Oracle Fusion Middleware Installation Guide For Identity Management

User Manual:

Open the PDF directly: View PDF .
Page Count: 408 [warning: Documents this large are best viewed by clicking the View PDF Link!]

Contents
Preface
Part I Introduction and Preparation
Part II Installing and Configuring Oracle Identity Management (11.1.1.6.0)
Part III Installing and Configuring Oracle Identity and Access Management (11.1.1.5.0)
Part IV Appendixes

Oracle® Fusion Middleware

Installation Guide for Oracle Identity Management

11g Release 1 (11.1.1)

E12002-11

May 2012

Oracle Fusion Middleware Installation Guide for Oracle Identity Management, 11g Release 1 (11.1.1)

E12002-11

Primary Author: Nisha Singh

Contributors: Don Biasotti, Niranjan Ananthapadmanabha, Heeru Janweja, Deepak Ramakrishnan,

Madhu Martin, Sergio Mendiola, Svetlana Kolomeyskaya, Sid Choudhury, Javed Beg, Eswar Vandanapu,

Harsh Maheshwari, Sidhartha Das, Mark Karlstrand, Daniel Shih, Don Bosco Durai, Kamal Singh, Rey Ong,

Gail Flanegin, Ellen Desmond, Priscilla Lee, Vinaye Misra, Toby Close, Ashish Kolli, Ashok Maram, Peter

LaQuerre, Srinivasa Vedam, Vinay Shukla, Sanjeev Topiwala, Shaun Lin, Prakash Hulikere, Debapriya

Dutta, Sujatha Ramesh, Ajay Keni, Ken Vincent

This software and related documentation are provided under a license agreement containing restrictions on

use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your

license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify,

license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means.

Reverse engineering, disassembly, or decompilation of this software, unless required by law for

interoperability, is prohibited.

The information contained herein is subject to change without notice and is not warranted to be error-free. If

you find any errors, please report them to us in writing.

If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it

on behalf of the U.S. Government, the following notice is applicable:

U.S. GOVERNMENT RIGHTS Programs, software, databases, and related documentation and technical data

delivered to U.S. Government customers are "commercial computer software" or "commercial technical

data" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental

regulations. As such, the use, duplication, disclosure, modification, and adaptation shall be subject to the

restrictions and license terms set forth in the applicable Government contract, and, to the extent applicable

by the terms of the Government contract, the additional rights set forth in FAR 52.227-19, Commercial

Computer Software License (December 2007). Oracle USA, Inc., 500 Oracle Parkway, Redwood City, CA

94065.

This software or hardware is developed for general use in a variety of information management

applications. It is not developed or intended for use in any inherently dangerous applications, including

applications that may create a risk of personal injury. If you use this software or hardware in dangerous

applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other

measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages

caused by use of this software or hardware in dangerous applications.

Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks

of their respective owners.

This software and documentation may provide access to or information on content, products, and services

from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all

warranties of any kind with respect to third-party content, products, and services. Oracle Corporation and

its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of

third-party content, products, or services.

iii

Contents

Preface ............................................................................................................................................................... xix

Audience..................................................................................................................................................... xix

Documentation Accessibility................................................................................................................... xix

Related Documents ................................................................................................................................... xix

Conventions ............................................................................................................................................... xxi

Part I Introduction and Preparation

1 Understanding Oracle Identity Management

1.1 What is Oracle Fusion Middleware?........................................................................................ 1-1

1.1.1 What is Oracle Enterprise Manager Fusion Middleware Control?.............................. 1-1

1.2 What is Oracle Identity Management? .................................................................................... 1-1

1.3 Oracle Identity Management 11g Release 1 (11.1.1.6.0) Components................................. 1-2

1.4 Oracle Identity and Access Management 11g Release 1 (11.1.1.5.0) Components ............ 1-2

1.5 What Does This Guide Cover?.................................................................................................. 1-3

1.5.1 Using This Guide ................................................................................................................. 1-3

1.5.2 Upgrading to Oracle Identity Management (11.1.1.6.0)................................................. 1-4

1.5.3 Upgrading to Oracle Identity and Access Management (11.1.1.5.0)............................ 1-4

1.5.4 Installing Oracle Identity Management (11.1.1.6.0) for High Availability.................. 1-4

1.5.5 Installing Oracle Identity and Access Management (11.1.1.5.0) for High Availability .....

1-5

2 Understanding the Oracle Identity Management Installation

2.1 Overview and Structure of Oracle Identity Management 11g Installation ........................ 2-1

2.1.1 Overview............................................................................................................................... 2-1

2.1.2 Structure of the Installation................................................................................................ 2-2

2.2 Overview of Oracle Identity Management (11.1.1.6.0) Installation..................................... 2-3

2.2.1 Installation Roadmap.......................................................................................................... 2-3

2.2.2 Installation Types: "Install Software - Do Not Configure" vs. "Install and Configure".....

2-6

2.2.2.1 Understanding the "Install Software - Do Not Configure" Option....................... 2-6

2.2.2.2 Understanding the "Install and Configure" Option ................................................ 2-6

2.2.3 Understanding Oracle WebLogic Server Administration Domain Options............... 2-6

2.2.3.1 Create New Domain..................................................................................................... 2-7

2.2.3.2 Extend Existing Domain.............................................................................................. 2-7

2.2.3.3 Expand Cluster ............................................................................................................. 2-7

2.2.3.4 Configure Without a Domain ..................................................................................... 2-7

2.2.4 Installing Components on Separate Systems................................................................... 2-8

2.2.5 Executing the oracleRoot.sh Script on UNIX Platforms................................................. 2-8

2.2.6 Understanding the State of Oracle Identity Management Components After

Installation 2-9

2.2.6.1 Default SSL Configurations ........................................................................................ 2-9

2.2.6.2 Default Passwords........................................................................................................ 2-9

2.2.6.3 Ports Assigned Using Auto Port Configuration ...................................................... 2-9

2.3 Overview of Oracle Identity and Access Management (11.1.1.5.0) Installation............. 2-10

2.3.1 Installation Roadmap....................................................................................................... 2-10

2.3.2 Prerequisite Checks Performed by the Oracle Identity and Access Management

Installer 2-13

2.3.3 Understanding Oracle WebLogic Server Administration Domain Options............ 2-14

2.3.3.1 Create a New Domain............................................................................................... 2-14

2.3.3.2 Extend an Existing Domain...................................................................................... 2-14

2.3.4 Additional Configuration Using the Oracle Identity Manager 11g Configuration

Wizard 2-14

2.3.5 Additional 11g Release 1 (11.1.1) Deployment Information....................................... 2-14

2.3.5.1 Upgrading to 11g Release 1 (11.1.1)........................................................................ 2-15

2.3.5.2 Installing 11g Release 1 (11.1.1) for High Availability ......................................... 2-15

2.3.6 Silent Installation .............................................................................................................. 2-15

2.3.7 Installing Components on Separate Systems................................................................ 2-15

2.3.8 Screens in Oracle Fusion Middleware Configuration Wizard................................... 2-16

2.3.9 Understanding the State of Oracle Identity and Access Management Components

After Installation 2-16

2.3.9.1 Default SSL Configurations ..................................................................................... 2-16

2.3.9.2 Default Passwords..................................................................................................... 2-16

3 Preparing to Install

3.1 Before Installing Oracle Identity Management (11.1.1.6.0)................................................... 3-1

3.1.1 Reviewing System Requirements and Certification....................................................... 3-1

3.1.2 Understanding Oracle Fusion Middleware Support of 64-bit JDK.............................. 3-2

3.1.3 Installing and Configuring Java Access Bridge (Windows Only)................................ 3-2

3.1.4 Managing the Oracle WebLogic Server Node Manager Utility for Oracle Identity

Management Installations 3-3

3.1.5 Optional Environment-Specific Preparation ................................................................... 3-3

3.1.5.1 Using Symbolic Links .................................................................................................. 3-4

3.1.5.2 Installing Oracle Identity Management on DHCP Hosts....................................... 3-4

3.1.5.3 Installing Oracle Identity Management on a Multihomed System....................... 3-4

3.2 Before Installing Oracle Identity and Access Management (11.1.1.5.0)............................. 3-5

3.2.1 Reviewing System Requirements and Certification....................................................... 3-5

3.2.2 Installing and Configuring Java Access Bridge (Windows Only)................................ 3-6

3.2.3 Obtaining the Latest Oracle WebLogic Server and Oracle Fusion Middleware 11g

Software 3-6

3.2.4 Installing Oracle WebLogic Server and Creating the Oracle Middleware Home...... 3-6

3.2.5 Installing Oracle Database.................................................................................................. 3-7

3.2.5.1 Oracle Database 11.1.0.7 Patch Requirements for Oracle Identity Manager ....... 3-8

3.2.6 Creating Database Schema Using the Oracle Fusion Middleware Repository Creation

Utility (RCU) 3-8

3.2.7 Upgrading an Existing Database Schema ....................................................................... 3-9

3.2.8 Installing the Latest Version of Oracle SOA Suite (Oracle Identity Manager Users

Only) 3-9

3.2.8.1 Obtaining the Latest Oracle WebLogic Server and Oracle SOA Suite Software.........

3-10

3.2.8.2 Installing Oracle WebLogic Server and Creating the Middleware Home ........ 3-10

3.2.8.3 Installing the Latest Version of Oracle SOA Suite................................................ 3-10

4 Performing Common Installation Tasks

4.1 Common Installation Tasks for Oracle Identity Management (11.1.1.6.0)......................... 4-1

4.1.1 Identifying Installation Directories ................................................................................... 4-2

4.1.1.1 Oracle Middleware Home Location .......................................................................... 4-2

4.1.1.2 Oracle Home Directory................................................................................................ 4-2

4.1.1.3 WebLogic Server Directory......................................................................................... 4-2

4.1.1.4 Oracle Instance Location ............................................................................................. 4-3

4.1.1.5 Oracle Instance Name.................................................................................................. 4-3

4.1.2 Determining Port Numbers................................................................................................ 4-3

4.1.3 Optional: Configuring the Minimum Amount for Oracle WebLogic Server’s Maximum

Heap Size 4-4

4.1.4 Locating Installation Log Files........................................................................................... 4-5

