Skip Headers
Oracle® Identity Management Integration Guide
10
g
Release 2 (10.1.2)
B14085-02
Home
Solution Area
Index
Next
Contents
List of Examples
List of Figures
List of Tables
Title and Copyright Information
Preface
Audience
Documentation Accessibility
Related Documentation
Conventions
What's New in Oracle Identity Management Integration?
New Features Introduced with Oracle Application Server 10
g
Release 2 (10.1.2)
New Features Introduced with Oracle Internet Directory 10
g
(9.0.4)
New Features Introduced with Oracle Internet Directory Release 9.0.2
New Features Introduced with Oracle Internet Directory Release 3.0.1
New Features Introduced with Oracle Internet Directory Release 2.1.1
Part I Getting Started with Oracle Identity Management Integration
1
Introduction to Oracle Identity Management Integration
1.1
Why
Oracle Identity Management Integration?
1.2
Installation Options
1.3
Synchronization, Provisioning, and the Difference Between Them
1.3.1
Synchronization
1.3.2
Provisioning
1.3.3
How Synchronization and Provisioning Differ
1.4
Components Involved in Oracle Identity Management Integration
1.4.1
Oracle Internet Directory
1.4.2
Oracle Directory Integration and Provisioning Server
1.4.2.1
What the Oracle Directory Integration and Provisioning Server Does
1.4.2.2
About the Oracle Directory Synchronization Service
1.4.2.3
About the Oracle Provisioning Service
1.4.3
Oracle Application Server Single Sign-On
2
Security Features in Oracle Directory Integration and Provisioning
2.1
Authentication in Oracle Directory Integration and Provisioning
2.1.1
Secure Sockets Layer (SSL) and Oracle Directory Integration and Provisioning
2.1.2
Oracle Directory Integration and Provisioning Server Authentication
2.1.2.1
Non-SSL Authentication
2.1.2.2
Authentication in SSL Mode
2.1.3
Profile Authentication
2.2
Access Control and Authorization and Oracle Directory Integration and Provisioning
2.2.1
Access Controls for the Oracle Directory Integration and Provisioning Server
2.2.2
Access Controls for Profiles
2.3
Data Integrity and Oracle Directory Integration and Provisioning
2.4
Data Privacy and Oracle Directory Integration and Provisioning
2.5
Tools Security and Oracle Directory Integration and Provisioning
Part II General Administration of Oracle Directory Integration and Provisioning
3
Oracle Directory Integration and Provisioning Administration Tools
3.1
The Oracle Directory Integration and Provisioning Server Administration Tool
3.1.1
Starting the Oracle Directory Integration and Provisioning Server Administration Tool
3.1.2
Connecting to a Directory Server by Using the Oracle Directory Integration and Provisioning Server Administration Tool
3.1.3
Navigating the Oracle Directory Integration and Provisioning Server Administration Tool
3.1.3.1
Overview of Oracle Directory Integration and Provisioning Server Administration
3.1.3.2
The Oracle Directory Integration and Provisioning Server Administration Menu Bar
3.1.4
Disconnecting from a Directory Server by Using the Oracle Directory Integration and Provisioning Server Administration Tool
3.1.5
Configuring the Display and Duration of Searches in the Oracle Directory Integration and Provisioning Server Administration Tool
3.1.6
Configuring the Display of ACPs in the Oracle Directory Integration and Provisioning Server Administration Tool
3.2
Graphical Tools for Oracle Directory Integration and Provisioning Administration
3.2.1
Oracle Directory Manager
3.2.2
Oracle Internet Directory Self-Service Console
3.2.3
Oracle Internet Directory Provisioning Console
3.3
Command-Line Tools for Oracle Directory Integration and Provisioning Administration
3.3.1
OID Control and OID Monitor
3.3.2
The Oracle Directory Integration and Provisioning Server Registration Tool (odisrvreg)
3.3.3
Directory Integration and Provisioning Assistant (dipassistant)
3.3.4
The Provisioning Subscription Tool (oidprovtool)
3.3.5
Entry and Attribute Management Command-Line Tools
3.3.6
The schemasync Tool
4
Managing the Oracle Directory Integration and Provisioning Server
4.1
Operational Information about the Oracle Directory Integration and Provisioning Server
4.1.1
Directory Integration Profiles
4.1.2
The Oracle Directory Integration and Provisioning Server and Configuration Set Entries
4.1.3
Standard Sequences of Directory Integration and Provisioning Server Events
