Approval Process Upgrade Overview

Upgrading Oracle Identity Manager Environment 13-7

13.1.13 Signature-Based Login

In Oracle Identity Manager 9.1, connecting remotely to Oracle Identity Manager and execute Oracle Identity Manager APIs was done by signature-based login. Oracle Identity Manager 11g supports signature-based login. However, Oracle recommends that you use the username-password approach for logging into Oracle Identity Manager. To do this in a secure manner, use the Credential Store Framework. For more information, see Oracle Fusion Middleware Application Security Guide.

13.1.14 Application Programming Interface

Oracle provides a network-aware, Java-based application programming interface API that exposes services available in Oracle Identity Manager. This API is based on Plain Old Java Objects POJO and handles the plumbing required to interact with Oracle Identity Manager. This API can be used for building clients for Oracle Identity Manager and for integrating third-party products with the Oracle Identity Manager platform. In Oracle Identity Manager 11g, some of the legacy APIs have been rewritten to use the new architecture. The corresponding utility services or interface classes have been changed. Table 13–4 provides a high-level mapping between the legacy and new interfaces. User Group Pre Update Pre Processing MODIFY User Group Post Update Post Processing MODIFY User Group Pre Delete Pre Processing DELETE User Group Post Delete Post Processing DELETE Table 13–4 API Mapping Legacy Service New Service Thor.API.Operations.tcUserOperatio nsIntf oracle.iam.identity.usermgmt.api.U serManager Thor.API.Operations.tcGroupOperati onsIntf oracle.iam.identity.rolemgmt.api.R oleManager Thor.API.Operations.tcOrganization OperationsIntf oracle.iam.identity.orgmgmt.api.Or ganizationManager Thor.API.Operations.tcRequestOpera tionsIntf oracle.iam.request.api.RequestServ ice Thor.API.Operations.tcSchedulerOperationsIn tf oracle.iam.scheduler.api.Scheduler Service Thor.API.Operations.tcEmailOperati onsIntf oracle.iam.notification.api.Notifi cationService Note: You must manually implement and compile the APIs after you upgrade to Oracle Identity Manager 11g. For more information, see Using APIs in the Oracle Fusion Middleware Developers Guide for Oracle Identity Manager. Table 13–3 Cont. Event Handlers Mapping Form Name Handler Stage Action 13-8 Oracle Fusion Middleware Upgrade Guide for Oracle Identity Management

13.1.15 Task Assignments

In Oracle Identity Manager 11g, some of the task assignments have been rewritten to use new architecture. Table 13–5 provides a high-level mapping between the legacy and new assignment types. After upgrading to Oracle Identity Manager 11g, you need to manually reimplement task assignment logic in SOA composite. After upgrading to Oracle Identity Manager 11g: ■ Process tasks assigned to Group User With Highest Priority will be modified and assigned to Group User With Least Load. ■ Process tasks assigned to Object Authorizer User With Highest Priority will be modified and assigned to Object Authorizer User With Least Load.

13.1.16 After You Upgrade

After upgrading to Oracle Identity Manager 11g: ■ Event handlers associated with User data object has been removed from Oracle Identity Manager 11g: ■ tcUSRcheckACT ■ tcUSRTriggerUserProcesses ■ tcUSRCheckUsrOrgChange ■ tcUSRautoGroupMembership ■ tcUSRevaluatePolicies ■ The logged-in user can not create a user in other organizations but can see all the organizations. ■ Users cannot modify manager or organization attributes that is created by other organization. ■ All approval tasks for new requests will be assigned to System Administrator xelsysadm. Table 13–5 Assignment Types Assignment Types in Oracle Identity Manager 9.1 Assignment Types in Oracle Identity Manager 11g Object Administrator User with Least Load Object Administrator User with Least Load Object Administrator Object Administrator Object Authorizer User with Highest Priority This will be assigned to role Object Authorizer Group User With Highest Priority This will assigned to role Object Authorizer User with Least Load Object Authorizer User with Least Load Requestors Manager Requestors Manager Request Target Users Manager Beneficiary Manager Approval Group User with Least Load Group User with Least Load Group This will be assigned to role