4.2 Common Installation Tasks for Oracle Identity and Access Management (11.1.1.5.0) .... 4-5

4.2.1 Starting an Installation........................................................................................................ 4-6

4.2.2 Starting Oracle Fusion Middleware Configuration Wizard.......................................... 4-7

4.2.3 List of Executable Files........................................................................................................ 4-8

4.2.4 Identifying Installation Directories ................................................................................ 4-10

4.2.4.1 Oracle Middleware Home Location ....................................................................... 4-10

4.2.4.2 Oracle Home Directory............................................................................................. 4-11

4.2.4.3 Oracle Common Directory ....................................................................................... 4-11

4.2.4.4 Oracle WebLogic Domain Directory ...................................................................... 4-11

4.2.4.5 WebLogic Server Directory...................................................................................... 4-11

4.2.5 Determining Port Numbers............................................................................................. 4-11

4.2.6 Completing an Installation.............................................................................................. 4-12

4.2.7 Locating Installation Log Files........................................................................................ 4-12

4.2.8 Optional: Updating the WebLogic Administrator Server User Name in Oracle

Enterprise Manager Fusion Middleware Control (OIM Only) 4-13

5 Evaluating Single Sign-On Installations

5.1 Important Notes for Oracle Portal 11g Installations .............................................................. 5-1

5.2 Before You Begin......................................................................................................................... 5-1

5.2.1 Review System Requirements and Specifications .......................................................... 5-2

5.2.2 Review Certification Information...................................................................................... 5-2

5.2.3 Review Interoperability and Compatibility Information .............................................. 5-2

5.3 Single Sign-On Options.............................................................................................................. 5-2

5.4 Single Sign-On Preparation Considerations ........................................................................... 5-2

5.5 Oracle Single Sign-On Known Limitations............................................................................. 5-3

5.6 Recommendations ...................................................................................................................... 5-3

Part II Installing and Configuring Oracle Identity Management (11.1.1.6.0)

6 Installing and Configuring Oracle Identity Management (11.1.1.6.0)

6.1 Important Notes Before You Begin .......................................................................................... 6-1

6.2 Installing Oracle Identity Management Using "Install and Configure" Option................ 6-1

6.2.1 Obtaining the Oracle Fusion Middleware Software....................................................... 6-2

6.2.2 Installing Oracle Database.................................................................................................. 6-2

6.2.3 Creating Database Schema Using the Oracle Fusion Middleware Repository Creation

Utility (RCU) 6-3

6.2.4 Required Installation Privileges for Oracle WebLogic Server and Oracle Identity

Management on Windows Operating Systems 6-4

6.2.5 Installing Oracle WebLogic Server 11g Release 1 (10.3.6) and Creating the Middleware

Home 6-5

6.2.6 Creating the Inventory Directory (UNIX Only) .............................................................. 6-5

6.2.7 Starting an Installation........................................................................................................ 6-6

6.2.8 Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.6.0)

Software 6-7

6.3 Configuring Oracle Identity Management for "Install Software - Do Not Configure" Option

6-16

7 Configuring Oracle Internet Directory

7.1 OID with ODSM and Fusion Middleware Control in a New WebLogic Domain ............ 7-2

7.1.1 Appropriate Deployment Environment........................................................................... 7-2

7.1.2 Components Deployed ....................................................................................................... 7-3

7.1.3 Dependencies ....................................................................................................................... 7-3

7.1.4 Procedure .............................................................................................................................. 7-3

7.2 OID with ODIP, ODSM, and Fusion Middleware Control in a New WebLogic Domain .......

7-6

7.2.1 Appropriate Deployment Environment........................................................................... 7-6

7.2.2 Components Deployed ....................................................................................................... 7-6

7.2.3 Dependencies ....................................................................................................................... 7-6

7.2.4 Procedure .............................................................................................................................. 7-7

7.3 OID and OVD with ODSM in a New WebLogic Domain .................................................... 7-9

7.3.1 Appropriate Deployment Environment........................................................................ 7-10

7.3.2 Components Deployed .................................................................................................... 7-10

7.3.3 Dependencies .................................................................................................................... 7-10

7.3.4 Procedure ........................................................................................................................... 7-10

7.4 Only OID in an Existing WebLogic Domain........................................................................ 7-13

7.4.1 Appropriate Deployment Environment........................................................................ 7-14

7.4.2 Components Deployed .................................................................................................... 7-14

7.4.3 Dependencies .................................................................................................................... 7-14

7.4.4 Procedure ........................................................................................................................... 7-14

7.5 Only OID Without a WebLogic Domain .............................................................................. 7-17

7.5.1 Appropriate Deployment Environment........................................................................ 7-17

7.5.2 Components Deployed .................................................................................................... 7-17

vii

7.5.3 Dependencies .................................................................................................................... 7-17

7.5.4 Procedure........................................................................................................................... 7-17

7.6 Verifying OID Installation...................................................................................................... 7-21

7.7 Getting Started with OID After Installation......................................................................... 7-22

8 Configuring Oracle Virtual Directory

8.1 OVD with ODSM and Fusion Middleware Control in a New WebLogic Domain........... 8-1

8.1.1 Appropriate Deployment Environment........................................................................... 8-1

8.1.2 Components Deployed ....................................................................................................... 8-1

8.1.3 Dependencies ....................................................................................................................... 8-2

8.1.4 Procedure.............................................................................................................................. 8-2

8.2 Only OVD in an Existing WebLogic Domain......................................................................... 8-3

8.2.1 Appropriate Deployment Environment........................................................................... 8-4

8.2.2 Components Deployed ....................................................................................................... 8-4

8.2.3 Dependencies ....................................................................................................................... 8-4

8.2.4 Procedure.............................................................................................................................. 8-4

8.3 Only OVD Without a WebLogic Domain................................................................................ 8-6

8.3.1 Appropriate Deployment Environment........................................................................... 8-6

8.3.2 Components Deployed ....................................................................................................... 8-6

8.3.3 Dependencies ....................................................................................................................... 8-6

8.3.4 Procedure.............................................................................................................................. 8-6

8.4 Verifying OVD............................................................................................................................. 8-9

8.5 Getting Started with OVD After Installation.......................................................................... 8-9

9 Configuring Oracle Directory Integration Platform

9.1 Prerequisites ................................................................................................................................ 9-1

9.1.1 Option 1: ODIP with Oracle Internet Directory .............................................................. 9-1

9.1.2 Option 2: ODIP with Oracle Directory Server Enterprise Edition (ODSEE)............... 9-1

9.1.2.1 Installing Oracle Directory Server Enterprise Edition (ODSEE) ........................... 9-2

9.1.2.2 Setting Up Oracle Directory Server Enterprise Edition (ODSEE) ......................... 9-2

9.2 Configuring ODIP with Oracle Internet Directory (OID)..................................................... 9-2

9.2.1 ODIP with Fusion Middleware Control in a New WebLogic Domain ....................... 9-3

9.2.1.1 Appropriate Deployment Environment.................................................................... 9-3

9.2.1.2 Components Deployed................................................................................................ 9-3

9.2.1.3 Dependencies ................................................................................................................ 9-3

9.2.1.4 Procedure....................................................................................................................... 9-3

9.2.2 Only ODIP in an Existing WebLogic Domain................................................................. 9-5

9.2.2.1 Appropriate Deployment Environment.................................................................... 9-5

9.2.2.2 Components Deployed................................................................................................ 9-6

9.2.2.3 Dependencies ................................................................................................................ 9-6

9.2.2.4 Procedure....................................................................................................................... 9-6

9.2.3 Configuring ODIP when OID is Running in SSL Mode 2 - Server Only Authentication.

9-8

9.3 Configuring ODIP with Oracle Unified Directory (OUD).................................................... 9-8

9.4 Configuring ODIP with Oracle Directory Server Enterprise Edition (ODSEE)................. 9-8

9.4.1 ODIP with ODSEE in an Existing WebLogic Domain ................................................... 9-9

viii

9.4.1.1 Components Deployed................................................................................................ 9-9

9.4.1.2 Dependencies ................................................................................................................ 9-9

9.4.1.3 Procedure....................................................................................................................... 9-9

9.4.2 ODIP and ODSEE in a New WebLogic Domain.......................................................... 9-10

9.4.2.1 Components Deployed............................................................................................. 9-10

9.4.2.2 Dependencies ............................................................................................................. 9-10

9.4.2.3 Procedure.................................................................................................................... 9-10

9.4.3 Post-Configuration Steps................................................................................................. 9-12

9.5 Verifying ODIP......................................................................................................................... 9-13

9.6 Getting Started with ODIP After Installation ...................................................................... 9-13

10 Configuring Oracle Directory Services Manager

10.1 Only ODSM in a New WebLogic Domain ........................................................................... 10-1

10.1.1 Appropriate Deployment Environment........................................................................ 10-1

10.1.2 Components Deployed .................................................................................................... 10-1

10.1.3 Dependencies .................................................................................................................... 10-1

10.1.4 Procedure........................................................................................................................... 10-2

10.2 Only ODSM in an Existing WebLogic Domain................................................................... 10-3

10.2.1 Appropriate Deployment Environment........................................................................ 10-3

10.2.2 Components Deployed .................................................................................................... 10-3

10.2.3 Dependencies .................................................................................................................... 10-3

10.2.4 Procedure........................................................................................................................... 10-3

10.3 Verifying ODSM....................................................................................................................... 10-5

10.4 Getting Started with ODSM After Installation.................................................................... 10-5

11 Configuring Oracle Identity Federation

11.1 Using the Information in This Chapter................................................................................. 11-1

11.2 Understanding OIF Deployments ......................................................................................... 11-1

11.3 Understanding OIF Basic and Advanced Deployments.................................................... 11-2

11.3.1 Basic Deployment ............................................................................................................. 11-2

11.3.2 Advanced Deployments .................................................................................................. 11-2

11.4 Configuring Oracle HTTP Server for OIF ........................................................................... 11-3

11.5 Performing Basic Oracle Identity Federation Configurations........................................... 11-4

11.5.1 Appropriate Deployment Environment........................................................................ 11-4

11.5.2 Components Deployed .................................................................................................... 11-4

