List of Figures

1-1 Overview of an Identity Management System

1-2 Oracle Identity Management

2-1 Application Integration Model

2-2 Identity and Application Provisioning Flow

2-3 Identity Management Integration with Oracle Products

3-1 The Deployment Planning Process

3-2 Central Identity Management Infrastructure

3-3 Using One Identity Management Infrastructure

3-4 Using Two Identity Management Infrastructures

3-5 Central Single Sign-on and Departmental Autonomy

3-6 Departmental Identity Management Infrastructure

3-7 Identity Management Infrastructure Integration with Enterprise Provisioning

3-8 Identity Management Infrastructure Integration with Windows User Provisioning

3-9 Multiple Identity Management Realms in a Hosted Deployment

3-10 Oracle Internet Directory Information Tree

3-11 Identity Management Realm

3-12 OracleAS Single Sign-On and Oracle Delegated Administration Services Default Deployment

3-13 OracleAS Single Sign-On, Oracle Delegated Administration Services Deployment, and Oracle Application Server Certificate Authority in a DMZ

3-14 OracleAS Single Sign-On, Oracle Delegated Administration Services Deployment, and HTTP Load Balancer in a DMZ

3-15 Multiple OracleAS Single Sign-On and Oracle Delegated Administration Services Middle Tiers with one Oracle Internet Directory Server

3-16 Oracle Internet Directory Deployment Using Cold Failover

3-17 Multiple OracleAS Single Sign-On and Oracle Delegated Administration Services Middle Tiers Within a Replicated Oracle Internet Directory Network

3-18 Rolling Upgrade Support with Multimaster Replication

3-19 Fan-out Replication Deployment

3-20 Enterprise Applications Configured in a Replicated Environment

3-21 Geographically Distributed Deployment

3-22 Distributed Deployment Support with Multimaster Replication

3-23 Oracle Internet Directory Deployment Using Oracle Application Server Guard

4-1 Delegating User and Group Management Privileges

4-2 Delegating Deployment-time and Run-time Privileges

A-1 Fan-out Deployment with Oracle Internet Directory, Oracle Directory Integration and Provisioning, Oracle Application Server Single Sign-On, and Oracle Delegated Administration Services on Each Host