A Elements in the Oracle Internet Directory Self-Service Console User Interface

Directory Attribute Name

The attribute name (only available in the Add New Attribute window)

UI Label

Specify the friendly name of the attribute to be displayed in the user interface. For example, you can display the sn attribute as Last Name in the interface.

Required

Specify whether you want the attribute to be required in user creation and modification. Required attributes appear in the interface with an asterisk (*) to the left of the field. If you do not select this check box, then the attribute is optional.

Viewable

Specify whether you want the attribute to appear in search results by selecting this check box.

Self-Editable

Specify whether the end user can modify the value for this attribute in his or her own entry by using the Edit My Profile window.

Password Reset Validation

Specify one or more attributes that can be used to validate a user who forgets his or her password.

Searchable

By default, when a user enters a search request, the Oracle Internet Directory Self-Service Console searches based on the cn, firstname, lastname, and e-mail attributes. You can customize the attributes that can be searchable. For example, if you want to enable searching based on the attribute you are adding, then select this check box. The only restriction is that, to be searchable, the attribute must be cataloged.

UI Type

Specify the type of interface for this field. Options are:

• Single Line Text—a text field into which the user enters a value

• Multi Line Text—a text area where a user can type multiple lines of text

• Multi Line Single Value Text—a text area where a user can type multiple lines of text that is stored as a single value in Oracle Internet Directory

• Predefined List--a combo box in which a user selects a value from a drop-down list. When you select this type of interface, the LOV Values text area appears. In that text area, enter the values for the list, pressing the ENTER key after each one.

• Date—a text field into which the user enters a date—for example, an employee's birthday

• Browse and Select User—a button enabling the user to browse for any user entry that needs a DN as an attribute value—for example, a manager entry

• Browse and Select Group—a button enabling the user to browse for any group entry that needs a DN as an attribute value—for example, the default profile group

• Number—a text field into which the user enters numbers only—for example, a postal code

• Password—a text field into which the user enters a password value that is represented on screen using asterisks (*) for each letter. The Self-Service Console renders Password fields twice, with the second instance of the field assigned a label of Confirm Password.

Find users that match all conditions

Searches for users that match all conditions specified in this window

Find users that match any condition

Searches for users that match any of the conditions specified in this window

E-mail Address

Specifies an e-mail address to include in the search criteria

First Name

Specifies a first name to include in the search criteria

Last Name

Specifies a last name to include in the search criteria

User Name

Specifies a user name to include in the search criteria

Add Another

Enables you to add additional attributes to the search criteria, including address, city, state, country, and manager

Allow user creation

Create user entries

Allow user editing

Modify user entries

Allow user deletion

Delete user entries

Allow group creation

Create group entries

Allow group editing

Modify group entries

Allow group deletion

Delete group entries

Allow privilege assignment to users

Assign access rights to users

Allow privilege assignment to groups

Assign access rights to groups

Allow service management

Enable group members to manage services for users. If this is selected, then a Services link becomes available in the Directory tab page when the latter is accessed by group members.

Allow account management

Enable group members to manage accounts for users. If this is selected, then a group member can enable, disable, and unlock users in the Search for Users results page.

Allow Oracle Delegated Administration Services configuration

Configure Oracle Delegated Administration Services user interface

Allow User Management and Application Provisioning

Create, edit, delete, and assign privileges to users

Allow account management

Enable, disable, and unlock user accounts

Allow group creation

Create group entries

Allow group deletion

Delete group entries

Allow group editing

Modify group entries

Allow Oracle Delegated Administration Services configuration

Configure Oracle Delegated Administration Services user interface

Allow privilege assignment to groups

Assign access rights to groups

Allow privilege assignment to users

Assign access rights to users

Allow resource management for Oracle Reports- and Forms-based applications

Configure resources such as databases or applications

Allow service management

Manage services for users. If this is selected, then a Services link becomes available in the Directory tab page when the latter is accessed by group members.

Allow user creation

Create user entries

Allow user deletion

Delete user entries

Allow user editing

Modify user entries

Allow User Management and Application Provisioning

Create, edit, delete, and assign privileges to users—only available if the currently logged in user has also been assigned this privilege

Basic Information

Name

Enter a name for this group. This will be used as the RDN for this group.