11.5.3 Dependencies .................................................................................................................... 11-5

11.5.4 Procedure........................................................................................................................... 11-5

11.6 Performing Advanced Oracle Identity Federation Configurations.................................. 11-7

11.6.1 Appropriate Deployment Environment........................................................................ 11-7

11.6.2 Components Deployed .................................................................................................... 11-7

11.6.3 Dependencies .................................................................................................................... 11-7

11.6.4 Procedure........................................................................................................................... 11-8

11.7 Advanced Example: Configuring OIF with OID in a New WebLogic Domain for LDAP

Authentication, User Store, and Federation Store 11-13

11.7.1 Appropriate Deployment Environment...................................................................... 11-13

11.7.2 Components Deployed .................................................................................................. 11-13

11.7.3 Dependencies .................................................................................................................. 11-13

11.7.4 Procedure......................................................................................................................... 11-14

11.8 Advanced Example: Configuring OIF in a New or Existing WebLogic Domain with

RDBMS Data Stores 11-17

11.8.1 Appropriate Deployment Environment...................................................................... 11-17

11.8.2 Components Deployed .................................................................................................. 11-17

11.8.3 Dependencies .................................................................................................................. 11-18

11.8.4 Procedure......................................................................................................................... 11-18

11.9 Verifying OIF.......................................................................................................................... 11-22

11.10 Getting Started with OIF After Installation ....................................................................... 11-22

12 Configuring Oracle Unified Directory with Oracle Identity Management

11.1.1.6.0

12.1 Before You Begin...................................................................................................................... 12-1

12.1.1 Review System Requirements and Specifications ....................................................... 12-1

12.1.2 Review Certification Information................................................................................... 12-1

12.2 Configuring only Oracle Unified Directory (OUD)............................................................ 12-2

12.3 Configuring Oracle Unified Directory (OUD) with ODSM............................................... 12-2

12.4 Configuring OUD/ODSM/ODIP/Fusion Middleware Control and OVD/ODSM ..... 12-2

12.4.1 Part I: Configuring OVD with ODSM and Fusion Middleware Control in a New

WebLogic Administration Domain 12-3

12.4.1.1 Dependencies ............................................................................................................. 12-3

12.4.1.2 Procedure.................................................................................................................... 12-3

12.4.2 Part II: Configuring OUD/ODSM/ODIP and Fusion Middleware Control in a New

WebLogic Administration Domain 12-5

12.4.2.1 Prerequisites ............................................................................................................... 12-5

12.4.2.2 Dependencies ............................................................................................................. 12-6

12.4.2.3 Procedure.................................................................................................................... 12-6

12.4.2.4 Post-Configuration Steps.......................................................................................... 12-8

Part III Installing and Configuring Oracle Identity and Access Management

(11.1.1.5.0)

13 Installing Oracle Identity and Access Management (11.1.1.5.0)

13.1 Installing Oracle Identity and Access Management (11.1.1.5.0) ....................................... 13-1

13.1.1 Products Installed............................................................................................................. 13-1

13.1.2 Dependencies .................................................................................................................... 13-2

13.1.3 Procedure........................................................................................................................... 13-2

13.2 Understanding the Directory Structure After Installation................................................. 13-5

13.3 After Installing the Oracle Identity and Access Management Software.......................... 13-5

13.4 Configuring Oracle Identity and Access Management Products ..................................... 13-5

14 Understanding Domain Extension Scenarios

14.1 Overview................................................................................................................................... 14-1

14.2 Important Notes Before You Begin ....................................................................................... 14-2

14.3 Domain Extension Scenarios.................................................................................................. 14-3

14.3.1 Extending an Oracle Identity Management 11.1.1.5.0 Domain to Support OIM, OAM,

OAAM or OIN on the Local Machine 14-3

14.3.2 Understanding Joint Configuration and Domain Extension Scenarios for OIM, OAM,

OAAM, and OIN on the Local Machine 14-4

14.4 Starting the Administration Server on the Local Machine ................................................ 14-5

14.5 Creating Managed Servers on a Remote Machine.............................................................. 14-5

14.5.1 Installing Oracle WebLogic Server and Oracle Identity Management Suite on the

Remote Machine 14-5

14.5.2 Creating and Starting Managed Servers on a Remote Machine................................ 14-5

15 Configuring Oracle Identity Navigator

15.1 General Prerequisites............................................................................................................... 15-1

15.2 Installing OIN........................................................................................................................... 15-1

15.3 Important Notes Before You Begin ....................................................................................... 15-2

15.4 Configuring OIN in a New WebLogic Domain................................................................... 15-2

15.4.1 Appropriate Deployment Environment........................................................................ 15-2

15.4.2 Components Deployed .................................................................................................... 15-3

15.4.3 Dependencies .................................................................................................................... 15-3

15.4.4 Procedure........................................................................................................................... 15-3

15.5 OIN with OIM, OAM, and OAAM ....................................................................................... 15-4

15.5.1 Appropriate Deployment Environment........................................................................ 15-5

15.5.2 Components Deployed .................................................................................................... 15-5

15.5.3 Dependencies .................................................................................................................... 15-5

15.5.4 Procedure........................................................................................................................... 15-5

15.6 Starting the Servers.................................................................................................................. 15-7

15.7 Verifying OIN........................................................................................................................... 15-7

15.8 Getting Started with Oracle OIN After Installation............................................................ 15-8

16 Configuring Oracle Identity Manager

16.1 OIM Server Configuration Workflow................................................................................... 16-1

16.2 Important Notes Before You Start Configuring OIM......................................................... 16-2

16.3 Creating a new WebLogic Domain for OIM and SOA....................................................... 16-4

16.3.1 Appropriate Deployment Environment........................................................................ 16-4

16.3.2 Components Deployed .................................................................................................... 16-4

16.3.3 Dependencies .................................................................................................................... 16-4

16.3.4 Procedure........................................................................................................................... 16-4

16.4 Starting the Servers.................................................................................................................. 16-6

16.5 Configuring OIM Server, Design Console, and Remote Manager ................................... 16-7

16.5.1 Scope of Configuration Using the Oracle Identity Manager 11g Configuration Wizard..

16-7

16.5.2 Scenario 1: Oracle Identity Manager Server and Design Console on Different Machines

16-7

16.5.3 Scenario 2: Oracle Identity Manager Server and Remote Manager on Different

Machines 16-8

16.5.4 Scenario 3: Oracle Identity Manager Server, Design Console, and Remote Manager on

a Single Windows Machine 16-9

16.6 Before Configuring OIM Server, Design Console, or Remote Manager.......................... 16-9

16.6.1 Prerequisites for Configuring OIM Server.................................................................... 16-9

16.6.2 Prerequisites for Configuring Only OIM Design Console on a Different Machine ..........

16-10

16.6.3 Prerequisites for Configuring Only OIM Remote Manager on a Different Machine ........

16-10

16.7 Starting the Oracle Identity Manager 11g Configuration Wizard .................................. 16-10

16.8 Configuring OIM Server....................................................................................................... 16-11

16.8.1 Appropriate Deployment Environment...................................................................... 16-11

16.8.2 Components Deployed .................................................................................................. 16-11

16.8.3 Dependencies .................................................................................................................. 16-11

16.8.4 Procedure......................................................................................................................... 16-11

16.8.5 Completing the Prerequisites for Enabling LDAP Synchronization....................... 16-15

16.8.5.1 Preconfiguring the Identity Store.......................................................................... 16-16

16.8.5.2 Creating Adapters in Oracle Virtual Directory................................................... 16-19

16.8.6 Running the LDAP Post-Configuration Utility.......................................................... 16-31

16.8.7 Verifying the LDAP Synchronization.......................................................................... 16-33

16.8.8 Post-Configuration Steps............................................................................................... 16-33

16.8.9 Setting oamEnabled Parameter for Identity Virtualization Library ....................... 16-34

16.8.10 Enabling LDAP Sync after Installing and Configuring OIM Server at a Later Point........

16-35

16.9 Installing and Configuring Only OIM Design Console on Windows............................ 16-35

16.10 Configuring OIM Design Console....................................................................................... 16-35

16.10.1 Appropriate Deployment Environment...................................................................... 16-36

16.10.2 Components Deployed .................................................................................................. 16-36

16.10.3 Dependencies .................................................................................................................. 16-36

16.10.4 Procedure......................................................................................................................... 16-36

16.10.5 Post-Configuration Steps............................................................................................... 16-37

16.10.6 Updating the xlconfig.xml File to Change the Port for Design Console ................ 16-38

16.10.7 Configuring Design Console to Use SSL..................................................................... 16-38

16.11 Configuring OIM Remote Manager.................................................................................... 16-39

16.11.1 Appropriate Deployment Environment...................................................................... 16-39

16.11.2 Components Deployed .................................................................................................. 16-40

16.11.3 Dependencies .................................................................................................................. 16-40

16.11.4 Procedure......................................................................................................................... 16-40

16.12 Verifying the OIM Installation............................................................................................. 16-41

16.13 Setting Up Integration with OAM....................................................................................... 16-42

16.14 List of Supported Languages ............................................................................................... 16-42

16.15 Using the Diagnostic Dashboard......................................................................................... 16-42

16.16 Getting Started with OIM After Installation...................................................................... 16-43

17 Configuring Oracle Access Manager

17.1 Prerequisites ............................................................................................................................. 17-1

17.2 Important Notes Before You Begin ....................................................................................... 17-2

17.3 Installing OAM......................................................................................................................... 17-2

17.4 Oracle Access Manager Domain Configuration Template................................................ 17-2

17.5 OAM in a New WebLogic Domain ....................................................................................... 17-3

17.5.1 Appropriate Deployment Environment........................................................................ 17-3

17.5.2 Components Deployed .................................................................................................... 17-3

xii

17.5.3 Dependencies .................................................................................................................... 17-3

17.5.4 Procedure........................................................................................................................... 17-3

17.6 OAM and OIN in a New WebLogic Domain....................................................................... 17-5

17.6.1 Appropriate Deployment Environment........................................................................ 17-5

17.6.2 Components Deployed .................................................................................................... 17-5

17.6.3 Dependencies .................................................................................................................... 17-6

