sion

Oracle Fusion Middleware : Oracle Identity and Access Management Suite 10g/11gR1/11gR2PS1,PS2,PS3 : OIM | OAM,OAAM,OIF | OID, OVD, DIP | OUD/ ODSEE | Microsft AD | OpenLDAP | ADF | EBS R12 | OECMCCR4 | Business Intelleigence - Bi Publisher | Banking | Demo Applications | Core Java | SQL | PLSQL | Web services | Weblogic | Tomcat | JBoss | OHS | WebGate | WebCenter | In any Queries please Contact Me : info@oratechsoft.com

Search This Blog

Wednesday 22 November 2017

Thursday 31 August 2017

Oracle IAM Introduction

Oracle Access Manager (OAM)
+++++++++++++++++++++++++++


Oracle Access Manager is a J2EE application typically deployed on a dedicated managed server in a Weblogic (Application Server) clustered environment.

An enterprise typically has many applications for different purposes. Each application typically has its own authentication and authorization functionality.

OAM provides a single point to control all resource grants in an enterprise where multiple applications exist on different platform.

OAM provides:

Single Sign On (SSO)
Authentication
Authorization
Real time session management
Auditing
Policy Administration

Flaws in conventional security model.

Individual authentication/authorization for each independent application in the enterprise. .net, J2EE, SAP, WebCenter etc. All application have their *own* authentication and authorization mechanism.

Effective Security
Cost
Inconsistence
Security Complainces
Ease for users (Single Sign On)
Governance, Support and Management

One of the web server will have OAM-Agent. Other web servers will be redirected to this OAM-Agent via a reverse proxy. Hence, we don't need OAM-Agent on each Web Server.

The request goes to the OAM agent which redirects the request to OAM which in turn challenges the user for user/pwd. Once user/pwd is provided the OAM goes to the LDAP (AD or OID) to authenticate the user. Once the user is authenticated the webgate opens the gate to the underlying corresponding web server.

Oracle Internet Directory (OID)
+++++++++++++++++++++++++++++++


This is a directory of objects. For e.g in case of employees in an organization, this directory will hold employees details like name, designation, enterprize roles, applicaiton specific roles, security credentials like password, password reminder questions.

This is typically a single source of truth for information about employees in an organization.

Various applications access OID to authenticate and authorize users. Typically, OID is integrated with OAM.

OID is Oracle's LDAP implementation. Active Directory or AD is similar implementation for the same solution from Microsoft.

OID generally uses oracle database for storage of all the said information above.


Oracle Identity Manager (OIM)
+++++++++++++++++++++++++++++

OIM does life cycle management of an identity (generally a user, e.g employee).

OIM server is a J2EE application. User provisioning is done in OIM. The OIM integrates this with all the other applications.

Lets take an example of an employee joining an organizaiton. He/She needs access to various applications in the organization. The HR typically creates the employee in HRMS on the joining date.

The manager raises various user ids crations for this new employee for email, time sheet app, crm, leave mgmt app etc. With OIM this provisioning can be done automatically or manually at single point.

OIM provides a unified access control for all the applications in the enterprise. Once the employee quits, the manager need only to log onto OIM and delete (soft/hard) the employee from various applications.

OIM integrates with other application using SOA suite with respective JCA adapters.



    Accounts:
--------


        Rogue Account : A rogue account is an account created "out of process" or beyond the control of the provisioning system ( OIM Engine ).


        Orphan Account : An orphan account is an operational account without a valid owner.


        Note :    Rogue and Orphan account represents serious security risks.


        Service Account: Service account is like Admin account. Which has different life cycle and privileges.

               
           
    Provisioning:
++++++++++++

        Process of creating account of user into target resource is known as Provisioning.
       
   
    Reconciliation : (Read, Discovery )
+++++++++++++++++++++++++++++++++++

        Process of creating account of user into OIM is known as Reconciliation.
   
   
    Resource Object:
++++++++++++++++
       
        Virtual representation of a target resource is known as Resource Object in OIM. (like AD User )
       
        The Logical representation of target system.

    IT Resource:
+++++++++++
   
        IT Resource stores the configuration data of Actual Target Resource.
       
        It stores actual connection data.(Password is always encrypted)
       
       
    IT Resource Type:
+++++++++++++++++
   
        IT Resource Type is used to define the connection details of a target system
       
    Process Def:
++++++++++++

        This defines the flow of actual tasks.
       
    Process Form:
+++++++++++++
   
        Table within OIM Database to hold data for a given resource object


    Form :
++++++
   
        The Combination of Entities/Attributes is known as Form

        There are two types of forms in OIM which are used for showing and storing user data for provisioning. Forms are:

        1. Object Form
        2. Process Form

        Object Form: Object form is associated with Resource Object

        Process Form: This form is associated with provisioning process of any target resource. During a provisioning process, data flows to the actual target resource from process form only.

   
        Parent Form (object ) & Child Form (entitlements )
   
   
    Application Instance  : ( New In OIM11g on-words)
++++++++++++++++++++++++++++++++++++++++++++++++
   
         Application Instance is the entity that can be provisioned to a user.
         Application Instance are published to the catalog and user can access application instances via catalog.
         In Pre-OIM 11gR2, to provision account you select name of the resource where as from OIM 11gR2 on wards resources and entitlements are bundles in Application Instances which user can select via catalog (catalog is another feature introduced in OIM 11gR2 more on catalog in OIM 11gR2 later)
         Application instance is combination of an IT Resource instance and resource object + Form
       
    Catalog :
+++++++
   
        Catalog is a web based interface that allows business users to request Roles, Application Instance, and Entitlements (within applications).
   
   
    Policy :
+++++++
   
        1. Approval Policy ( Purpose : Auto Approvals & Manual Approvals )
        2. Access Policy ( Purpose : Auto Provisioning )
        3. Password Policy ()
       
   
    Sandbox : ( New in 11g on-words )
++++++++++++++++++++++++++++++++
   
        Sandbox is an area where metadata objects can be modified without affecting their mainline usage.
        In simple words, sandbox is a temporary storage area to save a group of page customization before they are either saved and published to other users, or discarded.
   
