Index

A C D E F G H I L M N O P R S U X

A

administering groups and roles

in Oracle Internet Directory, 2.2.2

application deployments

in replicated directory environments, 3.3.2.7

applications

deploying against Oracle Identity Management infrastructure, 2.2.2

assertion services, 2.1

authentication, 2.1

authorization

overview, 2.1

policies, 2.1

C

centralized assertion services, 2.1

centralized user administration, 5.1

cold failover deployment, 3.3.2.4

conflict resolution, 3.3.2.7

containment

group, 3.3.1.3

user, 3.3.1.3

D

DAS service units

See delegated administration service units

delegated administration

of Oracle Identity Management, 2.2.3

service units, 4.2.4

delegating

group management, 4.2.2

user management, 4.2.1

deployment

of Oracle Identity Management components, 3.2.1.1, 3.2.1.2

deployment-time privileges, 4.2.3

directory information tree, 3.3.1.1

attributes, 3.3.1.1

planning, 3.3.1.2

DIT

See directory information tree

E

entitlements, 2.1

entity

Oracle Context, B

F

failover, 3.3.2.4

G

group

containment in a DIT, 3.3.1.3

identities, 3.3.1.3

naming in a DIT, 3.3.1.3

owners, 4.2.2

group management

delegating, 4.2.2

H

high availability, 3.3.2.4

I

identities, 2.1

group, 3.3.1.3

planning, 3.3.1.3

user, 3.3.1.3

considerations, 3.3.1.3

planning, 3.3.1.3

identity administration, 2.1

identity and application provisioning, 2.2.2

identity management, 1.1

benefits, 1.1

components, 1.2

operational privileges, B

realm administrator, 4.2.1

realms

administrator, 4.2.2

delegating group management in, 4.2.2

delegating user management in, 4.2.1

deployment-specific roles, 4.2.1

DIT design, 3.3.1.4

planning, 3.3.1.4

realm-specific policies, 3.3.1.4

root of, 3.3.1.4

terms and concepts, 2.1

entitlements, 2.1

identity, 2.1

identity administration, 2.1

identity policy assertion services, 2.1

metadata repository, 2.1

policy decision services, 2.1

provisioning, 2.1

security principals, 2.1

identity policy assertion services, 2.1

IETF LDAPv3 directory standard, 5.2

inetOrgPerson object class, 3.3.1.3

L

LDAP

standard support

IETF LDAPv3 directory standard, 5.2

load balancer

configuring in replicated Oracle Internet Directory network, 3.3.2.5

M

metadata repository, 2.1

N

naming

group, 3.3.1.3

user, 3.3.1.3

O

object class

inetOrgPerson, 3.3.1.3

orclGroup, 3.3.1.3

orclUserV2, 3.3.1.3

Oracle Application Server Certificate Authority

deployment

recommended, 3.3.2.10

Oracle Identity Management infrastructure, 1.3

Oracle Application Server Single Sign-On

deployment

default, 3.3.2.1

Oracle Identity Management infrastructure, 1.3

Oracle Certificate Authority

X.509v3 certificates, 2.1

Oracle Context

entity, B

Oracle Delegated Administration Services

about, 4.2.4

deployment

default, 3.3.2.1

in a DMZ, 3.3.2.2

Oracle Identity Management infrastructure, 1.3

Oracle Directory Integration and Provisioning

Oracle Identity Management infrastructure, 1.3

Oracle Identity Management, 1.3

architecture, 1.4

centralized repository, 2.2.3

components

deployment, 3.2.1.1, 3.2.1.2

delegated administration, 2.2.3

infrastructure, 1.3

administering, 4.1

deploying applications against, 2.2.2

deployment-time privileges, 4.2.3

integrating, 5.1

Oracle Application Server Certificate Authority, 1.3

Oracle Application Server Single Sign-On, 1.3

Oracle Delegated Administration Services, 1.3

Oracle Directory Integration and Provisioning, 1.3

Oracle Internet Directory, 1.3, 1.3

run-time privileges, 4.2.3

integrating

run-time security service integration, 5.1

user provisioning, 5.1

integration tools

IETF LDAPv3 directory standard, 5.2

Kerberos authentication, 5.2

Oracle Application Server Java Authentication and Authorization Service developer APIs, 5.2

Oracle Directory Integration and Provisioning, 5.2

Oracle Internet Directory plug-in architecture, 5.2

preconfigured connectivity solutions, 5.2

third-party authentication API, 5.2

privileges

delegated administration service units, 4.2.4

Oracle Internet Directory

administering groups and roles, 2.2.2

administrative interfaces, 3.3.1.4

Oracle Internet Directory Self-Service Console, 3.3.1.4

configuration assistant, 3.3.1.4

default DIT, B

directory information tree, 3.3.1.2

Oracle Identity Management infrastructure, 1.3, 1.3

plug-in architecture, 5.2

preconfigured connectivity solutions, 5.2

super user, 4.2.1

user provisioning, 2.2.2

Oracle Internet Directory Configuration Assistant, 3.3.1.4

Oracle Internet Directory Self-Service Console, 3.3.1.4

OracleAS JAAS Provider developer APIs, 5.2

OracleAS Single Sign-On

deployment

geographically distributed, 3.3.2.8

in a DMZ, 3.3.2.2

multiple middle tiers, 3.3.2.3

See Oracle Application Server Single Sign-On

third-party authentication API, 5.2

orclGroup object class, 3.3.1.3

orclUserV2 object class, 3.3.1.3

P

planning group identities, 3.3.1.3

planning user identities, 3.3.1.3

policy decision services, 2.1

privileges

deployment-time, 4.2.3

run-time, 4.2.3

provisioning, 2.1

R

run-time privileges, 4.2.3

run-time security service integration, 5.1

S

security principals, 2.1

service units, 2.3

U

user

containment in a DIT, 3.3.1.3

identities, 3.3.1.3

naming in a DIT, 3.3.1.3

user administration, 5.1

user management

delegating, 4.2.1

user provisioning

in Oracle Internet Directory, 2.2.2

integrating Oracle Identity Management, 5.1

X

X.509v3 certificates, 2.1