Thursday, May 10, 2012

Oracle Identity and Access Management Components overview

The following section will give you a high level overview of the components present in the Oracle Identity and Access Management suite,.


1            Oracle Identity Manager (OIM)

Oracle Identity Manager is a user provisioning and administration solution, which automates the process of adding, updating, and deleting user accounts from applications and directories. It also improves regulatory compliance by providing granular reports that attest to “who has access to what”. Oracle Identity Manager is available as a stand-alone product or as part of Oracle Identity and Access Management Suite.
Automating user identity provisioning can reduce Information Technology (IT) administration costs and improve security. Provisioning also plays an important role in regulatory compliance.
Key features of Oracle Identity Manager include password management, workflow and policy management, identity reconciliation, reporting and auditing, and extensibility.

For more details about OIM11g: 

2            Oracle Access Manager (OAM)

Oracle Access Manager 11g provides a full range of Web perimeter security functions that include Web single sign-on; authentication and authorization; policy administration; auditing, and more.
Single sign-on (SSO) enables users and groups of users, to access multiple applications after authentication. SSO eliminates multiple sign-on requests. Oracle Access Manager 11g is the Oracle Fusion Middleware 11g single sign-on solution
Oracle Access Manager 11g is a Java Platform, Enterprise Edition (Java EE)-based enterprise-level security application that provides restricted access to confidential information and centralized authentication and authorization services.
A Web server, Application Server, or any third-party application must be protected by a “Webgate” or “mod_osso” instance that is registered with Oracle Access Manager as an agent. To enforce policies, the agent acts as a filter for HTTP requests. Oracle Access Manager enables administrators to define authentication and authorization policies.

For more details about OAM11g Release:

3            Oracle Internet Directory (OID)

Oracle Internet Directory serves as the central user repository for Oracle Identity Management, simplifying user administration in the Oracle environment and providing a standards-based general purpose directory for the diverse enterprise.

For more details about OID11g Release:

4            Oracle Virtual Directory (OVD)

Oracle Virtual Directory is a LDAP version 3 enabled service that provides virtualized abstraction of one or more enterprise data sources into a single directory view. Oracle Virtual Directory provides the ability to integrate LDAP-aware applications into diverse directory environments while minimizing or eliminating the need to change either the infrastructure or the applications. Oracle Virtual Directory supports a diverse set of clients, such as Web Applications and portals, and it can connect to directories, databases, and Web Services as shown in

For more details about OVD11g Release:

5            Oracle WebLogic Server

Oracle WebLogic Server is an enterprise-ready Java application server that supports the deployment of many types of distributed applications in a robust, secure, highly available, and scalable environment. Oracle WebLogic Server is an ideal foundation for building and deploying enterprise Java EE applications based on service-oriented architecture (SOA).

For more details about Oracle Weblogic Server 11g Release: 

 

6            Oracle HTTP Server (OHS)

Oracle HTTP Server is a web server based on the Apache HTTP Server infrastructure. It provides a web listener for applications and the framework for hosting static and dynamic pages and applications over the web. Oracle HTTP Server includes significant enhancements that facilitate load balancing, administration, and configuration. Features such as single sign-on, clustered deployment, and high availability enhance the operation of Oracle HTTP Server.
Oracle HTTP Server enables developers to program their site in a variety of languages and technologies, such as Perl, C, C++, PHP, and Oracle PL/SQL. It can also be a proxy server, both forward and reverse.

For more details about OHS11g Release:

7            Oracle HTTP Server WebGate

Oracle HTTP Server WebGate is a web server plug-in that is shipped ready-to-use with Oracle Access Manager. Oracle HTTP Server WebGate intercepts HTTP requests from users for web resources and forwards them to the access server for authentication and authorization.

For more details about Oracle HTTP Server WebGate 11g Release:

8            Oracle SOA Suite

Oracle SOA Suite is a single process platform for human-centric, system-centric, and document-centric business processes. It is also a complete and integrated process foundation that connects IT, business users, customers, and partners with the applications and processes that drive business. Oracle SOA Suite offers developers drag and drop composition and revision of business processes, resulting in reuse, faster application development, assembly, and solution delivery. The event delivery network of Oracle SOA Suite unifies business events and services in a single declarative environment.
Oracle SOA Suite is a comprehensive, hot-pluggable software suite for building, deploying, and managing a service-oriented architecture (SOA). The components of the suite benefit from common capabilities that include consistent tooling, a single deployment and management model, end-to-end security, and unified metadata management.
Oracle SOA Suite includes the components like Oracle Business Rules, Oracle Business Activity Monitoring (Oracle BAM), Oracle B2B and Oracle BPEL Process Manager.

For more details about Oracle SOA Suite 11g Release:
 http://docs.oracle.com/cd/E15586_01/fusionapps.1111/e15525/fmwcomps.htm#CIHGCFBA

Thursday, April 26, 2012

Identity Management Overview



Identity Management Challenges



Problem
Issues for Users
Issues for Administrators
Lack of centralized user management feature
Too many identities and credentials to manage
Frequent calls to the help desk for password resets and account updates
Lack of centralized web authorization and authentication service
Multiple log-ins to different applications within the enterprise
Inconsistent application security policies
Manual user provisioning process
Delays in getting needed access to applications
Labor intensive, error prone, and difficult to keep in compliance
Lack of identity federation support
Multiple log-ins to applications hosted outside the enterprise
Managing authorization credentials for outside users



Identity Management overview
    Identity Management (IDM) describes the management of individual identities, their authentication, authorization, roles, and privileges/permissions within or across system and enterprise boundaries with the goal of increasing security and productivity while decreasing cost, downtime, and repetitive tasks.

1.Central infrastructure to manage users, roles and access to resources
2.Provisioning capabilities
3. Workflow management
4. Self registration and management
5. Password Policy/Password reset capability
Identity Management - Benefits

       Increasing security and productivity
Decreasing cost, downtime, and repetitive tasks.
Extensive User management
Improve Operational efficiency
Better End User Experience 
    Streamlines partner integrations.
Provides single and multi-domain Single Sign On - solutions