Configuring an IT Resource Instance for Email

14-20 Oracle Fusion Middleware Enterprise Deployment Guide for Oracle Identity Management Perform these steps to set the location for the default persistence stores for the Oracle Identity Manager and SOA Servers: 1. Create the following directories on the shared storage: ORACLE_BASE admindomain_namesoa_cluster_nametlogs ORACLE_BASE admindomain_nameoim_cluster_nametlogs 2. Log in to the Oracle WebLogic Server Administration Console.

3. Click Lock and Edit.

4. In the Domain Structure window, expand the Environment node and then click

the Servers node. The Summary of Servers page is displayed. 5. Click the name of either the Oracle Identity Manager or the SOA server represented as a hyperlink in the Name column of the table. 6. The Settings page for the selected server is displayed, and defaults to the Configuration tab.

7. Open the Services sub tab.

8. Under the Default Store section of the page, provide the path to the default

persistent store on shared storage. The directory structure of the path is as follows: ■ For Oracle Identity Manager Servers: ORACLE_BASEadmindomain_ nameoim_cluster_nametlogs ■ For SOA Servers: ORACLE_BASEadmindomain_namesoa_cluster_ nametlogs

9. Click Save and Activate.

10. Restart the Oracle Identity Manager and SOA Managed Servers, as described in Section 20.1, Starting and Stopping Oracle Identity Management Components, to make the changes take effect.

14.12 Configuring an IT Resource Instance for Email

This section describes how to set up email notification. This is optional. The following steps assume that an email server has been set up and that Oracle Identity Management can use it to send the email notifications. 1. Log in to Oracle Identity Manager Advanced Administration as system administrator.

2. Navigate to Configuration - Create IT Resource.

3. Enter Email Server for IT Resource Name. Select Mail Server for IT Resource

Type . Do not select anything for the Remote Manager field. Click Continue. 4. On the Step 2: Specify IT Resource Parameter Values page, provide the following values for the fields: Note: To enable migration of the Transaction Recovery Service, specify a location on a persistent storage solution that is available to other servers in the cluster. All the servers that are a part of the cluster must be able to access this directory. Extending the Domain with Oracle Identity Manager 14-21 ■ Authentication : False ■ Server Name : Email server name, for example: mail.mycompany.com User Login : leave blank ■ User Password : leave blank Click Continue. 5. On the Step 3: Set Access Permission to IT Resource page, do not change anything. Click Continue.

6. On the Step 4: Verify IT Resource Details page, check all the values you entered

to verify that they are correct. Click Continue. 7. On the Step 5: IT Resource Connection Result page, Oracle Identity Manager checks whether it can connect to the email server provided. If the connection is successful, click Create.

8. On the Step 6: IT Resource Created page, click Finish.

9. Restart the Oracle Identity Manager server, as described in Section 20.1, Starting and Stopping Oracle Identity Management Components, for the changes to take effect. 14.13 Enabling Oracle Identity Manager to Connect to SOA Using the Administrative Users Provisioned in LDAP Oracle Identity Manager connects to SOA as SOA administrator, with the username weblogic by default. As mentioned in the previous sections, a new administrator user is provisioned in the central LDAP store to manage Identity Management Weblogic Domain. Perform the following postinstallation steps to enable Oracle Identity Manager to work with the Oracle WebLogic Server administrator user provisioned in the central LDAP store. This enables Oracle Identity Manager to connect to SOA without any problem: 1. Log in to Enterprise Manager at: http:admin.mycompany.comem

2. Right click Identity and Access –OIM–oim11.1.1.3.0 and select System Mbean

Browser .

3. Select Application-defined Mbeans–oracle.iam–Server: wls_oim1–Application:

oim –XML Config–Config–XMLConfig.SOAConfig–SOAConfig 4. View the username attribute. By default, the value of this attribute is weblogic. Change this to the Oracle WebLogic Server administrator username provisioned in Section 10.4.4, Creating Users and Groups for Oracle Identity Manager, for example: weblogic_idm

5. Click Apply.

6. Select Weblogic Domain–IDM Domain from the Navigator.

7. Select Security–Credentials from the down menu.

8. Expand the key oim.

9. Click SOAAdminPassword.

10. Click Edit.

14-22 Oracle Fusion Middleware Enterprise Deployment Guide for Oracle Identity Management 11. Change the username to weblogic_idm and set the password to the accounts password.

12. Click OK.

13. Run the reconciliation process to enable the Oracle WebLogic Server administrator, weblogic_idm, to be visible in the OIM Console. Follow these steps: a. Log in to Oracle Identity Manager at: https:sso.mycompany.com:443oim as the user xelsysadm. b. If prompted, set up challenge questions. This happens on your first login to Oracle Identity Manager.

c. Click Advanced.