sion

Oracle Fusion Middleware : Oracle Identity and Access Management Suite 10g/11gR1/11gR2PS1,PS2,PS3 : OIM | OAM,OAAM,OIF | OID, OVD, DIP | OUD/ ODSEE | Microsft AD | OpenLDAP | ADF | EBS R12 | OECMCCR4 | Business Intelleigence - Bi Publisher | Banking | Demo Applications | Core Java | SQL | PLSQL | Web services | Weblogic | Tomcat | JBoss | OHS | WebGate | WebCenter | In any Queries please Contact Me : info@oratechsoft.com

Search This Blog

Friday, 3 July 2015

Lab 16 :: Jdeveloper Installation & Configuration




Click SetUp  file



Click Next



Click Next



Click Next



Click Next



Click Next



Click Next


  Click  Done !!


Update the ADF and SOA Composite and Configure to Weblogic Server



Thanks & Regards
----------------------
Lakshmi Prasad Reddy Nandyala
Email : nandyala@lakshmiprasad.co.in





Lab 16 :: Custom Event Handler

Coming soon 

Lab 15 :: Custom Plug-in Development

Coming soon  

Lab 14 :: Custom Connectors For Sample Application

Comming Soon 

Lab 13 :: SOA Composites for Provisioning

Comming Soon 

Lab 12 :: SOA WorkFlows for Approval

Coming soon  

Lab 11 :: Access Policies

Coming soon  

Lab 10 :: Webtier Webgate Install and Configure


1.Install Webtier (OHS) - Conponents Installed - OPMN, OHS, Web cache

2.Config - Associate with Weblogic

3.OHS Instance created

4.Start OPMNCTL

5.Install Webgate

6.create Webgate Instance
  cd /odrive/oracle/Middleware/Oracle_OAMWebGate1/webgate/ohs/tools/deployWebGate/
  ./deployWebGateInstance.sh -w /odrive/oracle/Middleware/Oracle_WT1/instances/instance1/config/OHS/ohs1 -oh
   /odrive/oracle/Middleware/Oracle_OAMWebGate1 where -w flag indicates the OHS instance folder and the -oh indicates the    WebGate Oracle

7. Webgate Configuration and Registration
   cd /odrive/oracle/Middleware/Oracle_OAMWebGate1/webgate/ohs/tools/setup/InstallTools
   ./EditHttpConf -w /odrive/oracle/Middleware/Oracle_WT1/instances/instance1/config/OHS/ohs1 -oh
/odrive/oracle/Middleware/Oracle_OAMWebGate1 -o webgate.conf
Note: This command will modify the httpd.conf file to include the directive that points to the webgate.conf file. A backup of the original
httpd.conf.ORIG is created

8. Edit  XML file register to OAM using OAMREG.sh
Type cd /odrive/oracle/Middleware/Oracle_IDM1/oam/server/rreg/input
  Type vi OAM11GRequest.xml

  ./bin/oamreg.sh inband input/OAM11GRequest.xml
Note The above procedure will create the artifacts in the /odrive/oracle/Middleware/Oracle_IDM1/oam/server/rreg/output/RREG_OHSOAM11G
namely ObAccessClient.xml (storing webgate config parameters) and cwallet.sso (storing the agent key) these files must be copied to the webgate
instance config folder

copy those 2 files to webGate instance




This post covers steps to install Microsoft Active Directory Application Mode (ADAM). I am going to use this ADAM (Active Directory Application Mode) instance as directory store for Oracle Access Manager’s  (OAM) Policy and Configuration data.

AD - Active Directory
ADAM – Active Directory Application Mode
ADP – Application Directory Partition
OAM – Oracle Access Manager

Other supported directory store for Oracle Access Manager are -
i) Microsoft Active Directory
ii) Oracle Internet Directory
iii)IBM Tivoli

iv) Sun Directory Server

Lab 9 :: OAM & OAAM Installation and Configuration

comming soon 

Lab 8 :: Customize by adding UDF


1.Create Sandbox and activate

2.Open user form and provide the mandatory fields and select the Customize link

3.Webcenter composer opens in customization mode

4.View menu select source option , add the Attribute and confirm the Task flow Edit dialog box

5.Then select the add content option, Add Data component - catalog, select user VO,

6.select input text w/Label, close the Customization mode

7.Customization completed for Create user page, repete the same for Modify, search user pages.

8.Export and publish the sandbox.

9.Import the sandbox into sysadmin console.


10 After sccesuccful import logout from the console and login to verify the changes.    

Lab7 :: Database Provisioning & Reconciliation


1.create DB GTC connecter using Generic connector in sysadmin console

2.mapping is not required for provisioning process

3.Resource and IT resource are created when DB GTC created.

4.Create Application Instance

5.Run Catalog Synchronization Scheduler Job


6.Provision user to DB

Lab 6 :: Flate File Recon


1.Create the Directory structure for Base folder (like Stage) and archive folders(like Archive)
Under c:\Oracle\Stage\Archive

2.Create GTC connecter using Generic connector in sysadmin console

3.Do the mapping between reconciliation staging and OIM attributes

4.Run the scheduler


Lab5 :: OAM Integration with Active Directory


1.Create the Group Administrators , user and assign the user to Administrator group.

2.Log into OAM Console and create new identity store and provide the AD connection details.

3.Set newly created user store as primary store.