4.1.4
Oracle Directory Integration and Provisioning Event Propagation in a Multimaster Oracle Internet Directory Replication Environment
4.1.4.1
Directory Synchronization in a Multimaster Oracle Internet Directory Replication Environment
4.1.4.2
Directory Provisioning in a Multimaster Oracle Internet Directory Replication Environment
4.2
Viewing Oracle Directory Integration and Provisioning Server Information
4.2.1
Viewing Oracle Directory Integration and Provisioning Server Runtime Information by Using the Oracle Directory Integration and Provisioning Server Administration Tool
4.2.2
Viewing Oracle Directory Integration and Provisioning Server Runtime Information by Using ldapsearch
4.3
Managing Configuration Set Entries Used by the Oracle Directory Integration and Provisioning Server
4.4
Managing the SSL Certificates of Oracle Internet Directory and Connected Directories
4.5
Starting, Stopping, and Restarting the Oracle Directory Integration and Provisioning Server
4.5.1
Starting the Oracle Directory Integration and Provisioning Server
4.5.2
Stopping the Oracle Directory Integration and Provisioning Server
4.5.3
Restarting the Oracle Directory Integration and Provisioning Server
4.6
Starting and Stopping the Oracle Directory Integration and Provisioning Server in a High Availability Scenario
4.6.1
The Oracle Directory Integration and Provisioning Server in a Real Application Clusters Environment
4.6.1.1
Collocated Configurations
4.6.1.2
Outside-the-Cluster Configurations
4.6.2
The Oracle Directory Integration and Provisioning Server in an Oracle Application Server Cold Failover Cluster (Infrastructure)
4.6.2.1
Collocated Configurations
4.6.2.2
Outside-the-Cluster Configurations
4.7
Setting the Debug Level for the Oracle Directory Integration and Provisioning Server
4.8
Managing Oracle Directory Integration and Provisioning in a Replicated Environment
4.9
Finding the Log Files
4.10
Manually Registering the Oracle Directory Integration and Provisioning Server
4.10.1
Manually Registering the Oracle Directory Integration and Provisioning Server by Using Oracle Enterprise Manager 10
g
Application Server Control Console
Part III Synchronization in Oracle Identity Management Integration
5
Oracle Directory Synchronization Service
5.1
Components Involved in Oracle Directory Synchronization
5.1.1
Connectors for Directory Synchronization
5.1.1.1
Using Connectors with Supported Interfaces
5.1.1.2
Using Connectors Without Supported Interfaces
5.1.2
Directory Synchronization Profiles
5.2
How Synchronization Works
5.2.1
Synchronizing from Oracle Internet Directory to a Connected Directory
5.2.2
Synchronizing from a Connected Directory to Oracle Internet Directory
5.2.3
Synchronizing with Directories with Interfaces Not Supported by Oracle Internet Directory
6
Configuration of Directory Synchronization Profiles
6.1
Registration of Connectors into Oracle Directory Integration and Provisioning
6.2
Sample Synchronization Profiles
6.3
Configuring Connection Details
6.4
Additional Configuration Information
6.4.1
The SearchDeltaSize Parameter
6.4.2
The SkipErrorToSyncNextChange Parameter
6.5
Configuring Mapping Rules
6.5.1
Distinguished Name Mapping
6.5.2
Attribute-Level Mapping
6.5.3
How to Construct a New Mapping File
6.5.4
Supported Attribute Mapping Rules and Examples
6.5.5
Example: A Mapping File for a TAGGED-File Interface
6.5.6
Example: Mapping Files for an LDIF Interface
6.5.7
Updating Mapping Rules
6.5.7.1
Adding an Entry to the Mapping Rules File
6.5.7.2
Modifying an Entry in the Mapping Rules File
6.5.7.3
Deleting an Entry from the Mapping Rules File
6.6
Applying Matching Filters
6.6.1
Filtering Changes with an LDAP Search
6.6.2
Filtering Changes from a Change Log
6.7
Location and Naming of Files
7
Administration of Directory Synchronization
7.1
Managing Synchronization Profiles by Using the Oracle Directory Integration and Provisioning Server Administration Tool
7.1.1
Creating a Profile by Using the Oracle Directory Integration and Provisioning Server Administration Tool
7.1.2
Deleting a Profile by Using the Oracle Directory Integration and Provisioning Server Administration Tool
7.1.3
Changing the Synchronization Status Attribute
7.2
Managing Synchronization Profiles by Using Command-Line Tools
8
