Migrating Credentials Manually Use Fusion Middleware Control to deploy the application EAR file to the

Deploying Secure Applications 6-19 5. Load data into the destination Oracle Internet Directory, by running bulkload as illustrated in the following line: bulkload connect=dstOidDbConnectStr load=true file=fullPath2SrcOidLdif For details about the above commands, see chapter 14, Performing Bulk Operations, in Oracle Fusion Middleware Administrators Guide for Oracle Internet Directory.

6.5.3 Migrating Audit Policies

To migrate audit policies, use the export and import operations as explained next. First, export the audit configuration from a test environment to a file using one of the following tools: ■ Fusion Middleware Control: navigate to Domain Security Audit Policy, and then click Export. ■ The OPSS script exportAuditConfig. For details, see Appendix C.4.7, exportAuditConfig. Then, import that file into the production environment using one of the following tools: ■ Fusion Middleware Control: navigate to Domain Security Audit Policy, and then click Import. ■ The OPSS script importAuditConfig. For details, see Appendix C.4.8, importAuditConfig. The importexport operations above migrate audit policies only, and they do not migrate the audit data store settings. If you had configured an audit data source in your test environment, repeat the steps to configure a data source in the production environment. For details, see Section 12.2.2, Set Up Audit Data Sources. Normally, you would not want audit data records from a test environment to be migrated to production; however, to do so, use the database importexport utilities for that purpose. For details, see Section 12.5.5, Importing and Exporting Data. 6-20 Oracle Fusion Middleware Application Security Guide Part III Part III Advanced OPSS Administration This part describes advanced OPSS administration features in the following chapters: ■ Chapter 7, Configuring the Identity Store Service ■ Chapter 8, Configuring the OPSS Security Store ■ Chapter 9, Managing the Policy Store ■ Chapter 10, Managing the Credential Store ■ Chapter 11, Introduction to Oracle Fusion Middleware Audit Framework ■ Chapter 12, Configuring and Managing Auditing ■ Chapter 13, Using Audit Analysis and Reporting 7 Configuring the Identity Store Service 7-1 7 Configuring the Identity Store Service This chapter explains how to use the identity store service in OPSS. Topics include: ■ Introduction to the Identity Store Service ■ Configuring the Identity Store Provider ■ Configuring the Identity Store Service ■ Querying the Identity Store Programmatically

7.1 Introduction to the Identity Store Service

This section describes key concepts of the OPSS identity store service: ■ About the Identity Store Service ■ Service Architecture ■ Application Server Support

7.1.1 About the Identity Store Service

The identity store service enables you to query the identity store for user and role group information. By default, a service instance supports querying against a single LDAP identity store. You can configure the service to support a virtualized identity store which queries multiple LDAP identity stores. This feature, known as identity virtualization, is described in Section 7.3, Configuring the Identity Store Service .

7.1.2 Service Architecture

Figure 7–1 shows the architecture of the identity store service. Depending on the configuration, the service can support: ■ one or more LDAP servers ■ an XML file as the identity store. When the service is configured for LDAP, it queries a single LDAP store by default. You can also configure the service to query multiple LDAP stores.