Provisioning How Synchronization and Provisioning Differ

1-4 Oracle Fusion Middleware Administrators Guide for Oracle Directory Integration Platform

1.4 Components Involved in Oracle Identity Management Integration

This section describes the components involved in Oracle Identity Management integration. It contains these topics: ■ Oracle Internet Directory ■ Oracle Directory Integration Platform ■ Oracle Application Server Single Sign-On

1.4.1 Oracle Internet Directory

Oracle Internet Directory is the repository in which Oracle components and third-party applications store and access user identities and credentials. It uses the Oracle directory server to authenticate users by comparing the credentials entered by users with the credentials stored in Oracle Internet Directory. When credentials are stored in a third-party directory and not in Oracle Internet Directory, users can still be authenticated. In this case, Oracle Internet Directory uses an external authentication plug-in that authenticates users against the third-party directory server.

1.4.2 Oracle Directory Integration Platform

The Oracle Directory Integration Platform is a J2EE application that enables you to synchronize data between different repositories and Oracle Internet Directory. Oracle Directory Integration Platform includes services and interfaces that allow you to develop synchronization solutions with other enterprise repositories. It can also be used to provide Oracle Internet Directory interoperability with third party metadirectory solutions. Figure 1–1 shows an example of an Oracle Directory Integration Platform environment: Examples Oracle Human Resources Oracle Directory Server Enterprise Edition Sun Java System Directory Server Microsoft Active Directory Novell eDirectory OpenLDAP IBM Tivoli Directory Server Oracle Portal Table 1–1 Cont. Directory Synchronization and Provisioning Integration Distinctions Consideration Directory Synchronization Provisioning Integration Introduction to Oracle Identity Management Integration 1-5 Figure 1–1 Example of an Oracle Directory Integration Platform Environment In the example in Figure 1–1 , Oracle Internet Directory is synchronized with connected directories using Oracle Directory Integration Platform’s Synchronization Enterprise JavaBeans EJB and the Quartz Scheduler. Similarly, changes in Oracle Internet Directory are sent to various repositories using Oracle Directory Integration Platform’s Provisioning Enterprise JavaBeans EJB and the Quartz Scheduler.

1.4.2.1 Understanding the Oracle Directory Integration Platform Server

The Oracle Directory Integration Platform Server performs the following services: ■ Oracle Directory Integration Platform Synchronization Service: – Scheduling—Processing a synchronization profile based on a predefined schedule – Mapping—Executing rules for converting data between connected directories and Oracle Internet Directory – Data propagation—Exchanging data with connected directories by using a connector – Error handling ■ Oracle Directory Integration Platform Provisioning Service: – Scheduling—Processing a provisioning profile based on a predefined schedule – Event Notification—Notifying an application of a relevant change to the user or group data stored in Oracle Internet Directory – Error handling Administration Interface Application Server Oracle Directory Integration Platform Quartz Scheduler Oracle Directory Integration Platform MBeans Synchronization and Provisioning Enterprise JavaBeans EJB Connected Repositories Oracle Internet Directory Database Command-line Tools Oracle Enterprise Manager Fusion Middleware Control Provisioning Management and Configuration oidprovtool Applications Server Management and Profile Configuration WebLogic Scripting Tool WLST Interpreter