17.6.4 Procedure........................................................................................................................... 17-6

17.7 OAM in a Domain Containing OAAM and OIN................................................................ 17-7

17.7.1 Appropriate Deployment Environment........................................................................ 17-7

17.7.2 Components Deployed .................................................................................................... 17-8

17.7.3 Dependencies .................................................................................................................... 17-8

17.7.4 Procedure........................................................................................................................... 17-8

17.8 Starting the Servers.................................................................................................................. 17-9

17.9 Optional Post-Installation Tasks.......................................................................................... 17-10

17.10 Verifying the OAM Installation........................................................................................... 17-10

17.11 Setting Up OAM Agents....................................................................................................... 17-10

17.11.1 Setting Up Oracle HTTP Server WebGate .................................................................. 17-10

17.11.1.1 Installing and Configuring WebGate ................................................................... 17-10

17.11.1.2 Registering WebGate as a Partner Application................................................... 17-11

17.11.1.3 Restarting Managed Servers .................................................................................. 17-11

17.11.2 Setting Up the OSSO Agent .......................................................................................... 17-11

17.11.2.1 Installing mod_osso ................................................................................................ 17-11

17.11.2.2 Restarting Managed Servers .................................................................................. 17-12

17.12 Setting Up Integration with OIM......................................................................................... 17-12

17.13 Getting Started with OAM After Installation .................................................................... 17-12

18 Configuring Oracle Adaptive Access Manager

18.1 Overview................................................................................................................................... 18-1

18.2 Prerequisites ............................................................................................................................. 18-2

18.3 Important Notes Before You Begin ....................................................................................... 18-2

18.4 Installing OAAM...................................................................................................................... 18-2

18.5 OAAM in a New WebLogic Domain.................................................................................... 18-3

18.5.1 Appropriate Deployment Environment........................................................................ 18-3

18.5.2 Components Deployed .................................................................................................... 18-3

18.5.3 Dependencies .................................................................................................................... 18-3

18.5.4 Procedure........................................................................................................................... 18-3

18.6 Configuring Oracle Adaptive Access Manager (Offline)................................................... 18-5

18.6.1 Components Deployed .................................................................................................... 18-5

18.6.2 Dependencies .................................................................................................................... 18-5

18.6.3 Procedure........................................................................................................................... 18-6

18.7 Starting the Servers.................................................................................................................. 18-7

18.8 Post-Installation Steps ............................................................................................................. 18-7

18.9 Verifying the OAAM Installation........................................................................................ 18-10

18.10 Migrating Policy and Credential Stores.............................................................................. 18-11

18.10.1 Creating JPS Root............................................................................................................ 18-11

18.10.2 Reassociating the Policy and Credential Store........................................................... 18-11

18.11 Getting Started with OAAM After Installation................................................................. 18-12

xiii

19 OAM and OAAM Joint Domain Configuration Scenarios

19.1 Prerequisites ............................................................................................................................. 19-1

19.2 Important Notes Before You Begin ....................................................................................... 19-2

19.3 Installing Oracle Identity and Access Management 11g Release 1 (11.1.1) ..................... 19-2

19.4 OAM, OIM, and OIN in a New WebLogic Domain ........................................................... 19-2

19.4.1 Appropriate Deployment Environment........................................................................ 19-3

19.4.2 Components Deployed .................................................................................................... 19-3

19.4.3 Dependencies .................................................................................................................... 19-3

19.4.4 Procedure........................................................................................................................... 19-3

19.5 OAM, OAAM, and OIN in a New WebLogic Domain ...................................................... 19-5

19.5.1 Appropriate Deployment Environment........................................................................ 19-5

19.5.2 Components Deployed .................................................................................................... 19-5

19.5.3 Dependencies .................................................................................................................... 19-6

19.5.4 Procedure........................................................................................................................... 19-6

19.6 Starting the Servers.................................................................................................................. 19-8

19.7 Getting Started with OAM After Installation...................................................................... 19-8

19.8 Getting Started with OAAM After Installation................................................................... 19-8

20 Installing and Configuring Oracle Entitlements Server

20.1 Overview of Oracle Entitlements Server 11g Installation.................................................. 20-1

20.2 Installing Oracle Entitlements Server Administration Server........................................... 20-2

20.2.1 Prerequisites ...................................................................................................................... 20-2

20.2.2 Procedure........................................................................................................................... 20-2

20.2.2.1 System Requirements and Certification................................................................. 20-2

20.2.2.2 Obtaining the Oracle Fusion Middleware Software............................................. 20-2

20.2.2.3 Installing Oracle WebLogic Server and Creating the Oracle Middleware Home.......

20-3

20.2.2.4 Installing Oracle Database (Recommended) ......................................................... 20-3

20.2.2.5 Creating a Schema for Oracle Entitlement Server ................................................ 20-3

20.2.2.6 Starting the Installer.................................................................................................. 20-4

20.2.2.7 Installation Screens and Instructions...................................................................... 20-5

20.2.2.8 Verifying Oracle Entitlements Server Installation................................................ 20-7

20.3 Configuring Oracle Entitlements Server Administration Server...................................... 20-7

20.3.1 Components Deployed .................................................................................................... 20-7

20.3.2 Prerequisites ...................................................................................................................... 20-7

20.3.2.1 Installing Oracle Entitlements Server..................................................................... 20-8

20.3.2.2 Editing the weblogic.policy file............................................................................... 20-8

20.3.2.3 Extracting Apache Derby Template (Optional) .................................................... 20-8

20.3.3 Procedure........................................................................................................................... 20-8

20.3.4 Starting the Administration Server.............................................................................. 20-10

20.3.5 Post-Configuration ......................................................................................................... 20-10

20.3.6 Verifying Oracle Entitlements Server Configuration................................................ 20-11

20.4 Installing Oracle Entitlements Server Client...................................................................... 20-12

20.4.1 Prerequisites .................................................................................................................... 20-12

20.4.2 Obtaining Oracle Entitlements Server Client Software............................................. 20-12

20.4.3 Installing Oracle Entitlements Server Client .............................................................. 20-12

xiv

20.4.4 Verifying Oracle Entitlements Server Client Installation ......................................... 20-13

20.5 Configuring Oracle Entitlements Server Client................................................................. 20-13

20.5.1 Configuring Security Modules in a Controlled Mode (Quick Configuration)...... 20-14

20.5.1.1 Configuring Java Security Module in a Controlled Mode ................................ 20-14

20.5.1.2 Configuring RMI Security Module in a Controlled Mode ................................ 20-14

20.5.1.3 Configuring Web Service Security Module in a Controlled Mode .................. 20-15

20.5.1.4 Configuring Oracle WebLogic Server Security Module in a Controlled Mode..........

20-15

20.5.2 Configuring Distribution Modes.................................................................................. 20-15

20.5.2.1 Configuring Controlled Distribution.................................................................... 20-16

20.5.2.2 Configuring Non-Controlled and Controlled Pull Distribution Mode........... 20-16

20.5.3 Configuring Security Module ....................................................................................... 20-16

20.5.3.1 Creating Java Security Module.............................................................................. 20-17

20.5.3.2 Creating Multi-Protocol Security Module ........................................................... 20-20

20.5.3.3 Creating WebLogic Security Module ................................................................... 20-21

20.5.3.4 Configuring the PDP Proxy Client........................................................................ 20-22

20.5.4 Creating the OES Client Domain.................................................................................. 20-22

20.5.5 Locating Security Module Instances............................................................................ 20-25

20.5.6 Using the Java Security Module ................................................................................... 20-25

20.6 Getting Started with Oracle Entitlements Server After Installation............................... 20-25

21 Migrating from Domain Agent to Oracle HTTP Server 10g Webgate for OAM

21.1 Installing and Configuring Oracle HTTP Server 11g (11.1.1.5.0) ..................................... 21-1

21.2 Provisioning Oracle HTTP Server 10g Webgate for OAM Profile ................................... 21-2

21.3 Installing Oracle HTTP Server 10g Webgate for OAM ...................................................... 21-2

21.4 Configuring mod_weblogic.................................................................................................... 21-2

21.5 Optional: Configuring Host Identifier.................................................................................. 21-3

21.6 Updating OIM Server Configuration.................................................................................... 21-3

21.7 Optional: Disabling Domain Agent....................................................................................... 21-4

21.8 Optional: Updating Oracle Identity Manager Configuration ........................................... 21-5

22 Installing and Configuring Oracle HTTP Server 11g Webgate for OAM

22.1 Installation Overview.............................................................................................................. 22-1

22.2 Preparing to Install Oracle HTTP Server 11g Webgate for Oracle Access Manager ..... 22-3

22.2.1 Oracle Fusion Middleware Certification....................................................................... 22-3

22.2.2 Installing and Configuring OAM 11g............................................................................ 22-3

22.2.3 Installing and Configuring Oracle HTTP Server 11g.................................................. 22-3

22.2.4 Installing Third-Party GCC Libraries (Linux and Solaris Operating Systems Only)........

22-4

22.2.4.1 Verifying the GCC Libraries Version on Linux and Solaris Operating Systems ........

22-4

22.2.5 Prerequisites for 64-Bit Oracle HTTP Server 11g Webgates on Windows 2003 and

Windows 2008 64-Bit Platforms 22-5

22.3 Installing Oracle HTTP Server 11g Webgate for Oracle Access Manager....................... 22-5

22.3.1 Launching the Installer .................................................................................................... 22-5

22.3.2 Installation Flow and Procedure .................................................................................... 22-6

22.4 Post-Installation Steps ............................................................................................................. 22-7

22.5 Verifying the Oracle HTTP Server 11g Webgate for Oracle Access Manager ................ 22-8

22.6 Getting Started with a New Oracle HTTP Server 11g Webgate Agent for Oracle Access

Manager 22-9

22.6.1 Register the New Webgate Agent .................................................................................. 22-9

22.6.2 Copy Generated Files and Artifacts to the Webgate Instance Location ................. 22-13

22.6.3 Restart the Oracle HTTP Server Instance.................................................................... 22-14

23 Lifecycle Management

23.1 How Lifecycle Events Impact Integrated Components...................................................... 23-1

23.2 LCM for Oracle Identity Manager......................................................................................... 23-1

