How to integrate OID Oracle Identity Management Infrastructure with Other directories and Applications

(LESSON 24)

Oracle provides two types of Directory Integration services.

-         Synchronization: This service keeps other directories consistent with the central OID server in an enterprise with multiple LDAP directories.

-         Provisioning: This service sends notifications to the LDAP-enabled applications to reflect changes made to a user’s status or group information.

The difference between provisioning and synchronization are:

-         Synchronization happens at the application deployment time but provisioning happens at the application design time.

-         Synchronization has maintenance effort of high but provisioning need only a minimal effort, only at installation time.

-         Synchronization has two-way communication direction but provisioning has only one-way and that is from OID to applications.

-         Synchronization handles any data in a directory but provisioning only restricted to provisioned users and groups.

You can create different integration profiles by using the ODM, DIP assistant, and provisioning subscription tool.

You may use the OIDCTL and ODISRV tools to start your integration services. The Integration server performs the following tasks;

-         Schedulers connectors

-         Data import and export

-         Mapping

How to start and stop the Integration server by using oidctl command:

To start the Integration server:

$ cd $ORACLE_HOME/bin

$ oidctl connect=your-instance server=odisrv instance=2 configset=1 flags=”-p 3060” start

To stop the Integration server:

$ oidctl connect=your-instance server=odisrv instance=2 configset=1 flags=”-p 3060” stop

How to view Integration server details

Use the Oracle Enterprise Manager Application Server Control to view your Integration server details.

Open Enterprise Manager Application Server Control by using the following URL:

http://<hostname.domain>:1810 or 1156 etc.

Type the above URL in your address bar. In the login dialog box, enter username orcladmin with its password and then click the “OK” button.

When the “farm” page with standalone instances were displayed, click on the infrastructure instance. In the “System Components” page, click on the “Internet Directory” or “OID” instance link.

Now, you should be able to click on the “Directory Integration” link on the “Status” section. The “Directory Integration Profiles” page will be displayed.