Security and Trust - Trusted CAs and CRLs

5-70 Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation

5.11 Configuring Federations

See Section 4.3, Managing Identity Federations .

5.12 Configuring Identities

See Section 4.4, Configuring Identities .

5.13 Managing Data Stores

This section explains how to configure and manage the different data stores used by Oracle Identity Federation: ■ Manage the User Data Store ■ Manage the Federation Data Store ■ Manage the Session Data Store and the Message Data Store ■ Manage the Configuration Data Store ■ Create the Oracle Identity Federation Schema Using RCU

5.13.1 Manage the User Data Store

This section explains how to configure user data stores for Oracle Identity Federation: ■ Configuring Oracle Identity Federation for RDBMS User Data Store ■ Configuring Oracle Identity Federation for an LDAP User Data Store ■ Configuring Oracle Virtual Directory as User Data Store ■ Configuring a Redundancy User Data Store ■ Configuring No User Data Store

5.13.1.1 Configuring Oracle Identity Federation for RDBMS User Data Store

In order for Oracle Identity Federation to use a database as the user data store, this database must have a table, referred to as the user table, that contains user information. The user table must have a column that contains the User ID with which the user will be identified in Oracle Identity Federation. The User ID must always be present and must be unique across all users. If Attribute Sharing or User Mapping with Attributes will be used, columns for these attributes must also be present in the user table. To configure Oracle Identity Federation to use an RDBMS user data store: 1. Create a JDBC Data Source 2. Modify Oracle Identity Federation Data Store Configuration Create a JDBC Data Source Follow these steps to create a JDBC data source: 1. Log in to the WebLogic Administration Console. See Also: Getting Started with Oracle WebLogic Server Administration Console in the Oracle Fusion Middleware Administrators Guide. Configuring Oracle Identity Federation 5-71

2. Navigate to Services, then JDBC, then Data Sources.

3. Click New.

4. Choose a name and a JNDI name for the new data source, and enter the database information. Choose the WebLogic managed server where Oracle Identity Federation is deployed as the target of this data source. Configure an RDBMS User Data Store Follow these steps to configure an RDBMS user data store:

1. Log in to Fusion Middleware Control and navigate to the Oracle Identity

Federation instance

2. Navigate to Administration, then Data Stores.

3. In the User Data Store section, click Edit.

4. Select Database from the Repository Type dropdown list.

5. Enter the following properties:

■ JNDI Name: The JNDI of the data source created in the WebLogic Administration Console. ■ Login Table: The name of the user table. ■ User ID Attribute: The name of the User ID column in the user table. ■ User Description Attribute: The name of the User Description column in the user table.

6. Click OK.

Example Consider the following user table, named UserInformation, and suppose the JNDI name of the data source is MyCorpUserDS. Oracle Identity Federation configuration for the user data store might look like this: Username FirstName LastName FullName Email alice Alice Smith Alice Smith alicemycorp.com bob Robert Jones Robert Jones bobmycorp.com charlie Charles Johnson Charles Johnson charliemycorp.co m david David Jones David Jones davidmycorp.co m robert Robert Williams Robert Williams williamsmycorp.c om 5-72 Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation ■ JNDI Name : MyCorpUserDS ■ Login Table : UserInformation ■ User ID Attribute : Username ■ User Description Attribute : Full Name Alternatively, the configuration could be: ■ JNDI Name : MyCorpUserDS ■ Login Table : UserInformation ■ User ID Attribute : Username ■ User Description Attribute : Username

5.13.1.2 Configuring Oracle Identity Federation for an LDAP User Data Store

Follow these steps to configure an LDAP user data store: 1. Log in to Fusion Middleware Control and navigate to the Oracle Identity Federation instance.

2. Navigate to Administration, then Data Stores.

3. In the User Data Store section, click Edit.

4. Select LDAP Directory from the Repository Type dropdown list.

The fields to set up this configuration are as follows: ■ Connection URL - This is the LDAP URL to connect to the server. For example, ldap:ldap.oif.com:389. ■ Bind DN - This is the administrator account DN to use to connect to the LDAP server. For example, cn=orcladmin ■ Password - Administrator password to connect to LDAP server ■ UserID attribute - This is the LDAP attribute used to identify user during authentication, for example uid. Here are examples of the User ID attribute for different types of directory servers: – Oracle Internet Directory: uid – Sun Java System Directory Server: uid – Microsoft Active Directory: sAMAccountName