Bootstrapping of a Directory in Oracle Directory Integration and Provisioning
8.1
About Directory Bootstrapping in Oracle Directory Integration and Provisioning
8.2
Bootstrapping by Using a Parameter File
8.2.1
Bootstrapping Without Using an LDIF File
8.2.2
Bootstrapping by Using an LDIF File
8.2.2.1
Bootstrapping from an LDIF File by Using Directory-Dependent Tools to Read the Source Directory
8.2.2.2
Bootstrapping from an LDIF File by Using the Directory Integration and Provisioning Assistant to Load Data to Oracle Internet Directory
8.3
Bootstrapping Directly by Using the Default Integration Profile
9
Synchronization with Relational Database Tables
9.1
Preparing the Additional Configuration Information File
9.2
Preparing the Mapping File
9.3
Preparing the Directory Integration Profile
9.4
Example: Synchronizing a Relational Database Table to Oracle Internet Directory
9.4.1
Configuring the Additional Configuration Information File
9.4.2
Configuring the Mapping File
9.4.3
Configuring the Directory Integration Profile
9.4.4
Uploading the Additional Configuration Information File
9.4.5
Uploading the Mapping File
9.4.6
The Synchronization Process
9.4.7
Observations on the Example
10
Synchronization with Oracle Human Resources
10.1
Introduction to Synchronization with Oracle Human Resources
10.2
Data that You Can Import from Oracle Human Resources
10.3
Managing Synchronization Between Oracle Human Resources and Oracle Internet Directory
10.3.1
Task 1: Configure a Directory Integration Profile for the Oracle Human Resources Connector
10.3.2
Task 2: Configure the List of Attributes to Be Synchronized with Oracle Internet Directory
10.3.2.1
Modifying Additional Oracle Human Resources Attributes for Synchronization
10.3.2.2
Excluding Oracle Human Resources Attributes from Synchronization
10.3.2.3
Configuring a SQL SELECT Statement in the Configuration File to Support Complex Selection Criteria
10.3.3
Task 3: Configure Mapping Rules for the Oracle Human Resources Connector
10.3.4
Task 4: Prepare for Synchronization from Oracle Human Resources to Oracle Internet Directory
10.3.4.1
Preparing for Synchronization
10.4
The Synchronization Process
10.5
Bootstrapping Oracle Internet Directory from Oracle Human Resources
11
Synchronization with Third-Party Metadirectory Solutions
11.1
About Change Logs
11.2
Enabling Third-Party Metadirectory Solutions to Synchronize with Oracle Internet Directory
11.2.1
Task 1: Perform Initial Bootstrapping
11.2.2
Task 2: Create a Change Subscription Object in Oracle Internet Directory for the Third-Party Metadirectory Solution
11.2.2.1
About the Change Subscription Object
11.2.2.2
Creating a Change Subscription Object
11.3
The Synchronization Process
11.3.1
How a Connected Directory Retrieves Changes the First Time from Oracle Internet Directory
11.3.2
How a Connected Directory Updates the orclLastAppliedChangeNumber Attribute in Oracle Internet Directory
11.4
Disabling and Deleting Change Subscription Objects
11.4.1
Disabling a Change Subscription Object
11.4.2
Deleting a Change Subscription Object
Part IV Provisioning in Oracle Identity Management
12
Oracle Provisioning Service Concepts
12.1
What is Provisioning?
12.2
Components of the Oracle Provisioning Service
12.3
Understanding Provisioning Concepts
12.3.1
Synchronous Provisioning
12.3.2
Asynchronous Provisioning
12.3.3
Provisioning Data Flow
12.4
Overview of Provisioning Methodologies
12.4.1
Provisioning Users from the Provisioning Console
12.4.2
Provisioning Users that are Synchronized from an External Source
12.4.3
Provisioning Users Created with Command-Line LDAP Tools
12.4.4
Bulk Provisioning
12.4.5
On-Demand Provisioning
12.4.6
Application Bootstrapping
12.5
Organization of User Profiles in Oracle Internet Directory
12.5.1
Organization of Provisioning Entries in the Directory Information Tree
12.5.2
Understanding User Provisioning Statuses
12.5.2.1
Provisioning Status in Oracle Internet Directory
12.5.2.2
Provisioning Status Transitions
12.5.2.3
Upgrading and Coexistence Provisioning Statuses
12.5.2.4
Provisioning Statuses and Exception Handling
12.6
Understanding Provisioning Flow
12.6.1
Creating/Modifying Users with the Provisioning Console
12.6.2
Deleting Users with the Provisioning Console
12.6.3
User Provisioning From an External Source
12.7
How are Administrative Privileges Delegated?
