Click OK in the Confirmation window.

Managing the Security in Oracle Data Integrator 23-13 ■ Disconnect Oracle Data Integrator Studio from the repository. ■ Shut down every component using the Oracle Data Integrator repository. To use the Switch Authentication Mode wizard: 1. From the ODI main menu, select Switch Authentication Mode.... The Switch Authentication Mode wizard appears. 2. Specify the JDBC connectivity details of your Oracle Data Integrator master repository as defined when Connecting to the Master Repository .

3. Click Next.

4. The next action varies depending on the current Authentication Mode in use: ■ If currently using Internal Authentication, you are prompted to switch to external authentication. ■ If currently using External Authentication, you are prompted to switch to internal authentication. You must provide and confirm a password for the SUPERVISOR user that the wizard will automatically create in the repository.

5. Click Finish.

The Authentication mode is changed. ■ If you have switched from external to internal authentication, you can now re-connect to the Oracle Data Integrator repository as SUPERVISOR, with the password you have provided in the wizard. Once connected, you can edit each user to reactivate it and set a password for this user. ■ If you have switched from internal to external authentication, you can now re-connect to the Oracle Data Integrator repository as one of the users with supervisor privileges, and re-enable the Oracle Data Integrator users that have been disabled during the switch. Reactivating Users After Switching to Internal Authentication To reactivate a User:

1. In Security Navigator expand the Users accordion.

2. Select the user that you want to reactivate from the list of users.

3. Right-click and select Edit. The User editor appears.

4. Un-select Allow Expiration Date.

5. If you want to set a password for this user, click Change Password and enter the

new password for this user.

6. From the File main menu, select Save.

Re-Enable Users After Switching to External Authentication To re-enable a User:

1. In Security Navigator expand the Users accordion.

2. Select the user that you want to re-enable from the list of users.

3. Right-click and select Edit. The User editor appears.

4. Enter in the Name field a user name that matches the login of an enterprise user in

the identity store. 23-14 Oracle Fusion Middleware Developers Guide for Oracle Data Integrator

5. Click Retrieve GUID. If the user name has a match in the identity store, this

external user’s GUID appear in the External GUID field.

6. From the File main menu, select Save.

23.3.3 Enforcing Password Policies

The Password Policies consist of a set of rules applied on user passwords when using Internal Authentication. This set of rules is applied when the password is defined or modified by the user. To define the password policy: 1. From the Security Navigator toolbar menu, select Password Policy... The Password Policy dialog appears. This dialog displays a list of rules.

2. If you want your password to expire automatically, check Password are valid for

days , and set a number of days after which passwords need to be modified.

3. Click Add a Policy. The Policy Definition dialog appears. A policy is a set of

conditions that are checked on passwords.

4. Set a Name and a Description for this new policy.

5. In the Rules section, add several conditions on the password text or length. You can define, for example, a minimum length for the passwords.

6. From the Condition to match list, select whether you want the password to meet

at least one or all conditions.

7. Click OK.

8. Add as many policies as necessary, and select Active for those of the rules that you

want to keep active. Only passwords that meet all the policies are considered as valid for the current policy.

9. Click OK to update the password policy.