23.3 LCM for Oracle Access Manager........................................................................................... 23-2

23.4 LCM for Oracle Adaptive Access Manager ......................................................................... 23-2

23.5 LCM for Oracle Identity Navigator....................................................................................... 23-3

23.6 References ................................................................................................................................. 23-3

Part IV Appendixes

A Oracle Identity Management 11.1.1.6.0 Software Installation Screens

A.1 Welcome...................................................................................................................................... A-1

A.2 Install Software Updates........................................................................................................... A-2

A.3 Select Installation Type ............................................................................................................. A-3

A.4 Prerequisite Checks ................................................................................................................... A-4

A.5 Select Domain............................................................................................................................. A-5

A.6 Specify Installation Location .................................................................................................... A-8

A.7 Specify Security Updates .......................................................................................................... A-9

A.8 Configure Components........................................................................................................... A-10

A.9 Configure Ports ........................................................................................................................ A-11

A.10 Specify Schema Database ....................................................................................................... A-12

A.11 Specify Oracle Virtual Directory Information ..................................................................... A-14

A.12 Specify OID Administrator Password .................................................................................. A-15

A.13 Select Oracle Identity Federation Configuration Type....................................................... A-16

A.14 Specify Oracle Identity Federation Details........................................................................... A-17

A.15 Installation Summary .............................................................................................................. A-18

A.16 Installation Progress ................................................................................................................ A-19

A.17 Configuration Progress ........................................................................................................... A-20

A.18 Installation Complete .............................................................................................................. A-21

B Oracle Identity and Access Management 11.1.1.5.0 Software Installation

Screens

B.1 Welcome...................................................................................................................................... B-1

B.2 Install Software Updates........................................................................................................... B-2

B.3 Prerequisite Checks ................................................................................................................... B-3

B.4 Specify Installation Location .................................................................................................... B-4

B.5 Installation Summary ................................................................................................................ B-6

B.6 Installation Progress .................................................................................................................. B-6

B.7 Installation Complete ................................................................................................................ B-7

xvi

C Oracle Identity Manager Configuration Screens

C.1 Welcome...................................................................................................................................... C-1

C.2 Components to Configure ........................................................................................................ C-2

C.3 Database ...................................................................................................................................... C-3

C.4 WebLogic Admin Server........................................................................................................... C-5

C.5 OIM Server.................................................................................................................................. C-6

C.6 BI Publisher................................................................................................................................. C-7

C.7 LDAP Server............................................................................................................................... C-7

C.8 LDAP Server Continued ........................................................................................................... C-8

C.9 Configuration Summary........................................................................................................... C-9

D Starting or Stopping the Oracle Stack

D.1 Starting the Stack........................................................................................................................ D-1

D.2 Stopping the Stack ..................................................................................................................... D-3

D.3 Restarting Servers ...................................................................................................................... D-4

E Preconfiguring Oracle Directory Server Enterprise Edition (ODSEE)

F Deinstalling and Reinstalling Oracle Identity Management

F.1 Deinstalling Oracle Identity Management............................................................................. F-1

F.1.1 Deinstalling the Oracle Identity Management Oracle Home....................................... F-1

F.1.2 Deinstalling the Oracle Common Home......................................................................... F-3

F.1.3 Deinstalling Applications Registered with Oracle Single Sign-On 10g Release 10.1.4.3.0

F-4

F.2 Reinstalling Oracle Identity Management ............................................................................. F-4

G Deinstalling and Reinstalling Oracle Identity and Access Management

G.1 Deinstalling Oracle Identity and Access Management ........................................................ G-1

G.1.1 Deinstalling the Oracle Identity and Access Management Oracle Home.................. G-1

G.1.2 Deinstalling the Oracle Common Home......................................................................... G-2

G.2 Reinstalling Oracle Identity and Access Management......................................................... G-3

H Performing Silent Installations

H.1 What is a Silent Installation? .................................................................................................... H-1

H.2 Before Performing a Silent Installation................................................................................... H-1

H.2.1 UNIX Systems: Creating the oraInst.loc File .................................................................. H-1

H.2.2 Windows Systems: Creating the Registry Key............................................................... H-2

H.3 Creating Response Files ............................................................................................................ H-2

H.3.1 OID, OVD, ODSM, ODIP, and OIF.................................................................................. H-3

H.3.2 OIM, OAM, OAAM, OES, and OIN................................................................................. H-3

H.3.3 Securing Your Silent Installation...................................................................................... H-3

H.4 Performing a Silent Installation ............................................................................................... H-3

H.5 Installer Command Line Parameters ...................................................................................... H-4

xvii

I Troubleshooting the Installation

I.1 General Troubleshooting Tips ................................................................................................... I-1

I.2 Installation Log Files ................................................................................................................... I-2

I.3 Configuring OIM Against an Existing OIM 11g Schema....................................................... I-2

I.4 Need More Help?......................................................................................................................... I-3

J OAAM Partition Schema Reference

J.1 Overview...................................................................................................................................... J-1

J.2 Partition Add Maintenance ....................................................................................................... J-2

J.2.1 ..................................................................................Sp_Oaam_Add_Monthly_Partition J-2

J.2.2 ....................................................................................Sp_Oaam_Add_Weekly_Partition J-2

J.3 Partition Maintenance Scripts ................................................................................................... J-3

J.3.1 drop_monthly_partition_tables.sql................................................................................... J-3

J.3.2 drop_weekly_partition_tables.sql .................................................................................... J-3

J.3.3 add_monthly_partition_tables.sql .................................................................................... J-3

J.3.4 add_weekly_partition_tables.sql....................................................................................... J-3

K Software Deinstallation Screens

K.1 Welcome...................................................................................................................................... K-1

K.2 Select Deinstallation Type ........................................................................................................ K-2

K.2.1 Option 1: Deinstall Oracle Home ..................................................................................... K-3

K.2.1.1 Deinstall Oracle Home................................................................................................ K-3

K.2.2 Option 2: Deinstall ASInstances managed by WebLogic Domain .............................. K-3

K.2.2.1 Specify WebLogic Domain Detail ............................................................................. K-3

K.2.2.2 Select Managed Instance ............................................................................................ K-4

K.2.2.3 Deinstallation Summary (Managed Instance)......................................................... K-5

K.2.3 Option 3: Deinstall Unmanaged ASInstances ................................................................ K-6

K.2.3.1 Specify Instance Location........................................................................................... K-6

K.2.3.2 Deinstallation Summary (Unmanaged ASInstance) ............................................. K-6

K.3 Deinstallation Progress ............................................................................................................ K-7

K.4 Deinstallation Complete ........................................................................................................... K-8

xviii

xix

Preface

This Preface provides supporting information for the Oracle Fusion Middleware

Installation Guide for Oracle Identity Management and includes the following topics:

■Audience

■Documentation Accessibility

■Related Documents

■Conventions

Audience

The Oracle Fusion Middleware Installation Guide for Oracle Identity Management is

intended for administrators that are responsible for installing Oracle Identity

Management components.

This document assumes you have experience installing enterprise components. Basic

knowledge about the Oracle Identity Management components and Oracle

Application Server is recommended.

Documentation Accessibility

For information about Oracle's commitment to accessibility, visit the Oracle

Accessibility Program website at

http://www.oracle.com/pls/topic/lookup?ctx=acc&id=docacc.

Access to Oracle Support

Oracle customers have access to electronic support through My Oracle Support. For

information, visit

http://www.oracle.com/pls/topic/lookup?ctx=acc&id=info or visit

http://www.oracle.com/pls/topic/lookup?ctx=acc&id=trs if you are

hearing impaired.

Directory

Overview of Oracle Identity Management (11.1.1.6.0) Installation

Understanding the Oracle Identity Management Installation 2-9

2.2.6 Understanding the State of Oracle Identity Management Components After

Installation

This topic provides information about the state of Oracle Identity Management

components after installation, including:

■Default SSL Configurations

■Default Passwords

■Ports Assigned Using Auto Port Configuration

2.2.6.1 Default SSL Configurations

By default, Oracle Internet Directory and Oracle Virtual Directory are installed with

SSL configured. You must configure SSL for the Oracle WebLogic Administration

Server and Oracle WebLogic Managed Server after installation.

2.2.6.2 Default Passwords

By default, the passwords for all Oracle Identity Management components are set to

the password for the Oracle Identity Management Instance. For security reasons, after

installation, you should change the passwords of the various components so they have

different values.

2.2.6.3 Ports Assigned Using Auto Port Configuration

When you use the Auto Port Configuration option during installation, the Installer

follows specific steps to assign ports. The following information describes the default

ports and port assignment logic the Installer uses to assign ports for various Oracle

Identity Management components when you use the Auto Port Configuration option

during installation.

■Oracle Virtual Directory:

–Non-SSL port: 6501

–SSL port: 7501

–Admin port: 8899

–HTTP port: 8080

First, the Installer attempts to assign the default port. If the default port is

unavailable, the Installer tries ports within a range of 50 from the default port. For

example, when the Installer assigns the non-SSL port for Oracle Virtual Directory,

it first attempts to assign 6501. If 6501 is unavailable, it tries ports from 6501 to

6551. The Installer uses this approach to assign all Oracle Virtual Directory ports.

■Oracle Internet Directory:

–Non-SSL port: 3060

See: The Oracle Fusion Middleware Administrator's Guide for more

information.

See: The following documents for information about changing

passwords for Oracle Identity Management components:

■Oracle Fusion Middleware Administrator's Guide

■Component-specific guides listed in the "Related Documents"

section in this guide’s Preface.

Overview of Oracle Identity and Access Management (11.1.1.5.0) Installation

2-10 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

–SSL port: 3131

First, the Installer attempts to assign default ports. If the non-SSL port is

unavailable, the Installer tries ports from 3061 to 3070, then from 13060 to 13070.

Similarly, the Installer first attempts to assign 3131 as the SSL port, then ports from

3132 to 3141, and then from 13131 to 13141.

■Oracle Identity Federation: 7499

First, the Installer attempts to assign the default port. If the default port is

unavailable, the Installer tries ports in increments of one, that is: 7500, then 7501,

then 7502, and so on. The Installer tries ports up until 9000 to find an available

port.

