{"id":4886,"date":"2013-01-02T15:34:23","date_gmt":"2013-01-02T19:34:23","guid":{"rendered":"http:\/\/onlineappsdba.com\/?p=4886"},"modified":"2013-01-02T15:34:23","modified_gmt":"2013-01-02T19:34:23","slug":"topic-1-certification-oracle-identity-governance-suite-11g-essentials-exam-1z1-459","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2013\/01\/02\/topic-1-certification-oracle-identity-governance-suite-11g-essentials-exam-1z1-459\/","title":{"rendered":"Topic 1 – Certification Oracle Identity Governance Suite 11g Essentials Exam -1Z1-459"},"content":{"rendered":"

This post covers first topic of certification Oracle Identity Governance Suite 11g Essentials<\/a><\/strong>\u00a0 i.e. Oracle Identity Governance Fundamentals<\/strong>”<\/p>\n

1.<\/strong> Oracle Identity Governance fundamentals<\/p>\n

1.1<\/strong> Describe challenges faced by organizations in the area of Identity Governance
\n1.2<\/strong> Describe Oracle Identity Governance suite’s integrated approach and highlight key benefits
\n1.3<\/strong> Describe key features of the Oracle Identity Governance product suite<\/p>\n

Here is\u00a0excerpt<\/strong> from various Oracle documentation (mentioned at end of this post) around\u00a0Oracle Identity Governance fundamentals<\/strong><\/p>\n

1)<\/strong> Organization today faces challenge to provide users with quick and easy access to the systems they need to perform their jobs with the organization\u2019s risk and compliance obligation to ensure such access is as restrictive as possible.<\/p>\n

2)<\/strong> Challenges faced by companies are access certification<\/strong>, revoking unnecessary access rights<\/strong>, compliance<\/strong> (Sarbnes Oxley – SOX…), auditing<\/strong> etc<\/p>\n

3)<\/strong> Oracle Identity Governance simplifies access grants by enabling users to request access in simple, web based catalog, and by routing these requests to appropriate approvers. Some of the key benefits of Oracle Identity Governance are
\na)<\/strong> Simplified Access Request
\nb)<\/strong> Advanced Role Lifecycle Management
\nc)<\/strong> Streamlined Access Grant
\nd)<\/strong> Privileged Account Management
\ne)<\/strong> Simplified Identity Certification
\nf)<\/strong> IT Audit Monitoring & Reporting<\/p>\n

4)<\/strong> Identity Governance also provides privileged account management<\/strong> (introduced in IDM 11gR2<\/a>) that controls access to shared, root-level or admin accounts.<\/p>\n

5)<\/strong> Identity governance provides – provisioning<\/strong>, managing accounts and access privileges<\/strong>, role lifecycle management<\/strong>, access certification<\/strong>, closed loop remediation,\u00a0privileged account management<\/strong>, customizable user interface<\/strong>, enhanced regulatory compliance<\/strong>, Segregation of Duties<\/strong> (SoD), Increased security and improved business responsiveness<\/strong>, Auditing,<\/strong> and Reporting<\/strong><\/p>\n

6)<\/strong> Identity Governance Suite consists of following components<\/p>\n

\"\"<\/a><\/p>\n


\ni) Access Catalog<\/strong> : Catalog of access rights, including Enterprise\/Application Roles, Application Accounts, Entitlements<\/p>\n

ii) Access Request<\/strong> : Browser based tool to request access (similar to shopping cart)<\/p>\n

iii) Privileged Account Management<\/strong> : Server-based password repository to generate, provision, and manage passwords for privileges shared accounts (like root user or application super user) . Tool supports check-out and check-in of password and system can be configured to automatically change the password on check-in.<\/p>\n

iv) Role Lifecycle Management<\/strong> : defining and assigning roles to individuals. Role Lifecycle Management component also includes role discovery and Role Mining<\/p>\n

v) Identity Certifications<\/strong> : provides certification (or attestation), closed loop remediation, and 360-degree view provides audit information such as previous certification decisions, rules or access policies used for assignment, role usages analysis and so on<\/p>\n

vi) IT Audit Monitoring<\/strong><\/p>\n

vii) Account Reconciliation & Rogue Detection<\/strong> : Account reconciliation allows administrators to detect change in access privileges originating outside the identity management system. Orphan accounts are accounts that are not linked to any identities . The process of automatic and manual linking, identifying accounts, and remediating orphaned accounts is typically part of data cleansing that is performed as the first phase of on-boarding a new application using the Oracle Identity Governance Suite. Periodic reconciliation can also help with detecting any orphaned accounts created<\/p>\n

viii) Audit & Reporting<\/strong> : Identity Governance suite provides actionable dashboards and advanced analytics capabilities based on user identity, access and audit data residing in the Identity Warehouse. All completed certification data is archived for audit purposes
\nResources<\/p>\n

 <\/p>\n

Further Reading<\/strong><\/span><\/p>\n

I strongly recommend to read following additional documentation that covers topic Oracle Identity Governance Fundamentals<\/strong>\u00a0of certification Oracle Identity Governance Suite 11g Essentials\u00a0<\/strong><\/p>\n