   
    Adapter :
+++++++++
       
        Adapter is Nothing But Pre-Defined Java Program
       
        Adapters are Java programs that enable you to integrate Oracle Identity Manager with other software solutions
   
   
    EventHandler :
++++++++++++
       
        Any Action can be performed by user / system is known as Event
   
   
    Scheduler :
++++++++++
   
        Scheduler is nothing but to run the Job is known as Scheduler
   
    Connector :
+++++++++
       
        Connector is nothing but Application Programming Interface, it can be used for make operations lies between two systems like create, update, delete, etc .


Regards,
Lakshmi Prasad Reddy Nandyala

Saturday 19 August 2017

Oracle Identity Manager 11gR2PS3 Installation and BundlePatch11 Applying


OIM 11g R2 PS3 Installation and how to apply BundlePatch11


In this lab we are going to see the steps for the installation of OIM 11GR2 PS3 along with Latest BP as on 20/Aug/2017.



Download :



Click Here : RCU 11.1.1.9

Click Here: Oracle JRockit1.6

Click Here : Weblogic10.3.6

Click Here : SOA Suite 11.1.1.9

Click Here : Oracle IAM Suite 11.1.2.3.0 ( Major.Minor.Release.PatchSet.BundlePatch )

Click Here : Latest BundlePatch11 ( Note - Download from Oracle Support )


Step0 :  Installing the VM & Oracle Linux 6.5 

Step1 :  Installing the Oracle Database   


Step2 :  Running the Repository Creation Utility (RCU)


 Step3 :  Installing the Java Development Kit (JDK) binaries


 Step4 :  Installing the WebLogic Server (WLS) binaries


Step5:  Installing the SOA Suite (SOA) binaries


Step6:   Installing the Identity and Access Management Suite (IAM) binaries


 Step7:  Creating the OIM Server domain.


Step8:  Configure the policy store.


Step9:  OIM Configuration.


Step10. Design console Configuration 


Step11:  Starting, Accessing, and Stopping the OIM Domain


Step12:  Bundle Patch Installations 

 

Regards, 
Lakshmi Prasad Reddy Nandyala
+91-9490059784










Wednesday 19 April 2017

OIM / OAM Bundle patch 10 released on 18 APR 2017


OIM / OAM Bundle patch 10 released on 18 APR 2017  - Bugs Covered under BP10

Bundle Patch Number : 11.1.2.3.170418 ( BP10)

My Oracle Support Patch Number : Patch:25654150 (Release Date: 18-Apr-2017). This is a Suite Bundle Patch with OIM OPatch Version # 25348617
List of Bugs Fixed :
  • Bug 21867259 : HETEROGENEOUS REQUEST ISSUE FOR ENTITLEMENTS WHEN THE ACCOUNT NOT PROVISIONED
  • Bug 22156535 : CREATING A USER WITH CUSTOM OBJCTCLASS WITH WORKFLOW FAILS WITH SCHEMA VIOLATION
  • Bug 22958564 : UNABLE TO REMOVE ACCESS POLICY FROM ROLE WITH TRACE ON ORACLE.IAM.IDENTITY.UTILS
  • Bug 22958948 : INCORRECT RECURSIVE PROXY ERROR MESSAGE IAM-3050050
  • Bug 23253824 : TASK RETRY FAILS DUE TO NO PASSWORD - RETRIED AS USER ADMIN / USER MOD ROLE
  • Bug 23267808 : UNABLE TO SUBMIT REQUEST OF MODIFY ACCOUNT FROM DRAFT REQUEST
  • Bug 23306798 : FIRST LOGIN MINIMUM ANSWER LENGTH IAM-3040012 INSTEAD OF IAM-3040025
  • Bug 23479069 : DIAG: ADD DIAGNOTSICS FOR LOGGING SQL FOR USER SEARCH PERFORMANCE OPTIMIZATION
  • Bug 23481005 : MYACCESS -> ROLES -> PENDING THROWS ERROR FOR OIM USER IF MANAGER IS ASSIGNED
  • Bug 23569476 : IDENTITY SELF SERVICE CONSOLE THROWS ERROR WHEN TRYING TO EDIT ROLES
  • Bug 23619211 : DIAGNOSTICS FOR BUG 23590171 FOR TROUBLESHOOTING POC_RECORD_NUMBER UPDATES
  • Bug 23665041 : ERROR WHILE LOADING ROLE MEMBERSHIP USING OIM BULK LOAD UTILITY
  • Bug 23711304 : EXCLUDE ENTITY FILTER WHEN USED IN THE DBAT TRUSTED RECON IS FAILING
  • Bug 23712003 : IF OLD AND NEW PWDS AND Q&A ARE ENTERED INCORRECTLY, THEN PAGE CAN'T COMPLETE.
  • Bug 24298494 : DIAG: ADD A WARNING FOR LARGE RISK AGGREGATION JOB USER BATCH SIZE VALUES
  • Bug 24385619 : CONCURRENTMODIFICATIONEXCEPTION WHEN USING API AND USER ACCOUNT WITH CUSTOM ROLE
  • Bug 24448375 : DATA IN AUTOMATICALLY DELETE ON IS NOT BEING SAVED
  • Bug 24460030 : DIAG: APPLICATION INSTANCE CERTIFICATION CREATION BETTER LOGGING ON FAILURE
  • Bug 24568932 : ADVANCED SEARCH SOME OF THE FIELDS ARE CASE SENSITIVE AND OTHERS ARE NOT
  • Bug 24575896 : CERTIFICATION WILL NOT CONTAIN USER "NULL": USER HAS NO MANAGER.
  • Bug 24599348 : TASK IS SIGN OFF IN WFTASK TABLE BUT SHOWS AS EXPIRED IN OIM
  • Bug 24615783 : ONLY ONE REMEDIATION REQUEST CREATED FOR MULTIPLE ENTITLMENTS REVOKED.
  • Bug 24803317 : CHILD ROLE WITH NO AP, ASSIGNED TO USER MUST HAVE AP EVAL DUE TO PARENT ROLE AP
  • Bug 24805149 : DUPLICATE ACCOUNTS CREATION DUE TO EVALUATE USER POLICY JOB RUN
  • Bug 24837379 : NPE IN OIM LOGS WHEN MODIFYING USER PROFILE BUT REQUEST IS SUCCESSFUL
  • Bug 25066289 : CERT: AUDIT VIOLATIONS TAB ERRORS WITH REMOVED ENTITLEMENT JBO-29000
  • Bug 25083700 : ORG QUERIES RETURN NO DATA WITH ORA-01722: INVALID NUMBER IN LOGS
  • Bug 25102261 : CUSTOM SCHEDULE TASK NOT WORKING AFTER UPGRADE TO OIM 11GR2PS3
  • Bug 25121586 : OIM SENDS NULL PASSWORD TO OVD WHEN WRONG CHALLENGE ANSWERS ARE PROVIDED
  • Bug 25133416 : APPROVAL RULES FOR MODIFY USER PROFILE NOT WORKING
  • Bug 25154021 : EXCEPTION OCURRED WHEN RUNNING ORACLE.IAM.CERTIFICATION.EVENTLISTENERTEST
  • Bug 25178773 : NPE WHILE EXECUTING JOB - PROCESS PENDING ROLE GRANTS
  • Bug 25256513 : AMPERSAND IN ORG NAME CAUSES CERTS TO FAIL IF ORG CERTIFIER USED AS REVIEWER
  • Bug 25410196 : Fix for Bug 25410196
  • Bug 25476817 : OIM USER CREATE FAILS BECAUSE ORCLACTIVESTARTDATE SET IN INVALID FORMAT
  • Bug 25741358 : SYSTEM PROPERTY WITH KEYWORD XL.TRIGGERUSERPROCESSESBULKUSINGASYNC DOES NOT EXIS

