Creating and Importing New Rules

Extending the Domain with Oracle Identity Manager 14-23

5. Click Default Policy for Username Generation.

6. In the Value field, update the entry from

oracle.iam.identity.usermgmt.impl.plugins.DefaultComboPolicy to oracle.iam.identity.usermgmt.impl.plugins.FirstNameLastNamePo licyForAD.

7. Click Save.

14.15 Update Oracle Identity Manager JMS Queues

Update Oracle Identity Manager JMS queues as follows: 1. Log in to the WebLogic console as the administrative user.

2. Select Services - Messaging - JMS Modules from the Domain Structure menu.

3. Click OIMJMSModule.

4. Click Lock Edit.

5. For each of the queues, click the queue then click the Delivery Failure tab and

change Redelivery Limit value from -1 to 1, then click Save. 6. Make sure you have performed Steps 4 and 5 for all the queues under OIMJMSModule .

7. Click Activate Changes.

8. Restart Oracle Identity Manager servers as described in Section 20.1, Starting and Stopping Oracle Identity Management Components.

14.16 Tuning Oracle Platform Security

For information about tuning OPSS, see the Oracle Fusion Middleware Security Performance Tuning chapter in the Oracle Fusion Middleware Performance and Tuning Guide.

14.17 Provisioning Users to the Enterprise Identity Store in a Multidirectory Scenario

This section provides details for configuring Oracle Identity Manager to provision users in the enterprise identity store. It contains the following topics: ■ Section 14.17.1, Creating and Importing New Rules. ■ Section 14.17.2, Updating IT Resource for Oracle Identity Manager Integration. ■ Section 14.17.3, Updating the Incremental Reconciliation Changelog Number. By default, the users are provisioned in the Enterprise Identity Store. You can also configure the users to be created in the shadow directory by configuring the Oracle Identity Manager rules appropriately.

14.17.1 Creating and Importing New Rules

1. Create LDAPContainerRules.xml with the new rules that you want to import into LDAP. This file contains the rules for user creation and role creation and corresponding containers in LDAP where they should be created. For the current split profile environment, the rules are: 14-24 Oracle Fusion Middleware Enterprise Deployment Guide for Oracle Identity Management ?xml version=1.0 encoding=UTF-8? container-rules user rule expressionCountry=INexpression containercn=Users,dc=idm,dc=sun,dc=comcontainer rule rule expressionDefaultexpression containercn=Users,dc=mycompany,dc=comcontainer descriptionUserContainerdescription rule user role rule expressionDefaultexpression containercn=Groups,dc=mycompany,dc=comcontainer descriptionRoleContainerdescription rule role container-rules 2. Import this configuration to MDS. Modify the weblogic.properties file under OIM_ORACLE_HOMEbin as follows. wls_servername=OIM server name For example, WLS_OIM1. application_name=OIMMetadata metadata_from_loc = u01tmp metadata_files=dbLDAPContainerRules.xml 3. Set the OIM_ORACLE_HOME environment variable to the appropriate directory. 4. Run the following command to import the configuration file into MDS. The file weblogicImportMetadata.sh is located under OIM_ORACLE_HOMEbin sh .weblogicImportMetadata.sh Please enter your username [weblogic] :weblogic Please enter your password [weblogic] :Weblogic user password Please enter your server URL [t3:localhost:7001 :t3:ADMINVHN.mycompany.com:7001 5. To activate the new rules, restart the Oracle Identity Manager Servers wls_oim1 and wls_oim2 as described in Section 20.1, Starting and Stopping Oracle Identity Management Components.

14.17.2 Updating IT Resource for Oracle Identity Manager Integration