■Oracle Directory Services Manager: 7005

First, the Installer attempts to assign the default port. If the default port is

unavailable, the Installer tries ports in increments of one, that is: 7006, then 7007,

then 7008, and so on. The Installer tries ports up until 9000 to find an available

port.

■Oracle WebLogic Administration Server: 7001

2.3 Overview of Oracle Identity and Access Management (11.1.1.5.0)

Installation

This section discusses the following topics:

■Installation Roadmap

■Prerequisite Checks Performed by the Oracle Identity and Access Management

Installer

■Understanding Oracle WebLogic Server Administration Domain Options

■Additional Configuration Using the Oracle Identity Manager 11g Configuration

Wizard

■Additional 11g Release 1 (11.1.1) Deployment Information

■Silent Installation

■Installing Components on Separate Systems

■Screens in Oracle Fusion Middleware Configuration Wizard

■Understanding the State of Oracle Identity and Access Management Components

After Installation

2.3.1 Installation Roadmap

Table 2–2 lists the tasks required to install and configure Oracle Identity Manager,

Oracle Access Manager, Oracle Adaptive Access Manager, Oracle Entitlements Server,

and Oracle Identity Navigator.

Overview of Oracle Identity and Access Management (11.1.1.5.0) Installation

Understanding the Oracle Identity Management Installation 2-11

Table 2–2 Installation Flow for Oracle Identity and Access Management

No. Task Description

1 Review installation concepts in the

Installation Planning Guide. Read the Oracle Fusion Middleware Installation Planning Guide, which

describes the process for various users to install or upgrade to

Oracle Fusion Middleware 11g (11.1.1.5) depending on the user's

existing environment.

2 Review the system requirements and

certification documents to ensure that

your environment meets the minimum

installation requirements for the

components you are installing.

Read the System Requirements and Specifications document that

covers information such as hardware and software requirements,

minimum disk space and memory requirements, and required

system libraries, packages, or patches:

http://www.oracle.com/technetwork/middleware/ias/d

ownloads/fusion-requirements-100147.html

Read the Certification document that covers supported installation

types, platforms, operating systems, databases, JDKs, and

third-party products:

http://www.oracle.com/technetwork/middleware/ias/d

ownloads/fusion-certification-100350.html

3 Install the Oracle 11.1.1 database and

any required patches. For more information, see Installing Oracle Database.

4Install Oracle WebLogic Server 11g

Release 1 (10.3.5), and create a

Middleware Home.

For more information, see Installing Oracle WebLogic Server and

Creating the Oracle Middleware Home.

5 Run Oracle Fusion Middleware

Repository Creation Utility (RCU) to

create and load the appropriate

schemas for Oracle Identity and Access

Management products.

For more information, see Creating Database Schema Using the

Oracle Fusion Middleware Repository Creation Utility (RCU).

6 Install the Oracle Identity and Access

Management 11g software. For more information, see Installing Oracle Identity and Access

Management (11.1.1.5.0).

7 For Oracle Identity Manager users

only:

Install the latest version of Oracle SOA

Suite 11g (11.1.1.5.0).

Install the 11.1.1.5.0 version of Oracle SOA Suite.

For more information, see Installing the Latest Version of Oracle

SOA Suite (Oracle Identity Manager Users Only).

8 Run the Oracle Fusion Middleware

Configuration Wizard to configure

your Oracle Identity and Access

Management products in a new or

existing WebLogic domain.

For more information, see the following chapters:

■Configuring Oracle Identity Navigator

■Configuring Oracle Identity Manager

■Configuring Oracle Access Manager

■Configuring Oracle Adaptive Access Manager

■Configuring Oracle Entitlements Server Administration Server

9 Start the servers. For more information, see Starting the Stack.

10 For Oracle Identity Manager users

only:

Run the Oracle Identity Manager

Configuration Wizard to configure

Oracle Identity Manager Server,

Design Console, or Remote Manager.

Note that you should run the Oracle

Identity Manager Server after

completing this configuration.

For more information, see the following topics:

■Configuring OIM Server

■Configuring OIM Design Console

■Configuring OIM Remote Manager

Overview of Oracle Identity and Access Management (11.1.1.5.0) Installation

2-12 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

Oracle Identity and Access Management components will not start running after

installing them using the Oracle Identity and Access Management 11g Installer. For

information about starting the components after installation, see the Getting Started

topics in specific chapters in this guide.

The following figure illustrates the process of installing the Oracle Identity and Access

Management 11g software components (the suite containing OIM, OAM, OAAM, OES,

and OIN).

Figure 2–1 Oracle Identity and Access Management Installation and Configuration

Workflow

OES

***********************************************************************************************

Table 2–3 lists the Installers and tools used to install and configure Oracle Identity and

Access Management 11g components at different stages of the installation process.

Overview of Oracle Identity and Access Management (11.1.1.5.0) Installation

Understanding the Oracle Identity Management Installation 2-13

2.3.2 Prerequisite Checks Performed by the Oracle Identity and Access Management

Installer

The Oracle Identity and Access Management 11g Release 1 (11.1.1) Installer ensures

that your machine has a certified version of the operating system, the correct software

packages (service packs), and sufficient physical memory to install the Oracle Identity

and Access Management applications on your machine.

On Windows operating systems, the Installer verifies the operating system version,

service pack, and physical memory (at least 1024 MB).

On UNIX operating systems, the Installer verifies the operating system version,

operating system packages, kernel parameters, glibc version, and physical memory (at

least 1024 MB).

Table 2–3 Installation and Configuration Tools

Task Tool

Install Oracle WebLogic

Server Oracle WebLogic Server Installer

For more information, see Installing Oracle

WebLogic Server and Creating the Oracle

Middleware Home.

Install Oracle SOA 11g Suite Oracle SOA 11g Suite Installer

For more information, see Installing the Latest

Version of Oracle SOA Suite (Oracle Identity

Manager Users Only).

Create and load database

schema Oracle Fusion Middleware Repository Creation

Utility (RCU)

For more information, see Creating Database

Schema Using the Oracle Fusion Middleware

Repository Creation Utility (RCU).

Upgrade your existing

database schema Oracle Fusion Middleware 11g Upgrade Assistant

For more information, see the guide Oracle Fusion

Middleware Upgrade Guide for Oracle Identity

Management.

Install the Oracle Identity

and Access Management

11g software

Oracle Identity and Access Management 11g

Installer

For more information, see Installing Oracle Identity

and Access Management (11.1.1.5.0).

Create or extend a

WebLogic administration

domain

Oracle Fusion Middleware Configuration Wizard

For more information, see Screens in Oracle Fusion

Middleware Configuration Wizard.

Install and configure Oracle

Identity Manager Server,

Design Console, and

Remote Manager

Oracle Identity Manager 11g Configuration Wizard

For more information, see Configuring OIM Server,

Design Console, and Remote Manager.

See: Oracle Fusion Middleware System Requirements and Specifications

available at:

http://www.oracle.com/technetwork/middleware/ias/dow

nloads/fusion-requirements-100147.html

Overview of Oracle Identity and Access Management (11.1.1.5.0) Installation

2-14 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

2.3.3 Understanding Oracle WebLogic Server Administration Domain Options

After Oracle Identity and Access Management 11g is installed, you are ready to

configure the WebLogic Server Administration Domain for Oracle Identity and Access

Management components. A domain includes a special WebLogic Server instance

called the Administration Server, which is the central point from which you configure

and manage all resources in the domain.

This section describes each domain option for installing Oracle Identity and Access

Management components:

■Create a New Domain

■Extend an Existing Domain

2.3.3.1 Create a New Domain

Select the Create a new WebLogic domain option on the Welcome screen in the Oracle

Fusion Middleware Configuration Wizard to create a new WebLogic Server domain.

2.3.3.2 Extend an Existing Domain

Select the Extend an existing WebLogic domain option on the Welcome screen in the

Oracle Fusion Middleware Configuration Wizard to add Oracle Identity and Access

Management components in an existing Oracle WebLogic Server administration

domain. When you add Oracle Identity and Access Management components using

this option, they are essentially "joining" an existing domain.

For more information, see Understanding Domain Extension Scenarios.

2.3.4 Additional Configuration Using the Oracle Identity Manager 11g Configuration

Wizard

Read this section only if you are installing Oracle Identity Manager. After you install

Oracle Identity Manager by using the Oracle Identity and Access Management 11g

Installer software, you can encrypt secure data in Oracle Identity Manager schema,

create keystores, and so on. You can configure such elements by using the Oracle

Identity Manager 11g Release 1 (11.1.1) Configuration Wizard, which is included with

the release media.

On UNIX operating systems, to start the Oracle Identity Manager 11g Release 1 (11.1.1)

Configuration Wizard, run the <IAM_Home>/bin/config.sh script. On Windows

operating systems, run the <IAM_Home>\bin\config.bat script. Note that IAM_

Home refers to your IDM_Home directory that contains Oracle Identity Manager, Oracle

Access Manager, Oracle Adaptive Access Manager, Oracle Entitlements Server, and

Oracle Identity Navigator.

2.3.5 Additional 11g Release 1 (11.1.1) Deployment Information

This topic describes additional sources for 11g Release 1 (11.1.1) deployment

information, including documentation on the following subjects:

■Upgrading to 11g Release 1 (11.1.1)

■Installing 11g Release 1 (11.1.1) for High Availability

See: The "Understanding Oracle WebLogic Server Domains" chapter

in the Oracle Fusion Middleware Understanding Domain Configuration for

Oracle WebLogic Server guide for more information about Oracle

WebLogic Server administration domains.

Overview of Oracle Identity and Access Management (11.1.1.5.0) Installation

Understanding the Oracle Identity Management Installation 2-15

2.3.5.1 Upgrading to 11g Release 1 (11.1.1)

This guide does not explain how to upgrade previous versions of Oracle Identity and

Access Management components to 11g Release 1 (11.1.1). To upgrade an Oracle

Identity and Access Management component:

From Release 10g to 11g Release 1 (11.1.1), refer to:

■Oracle Fusion Middleware Upgrade Planning Guide

■Oracle Fusion Middleware Upgrade Guide for Oracle Identity Management

2.3.5.2 Installing 11g Release 1 (11.1.1) for High Availability

This guide does not explain how to install Oracle Identity and Access Management

components in High Availability (HA) configurations. To install an Oracle Identity

and Access Management component in a High Availability configuration, refer to the

following documents:

■Oracle Fusion Middleware High Availability Guide

■Oracle Fusion Middleware Enterprise Deployment Guide for Oracle Identity Management

Specifically, see the "Configuring High Availability for Identity Management

Components" topic in the guide Oracle Fusion Middleware High Availability Guide.

