Thursday, December 14, 2017

Identity and Access Management


      Explain the Architecture of Oracle identity Manager?

Ans : The Oracle Identity Manager architecture consists of three tiers

Tier 1: Client:

The Oracle Identity Manager application GUI component reside in this tier. Users log in by using the Oracle Identity Manager client.The Oracle Identity Manager client interacts with the Oracle Identity Manager server, providing it with the user's login credentials.

Tier 2: Application Server:

The second tier implements the business logic, which resides in the Java Data Objects that are managed by the supported J2EE application server (JBoss application server, BEA WebLogic, and IBM WebSphere). The Java Data Objects implement the business logic of the Oracle Identity Manager application, however, they are not exposed to any methods from the outside world. Therefore, to access the business functionality of Oracle Identity Manager, you can use the API layer within the J2EE infrastructure, which provides the lookup and communication mechanism.

Tier 3: Database: 
The third tier consists of the database. This is the layer that is responsible for managing the storage of data within Oracle Identity Manager.

2.     What is Adapter? What Adapters available in OIM?


Ans : An adapter is a Java class that is created by an Oracle Identity Manager user through the Adapter Factory. Process Tasks adapters - automate completion of a process task and are attached to a Process Definition Form ( AD user, OID User, etc) Entity Adapter - automatically populates a field on the OIM User form or custom User Form on pre-update, pre-delete, pre-insert, post-insert, post-update, or post-delete Pre-Populate Adapter - specific type of rule generator attached to a user-created form field that can automatically generate data to the form but does not save that data to the OIM database but does send that information to appropriate directory user object. The data can come from manual entry on a form or from automated entry from the OIM defined forms. Rule Generator - can populate fields automatically on an OIM form or a user-created form and save to the OIM database based on business rules Task Assignment Adapter - automates the assignment of a process task to a user or group

 2.     What do mean by Connectors?
Ans : Connectors are the plugins that helps in integrating OIM with External Sources or Target Systems. In any OIM implementation, Reconciliation and Provisioning is dependent on configuration provided by this Connectors.Connectors are the containers that consist of several components like IT Resources, Process Forms, Adapters, and Event Handlers which are needed to integrate the External Sources, Applications and Target Systems.Scalable and flexible integration architecture is critical for the successful deployment of a company’s provisioning solutions. Oracle Identity Manager offers proven integration architecture and predefined connectors for fast and low-cost deployments.
1.     What is Event Handler?
In an Identity Management system, any action performed by a user or system is called an operation or Event. Examples of Events are creating users, updating users, creating password policy, and so on.
Types:
1. Pre-process Event Handler
2. Post-Process Event Handler
Pre-process Event Handler  :Mostly Pre-process Event Handlers are used for Validation Purpose.
Post-process Event Handler :Post-process Event Handlers are written mainly when there is a need of making changes internally after any event is triggered in OIM. 
1.     For E.g.: Assign Role according to Organization, Auto Assign an email ID using Firstname and Lastname of user and so on.

No comments: