Oracle Identity Management Installation Options

Introduction to Oracle Identity Management Integration 1-3 data, each directory must be informed of changes made in the other connected directories. Synchronization ensures that changes to directory information—including, but not limited to data updated through provisioning—is kept consistent. Whenever you decide to connect a third-party directory to Oracle Internet Directory, you create a synchronization profile for that specific directory. This profile specifies the format and content of the data to be synchronized between Oracle Internet Directory and the connected directory. To create a synchronization profile, you can use the manageSyncProfiles utility or Oracle Enterprise Manager Fusion Middleware Control.

1.3.2 Provisioning

Provisioning enables you to ensure that an application is notified of directory changes to, for example, user or group information. Such changes can affect whether the application allows a user access to its processes and determines which resources can be used. Use provisioning when you are designing or installing an application has the following requirements: ■ Does not maintain a directory ■ Is LDAP-enabled ■ Can and should allow only authorized users to access its resources When you install an application that you want to provision, you must create a provisioning integration profile for it by using the oidprovtool utility.

1.3.3 How Synchronization and Provisioning Differ

Synchronization and provisioning have important operational differences, as described in Table 1–1 . See Also: Part III, Synchronization Using Oracle Directory Integration Platform See Also: Part IV, Provisioning with the Oracle Directory Integration Platform Table 1–1 Directory Synchronization and Provisioning Integration Distinctions Consideration Directory Synchronization Provisioning Integration The time for action Application deployment time. Directory synchronization is for connected directories requiring synchronization with Oracle Internet Directory. Application design time. Provisioning integration is for application designers developing LDAP-enabled applications. Communication direction Either one-way or two-way—that is, either from Oracle Internet Directory to connected directories, the reverse, or both Either one-way or two-way—that is, either from Oracle Internet Directory to applications, the reverse, or both Type of data Any data in a directory Restricted to provisioned users and groups