Thanks & Regards
Lakshmi Prasad Reddy 

Wednesday 22 March 2017

Oracle Identity Manager SQL Queries - LuckyFusion

Oracle Identity Manager SQL Queries

UserManagement :



RoleManagement : 



Organization Management : 



Application Instance :



Catalog :



Schedulers : 

A. 

B. 

C.  Retry Evaluate user policies task

 



UPDATE USER_PROVISIONING_ATTRS SET POLICY_EVAL_IN_PROGRESS = 0, POLICY_EVAL_NEEDED = 1, UPDATE_DATE = SYSDATE where USR_KEY IN( list of UserId's )



 









Connectors :



Plugin's : 



Monday 20 March 2017

Sample OIM EventHandler



Test1.java

package com.ots.oracle.eventhandlers;

import java.util.HashMap;
import oracle.core.ojdl.logging.ODLLogger;
import oracle.core.ojdl.logging.ODLLevel;
import oracle.iam.platform.kernel.spi.PostProcessHandler;
import oracle.iam.platform.kernel.vo.AbstractGenericOrchestration;
import oracle.iam.platform.kernel.vo.BulkEventResult;
import oracle.iam.platform.kernel.vo.BulkOrchestration;
import oracle.iam.platform.kernel.vo.EventResult;
import oracle.iam.platform.kernel.vo.Orchestration;

public class Test1 implements PostProcessHandler{
   
    private static ODLLogger logger = ODLLogger.getODLLogger(Test1.class.getName());

    public Test1() {
        super();
    }
   
    private void enter(String method) {
        logger.log(ODLLevel.FINE, "Entering  " + method + " of class " + Test1.class.getName());
    }

    private void exit(String method) {
        logger.log(ODLLevel.FINE, "Exiting  " + method + " of class " + Test1.class.getName());
    }


    public EventResult execute(long processId, long eventId, Orchestration orchestration) {
        String method = Thread.currentThread().getStackTrace()[1].getMethodName();
        enter(method);
       
        String sOperation = orchestration.getOperation();
        logger.log(ODLLevel.FINE, "sOperation --> " + sOperation);
       
        HashMap hmParameters = orchestration.getParameters();
        logger.log(ODLLevel.FINE, "hmParameters --> " + hmParameters);
       
        HashMap hmInterParameters = orchestration.getInterEventData();
        logger.log(ODLLevel.FINE, "hmInterParameters --> " + hmInterParameters);
       
        exit(method);
        return new EventResult();
    }

    public BulkEventResult execute(long processId, long eventId, BulkOrchestration bulkOrchestration) {
        String method = Thread.currentThread().getStackTrace()[1].getMethodName();
        enter(method);
       
        String sOperation = bulkOrchestration.getOperation();
        logger.log(ODLLevel.FINE, "sOperation --> " + sOperation);
       
        HashMap[] hmBulkParameters = bulkOrchestration.getBulkParameters();
        for (HashMap hmBulkParameter : hmBulkParameters) {
            logger.log(ODLLevel.FINE, "hmBulkParameter --> " + hmBulkParameter);
        }
       
        HashMap hmInterParameters = bulkOrchestration.getInterEventData();
        logger.log(ODLLevel.FINE, "hmInterParameters --> " + hmInterParameters);
       
        exit(method);
        return new BulkEventResult();
    }

    public void compensate(long processId, long eventId, AbstractGenericOrchestration abstractGenericOrchestration) {
        String method = Thread.currentThread().getStackTrace()[1].getMethodName();
        enter(method);
       
        String sOperation = abstractGenericOrchestration.getOperation();
        logger.log(ODLLevel.FINE, "sOperation --> " + sOperation);
       
        HashMap hmParameters = abstractGenericOrchestration.getParameters();
        logger.log(ODLLevel.FINE, "hmParameters --> " + hmParameters);
       
        exit(method);
    }

    public boolean cancel(long processId, long eventId, AbstractGenericOrchestration abstractGenericOrchestration) {
        String method = Thread.currentThread().getStackTrace()[1].getMethodName();
        enter(method);
       
        String sOperation = abstractGenericOrchestration.getOperation();
        logger.log(ODLLevel.FINE, "sOperation --> " + sOperation);
       
        HashMap hmParameters = abstractGenericOrchestration.getParameters();
        logger.log(ODLLevel.FINE, "hmParameters --> " + hmParameters);
       
        exit(method);
        return false;
    }

    public void initialize(HashMap<String, String> hashMap) {
        String method = Thread.currentThread().getStackTrace()[1].getMethodName();
        enter(method);
       
        logger.log(ODLLevel.FINE, "hashMap --> " + hashMap);
       
        exit(method);
    }
}



EventHandler.xml 

<?xml version="1.0" encoding="UTF-8" ?>
<eventhandlers xmlns="http://www.oracle.com/schema/oim/platform/kernel"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.oracle.com/schema/oim/platform/kernel orchestration-handlers.xsd">
<action-handler class="com.ots.oracle.eventhandlers.Test1"
    entity-type="User" operation="CREATE"
    name="Test1"
    stage="postprocess"
    order="9999999"
    sync="TRUE" />
</eventhandlers>



plugin.xml


<?xml version="1.0" encoding="UTF-8" ?>
<oimplugins xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
 <plugins pluginpoint="oracle.iam.platform.kernel.spi.EventHandler">
 <plugin pluginclass="com.ots.oracle.eventhandlers.Test1" version="1.0" name="Test1">
 </plugin>
</plugins>
</oimplugins>



