Disabling Auditing Enabling Auditing

Auditing 6-11 1. Set the value of User profile audit data collection level XL.UserProfileAuditDataCollection system property to None, as described in Modifying System Properties in the Oracle Fusion Middleware Administrators Guide for Oracle Identity Manager. 2. Disable the Issue Audit Messages Task scheduled job as described in Disabling and Enabling Jobs in the Oracle Fusion Middleware Administrators Guide for Oracle Identity Manager. If pending audit changes are required to be recorded in the audit tables, then disable the scheduled task after all the pending audit changes are processed.

6.5.2 Enabling Auditing

To enable auditing in Oracle Identity Manager: 1. Set the value of User profile audit data collection level XL.UserProfileAuditDataCollection system property to one of the levels defined in Audit Levels on page 6-3. See Modifying System Properties in the Oracle Fusion Middleware Administrators Guide for Oracle Identity Manager for information about modifying the values of system properties. 2. Enable the Issue Audit Messages Task scheduled job as described in Disabling and Enabling Jobs in the Oracle Fusion Middleware Administrators Guide for Oracle Identity Manager. 3. Generate snapshots by running the GenerateSnapshot script as described in Generating an Audit Snapshot in the Oracle Fusion Middleware Developers Guide for Oracle Identity Manager. The following is the command-line usage of the GenerateSnapshot script: .GenerateSnapshot.sh -username OIM_ADMIN_USERNAME -numOfThreads 8 -serverURL t3:WLS_SERVER:PORT -ctxFactory weblogic.jndi.WLInitialContextFactory [-inputFile fileWithUserKeys] Here: ■ OIM_ADMIN_USERNAME is the Oracle Identity Manager administrator username. ■ WLS_SERVER is the Oracle WebLogic Server name. ■ PORT is the port number of the WebLogic Server. 6-12 Oracle Fusion Middleware Users Guide for Oracle Identity Manager Part II Part II Oracle Identity Manager Self Service This part describes the various self service tasks that you can perform in Oracle Identity Manager. It contains the following chapters: ■ Chapter 7, Configuring and Using Self-Service Registration ■ Chapter 8, Managing Profile ■ Chapter 9, Managing Tasks ■ Chapter 10, Managing Requests 7 Configuring and Using Self-Service Registration 7-1 7 Configuring and Using Self-Service Registration This chapter describes the tasks that you can perform using self-service registration and how to configure auto-approval for self-registration in the following sections: ■ Using Self-Service Registration ■ Configuring Auto-Approval for Self-Registration

7.1 Using Self-Service Registration

The login page provides the ability to log in, and provides a starting point for all unauthenticated operations. This page is displayed when you access Oracle Identity Manager Administrative and User Console without authenticating either natively to Oracle Identity Manager or by using SSO. Typical tasks you can perform before logging in to Oracle Identity Manager Administrative and User Console include: ■ Logging In to Oracle Identity Manager Administrative and User Console ■ Submitting Registration Requests ■ Tracking Registration Requests

7.1.1 Logging In to Oracle Identity Manager Administrative and User Console

To login to Oracle Identity Manager Administrative and User Console:

1. Go to Oracle Identity Manager Administrative and User Console login page.

2. In the User ID field, enter your username.

3. In the Password field, enter your password.

Note: ■ If Oracle Identity Manager is configured to support native authentication, then the login link redirects you to a form in which you can authenticate by using your Oracle Identity Manager username and password. ■ If Oracle Identity Manager is configured to support Single Sign-On SSO, then the login link redirects you to the SSO application login page. 7-2 Oracle Fusion Middleware Users Guide for Oracle Identity Manager

4. Click Sign In. If you are successfully authenticated, then you are logged in and

directed to the main page in the authenticated context. The login attempt might generate an error because of the following reasons: ■ Incorrect credentials: If the user name and password entered are not correct, then an error message is displayed. This may be because of the following reasons: Username does not exist Password is incorrect Username exists but the user is deleted ■ Locked account: If the account is locked, then you are not allowed to log in even if the credentials are correct. On trying to login with a locked account, the Invalid sign in message is displayed. Contact Oracle HelpDesk if your account is locked. Note: ■ The system configuration property Maximum Number of Login Attempts provides the number of times authentication can fail before your OIM account is locked. By default this value is 10. The login backend must keep a counter of the number of times a failed login attempt occurs on an account. When login fails, the backend increments the count. For a successful authentication while the account is not locked, the counter is reset to 0. If the counter exceeds the value of the Login Failures Allowed before Lockout configuration property, then the account is locked. In addition, the value of the Account Locked On attribute is set to current timestamp, and the value of the Manually Locked attribute is set to No. ■ If the configuration property is set to 0 or a negative number, then the account is not locked irrespective of how many login attempts fail. Configuring and Using Self-Service Registration 7-3