00a0FREE eBook \u2013 7 Docs every Oracle Apps DBA must read for EBS R12 integration with OAM\/OID for SSO<\/a>\u00a0get a copy in your Email<\/p>\n