Thanks & Regards
Lakshmi Prasad Reddy N

Sunday 12 March 2017

OAM Patches | Bundle Patches

OAM Bundle Patch Release History (Doc ID 736372.1)


In this Document

Description
Occurrence
Symptoms
Workaround
 11.1.2.3.x OAM Bundle Patch History
 11.1.2.2.x OAM Bundle Patch History
 11.1.2.1.x OAM Bundle Patch History
 11.1.2.0.x OAM Bundle Patch History
 11.1.1.7.x OAM Bundle Patch History
 11.1.1.5.x OAM Bundle Patch History
 11.1.1.3.x OAM Bundle Patch History
 10.1.4.3.x OAM Bundle Patch History
 10.1.4.2.x OAM Bundle Patch History
 10.1.4.0.x OAM Bundle Patch History
 7.0.4.3.x OAM Bundle Patch History
History
References

Applies to:

COREid Access - Version 7.0.4 to 10.1.4 [Release 7.0.4 to 10g]
Oracle Mobile and Social - Version 11.1.2.0.0 to 11.1.2.3.0 [Release 11gR2]
Oracle Identity Federation - Version 11.1.2.0.0 and later
Oracle Security Token Service - Version 11.1.2.2.0 to 11.1.2.3.0 [Release 11g]
Oracle Access Manager - Version 11.1.1.3.0 to 11.1.2.3.0 [Release 11g]
Information in this document applies to any platform.

Description

Starting November 1st, 2007 the OAM team will follow a new OAM Patchset release process. Refer to Metalink note Note:466993.1 for full details on the new patchset release process.
This document will be continually updated to list the OAM bundle patch release history.

Occurrence

Review the following tables to find the latest bundle patch for various OAM product releases.

Symptoms

For more information please contact Oracle Support by opening a new service request for the Oracle Access Manager product.

Workaround

Review the following tables to find the latest bundle patch for various OAM product releases.
There are a several products under the OAM parent product that do not have Bundle Patches, at this time. Any interim patches that are released for these products are rolled into future Bundle Patches for the OAM product. These child products include the following:

    Oracle Mobile and Social (OAMMS)
    Oracle Identity Federation (OIF)
    Oracle Security Token Service (STS)

11.1.2.3.x OAM Bundle Patch History

The bundle patches listed below must be applied on top of an existing 11.1.2.3.0 installation. The below bundle patches do not include the 11.1.2.3.0 release.
Beginning with the PS3 release in July 2015, the OAM 11.1.2.3.0 Access Server bundle patch was on a monthly cadence as well as the latest OAM 11.1.2.3.x being included in the quarterly Identity Management Suite Bundle Patch. However, beginning in October 2015, IDM 11.1.2.3 bundle patches, including OAM 11.1.2.3 bundle patches, will be released on a quarterly basis with the quarterly Identity Management Suite Bundle Patch.
The ASDK and OAM webgate bundle patches are scheduled and released only when there are sufficient bug fixes to warrant a bundle patch, otherwise ASDK and webgate fixes will be released as individual one-off patches (outside of the Identity Management Suite Bundle Patch).
It is important to note that Access Server patch numbers listed below will reference the product Oracle Identity Management Suite which will include bundle patches for OAM, OIM, OAAM, and OES or the individual bundle patch as appropriate. Install each bundle patch as appropriate for your environment. For more information regarding the Identity Management Suite Bundle Patch see note 1494151.1.

As of April 2016, the 5-digit of the bundle version is changing to reflect the date of the release. For example, 11.1.2.3.6 will be called 11.1.2.3.160419 to reflect the release date of April 10, 2016. 

BundlePlatformPatch NumberRelease DateDocumentation
11.1.2.3.1 (BP01) Access Server Generic patch:21169810 7/14/2015 Oracle Access Manager Bundle Patch: 11.1.2.3.1 PDF
11.1.2.3.1 (BP01) Webgate Linux 64-bit
Solaris 64-bit
HP-Itanium
AIX
patch:21118593 7/14/2015 Oracle Access Manager WebGate Bundle Patch: 11.1.2.3.1 PDF
11.1.2.3.2 (BP02) Access Server Generic patch:21544485 8/18/2015 Oracle Access Manager Bundle Patch: 11.1.2.3.2 PDF
11.1.2.3.3 (BP03) Access Server Generic patch:21869176 9/21/2015 Oracle Access Manager Bundle Patch: 11.1.2.3.3 PDF
11.1.2.3.4 (BP04) Access Server Generic patch:21698880 10/20/2015 Oracle Access Manager Bundle Patch: 11.1.2.3.4 PDF
11.1.2.3.5 (BP05) Access Server Generic patch:22085274 1/20/2016 Oracle Access Manager Bundle Patch: 11.1.2.3.5 PDF
11.1.2.3.160419 (BP06) Access Server Generic patch:22675286 5/6/2016 Oracle Access Manager Bundle Patch: 11.1.2.3.160419.PDF
11.1.2.3.160419 (BP02) Webgate Linux 64-bit
Windows 64-bit
Linux 32-bit
AIX
Solaris Sparc 64-bit
HP-Itanium
patch:22595401 4/19/2016 Oracle Access Manager WebGate Bundle Patch: 11.1.2.3.160419 PDF
11.1.2.3.160719 (BP07) Access Server  Generic This BP has been removed due to issued identified with the release. See MOS note:2194526.1 for more details. 7/19/2016  
11.1.2.3.160719 (BP03) Webgate Linux 64-bit
Windows 64-bit
Linux 32-bit
AIX
Solaris Sparc 64-bit
HP-Itanium
This BP has been removed due to issued identified with the release. See MOS note:2194526.1 for more details. 7/19/2016  
11.1.2.3.161018 (BP08) Access Server Generic patch:24326201 10/18/2016 Oracle Access Manager Bundle Patch: 11.1.2.3.161018 PDF
11.1.2.3.161018 (BP04) Webgate Linux 64-bit
Windows 64-bit
Linux 32-bit
AIX
Solaris Sparc 64-bit
HP-Itanium
Solaris x86-64
patch:24323167 10/18/2016 Oracle Access Manager WebGate Bundle Patch: 11.1.2.3.161018 PDF
11.1.2.3.170117 (BP09) Access Server Generic patch:25038775 1/17/2017 Oracle Access Manager Bundle Patch: 11.1.2.3.170117 PDF
11.1.2.3.170117 (BP05) Webgate Linux 64-bit
Windows 64-bit
Linux 32-bit
AIX
Solaris Sparc 64-bit
HP-Itanium
Solaris x86-64
patch:24916846 1/17/2017 Oracle Access Manager WebGate Bundle Patch: 11.1.2.3.170117 PDF