12.7.1
The Provisioning Administration Model
12.7.2
Oracle Delegated Administration Services Privileges
12.7.3
Provisioning Administration Privileges
12.7.4
Application Administration Privileges
12.7.5
Oracle Delegated Administration Services and Provisioning Administration Privileges
12.7.6
Application Administration and Oracle Delegated Administration Services Privileges
12.7.6.1
Application Administration Privileges and Oracle Delegated Administration Services User Creation Privileges
12.7.6.2
Application Administration Privileges and Oracle Delegated Administration Services User Editing Privileges
12.7.6.3
Application Administration Privileges and Oracle Delegated Administration Services User Deletion Privileges
12.7.7
Provisioning and Application Administration Privileges
12.7.8
Oracle Delegated Administration Services, Provisioning, and Application Administration Privileges
13
Deploying Provisioning-Integrated Applications
13.1
Deployment Overview for Provisioning-Integrated Applications
13.2
Registering Applications for Provisioning
13.3
Configuring Application Provisioning Properties
14
Managing with the Provisioning Console
14.1
Managing Users with the Provisioning Console
14.1.1
Searching for Users Based on Provisioning Criteria
14.1.2
Creating Users with the Provisioning Console
14.1.3
Provisioning and De-Provisioning Users with the Provisioning Console
14.2
Managing Applications with the Provisioning Console
14.2.1
Managing Application Defaults
14.2.2
Reloading the Application Cache
15
Understanding the Oracle Provisioning Event Engine
15.1
What are the Oracle Provisioning Events?
15.2
Working with the Oracle Provisioning Event Engine
15.2.1
Creating Custom Event Object Definitions
15.2.2
Defining Custom Event Generation Rules
16
Integration of Provisioning Data with the Oracle E-Business Suite
Part V Integrating with Third-Party Identity Management Systems
17
Considerations for Integrating with Third-Party Directories
17.1
Preliminary Considerations for Integrating with a Third-Party Directory
17.2
Choose Which Directory Is to Be the Central Enterprise Directory
17.2.1
Oracle Internet Directory as the Central Enterprise Directory
17.2.2
Third-Party Directory as the Central Directory
17.2.2.1
Process for Provisioning of a User or Group
17.2.2.2
Process for Modifying a User or Group Entry
17.3
Choose Where to Store Passwords
17.3.1
Advantages and Disadvantages of Storing the Password in One Directory
17.3.2
Advantages and Disadvantages of Storing the Password in Both Directories
17.4
Choose the Structure of the Directory Information Tree
17.4.1
Create Identical DIT Structures on Both Directories
17.4.2
Distinguished Name Mapping and Limitations
17.4.2.1
Example: User Entry Mapping
17.4.2.2
Example: Group Entry Mapping
17.5
Select the Attribute for the Login Name
17.6
Select the User Search Base
17.7
Select the Group Search Base
17.8
Decide How to Address Security Concerns
17.9
Step-by-Step Guide to Configuring Synchronization with a Third-Party Directory
17.10
Limitations of Third-Party Integration in Oracle Internet Directory 10
g
Release 2 (10.1.2)
18
Integration with the Microsoft Active Directory Environment
18.1
Concepts and Architecture of Microsoft Active Directory Integration
18.1.1
Components for Integrating with Microsoft Active Directory
18.1.2
How Oracle Directory Integration and Provisioning Maintains Synchronization
18.1.3
Oracle Internet Directory Schema Elements for Integration with Microsoft Active Directory
18.1.4
Directory Information Tree in an Integration with Microsoft Active Directory
18.1.4.1
About Realms in Oracle Internet Directory
18.1.4.2
Planning the Deployment
18.1.4.3
Example: Integration with a Single Microsoft Active Directory Domain Controller
18.1.4.4
Example: Integration with Multiple Microsoft Active Directory Domain Controllers
18.2
Deployment Options for Integrating with Microsoft Active Directory
18.2.1
Deployments with Oracle Internet Directory as the Central Directory
18.2.2
Deployments with Microsoft Active Directory as the Central Directory
18.3
Configuration of Integration with Microsoft Active Directory
18.3.1
Configuring the Realm
18.3.2
