Wednesday, 23 March 2011

About Oracle Identity manager

1. IDM(Identity management)

 Identity management(User Provisioning) is responsible for users life-cycle management.It deals with the creation of users,deletion of users,creation of groups.

1.1. Connector

 The connector has basically has 2 main functions.

  (i)Provisioning
  (ii)Reconciliation

  • Provisioning is responsible for sending the information from IDM to the respectable target system

  • Reconciliation is responsible for receiving information from target system and store it in IDM

1.2. Adaptor:

There are five types of adapters you can create in OIM.

1) Process task adapter:- Which is used with process task.Which you will create with process definition. (e.g For Create User)

2) Task assignment adapter:- Which is used to assign of a process task to a user or group.

3)Rule generator:- which is basically used with Form's field.

4) Pre-populate adapter:- Which is basically rule generator adapter which can added
to a user-created form field. Which basically populate user field with using adapter but do not save that data into OIM database.

5) Entity adapter:- which is basically created for form field.This adapter will executes on criteria like pre-insert,pre-update, pre-delete, post-insert, post-update, or post-delete. When any of this criteria fullfilled then this adapter will be called and will perform operation on perticular field and saves data into OIM database.2. Archietucture of OIM:

2.1. Three Tiers of Oracle Identity Manager
IDM ARCHITECTURE

2.1.1. Tier 1: Client

The first tier provides two interfaces, the Design Console (which is discussed in this guide) and the Administrative and User Console. Users log in to Oracle Identity Manager through the Administrative and User Console, which provides the Oracle Identity Manager server with the user's login credentials. With the Administrative and User Console, users search for, edit, and delete information in the Oracle Identity Manager database.

2.1.2. Tier 2: Application Server
The second tier implements the business logic in Java Data Objects. These objects are managed by the supported J2EE application server such as JBoss Application Server, BEA WebLogic Server, IBM WebSphere Application Server, and Oracle Containers for J2EE. The Java Data Objects implement the business logic of the Oracle Identity Manager application, however, they are not exposed to any methods from other applications. To access the business functionality of Oracle Identity Manager, you can use the application programming interface (API) layer in the J2EE infrastructure, which provides the lookup and communication mechanism.
The J2EE-compliant application server that is supported by Oracle Identity Manager is the only component that interacts with the database. It is responsible for the following functions:
¡  Logging in to Oracle Identity Manager: The application server connects the Oracle Identity Manager client to the database.
¡  Handling client requests: The application server processes requests from the Oracle Identity Manager client and sends information from the requests to the database. The server also delivers responses from the database to the client.
¡  Scalability (connection pooling or sharing): The application server supports single application or multiple application usage in a manner that is transparent to Oracle Identity Manager clients. Connection pooling improves database connectivity performance and dynamically resizes the connection pool by optimizing resources for usage scalability.
¡  Securing system-level data (metadata): Oracle Identity Manager prevents unauthorized access by users who might accidentally delete or modify system-level information (system metadata). If an unauthorized user attempts to add, modify, or delete system-level information, the following message is displayed:The security level for this data item indicates that it cannot be deleted or updated.

2.1.3. Tier 3: Database

The third tier is the database. This is the layer that is responsible for managing the storage of data within Oracle Identity Manager.







No comments:

Post a Comment