11.1.2.2.x OAM Bundle Patch History

The bundle patches listed below must be applied on top of an existing 11.1.2.2.0 installation. The below bundle patches do not include the 11.1.2.2.0 release.

Note that the OAM 11.1.2.2.1 Access Server is delivered as part of the Identity Management Suite Bundle Patch. All future 11.1.2.x Access Server bundle patches will be part of the Identity Management Suite Bundle Patch while any ASDK and WebGate bundle patches will be delivered as individual releases. It is important to note that Access Server patch numbers listed below will reference the product Oracle Identity Management Suite which will include bundle patches for OAM, OIM, OAAM, and OES. Install each bundle patch as appropriate for your environment.

For more information regarding the Identity Management Suite Bundle Patch see note 1494151.1.

BundlePlatformPatch NumberRelease DateDocumentation
 11.1.2.2.1 (BP01) Access Server Generic  patch:18333689  4/15/2014 Oracle Access Manager Bundle Patch: 11.1.2.2.1 PDF
11.1.2.2.2 (BP02) Access Server Generic patch:18662903 7/15/2014 Oracle Access Manager Bundle Patch: 11.1.2.2.2 PDF
11.1.2.2.3 (BP03) Access Server Generic patch:19157573 10/14/2014 Oracle Access Manager Bundle Patch: 11.1.2.2.3 PDF
11.1.2.2.4 (BP04) Access Server Generic patch:19718347 1/20/2015 Oracle Access Manager Bundle Patch: 11.1.2.2.4 PDF
11.1.2.2.5 (BP05) Access Server Generic patch:20533052 4/14/2015 Oracle Access Manager Bundle Patch: 11.1.2.2.5 PDF
11.1.2.2.6 (BP06) Access Server Generic patch:20963120 7/14/2015 Oracle Access Manager Bundle Patch: 11.1.2.2.6 PDF
11.1.2.2.7 (BP07) Access Server Generic patch:21660126 10/20/2015 Oracle Access Manager Bundle Patch: 11.1.2.2.7 PDF
11.1.2.2.8 (BP08) Access Server Generic patch:22085294 1/20/2016 Oracle Access Manager Bundle Patch: 11.1.2.2.8 PDF

11.1.2.1.x OAM Bundle Patch History

The bundle patches listed below must be applied on top of an existing 11.1.2.1.0 installation. The below bundle patches do not include the 11.1.2.1.0 release.

Note that the OAM 11.1.2.1.1 Access Server is delivered as part of the Identity Management Suite Bundle Patch. All future 11.1.2.x Access Server bundle patches will be part of the Identity Management Suite Bundle Patch while any ASDK and WebGate bundle patches will be delivered as individual releases. It is important to note that Access Server patch numbers listed below will reference the product Oracle Identity Management Suite which will include bundle patches for OAM, OIM, OAAM, and OES. Install each bundle patch as appropriate for your environment.

For more information regarding the Identity Management Suite Bundle Patch see note 1494151.1.

BundlePlatformPatch NumberRelease DateDocumentation
 11.1.2.1.1 (BP01) Access Server Generic  patch:16672826  7/16/2013 Oracle Access Manager Bundle Patch: 11.1.2.1.1 PDF
11.1.2.1.1 (BP01) ASDK Generic patch:16774301 7/16/2013  
11.1.2.1.2 (BP02) Access Server Generic patch:17179015 1/14/2014 Oracle Access Manager Bundle Patch: 11.1.2.1.2 PDF
11.1.2.1.3 (BP03) Access Server Generic patch:18138998 4/15/2014 Oracle Access Manager Bundle Patch: 11.1.2.1.3 PDF
11.1.2.1.4 (BP04) Access Server Generic patch:19157616  10/14/2014 Oracle Access Manager Bundle Patch: 11.1.2.1.4 PDF

11.1.2.0.x OAM Bundle Patch History

The bundle patches listed below must be applied on top of an existing 11.1.2.0.0 installation. The below bundle patches do not include the 11.1.2.0.0 release.

Note that the OAM 11.1.2.0.1 Access Server is delivered as part of the Identity Management Suite Bundle Patch. All future 11.1.2.x Access Server bundle patches will be part of the Identity Management Suite Bundle Patch while any ASDK and WebGate bundle patches will be delivered as individual releases. It is important to note that Access Server patch numbers listed below will reference the product Oracle Identity Management Suite which will include bundle patches for OAM, OIM, OAAM, and OES. Install each bundle patch as appropriate for your environment.

For more information regarding the Identity Management Suite Bundle Patch see note 1494151.1.

BundlePlatformPatch NumberRelease DateDocumentation
 11.1.2.0.1 (BP01) Access Server Generic  patch:14606628  10/16/2012 Oracle Access Manager Bundle Patch: 11.1.2.0.1 PDF
11.1.2.0.2 (BP02) Access Server Generic patch:14760806 1/15/2013 Oracle Access Manager Bundle Patch: 11.1.2.0.2 PDF
11.1.2.0.2 (BP02) WebGates Linux
Linux 64-bit
Windows
Windows 64-bit
Solaris 64-bit
Solaris Intel 64-bit
AIX
patch:14572136 1/15/2013 Oracle Access Manager WebGate Bundle Patch: 11.1.2.0.2 PDF 
11.1.2.0.2 (BP02) ASDK Generic patch:14572134 1/15/2013  
11.1.2.0.3 (BP03) Access Server Generic patch:16170896 7/16/2013 Oracle Access Manager Bundle Patch: 11.1.2.0.3 PDF
11.1.2.0.3 (BP03) WebGates AIX
Linux
Sparc 64
Linux x64
Solaris x86-64
Windows
Windows 64bit
patch:16692499 7/16/2013 Oracle Access Manager WebGate Bundle Patch: 11.1.2.0.3 PDF
11.1.2.0.4 (BP04) Access Server Generic
patch:17178993 10/15/2013 Oracle Access Manager Bundle Patch: 11.1.2.0.4 PDF
11.1.2.0.4 (BP04) Webates
(October 2013 Webgates)
Linux
Linux 64-bit
Windows
Windows 64-bit
AIX
Solaris 64-bit
Solaris Intel 64-bit
patch:17354916 1/27/2014 Oracle Access Manager WebGate Bundle Patch: 11.1.2.0.4 PDF
11.1.2.0.5 (BP05) Access Server  Generic patch:17567965  1/19/2014 Oracle Access Manager Bundle Patch: 11.1.2.0.5 PDF