Display Name

Enter a friendly name for this group. For example, if the RDN is OracleDBCreators, then you could enter the display name as Oracle Database Creators.

Description

(Optional) Enter a brief description of this group.

Group Visibility

To hide this group from all but its owners, select Private. Otherwise, accept the default, Public.

Make this group privileged.

Select this box if you want to assign privileges to this group. You cannot assign privileges to a non-privileged group.

Owners

Use this section to add or remove owners of this group.

To add a user as an owner of this group:

1. In the Owners section, choose Add User. This displays the Search and Select: User window.

2. Search for the entry of the user you want to add as an owner of the group.

3. Choose Select. This returns you to the Create Group window. The user you specified is listed in the Owners section.

To add a group as an owner of this group:

1. In the Owners section, choose Add Group. This displays the Search and Select: Group window.

2. Search for the entry of the group you want to add as an owner of the group.

3. Choose Select. This returns you to the Create Group window. The group you specified is listed in the Owners section.

To remove a user or group as an owner of this group, select the user or group, then choose Remove.

Members

Use this section to configure members of this group.

To add a user as a member of this group:

1. In the Members section, choose Add User. This displays the Search and Select window.

2. Search for the entry of the user you want to specify as a member of this group.

3. Choose Select. This returns you to the Create Group window. The user you specified is listed in the Members section.

To remove a user from this group, in the Members section, select the user's name and choose Remove.

To add a group as a member of this group:

1. In the Members section, choose Add Group. This displays the Search and Select window.

2. Perform a search for the entry of the group you want to specify as a member of this group, then choose Select. This returns you to the Create Group window. The group you specified is listed in the Members section.

Roles Assignment

Use this section to assign roles to this group.

To specify the roles that you want to assign to this group, in the Roles Assignment section, in the Select column, select the role that you want to assign to this group.

To remove the role from the group, in the Roles Assignment section, in the Select column, deselect the role that you want to remove from this group.

Basic Information

Realm Name

Enter a relatively short version of the name of the realm for this realm. The name you enter is used to create the DN for this realm entry. This field is mandatory.

Realm Contact

Enter the name of the person to contact for any issues regarding this realm.

Description

Enter any additional information about this realm. This field is optional.

Logo Management

Enable Realm Logo

Select to display the realm logo on the Identity Management Realm Configuration window.

Enable Product Logo

Select to display the product logo on the Identity Management Realm Configuration window.

Note: If both Enable Realm Logo and Enable Product Logo are selected, then the realm logo appears at the top, with the product logo beneath it.

Update Realm Logo

Enter the path and file name of the logo for this realm or, alternatively, navigate to it by choosing Browse.

Resource Type Name

Name that describes the type of resource.

Display Name

Name to be used when the resource type appears in the user interface.

Description

Textual description that explains the purpose of the resource type and any other information you want to enter for it.

Authentication Class

Leave this field blank.

Connection String

Format for constructing the connection string using the values stored in Oracle Internet Directory for the resource. For example:

• For the Oracle9i Database Server or a JDBC data source your connection string format might be:

  orclUserIDAttribute/orclPasswordAttribute @orclFlexAttribute1
  

  This string indicates that the user name is followed by a slash, the password, an at sign (@), and then additional attribute 1—for example, for the TNS name of the database. A connection string that adheres to this format would look similar to this one:

  scott/tiger@db1
  

• For Oracle Express your connection string format might be: server=orclFlexAttribute1/domain=orclFlexAttribute2/user=orclUserIDAttribute/password=orclPasswordAttribute

  This string indicates that server= is followed by the first additional attribute, a slash, domain=, the second additional attribute, a slash, the user name, a slash, and the password. A connection string that adheres to this format would look similar to this one:

  server=a1/domain=a2/user=scott/password=tiger
  

User Name/ID Field Name

Display name of the user name field that appears on the Create Resource window when a user creates new resource access information. Typically, this display name is something like "Username" or "User Name".

Password Field Name

Display name of the password field in the Create Resource window. Typically, this display name is "Password".

Additional Fields

Display name of the additional fields displayed in the Create Resource window beyond user name and password. For example, you might use one of these fields to contain a server or domain name. Typically, this display name is descriptive of the field contents, such as "Server" or "Domain".