4.In Access Manger Setting - Authentication Module - LDAP - Select the Newly created Identity store




Thanks & Regards 
----------------
Name     : Lakshmi Prasada Reddy Nandyala

Contact  : +91-9490059784

Thursday, 2 July 2015

OIM Integration with SOA Composite and Web Services Connector:

As the Webservice Connector is  a Generic Connector, it is wired to specific Target Webservice.The Connector Package will Contain set of Templates and build utility script which will generate OIM Artifacts specific to web service to which we can connect to from the set of template that are available in the Connector.This Utility also capable of generating SOA Composite which is used to wired to the target.

High Level Steps :
1)Build the Connector:
Build the Connector From the Connector Default folder and unzip the Connector where we will see the build scripts  and the  set of templates in Templates folder.

Run the Command build-connector.sh/bat with the  two arguments Long and short Descriptive Code.
eg:build-connector.sh "Long" "Short Descriptive Code"  "CLOUDCRM""CCRM"  like which web service we want to Connect to. Once this is Run Webservice Connector zip is generated.

2)Open the SOA Composite in Jdeveloper: Once the build is finish ,the SOA Composite will be generated in the /connectorDefaultDirectory/WSConnector(folder)/soa/project open it in the Jdeveloper and wire them with the target application webservice.

3)Configure the SOA Composite:  Configure SOA Process and BPEL, specify the partnerlink details for the specific target webservices and invoking the operation on the target ,mapping variables. Assigning the Connector input end point to the input of the target web services operations.

4)Deploy the Composite: Build the project and see there are no compilations error. Deploy the Ready Composite on to the SOA server and trace the deployment progress on the logs.

Test the composite in the EM Console  and test the Webservice.

5)Install the Connector: Install the connector  in the OIM.

6)Create the IT Resource: Create the IT Resource and Configure all the required parameters.

7)Test the User for Provisioning: Provision the Accounts  to the target web service from OIM.

Tuesday, 30 June 2015

Lab4 :: OIM Integration with Active Directory


1.Install Active Directory - DCPROMO
   Configure DNS Server, Add the Active Directory Domain Services Role,
   Install Active Directory Domain Services (DCPROMO)

2.Install Connecter server and restart the services

3.Copy the AD connecter Bundle to Connecter Default Directory in
OIM and if need to change port Number(default : 8759)and add switches

4.Install AD Connector using Manage Connector in sysadmin
console

5.Create IT Resource

6.Create Sanbox and activate, create Application Instace + Form

7.Run Catalog Synchronization Scheduler Job

8.Provision user to AD

select User from OIM --> Accounts --> Request Accounts --> Catlog--> AD Application Instance--> Add to cat --> Chek in --> Load the Org -->User Accounts --> Refresh...( Status :: Provisioned )


9. Reconciliation to OIM from AD



Trusted User Recon from Target Resource AD to OIM :-
========================================================

Before Running Trusted Recon we need to make sure that ITResouce has following configuration:

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
+     Lookup.Configuration.ActiveDirectory.Trusted         +
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Run Scheduler

Note :: it is used Initial Reconciliation to OIM, (org,groups and users and others )


Target User Recon from Target Resource AD to OIM :-
=======================================================

Before Running Target Recon we need to make sure that ITResouce has following configuration:


++++++++++++++++++++++++++++++++++++++
+Lookup.Configuration.ActiveDirectory+
++++++++++++++++++++++++++++++++++++++

Run Scheduler


Note :: It is used if an user already in oim or provisioned user , that time we are using Target Reconciliation. But in this time an user updates visible in only in Process form not in Object form.



----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

1.  install windows server 2008 r2

2. confif DOMAIN Controller (DCPROMO)

3. set static ip address

4. disable firewall

5. down and install Connector server

6. down Active directory conn

7. copy the AD -->ad-->bundle --files

8. past them into installed connector server --IdentityConnector--Connectorserver---(paste)

9.Stop  the services for Connector server

10. Edit the ConnectorServer.exe.conf the following

<swithes>
<ad name="ActiveDirectorySwitch" value="4" />
</switches>

 11. save it

12. start the Connector services

13. copy the AD (parent folder)--->AD(child folder)

15. paste them into c:\oracle\Middleware\Oracle_IDM1\server\DefaultConnector (Paste here AD Child folder)

16. Goto sysadmin CONSOLE

15. SELECT managedConnector --install--> select AD childfolder-->click load -->next-->next-->finish

16. now edit the ou and groups and users in "ACtive Directory users and Computer"


17. now Recon the DC -->OU-->Groups-->user (.Trusted)

how to recon
------------
run the sheduler(AD orglookup recon, groups,users) at SYSADMIN console

18. provision the org,groups,users to Target System

How to provi
-------------

1. Goto Sysadmin console

2. create sandbox and activate it

3. when we create new appInstance -->run the CatSYSJOb sheduler

4. when we use already created AppIns no need to run the CatSysJob Sheduler

5. create form form AppInstance

6.now Export the sandbox for safety

7. Now publish the sandbox



8. Next Goto Self service Console

9. exi, new created groups,users

10. select or create -> and then RequestAccounts-->going catalog-->select APPInstance-->Add to cat--> check out --> choose our org (destination) and readytosub-->submit

11. now close the catalog

12. and click accounts -->refresh

13. now result is Provisioned ..

14. if provisioning commes --> no need to warry--> check the error --> See ur IT resources fileds

15. okay



16. Automatic provi( Through Access polices)



- By lakshmi Prasada Reddy Nandyala | nandyala@lakshmiprasad.co.in || Contact :: 9490059784