11.1.1.7.x OAM Bundle Patch History

The bundle patches listed below must be applied on top of an existing 11.1.1.7.0 installation. The below bundle patches do not include the 11.1.1.7.0 release.

Note that beginning with the OAM 11.1.1.7.1 the Access Server bundle patch will delivered as part of the Identity Management Suite Bundle Patch. All future 11.1.1.7.x Access Server bundle patches will be part of the Identity Management Suite Bundle Patch while any ASDK and WebGate bundle patches will be delivered as individual releases. It is important to note that Access Server patch numbers listed below will reference the product Oracle Identity Management Suite which will include bundle patches for OAM, OIM, OAAM, and OES. Install each bundle patch as appropriate for your environment.

For more information regarding the Identity Management Suite Bundle Patch see note 1494151.1.

BundlePlatformPatch NumberRelease DateDocumentation
11.1.1.7.1 (BP01) Access Server Generic patch:18116639 4/15/2014 Oracle Access Manager Bundle Patch: 11.1.1.7.1 PDF
11.1.1.7.2 (BP02) Access Server Generic patch:19730938 10/14/2014 Oracle Access Manager Bundle Patch: 11.1.1.7.2 PDF
11.1.1.7.3 (BP03) Access Server Generic patch:19822601 1/20/2015 Oracle Access Manager Bundle Patch: 11.1.1.7.3 PDF
11.1.1.7.4 (BP04) Access Server Generic patch:20385315 4/14/2015 Oracle Access Manager Bundle Patch: 11.1.1.7.4 PDF
11.1.1.7.5 (BP05) Access Server Generic patch:21033489 7/14/2015 Oracle Access Manager Bundle Patch: 11.1.1.7.5 README
11.1.1.7.1 (BP01) Webgate Solaris x86-64
HP-Itanium
HP-UX
Power AIX
Linux 32-bit
Windows 32-bit
Sparc 64-bit
Windows 64-bit
Linux 64-bit
patch:22218959 7/19/2016 Oracle Access Manager WebGate Bundle Patch: 11.1.1.7.1 PDF

11.1.1.5.x OAM Bundle Patch History

The bundle patches listed below must be applied on top of an existing 11.1.1.5.0 installation. The below bundle patches do not include the 11.1.1.5.0 release.

Note that beginning with the OAM 11.1.1.5.4 the Access Server bundle patch will delivered as part of the Identity Management Suite Bundle Patch. All future 11.1.1.5.x Access Server bundle patches will be part of the Identity Management Suite Bundle Patch while any ASDK and WebGate bundle patches will be delivered as individual releases. It is important to note that Access Server patch numbers listed below will reference the product Oracle Identity Management Suite which will include bundle patches for OAM, OIM, OAAM, and OES. Install each bundle patch as appropriate for your environment.

For more information regarding the Identity Management Suite Bundle Patch see note 1494151.1.

BundlePlatformPatch NumberRelease DateDocumentation
11.1.1.5.1 (BP01) Access Server Generic patch:12733108 9/02/2011 Oracle Access Manager Bundle Patch: 11.1.1.5.1 PDF
11.1.1.5.1 (BP01) Webgates HPUX (64-bit)
HP-Itanium
Solaris
Linux
Linux x64
AIX
Win32
Win64
patch:12756804 9/02/2011 Oracle Access Manager Webgate Bundle Patch: 11.1.1.5.1 PDF
11.1.1.5.2 (BP02) Access Server Generic patch:13115859 2/13/2012 Oracle Access Manager Bundle Patch: 11.1.1.5.2 PDF
11.1.1.5.2 (BP02) Webgates HPUX 64-bit
Solaris 64-bit
HP-Itanium
Linux
Linux x64
Win64
AIX
Win32
patch:13453929 2/13/2012 Oracle Access Manager Webgate Bundle Patch: 11.1.1.5.2 PDF
11.1.1.5.3 (BP03) Access Server Generic patch:13473393 5/28/2012 Oracle Access Manager Bundle Patch: 11.1.1.5.3 PDF
11.1.1.5.3 (BP03) Webgates HP-UX 64bit
Solaris 64bit
HP Itanium
Linux
Linux 64bit
Windows
Windows 64bit
AIX
patch:13815418 5/28/2012 Oracle Access Manager Webgate Bundle Patch: 11.1.1.5.3 PDF
11.1.1.5.3 (BP03) ASDK Generic patch:14026048 5/28/2012  
11.1.1.5.4 (BP04) Access Server Generic patch:14609562 10/16/2012 Oracle Access Manager Bundle Patch: 11.1.1.5.4 PDF
11.1.1.5.4 (BP04) Webgate Windows
Solaris SPARC 64-bit
AIX
Windows 64bit
Linux
Linux 64bit
HP Itanium
Solaris x86-64
HP-UX 64bit
patch:14466702 10/16/2012 Oracle Access Manager Webgate Bundle Patch: 11.1.1.5.4 PDF 
11.1.1.5.4 (BP04) ASDK Generic patch:14466691 10/16/2012  
11.1.1.5.5 (BP05) Access Server Generic patch:14760839 1/15/2013 Oracle Access Manager Bundle Patch: 11.1.1.5.5 PDF
11.1.1.5.5 (BP05) Webgates Linux
Solaris SPARC
Solaris X64
Windows
HP-Itanium
AIX
HP PA-RISC
patch:14828904 1/15/2013 Oracle Access Manager Webgate Bundle Patch: 11.1.1.5.5 PDF
11.1.1.5.5 (BP05) ASDK Generic patch:14828910 1/15/2013  
11.1.1.5.6 (BP06) Access Server Generic patch:17178952 10/15/2013 Oracle Access Manager Bundle Patch: 11.1.1.5.6 PDF
October 2013 11.1.1.5 Webgate MLR Patch Linux
Linux 64-bit
Windows
Windows 64-bit
AIX
Solaris 64-bit
Solaris Intel 64-bit
HP Itanium 64-bit
HP RISC
patch:17184828 10/15/2013  
April 2014 11.1.1.5 WebGate  MLR Patch Linux
Linux 64-bit
Windows
Windows 64-bit
AIX
Solaris 64-bit
Solaris Intel 64-bit
HP Itanium 64-bit
HP RISC 64-bit
patch:18355263 4/15/2014  
11.1.1.5.7 (BP07) Access Server Generic patch:19730928 10/14/2014 Oracle Access Manager Bundle Patch: 11.1.1.5.7 PDF
11.1.1.5.8 (BP08) Access Server Generic patch:19822595 1/20/2015 Oracle Access Manager Bundle Patch: 11.1.1.5.8 PDF
11.1.1.5.9 (BP09) Access Server Generic patch:20385295 4/14/2015 Oracle Access Manager Bundle Patch: 11.1.1.5.9 PDF