2.3.6 Silent Installation

In addition to the standard graphical installation option, you can perform silent

installation of the Oracle Identity and Access Management 11g software. A silent

installation runs on its own without any intervention, and you do not have to monitor

the installation and provide input to dialog boxes.

For more information, see Performing a Silent Installation.

2.3.7 Installing Components on Separate Systems

You can install Oracle Fusion Middleware instances on separate systems. You can also

distribute Oracle Fusion Middleware components over multiple systems, which is

especially useful for Oracle Identity and Access Management components. You might

want to distribute components to improve performance, security, scalability, and

availability of Oracle Identity and Access Management services.

The following are two (of many) examples of Oracle Identity and Access Management

deployments that benefit from distributing components over multiple systems:

■Oracle Identity Manager Server on one system, and Oracle Identity Manager

Design Console on a different system.

■Oracle Identity and Access Management components use an Oracle Database to

contain the Oracle Metadata Repository. The Oracle Identity and Access

Management components and the Oracle Database are installed on separate

systems.

See Also: The "Related Documents" section in this guide’s Preface

for a list of documents that provide additional information about

Oracle Identity and Access Management components.

Overview of Oracle Identity and Access Management (11.1.1.5.0) Installation

2-16 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

2.3.8 Screens in Oracle Fusion Middleware Configuration Wizard

The Oracle Fusion Middleware Configuration Wizard displays screens based on your

domain configuration options. You can use the Oracle Fusion Middleware

Configuration Wizard in the following scenarios:

■Creation of a new WebLogic administration domain, which involves the

configuration of Administration Server parameters, server start mode, and so on.

■Configuration of an existing domain to support Oracle Identity and Access

Management components by extending the domain.

2.3.9 Understanding the State of Oracle Identity and Access Management Components

After Installation

This topic provides information about the state of Oracle Identity and Access

Management components after installation, including:

■Default SSL Configurations

■Default Passwords

2.3.9.1 Default SSL Configurations

By default, most of the Oracle Identity and Access Management 11g components are

not installed with SSL configured. Only Oracle Adaptive Access Manager is

configured with SSL. For other components, you must configure SSL for the Oracle

WebLogic Administration Server and Oracle WebLogic Managed Server after

installation.

2.3.9.2 Default Passwords

By default, the passwords for all Oracle Identity and Access Management components

are set to the password for the Oracle Identity and Access Management Instance. For

security reasons, after installation, you should change the passwords of the various

components so they have different values.

Note: If you install Oracle Identity and Access Management

components on a separate system from the database containing the

Oracle Metadata Repository, the Oracle Identity and Access

Management components will need network access to the repository.

See: The "Customizing the Domain Environment" chapter in the

Oracle Fusion Middleware Creating Domains Using the Configuration

Wizard guide for more information about configuring your domain.

See: The "SSL Configuration in Oracle Fusion Middleware" topic in

the Oracle Fusion Middleware Administrator's Guide for more

information.

See: The following documents for information about changing

passwords for Oracle Identity and Access Management components:

■The "Getting Started Managing Oracle Fusion Middleware" topic

in the guide Oracle Fusion Middleware Administrator's Guide.

■Component-specific guides listed in the "Related Documents"

section in this guide’s Preface.

Preparing to Install 3-1

3 Preparing to Install

This chapter provides information you should review before installing Oracle Identity

Management 11g Release 1 (11.1.1) components and Oracle Identity and Access

Management 11g Release 1 (11.1.1). It includes the following topics:

■Before Installing Oracle Identity Management (11.1.1.6.0)

■Before Installing Oracle Identity and Access Management (11.1.1.5.0)

3.1 Before Installing Oracle Identity Management (11.1.1.6.0)

This section discusses the following topics:

■Reviewing System Requirements and Certification

■Understanding Oracle Fusion Middleware Support of 64-bit JDK

■Installing and Configuring Java Access Bridge (Windows Only)

■Managing the Oracle WebLogic Server Node Manager Utility for Oracle Identity

Management Installations

■Optional Environment-Specific Preparation

3.1.1 Reviewing System Requirements and Certification

Before performing any installation, you should read the system requirements and

certification documents to ensure that your environment meets the minimum

installation requirements for the products you are installing.

■Oracle Fusion Middleware System Requirements and Specifications at

http://www.oracle.com/technetwork/middleware/ias/downloads/fu

sion-requirements-100147.html

Note: For information about prerequisites for installing the 11g

(11.1.1.6.0) version of Oracle Internet Directory (OID), Oracle Virtual

Directory (OVD), Oracle Directory Services Manager (ODSM), Oracle

Directory Integration Platform (ODIP), and Oracle Identity Federation

(OIF), see Before Installing Oracle Identity Management (11.1.1.6.0).

For information about prerequisites for installing the 11g (11.1.1.5.0)

version of Oracle Identity Manager (OIM), Oracle Access Manager

(OAM), Oracle Adaptive Access Manager (OAAM), Oracle

Entitlements Server (OES), and Oracle Identity Navigator (OIN), see

Before Installing Oracle Identity and Access Management (11.1.1.5.0).

Before Installing Oracle Identity Management (11.1.1.6.0)

3-2 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

This document contains information related to hardware and software

requirements, minimum disk space and memory requirements, and required

system libraries, packages, or patches.

■Oracle Fusion Middleware Supported System Configurations at

http://www.oracle.com/technetwork/middleware/ias/downloads/fu

sion-certification-100350.html

This document contains information related to supported installation types,

platforms, operating systems, databases, JDKs, and third-party products.

■For interoperability and compatibility issues that may arise when installing, refer

to Oracle Fusion Middleware Interoperability and Compatibility Guide.

This document contains important information regarding the ability of Oracle

Fusion Middleware products to function with previous versions of other Oracle

Fusion Middleware, Oracle, or third-party products. This information is applicable

to both new Oracle Fusion Middleware users and existing users who are

upgrading their existing environment.

3.1.2 Understanding Oracle Fusion Middleware Support of 64-bit JDK

If you are using a 64-bit JVM in your environment, ensure that all your Oracle Fusion

Middleware components are using the 64-bit JVM. You cannot mix components using

a 32-bit JVM with those using a 64-bit JVM.

For more information, refer to the "System Requirements and Supported Platforms for

Oracle Fusion Middleware 11gR1" document, available at the following page:

http://www.oracle.com/technetwork/middleware/ias/downloads/fusio

n-certification-100350.html

If your Oracle Fusion Middleware components are running in a 64-bit JVM

environment, ensure that WebLogic Server is installed with the 64-bit JDK. For 32-bit

JVM support, refer to the Oracle Fusion Middleware Release Notes for information on

how to configure your environment for 32-bit JVM support for your platform.

3.1.3 Installing and Configuring Java Access Bridge (Windows Only)

If you are installing Oracle Identity Management on a Windows system, you have the

option of installing and configuring Java Access Bridge for Section 508 Accessibility.

This is only necessary if you require Section 508 Accessibility features:

1. Download Java Access Bridge from the following Web site:

http://java.sun.com/javase/technologies/accessibility/accessbridge/

2. Install Java Access Bridge.

3. Copy access-bridge.jar and access-1_4.jar from your installation

location to the jre\lib\ext directory.

4. Copy the WindowsAccessBridge.dll, JavaAccessBridge.dll, and

JAWTAccessBridge.dll files from your installation location to the jre\bin

directory.

5. Copy the accessibility.properties file to the jre\lib directory.

Before Installing Oracle Identity Management (11.1.1.6.0)

Preparing to Install 3-3

3.1.4 Managing the Oracle WebLogic Server Node Manager Utility for Oracle Identity

Management Installations

Oracle Directory Integration Platform (ODIP) and Oracle Identity Federation (OIF) are

configured with a WebLogic domain. Oracle Internet Directory (OID) and Oracle

Virtual Directory (OVD) can be configured with or without a WebLogic domain. For

Oracle Identity Management products that require a WebLogic domain, you must

configure Node Manager.

You must perform the following steps after installing Oracle WebLogic Server and

before installing Oracle Identity Management:

1. Verify the Oracle WebLogic Server Node Manager utility is stopped. If it is

running, kill the process. Use the following commands to identify running process

and kill the same:

For example, on UNIX:

1) ps-ef | grep -i nodemanager

This will return the Process Id of the Node Manager Process.

2) kill -9 <Process Id of the Node Manager Process>

On Windows:

Use the Windows Task Manager to identify running Node Manager processes and

kill the same.

2. Determine if the nodemanager.properties file is present in the WL_

HOME/common/nodemanager/ directory.

■If the nodemanager.properties file is not present, then follow the

instructions below:

On UNIX:

Run startNodeManager.sh (Located at <WL_HOME>/server/bin

directory) to start Node Manager.

On Windows:

Run startNodeManager.cmd (Located at <WL_HOME>\server\bin

directory) to start Node Manager.

■If the nodemanager.properties file does exist, open it and verify that the

ListenPort parameter is included and that it is set. If the ListenPort

parameter is not included or set, edit the nodemanager.properties file so

that it is similar to the following, where NODE_MANAGER_LISTEN_PORT

represents the port the Node Manager listens on, such as 5556:

ListenPort=NODE_MANAGER_LISTEN_PORT

3.1.5 Optional Environment-Specific Preparation

This topic describes optional environment-specific tasks you may want to perform

before installing Oracle Identity Management 11g Release 1 (11.1.1.6.0). This topic

includes the following sections:

■Using Symbolic Links

■Installing Oracle Identity Management on DHCP Hosts

■Installing Oracle Identity Management on a Multihomed System

Before Installing Oracle Identity Management (11.1.1.6.0)

3-4 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

3.1.5.1 Using Symbolic Links

If you want to install Oracle Identity Management using symbolic links, you must

create them before installation. For example, you could create symbolic links for the

installation by executing the following commands:

prompt> mkdir /home/basedir

prompt> ln -s /home/basedir /home/linkdir

Then, when you run the Installer to install Oracle Identity Management, you can

specify /home/linkdir as the Oracle Home.