Configuring Synchronization Profiles
18.3.2.1
About the Sample Synchronization Profiles
18.3.2.2
Creating Synchronization Profiles
18.3.2.3
Configuring the Connection Details for Microsoft Active Directory
18.3.2.4
Customizing Mapping Rules
18.3.2.5
Customizing the LDAP Schema
18.3.2.6
Customizing the Search Filter to Get Information from Microsoft Active Directory
18.3.2.7
Synchronizing Deletions from Microsoft Active Directory
18.3.2.8
Synchronizing Passwords
18.3.3
Customizing Access Control Lists
18.3.3.1
Customizing ACLs for Import Profiles
18.3.3.2
Customizing ACLs for Export Profiles
18.3.3.3
ACLs for Other Oracle Components
18.3.4
Configuring the Active Directory Connector for Synchronization in SSL Mode
18.3.5
Considerations for Synchronizing with a Multiple-Domain Microsoft Active Directory Environment
18.3.6
Configuring the Active Directory Connector Profiles
18.3.6.1
Preparing for Synchronization
18.3.6.2
Creating Synchronization Profiles with Express Configuration
18.3.6.3
Customizing Attribute Mapping
18.3.6.4
Final Configuration Requirements
18.3.6.5
Configuring Synchronization Profiles for SSL
18.3.6.6
Additional Considerations
18.3.7
Configuring the Active Directory External Authentication Plug-in
18.3.7.1
Installing Active Directory External Authentication Plug-ins
18.3.7.2
Installing Active Directory External Authentication Plug-ins for Multiple Domains
18.3.7.3
Enabling the Active Directory External Authentication Plug-ins
18.3.7.4
Testing the Active Directory External Authentication Plug-ins
18.3.8
Configuring Windows Native Authentication
18.3.8.1
What are the System Requirements for Windows Native Authentication?
18.3.8.2
Configuring Windows Native Authentication with a Single Microsoft Active Directory Domain
18.3.8.3
Configuring Windows Native Authentication with Multiple Microsoft Active Directory Domains or Forests
18.3.8.4
Implementing Fallback Authentication
18.3.8.5
Understanding the Possible Login Scenarios
18.3.9
Configuring Synchronization of Oracle Internet Directory Foreign Security Principal References with Microsoft Active Directory
18.3.9.1
Tasks to Resolve Foreign Key References
18.4
Managing Integration with Microsoft Active Directory
18.4.1
Tasks After Configuring with Microsoft Active Directory
18.4.2
Typical Management of Integration with Microsoft Active Directory
18.4.2.1
Bootstrapping Data Between Directories
18.4.2.2
Managing the Active Directory External Authentication Plug-in
18.4.2.3
Switching to a Different Microsoft Active Directory Domain Controller in the Same Domain
19
Integration with the Microsoft Windows NT 4.0 Environment
19.1
Overview of Integration with Microsoft Windows NT 4.0
19.2
Installing and Configuring Windows NT External Authentication and Auto-Provisioning Plug-ins
19.2.1
Installing and Enabling the Windows NT External Authentication and Provisioning Plug-ins
19.2.2
Managing the Windows NT External Authentication and Provisioning Plug-ins
19.2.2.1
Enabling the Windows NT External Authentication Plug-in
19.2.2.2
Disabling the Windows NT External Authentication Plug-in
19.2.2.3
Enabling Auto-Provisioning
19.2.2.4
Disabling Auto-Provisioning
19.2.2.5
Removing Windows NT External Authentication and Auto-Provisioning Plug-ins
19.2.2.6
Debugging the Windows NT External Authentication Plug-in
20
Integration with SunONE (iPlanet) Directory Server
20.1
About the SunONE Connector
20.2
SunONE Directory Server Integration Concepts
20.2.1
Synchronization Between Oracle Internet Directory and SunONE Directory Server
20.2.2
Synchronization of Deletions from SunONE Directory Server to Oracle Internet Directory
20.2.3
The SunONE Directory Server External Authentication Plug-in
20.2.3.1
Types of External Authentication
20.2.3.2
How Authentication to an External Repository Works
20.3
Configuring the SunONE Connector
20.3.1
Task 1: Configure the Synchronization Profiles for the SunONE Connector
20.3.1.1
Customizing the Default Integration Profiles
20.3.1.2
Configuring the Connection Details for the SunONE Directory Server
20.3.1.3
Configuring the Default Integration Profile Through the Script iplconfig.sh
20.3.1.4
Configuring Password Synchronization
20.3.1.5