Basic Information

First Name

Specifies a user's first name

Last Name

Specifies a user's last name

User ID

Specifies a user ID

Email Address

Specifies a user's e-mail address

Password

Sets an initial password

Confirm Password

Confirms the initial password

User Default Group

Identifies the user's default group

Language

Specifies the user's default language

Time Zone

Specifies the user's time zone

Additional Details

Middle Name

Specifies the user's middle name

Employee Number

Specifies the user's employee number

Job Title

Specifies the user's job title

Department

Identifies the user's department

Manager

Identifies the user's manager

Secretary

Identifies the user's secretary or assistant

Known As

Specifies an alias the user is known as

Maiden Name

Specifies the user's maiden name

Date of Birth

Specifies the user's date of birth

Work Phone

Contains the user's work phone

Home Phone

Contains the user's home phone

Mobile Phone

Contains the user's mobile phone

Pager

Contains the user's pager number

Fax

Contains the user's fax number

Office Address

Identifies the user's office address

Office City

Identifies the user's city

Office State

Identifies the user's state

Office Zip Code

Identifies the user's zip code

Office Country

Identifies the user's country

Home Address

Identifies the user's home address

Photograph

Enables you to upload a user's photograph

Role Assignment

Enables you to assign one or more roles to this user

Resource Access Information

Enables you to grant this user access to resources specific to Oracle Forms and Oracle Reports.

Directory Configuration

Attribute for Login Name

Enter the attribute by which you want users to identify themselves when they log in--for example, UID, EmployeeNumber, SSN.

This is the attribute that uniquely identifies the user. Oracle Application Server Single Sign-On locates the user by using this attribute during login. When you make changes to this attribute, be sure that the user entries contain this attribute and are unique. You can enforce the uniqueness by setting up an attribute uniqueness constraint on this attribute under the user search base.

This field is mandatory.

Attribute for RDN

The attribute used for creating the RDN component of the user entry. The value you enter for this field should not be the same as the value you entered in the Attribute for Login Name field.

User Search Base

Enter the DN of the entry under which the user entries for this realm are located.Make sure you enter the valid DN and users are present under this context. Oracle Application Server Single Sign-On looks for users under this context during user login.

Also, be sure that all the ACLs are set up properly. Any discrepancy among the ACLs will disrupt either the login process or the behavior of Oracle Internet Directory Self-Service Console.

This field is mandatory.

User Creation Base

Enter the DN of the entry under which to create users for this realm. This should be the same as that for the user search base.

If you want to distribute the users under different contexts under the user search base, then you can set this value to be different than that of the user search base. In either case, this DN should be either that of the user search base, or of a context under the user search base. For example, if the user search base is cn=users,dc=acme,dc=com, and you want to divide the users based on the locality, then you can set this value to:

L=America, cn=users,dc=acme,dc=com

L=Asia, cn=users,dc=acme,dc=com

L=Europe, cn=users,dc=acme,dc=com

Note: The Oracle Internet Directory Self-Service Console expects these contexts to be present and the privileges under these contexts to be set correctly.

Group Search Base

Enter the DN of the entry under which group entries for this realm are located. This field is mandatory.

Group Creation Base

Enter the DN of the entry under which to create groups for this realm

Search Return Limit

Enter the maximum number to be displayed in a search. This field is mandatory.

Logo Management

Enable Realm Logo

Select to display the realm logo on the Identity Management Realm Configuration window.

Enable Product Logo

Select to display the product logo on the Identity Management Realm Configuration window.

Note: If both Enable Realm Logo and Enable Product Logo are selected, then the realm logo appears at the top, with the product logo beneath it.

Update Realm Logo

Enter the path and file name of the logo for this realm or, alternatively, navigate to it by choosing Browse.

Find users that match all conditions

Searches for users that match all conditions specified in this window

Find users that match any condition

Searches for users that match any of the conditions specified in this window

Provisioning Status for application

Searches for the user's provisioning status in this application; a separate Provisioning Status field will appear in this window for each provisioning-enabled application that is installed in your environment

Add Another

Enables you to add additional attributes to the search criteria, including address, city, state, country, and manager