Synchronization Synchronization, Provisioning, and the Differences Between Them

Introduction to Oracle Identity Management Integration 1-3 data, each directory must be informed of changes made in the other connected directories. Synchronization ensures that changes to directory information—including, but not limited to data updated through provisioning—is kept consistent. Whenever you decide to connect a third-party directory to Oracle Internet Directory, you create a synchronization profile for that specific directory. This profile specifies the format and content of the data to be synchronized between Oracle Internet Directory and the connected directory. To create a synchronization profile, you can use the manageSyncProfiles utility or Oracle Enterprise Manager Fusion Middleware Control.

1.3.2 Provisioning

Provisioning enables you to ensure that an application is notified of directory changes to, for example, user or group information. Such changes can affect whether the application allows a user access to its processes and determines which resources can be used. Use provisioning when you are designing or installing an application has the following requirements: ■ Does not maintain a directory ■ Is LDAP-enabled ■ Can and should allow only authorized users to access its resources When you install an application that you want to provision, you must create a provisioning integration profile for it by using the oidprovtool utility.

1.3.3 How Synchronization and Provisioning Differ

Synchronization and provisioning have important operational differences, as described in Table 1–1 . See Also: Part III, Synchronization Using Oracle Directory Integration Platform See Also: Part IV, Provisioning with the Oracle Directory Integration Platform Table 1–1 Directory Synchronization and Provisioning Integration Distinctions Consideration Directory Synchronization Provisioning Integration The time for action Application deployment time. Directory synchronization is for connected directories requiring synchronization with Oracle Internet Directory. Application design time. Provisioning integration is for application designers developing LDAP-enabled applications. Communication direction Either one-way or two-way—that is, either from Oracle Internet Directory to connected directories, the reverse, or both Either one-way or two-way—that is, either from Oracle Internet Directory to applications, the reverse, or both Type of data Any data in a directory Restricted to provisioned users and groups 1-4 Oracle Fusion Middleware Administrators Guide for Oracle Directory Integration Platform

1.4 Components Involved in Oracle Identity Management Integration

This section describes the components involved in Oracle Identity Management integration. It contains these topics: ■ Oracle Internet Directory ■ Oracle Directory Integration Platform ■ Oracle Application Server Single Sign-On

1.4.1 Oracle Internet Directory

Oracle Internet Directory is the repository in which Oracle components and third-party applications store and access user identities and credentials. It uses the Oracle directory server to authenticate users by comparing the credentials entered by users with the credentials stored in Oracle Internet Directory. When credentials are stored in a third-party directory and not in Oracle Internet Directory, users can still be authenticated. In this case, Oracle Internet Directory uses an external authentication plug-in that authenticates users against the third-party directory server.

1.4.2 Oracle Directory Integration Platform

The Oracle Directory Integration Platform is a J2EE application that enables you to synchronize data between different repositories and Oracle Internet Directory. Oracle Directory Integration Platform includes services and interfaces that allow you to develop synchronization solutions with other enterprise repositories. It can also be used to provide Oracle Internet Directory interoperability with third party metadirectory solutions. Figure 1–1 shows an example of an Oracle Directory Integration Platform environment: Examples Oracle Human Resources Oracle Directory Server Enterprise Edition Sun Java System Directory Server Microsoft Active Directory Novell eDirectory OpenLDAP IBM Tivoli Directory Server Oracle Portal Table 1–1 Cont. Directory Synchronization and Provisioning Integration Distinctions