Adapter Plug-In Version Understanding the General Purpose Plug-Ins

Understanding Oracle Virtual Directory Plug-Ins 4-27 apply a consistent security and audit trail that maps to the authenticated user, which is called identity propagation. The Proxy Authorization Support plug-in leverages the proxy authentication capability of enterprise directories so that even though the user is actually authenticated in Active Directory, the user identity can be propagated to one or more other sources so that securityaudit in these additional sources are mapped to the actual user authenticated to Oracle Virtual Directory and not to an application account stored in Oracle Virtual Directory. The Proxy Authorization Support plug-in constructs the client DN, adds a proxy authorization control with this client DN to the request, then passes the request to the back-end LDAP server. The LDAP server authenticates the request using the Oracle Virtual Directory Proxy DN, and processes the operation using the client user identity specified in the proxy authorization control without requiring any changes to the client application. When you configure the Proxy Authorization Support plug-in, you must configure the directory to support the proxy control you are going to pass.

4.2.18.1 Configuration Parameters

The following is a list and description of the Proxy Authorization Support plug-in configuration parameters: remoteBase An optional parameter used as parent DN to construct the user authorization DN to pass in Proxy Authorization Control. Defaults to the same value as the adapters remoteBase. directoryType An optional parameter used to indicate the directory types. Allowable values are OID and SunOne. SunOne is the default value, and only this value is supported in this release.

4.2.19 UserManagement Plug-In

The UserManagement plug-in provides data mapping of Oracle Identity Manager attributes to LDAP directory servers.

4.2.19.1 Configuration Parameters

The UserManagement plug-in has the following configuration parameters: oimLanguages Comma separated list of language codes to be used in attribute language subtypes. This parameter is functional only when the directoryType parameter is set to ActiveDirectory. oamEnabled True or False: Indicates whether Oracle Access Manager is deployed with Oracle Identity Manager. By default, Oracle Access Manager is not deployed, therefore the default setting for this parameter is false. Note: The oamEnabled parameter for the UserManagement plug-in and the changelog plug-in must have identical values.