11.1.1.3.x OAM Bundle Patch History

The bundle patches listed below must be applied on top of an existing 11.1.1.3.0 installation. The below bundle patches do not include the 11.1.1.3.0 release.

BundlePlatformPatch NumberRelease DateDocumentation
11.1.1.3.1 (BP01) Generic patch:10094106 10/20/2010 Oracle Access Manager Bundle Patch: 11.1.1.3.1 PDF
11.1.1.3.2 (BP02) Generic patch:10368022 2/16/2011 Oracle Access Manager Bundle Patch: 11.1.1.3.2 PDF
11.1.1.3.3 (BP03) Access Server Generic patch:12365301 5/31/2011 Oracle Access Manager Bundle Patch: 11.1.1.3.3 PDF
11.1.1.3.3 (BP03) Webgates HPUX 64-bit
Solaris 64-bit
HP-Itanium
Linux
Linux x64
AIX
Windows 32-bit
Windows 64-bit
patch:12371848 5/31/2011 Oracle Access Manager Webgate Bundle Patch: 11.1.1.3.3 PDF
11.1.1.3.4 (BP04) Generic patch:13087175 12/5/2011 Oracle Access Manager Bundle Patch: 11.1.1.3.4 PDF

10.1.4.3.x OAM Bundle Patch History

The bundle patches listed below must be applied on top of an existing 10.1.4.3.0 installation. The below bundle patches do not include the 10.1.4.3.0 release.

The 10.1.4.3.0 installer release, for customers starting from a new environment, can be downloaded from OTN at http://www.oracle.com/technology/software/products/middleware/htdocs/fmw_11_download.html.

The 10.1.4.3.0 patch set release, for customers starting from a 10.1.4.2.0 environment, can be downloaded from My Oracle Support ( https://support.oracle.com/ ) by searching for patch number patch:8276055.

If you are upgrading from OAM base version 10.1.4.2.0 you must remove any existing 10.1.4.2 bundle patch before installing the 10.1.4.3.0 patchset (patch 8276055).

The 10.1.4.3.0 SNMP Agent files can be downloaded from OTN using the following links. This is a fix for bug number 9924389. The following platforms are available:
Windows, Linux, Solaris

BundlePlatformPatch NumberRelease DateDocumentation
10.1.4.3.0_BP01 Windows
Linux
Solaris
patch:8584399 12/28/2009 Oracle Access Manager Bundle Patch: 10.1.4.3.0_BP01 PDF
10.1.4.3.0_BP02 Windows
Linux
Solaris
patch:9099113 3/23/2010 Oracle Access Manager Bundle Patch: 10.1.4.3.0_BP02 PDF
10.1.4.3.0_BP03 Windows
Linux
Solaris
patch:9402573 5/07/2010 Oracle Access Manager Bundle Patch: 10.1.4.3.0_BP03 PDF
10.1.4.3.0_BP04 Windows
Linux
Solaris
patch:9554723 8/18/2010 Oracle Access Manager Bundle Patch: 10.1.4.3.0_BP04 PDF
10.1.4.3.0_BP05 Linux
Windows
Solaris
Power-AIX
HP-UX
HPUX-Itanium
patch:9814991 11/30/2010 Oracle Access Manager Bundle Patch: 10.1.4.3.0_BP05 PDF
10.1.4.3.0_BP06 Windows
Linux
Solaris
patch:10044040 1/14/2011 Oracle Access Manager Bundle Patch: 10.1.4.3.0_BP06 PDF
10.1.4.3.0_BP07 Windows
Linux
Solaris
HPUX-Itanium
Power-AIX
patch:11682261 3/22/2011 Oracle Access Manager Bundle Patch: 10.1.4.3.0_BP07 PDF
10.1.4.3.0_BP08 Linux
Windows
Solaris
HP Itanium
AIX
patch:11857232 5/20/2011 Oracle Access Manager Bundle Patch: 10.1.4.3.0_BP08 PDF
10.1.4.3.0_BP09 Windows
Linux
Solaris
patch:12363955 7/14/2011 Oracle Access Manager Bundle Patch: 10.1.4.3.0_BP09 PDF
10.1.4.3.0_BP10 Windows
Linux
Solaris
patch:12634990 9/12/2011 Oracle Access Manager Bundle Patch: 10.1.4.3.0_BP10 PDF
10.1.4.3.0_BP11 HP
Linux
Windows
Solaris
AIX
patch:12845239 12/1/2011 Oracle Access Manager Bundle Patch: 10.1.4.3.0_BP11 PDF
10.1.4.3.0_BP12 Linux
Linux x64
Windows
Solaris
patch:13411955 3/15/2012 Oracle Access Manager Bundle Patch: 10.1.4.3.0_BP12 PDF
10.1.4.3.0_BP13 Linux
Microsoft Windows
Solaris
Power AIX
patch:13718105 1/15/2013 Oracle Access Manager Bundle Patch: 10.1.4.3.0_BP13 PDF

10.1.4.2.x OAM Bundle Patch History

The bundle patches listed below must be applied on top of an existing 10.1.4.2.0 installation. The below bundle patches do not include the 10.1.4.2.0 release. However, if needed, the 10.1.4.2.0 patch can be downloaded from metalink under Patch:5957301. There are additional 10.1.4.2.0 components available in patch:6776024.