Configuring the Integration Profiles for Two-Way Synchronization
20.3.1.6
Configuring Mapping Rules
20.3.2
Task 2: Configure Access Control Lists
20.3.3
Task 3: Prepare Both Directories for Synchronization
20.3.4
Task 4: (Optional) Configure the SunONE Directory Server External Authentication Plug-in
20.3.4.1
Installing the SunONE Directory Server External Authentication Plug-in
20.3.4.2
Deleting the SunONE Directory External Authentication Plug-in
20.3.4.3
Enabling the SunONE Directory External Authentication Plug-in
20.3.4.4
Disabling the SunONE Directory Server External Authentication Plug-in
20.3.4.5
Enabling and Disabling SunONE Directory External Authentication Plug-in Debugging
20.3.5
Task 5: Start the Synchronization
20.4
The Synchronization Process
20.5
Supported Configurations for Integrating with SunONE Directory Server
Part VI Appendixes
A
Elements in the Oracle Directory Integration and Provisioning Server Administration Tool
A.1
Windows and Fields for Connecting to a Directory Server
A.1.1
Credentials
A.1.2
SSL
A.1.3
Configure Entry Management
A.1.4
Configure Access Control Policy Management
A.1.5
Directory Server Connection
A.1.6
Select Distinguished Name (DN) Path: Tree View
A.1.7
Select Directory Server
A.2
Windows and Fields for Viewing Server Information
A.2.1
Active Processes
A.2.2
Configuration Sets: Integration Profiles
A.3
Windows and Fields for Registering and Editing a Directory Integration Profile
A.3.1
Integration Profiles
A.3.2
General
A.3.3
Execution
A.3.4
Mapping
A.3.5
Status
A.4
Windows and Fields for Configuring the Active Directory Connector
A.4.1
Active Directory Connector Express Synchronization Setup
B
Case Study: A Deployment of Oracle Directory Integration and Provisioning
B.1
Components in the MyCompany Enterprise
B.2
Requirements of the MyCompany Enterprise
B.3
Overall Deployment in the MyCompany Enterprise
B.4
User Creation and Provisioning in the MyCompany Enterprise
B.5
Modification of User Properties in the MyCompany Enterprise
B.6
Deletion of Users in the MyCompany Enterprise
C
Troubleshooting Oracle Directory Integration and Provisioning
C.1
Diagnosing Oracle Directory Integration and Provisioning Server Problems
C.1.1
Diagnosing the Oracle Directory Integration and Provisioning Server in an Infrastructure Installation
C.1.2
Diagnosing the Oracle Directory Integration and Provisioning Server in an Oracle Directory Integration and Provisioning-Only Installation
C.1.3
Troubleshooting Utilities
C.1.3.1
The oditest Utility
C.1.3.2
The DIP Tester Utility
C.2
Problems and Solutions
C.2.1
Oracle Directory Integration and Provisioning Server Errors
C.2.2
Provisioning Errors and Problems
C.2.3
Synchronization Errors and Problems
C.2.4
Windows Native Authentication Error and Problems
C.2.5
Microsoft Active Directory and SunONE Directory Server Synchronization Errors and Problems
C.3
Troubleshooting Provisioning
C.3.1
Viewing Diagnostic Settings
C.3.2
Provisioning-Integration Applications Not Visible in the Provisioning Console
C.3.3
Unable to Create Users
C.3.3.1
Troubleshooting Data Entry Plug-Ins
C.3.3.2
Troubleshooting Provisioning Plug-Ins
C.3.4
Using Provisioning Status to Identify Problems
C.3.5
Users Cannot Log In After Account Creation
C.3.6
Monitoring Provisioning Execution Status with the Oracle Enterprise Manager 10
g
Application Server Control Console
C.3.7
Checklist for Debugging Provisioning
C.4
Troubleshooting Synchronization
C.4.1
Oracle Directory Integration and Provisioning Server Synchronization Process Flow
C.4.1.1
Oracle Directory Integration and Provisioning Server Synchronization Process Flow for an Import Profile
C.4.1.2
Oracle Directory Integration and Provisioning Server Synchronization Process Flow for an Export Profile
C.4.2
Checklist for Debugging Synchronization
C.4.3
Sample Valid Trace Files in Debug Level 63 Mode
C.5
Troubleshooting Integration with Microsoft Active Directory
C.5.1
Debugging the Active Directory Connector
C.5.2
Debugging Windows Native Authentication
C.5.3
Troubleshooting the Microsoft Active Directory External Authentication Plug-in
C.6
Troubleshooting Integration with the SunONE Connector
C.7
Need More Help?
Glossary
Index
