Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

1 Introduction to Identity Management

• 1.1 What Is Identity Management?
• 1.2 Identity Management System Components
• 1.3 Oracle Identity Management Overview
• 1.4 Oracle Identity Management Objectives

2 Oracle Identity Management Concepts and Architecture

• 2.1 Identity Management Terminology
• 2.2 Identity Management Concepts
• 2.2.1 Integrating Application Security with Identity Management
• 2.2.2 Identity and Application Provisioning Lifecycle
• 2.2.3 Administrative Delegation
• 2.3 Identity Management Integration with Oracle Products

3 Oracle Identity Management Deployment Planning

• 3.1 Identity Management Deployment Planning Process
• 3.2 Requirement Analysis for Identity Management Deployment
• 3.2.1 High-Level Enterprise Requirements
• 3.2.1.1 Deciding Who Will Plan and Deploy the Oracle Identity Management Infrastructure
• 3.2.1.2 Deciding Which Components of Oracle Identity Management to Deploy
• 3.2.1.3 Considering Information Model Requirements
• 3.2.1.4 Considering Centralized Security Management Requirements
• 3.2.1.5 Considering Enterprise Application Requirements
• 3.2.1.6 Considering Administrative Autonomy Requirements
• 3.2.1.7 Considering Security Isolation Requirements
• 3.2.1.8 Considering Third-Party Identity Management Integration Requirements
• 3.2.1.9 Considering High Availability, Scalability, and Performance Requirements
• 3.2.2 Transforming Requirements into a Logical Deployment Plan
• 3.2.2.1 Model of Deploying a Central Identity Management System - Standard Enterprise Model
• 3.2.2.2 Model for Internal and External Users
• 3.2.2.3 Model of Providing Administrative Autonomy for Departmental Applications
• 3.2.2.4 Model of Integrating Oracle Identity Management in a Windows Environment
• 3.2.2.5 Deploying Central Identity Management Infrastructure in Application Service Provider Hosting Environments
• 3.3 Detailed Deployment Planning for Identity Management
• 3.3.1 Planning the Logical Organization of Directory Information
• 3.3.1.1 Sample Directory Information Tree
• 3.3.1.2 Planning the Overall Directory Information Tree Structure
• 3.3.1.3 Planning User and Group Naming and Containment
• 3.3.1.4 Planning the Identity Management Realm
• 3.3.2 Planning the Physical Network Topologies
• 3.3.2.1 Identity Management Infrastructure Default Deployment
• 3.3.2.2 Identity Management Infrastructure Deployment in a DMZ Network
• 3.3.2.3 Identity Management Infrastructure Deployment Using Multiple Middle Tiers
• 3.3.2.4 Identity Management Infrastructure Deployment Using Cold Failover Cluster Solution
• 3.3.2.5 Replicated Identity Management Infrastructures
• 3.3.2.6 Fan-out Replication Deployment
• 3.3.2.7 Application Deployments in Replicated Directory Environments
• 3.3.2.8 Geographically Distributed Identity Management Infrastructure Deployment
• 3.3.2.9 Disaster Recovery Deployment for Identity Management Infrastructure
• 3.3.2.10 Oracle Application Server Certificate Authority Recommended Deployment

4 Oracle Identity Management Administration and Usage

• 4.1 Administering Oracle Identity Management Infrastructure
• 4.1.1 Routine Monitoring of the Oracle Identity Management Infrastructure
• 4.1.2 Managing Individual Oracle Identity Management Components
• 4.1.3 Managing Enterprise Data in the Oracle Identity Management Infrastructure
• 4.2 Delegating Oracle Identity Management Administration
• 4.2.1 Delegating User Management
• 4.2.2 Delegating Group Management
• 4.2.3 Delegating Component Deployment and Administration
• 4.2.4 Oracle Internet Directory Delegated Administration Services

5 Integrating with Other Identity Management Solutions

• 5.1 Reasons for Identity Management Integration
• 5.2 Identity Management Integration Tools and Strategies

A Deploying Oracle Identity Management with Fan-Out Replication

• A.1 Master Node Installation
• A.2 Replica Node Installation
• A.3 Fan-out Replication Setup

B Oracle Internet Directory Default Settings

Index