Note: The 10.1.4.2 BP11 bundle patch will be the LAST bundle patch for the 10.1.4.2 code line.

BundlePlatformPatch NumberRelease DateDocumentation
10.1.4.2.0_BP01 Windows
Linux
Solaris
patch:6659126 1/18/2008 Oracle Access Manager Bundle Patch: 10.1.4.2.0_BP01 PDF
10.1.4.2.0_BP02 Windows
Linux
Solaris
patch:6748699 3/31/2008 Oracle Access Manager Bundle Patch: 10.1.4.2.0_BP02 PDF
10.1.4.2.0_BP03 Windows
Linux
Solaris
AIX
patch:6799354 5/26/2008 Oracle Access Manager Bundle Patch: 10.1.4.2.0_BP03 PDF
10.1.4.2.0_BP04 Windows
Linux
Solaris
AIX
patch:7113405 7/24/2008 Oracle Access Manager Bundle Patch: 10.1.4.2.0_BP04 PDF
10.1.4.2.0_NPTL Linux patch:7305519 9/5/2008 NPTL-enabled OAM PDF
10.1.4.2.0_BP05 Windows
Linux
Solaris
AIX
patch:7342498 10/20/2008 Oracle Access Manager Bundle Patch: 10.1.4.2.0_BP05 PDF
10.1.4.2.0_BP06 Windows
Linux
Solaris
AIX
HP-Itanium
Linux 32 bit
Linux 64 bit
patch:7408035 12/2/2008 Oracle Access Manager Bundle Patch: 10.1.4.2.0_BP06 PDF
10.1.4.2.0_BP07 Windows
Linux
Solaris
patch:7537346 2/27/2009 Oracle Access Manager Bundle Patch: 10.1.4.2.0_BP07 PDF
10.1.4.2.0_BP08 Windows
Linux
Solaris
patch:7695616 5/6/2009 Oracle Access Manager Bundle Patch: 10.1.4.2.0_BP08 PDF

Oracle Access Manager Bundle Patch: 10.1.4.2.0_BP08 Addendum for Secure Logging
10.1.4.2.0_BP09 Windows
Linux
Solaris
patch:8350593 7/22/2009 Oracle Access Manager Bundle Patch: 10.1.4.2.0_BP09 PDF
10.1.4.2.0_BP10 Windows
Linux
Solaris
patch:8584388 10/20/2009 Oracle Access Manager Bundle Patch: 10.1.4.2.0_BP10 PDF
10.1.4.2.0_BP11 Windows
Linux
Solaris
patch:8829778 2/15/2010 Oracle Access Manager Bundle Patch: 10.1.4.2.0_BP11 PDF

10.1.4.0.x OAM Bundle Patch History

The bundle patches listed below must be applied on top of an existing 10.1.4.0.1 installation. The below bundle patches do not include the 10.1.4.0.1 base release. The 10.1.4.0.1 base release can be downloaded from OTN using this link.

BundlePlatformPatch NumberRelease DateDocumentation
10.1.4.0.1_BP01 Windows
Linux
Solaris
patch:6602592 11/30/2007 Oracle Access Manager Bundle Patch: 10.1.4.0.1_BP01 PDF
10.1.4.0.1_BP02 Windows
Linux
Solaris
patch:6623277 1/3/2008 Oracle Access Manager Bundle Patch: 10.1.4.0.1_BP02 PDF
10.1.4.0.1_BP03 Solaris patch:7135436 11/14/2008 Oracle Access Manager Bundle Patch: 10.1.4.0.1_BP03 PDF

7.0.4.3.x OAM Bundle Patch History

The bundle patches listed below must be applied on top of an existing 7.0.4.3.0 installation. The below bundle patches do not include the 7.0.4.3.0 release. However, if needed, the 7.0.4.3.0 patch can be downloaded from metalink using Patch:5529705.

Note: The 7.0.4.3 BP09 bundle patch will be the LAST bundle patch for 7.0.4.3 code line. Additionally OAM/COREid version 7.0.4.3 will be desupported on 31-Dec-2009.

BundlePlatformPatch NumberRelease DateDocumentation
7.0.4.3_BP01 Windows
Linux
Solaris
HP-UX
patch:6610532 12/14/2007 Oracle Access Manager Bundle Patch: 7.0.4.3_BP01 PDF
7.0.4.3_BP02 Windows
Linux
Solaris
patch:6799238 5/1/2008 Oracle Access Manager Bundle Patch: 7.0.4.3_BP02 PDF
7.0.4.3_BP03 Windows
Linux
Solaris
patch:7023600 6/16/2008 Oracle Access Manager Bundle Patch: 7.0.4.3_BP03 PDF
7.0.4.3_BP04 Windows
Linux
Solaris
AIX
patch:7116514 8/30/2008 Oracle Access Manager Bundle Patch: 7.0.4.3_BP04 PDF
7.0.4.3_BP05 Windows patch:7408061 10/22/2008 Oracle Access Manager Bundle Patch: 7.0.4.3_BP05 PDF
7.0.4.3_BP06 Windows patch:7570268 1/5/2009 Oracle Access Manager Bundle Patch: 7.0.4.3_BP06 PDF
7.0.4.3_BP07 Windows
Linux
Solaris
patch:8350503 6/3/2009 Oracle Access Manager Bundle Patch: 7.0.4.3_BP07 PDF
7.0.4.3_BP08 Windows
Linux
Solaris
patch:8593692 8/31/2009 Oracle Access Manager Bundle Patch: 7.0.4.3_BP08 PDF
7.0.4.3_BP09 Windows patch:8854841 1/15/2010 Oracle Access Manager Bundle Patch: 7.0.4.3_BP09 PDF

History

** For Internal Use Only **
Click the note history link (paper icon) in the document details to get the full history of changes.

References

NOTE:1563072.1 - OAM 10g Bundle Patch Change History
NOTE:466993.1 - Details of the OAM Patch Bundle Process
NOTE:1081229.1 - Oracle Access Manager: Standard Packages Included in Version 10.1.4.3 Bundle Patches
Didn't find what you are looking for?