Summary of the Upgrade Procedure

6-42 Oracle Fusion Middleware Administrators Guide for Oracle Identity Manager 1. Read through the upgrade procedure. This will let you make an estimate of the time for which the connector and, therefore, the target system might be unavailable to Oracle Identity Manager users. You can also determine if you have the Oracle Identity Manager expertise required to complete all the upgrade and post-upgrade steps. 2. Make a note of associations between objects of the source connector and other Oracle Identity Manager objects. For example, make a note of associations between resource objects and access policies. 3. If required, create the connector XML file for a clone of the source connector. If the object names in the target connector are different from object names in the source connector, then it is recommended that you first create the connector XML file for the clone connector. Step 1: Create the connector XML file for the cloned connector on page 6-22 describes the procedure. While performing the procedure, specify object names that are the same as object names in the target connector. This will help avoid the need for renaming connector objects after you upgrade the connector. 4. Upgrading the source connector to target connector on staging server. The XML file contains details of changes to be made to the connector objects of the source connector so that they are converted into the connector objects of the target connector. These changes are applied automatically during the upgrade process. To upgrade the source connector: a. Back up the Oracle Identity Manager database on the production server. b. Perform the steps described in Preupgrade Procedure on page 6-43 c. Perform the steps described in Silent Mode Upgrade in Staging and Production Environment on page 6-55 The resulting transformed XML can be generated and used in production server. 5. Use the silent delta XML for connector upgrade. To use the delta XML file: a. Restore the production database on the staging server. b. Perform the steps described in Preupgrade Procedure on page 6-43 c. Perform the steps described in Silent Mode Upgrade in Staging and Production Environment on page 6-55 d. Perform the steps described in Postupgrade Procedure on page 6-58 6. Verify that the source connector on the production server is the same as the source connector on the staging server. If there are differences in the source connector on the staging server and the production server, then the delta XML file is not correctly imported on the production server. 7. Import the delta XML file on the production server. Note: The procedure explained in this chapter is based on the best practice in which you first perform the upgrade in a test development environment. All functional use cases need to be tested before applying the upgrade in production server. Wizard mode upgrade should not be used in production, only silent mode need to be used in production server. Managing Connector Lifecycle 6-43 After you verify that the upgraded target connector is working as expected on the staging server, perform the following steps: a. Perform the steps described in Preupgrade Procedure on page 6-43 b. Perform the steps described in Silent Mode Upgrade in Staging and Production Environment on page 6-55 c. Perform the steps described in Postupgrade Procedure on page 6-58

6.8.5 Procedure to Upgrade a Connector

The following sections discuss the procedure to upgrade a connector: ■ Preupgrade Procedure on page 6-43 ■ Upgrade Procedure on page 6-43 ■ Postupgrade Procedure on page 6-58

6.8.5.1 Preupgrade Procedure

Before you begin the upgrade procedure, ensure that the following prerequisites are addressed: ■ Read through the upgrade procedure documented in this chapter. ■ Note down customizations made in the connector objects on source connector. ■ Call a Java API to handle workflows that are in progress. You need to make sure that there are no requests in pending state for the resource objects that are part of this connector. You also need to complete all the requests before going for connector upgrade. Requests can be closed if they are in a closable state. All the requests associated with the connector resource objects should in one of the following states before starting the upgrade process. – Request Completed – Request Closed – Request Withdrawn – Request Failed – Template Approval Rejected – Request Approval Rejected – Operation Approval Rejected ■ If required, create the connector XML file for a clone of the source connector. ■ Disable all the scheduled tasks.

6.8.5.2 Upgrade Procedure

Upgrading connectors is a two-stage procedure: ■ Wizard Mode Upgrade in Staging Environment ■ Silent Mode Upgrade in Staging and Production Environment 6-44 Oracle Fusion Middleware Administrators Guide for Oracle Identity Manager Wizard Mode Upgrade in Staging Environment To perform the wizard mode upgrade on the staging server: 1. Create a backup of the Oracle Identity Manager database. 2. Create Oracle Identity Manager metadata MDS backup. See MDS Utilities and User Modifiable Metadata Files in the Oracle Fusion Middleware Developers Guide for Oracle Identity Manager for information about the utilities that you can use to modify Oracle Identity Manager metadata. 3. Run the connector preupgrade utility. A validation script is provided with Oracle Identity Manager. This script performs the following functions: ■ Determines whether the connector that you want to upgrade has been defined in Oracle Identity Manager In other words, the script checks whether the connector XML stored in the database when the connector was installeddefined is consistent with the connector object definitions in the database. Apart from checking the consistency of the connector XML, it also checks whether the Connector XML is present in Oracle Identity Manager Database or not. If it is not present, then it displays the corresponding message to define the connector before proceeding with upgrade. Refer the Defining Connectors on page 6-11 to perform the procedure to define a connector. ■ Identifies the Oracle Identity Manager scheduled tasks that are currently running. You must disable all scheduled tasks that belong to the source connector before you proceed with the upgrade procedure. In addition, it is recommended to disable all other scheduled tasks before proceeding with the upgrade procedure. ■ Identifies the Attestation tasks associated with the resource object of the connector. You must complete all the attestation tasks that belong to the source connector before you proceed with the upgrade procedure. ■ Identifies all the pending requests associated with the resource objects of the connectors. You must either close or complete all the pending requests that belong to the source connector before you proceed with the upgrade procedure. To run the validation script: a. Ensure that Oracle Identity Manager is running. b. In a command window, change to the OIM_HOMEserverbin directory. c. Run the script as follows: For Unix: sh ConnectorPreUpgradeUtil.sh Note: You need to perform preupgrade and post upgrade steps while performing wizard mode upgrade.