After installation, you cannot create symbolic links to the Oracle Home. Also, you

cannot move the Oracle Home to a different location and create a symbolic link to the

original Oracle Home.

3.1.5.2 Installing Oracle Identity Management on DHCP Hosts

If you plan to install Oracle Identity Management components on a DHCP server, you

must ensure the Installer can resolve host names. This may require editing the

/etc/hosts file on UNIX systems, and installing a loopback adapter on Windows

systems. The following information provides general examples, you should alter these

examples to make them specific to your environment.

On UNIX systems:

Configure the host to resolve host names to the loopback IP address by modifying the

/etc/hosts file to contain the following entries. Replace the variables with the

appropriate host and domain names:

127.0.0.1 hostname.domainname hostname

127.0.0.1 localhost.localdomain localhost

Confirm the host name resolves to the loopback IP address by executing the following

command:

ping hostname.domainname

On Windows systems:

Install a loopback adapter on the DHCP host and assign it a non routable IP address.

After installing the adapter, add a line to the

%SYSTEMROOT%\system32\drivers\etc\hosts file immediately after the localhost

line and using the following format, where IP_address represents the local IP address

of the loopback adapter:

IP_address hostname.domainname hostname

3.1.5.3 Installing Oracle Identity Management on a Multihomed System

You can install Oracle Identity Management components on a multihomed system. A

multihomed system is associated with multiple IP addresses, typically achieved by

having multiple network cards on the system. Each IP address is associated with a

host name and you can create aliases for each host name.

Note: If the environment variable LD_ASSUME_KERNEL is set, it

needs to be unset.

Before Installing Oracle Identity and Access Management (11.1.1.5.0)

Preparing to Install 3-5

The Installer retrieves the fully qualified domain name from the first entry in

/etc/hosts file on UNIX, or the %SYSTEMROOT%\system32\drivers\etc\hosts file

on Windows. For example, if your file looks like the following, the Installer retrieves

myhost1.mycompany.com for configuration:

127.0.0.1 localhost.localdomain localhost

10.222.333.444 myhost1.mycompany.com myhost1

20.222.333.444 devhost2.mycompany.com devhost2

For specific network configuration of a system component, refer to the individual

component's documentation listed in "Related Documents"for more information.

3.2 Before Installing Oracle Identity and Access Management (11.1.1.5.0)

This section discusses the following topics:

■Reviewing System Requirements and Certification

■Installing and Configuring Java Access Bridge (Windows Only)

■Obtaining the Latest Oracle WebLogic Server and Oracle Fusion Middleware 11g

Software

■Installing Oracle WebLogic Server and Creating the Oracle Middleware Home

■Installing Oracle Database

■Creating Database Schema Using the Oracle Fusion Middleware Repository

Creation Utility (RCU)

■Upgrading an Existing Database Schema

■Installing the Latest Version of Oracle SOA Suite (Oracle Identity Manager Users

Only)

3.2.1 Reviewing System Requirements and Certification

Before performing any installation, you should read the system requirements and

certification documents to ensure that your environment meets the minimum

installation requirements for the products you are installing.

■Oracle Fusion Middleware System Requirements and Specifications at

http://www.oracle.com/technetwork/middleware/ias/downloads/fu

sion-requirements-100147.html

This document contains information related to hardware and software

requirements, minimum disk space and memory requirements, and required

system libraries, packages, or patches.

■Oracle Fusion Middleware Supported System Configurations at

http://www.oracle.com/technetwork/middleware/ias/downloads/fu

sion-certification-100350.html

This document contains information related to supported installation types,

platforms, operating systems, databases, JDKs, and third-party products.

■For interoperability and compatibility issues that may arise when installing, refer

to Oracle Fusion Middleware Interoperability and Compatibility Guide.

This document contains important information regarding the ability of Oracle

Fusion Middleware products to function with previous versions of other Oracle

Fusion Middleware, Oracle, or third-party products. This information is applicable

Before Installing Oracle Identity and Access Management (11.1.1.5.0)

3-6 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

to both new Oracle Fusion Middleware users and existing users who are

upgrading their existing environment.

3.2.2 Installing and Configuring Java Access Bridge (Windows Only)

If you are installing Oracle Identity and Access Management on a Windows operating

system, you have the option of installing and configuring Java Access Bridge for

Section 508 Accessibility. This is only necessary if you require Section 508 Accessibility

features:

1. Download Java Access Bridge from the following URL:

http://java.sun.com/javase/technologies/accessibility/accessbridge/

2. Install Java Access Bridge.

3. Copy access-bridge.jar and jaccess-1_4.jar from your installation

location to the jre\lib\ext directory.

4. Copy the WindowsAccessBridge.dll, JavaAccessBridge.dll, and

JAWTAccessBridge.dll files from your installation location to the jre\bin

directory.

5. Copy the accessibility.properties file to the jre\lib directory.

3.2.3 Obtaining the Latest Oracle WebLogic Server and Oracle Fusion Middleware 11g

Software

Refer to the following for more information about the latest Oracle WebLogic Server

and Oracle Fusion Middleware 11g software:

■For more information on obtaining Oracle Fusion Middleware 11g softwares, see

"Obtain the Oracle Fusion Middleware Software" and "Install Oracle WebLogic

Server" in the Oracle Fusion Middleware Installation Planning Guide.

■For information about downloading Oracle WebLogic Server, see "Product

Distribution" in the Oracle Fusion Middleware Installation Guide for Oracle WebLogic

Server.

■For complete information about patching your Oracle Fusion Middleware 11g to

the latest release, refer to the Oracle Fusion Middleware Patching Guide.

3.2.4 Installing Oracle WebLogic Server and Creating the Oracle Middleware Home

Before you can install Oracle Identity and Access Management 11g Release 1 (11.1.1)

components, you must install Oracle WebLogic Server and create the Oracle

Middleware Home directory.

For more information, see "Install Oracle WebLogic Server" in Oracle Fusion Middleware

Installation Planning Guide.

In addition, see Oracle Fusion Middleware Installation Guide for Oracle WebLogic Server for

complete information about installing Oracle WebLogic Server.

Oracle WebLogic Server Directory Structure

After you install Oracle WebLogic Server and create a Middleware Home, a home

directory, such as wlserver_10.3, is created for Oracle WebLogic Server under your

Middleware Home. This home directory is referred to as WL_HOME.

Before Installing Oracle Identity and Access Management (11.1.1.5.0)

Preparing to Install 3-7

At the same level as WL_HOME, separate directories are created for the following

components associated with Oracle WebLogic Server:

■Sun JDK - jdk160_24

■Oracle JRockit - jrockit_1.6.0_24

■Oracle Coherence 3.6

Note that WebLogic domains are created in a directory named domains located in the

user_projects directory under your Middleware Home. After you configure any of

the Oracle Identity and Access Management products in a WebLogic administration

domain, a new directory for the domain is created in the domains directory. In

addition, a directory named applications is created in the user_projects

directory. This applications directory contains the applications deployed in the

domain.

3.2.5 Installing Oracle Database

You must install an Oracle Database before you can install some Oracle Identity and

Access Management components. The database must be up and running to install the

relevant Oracle Identity and Access Management component. The database does not

have to be on the same system where you are installing the Oracle Identity and Access

Management component.

The following database versions are supported:

■10.2.0.4 and higher

■11.1.0.7 and higher

■11.2.0.1 and higher

Table 3–1 lists the databases requirements for RCU at the time of publication:

Note: Ensure that the JDK version you select is Java SE 6 Update 24

or higher.

Note: You can locate the most recent information about supported

databases by referring to the "Reviewing System Requirements and

Certification" topic in this chapter.

Table 3–1 RCU Database Requirements

Category Minimum or Accepted Value

Version Oracle Database 10.2.0.4, 11.1.0.7, or 11.2 (11.1.0.7 or later for non-XE database).

Note: When installing the database, you must choose the AL32UTF8 character set.

Shared Pool Size 147456 KB

SGA Maximum Size 147456 KB

Block Size 8 KB

Processes 500

'open_cursors' >= '500'

Before Installing Oracle Identity and Access Management (11.1.1.5.0)

3-8 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

3.2.5.1 Oracle Database 11.1.0.7 Patch Requirements for Oracle Identity Manager

To identify the patches required for Oracle Identity Manager 11.1.1.5.0 configurations

that use Oracle Database 11.1.0.7, refer to the Oracle Identity Manager section of the

11g Release 1 Oracle Fusion Middleware Release Notes.

3.2.6 Creating Database Schema Using the Oracle Fusion Middleware Repository

Creation Utility (RCU)

You must create and load the appropriate Oracle Fusion Middleware schema in your

database before installing the following Oracle Identity and Access Management

components and configurations:

■Oracle Identity Manager

■Oracle Access Manager

■Oracle Adaptive Access Manager

■Oracle Entitlements Server

You create and load Oracle Fusion Middleware schema in your database using the

Oracle Fusion Middleware Repository Creation Utility (RCU), which is available on

the Oracle Technology Network (OTN) web site. You can access the OTN web site at:

http://www.oracle.com/technetwork/index.html

When you run RCU, create and load only the following schema for the Oracle Identity

and Access Management component you are installing—do not select any other

schema available in RCU:

Note: After installing the Oracle 11g database, you must complete

the following steps:

1. Log in to the database as the sys (default) user.

2. Run the following commands:

alter system set session_cached_cursors=100

scope=spfile;

alter system set processes=500 scope=spfile;

3. Bounce the database and continue with the installation of Oracle Fusion

Middleware Repository Creation Utility (RCU) and loading of schemas.

Note: RCU is available only on Linux and Windows platforms. Use

the Linux RCU to create schemas on supported UNIX databases. Use

Windows RCU to create schemas on supported Windows databases.

After you extract the contents of the rcuHome.zip file to a directory,

you can see the executable file rcu in the BIN directory.

For information about launching and running RCU, see the

"Launching RCU with a Variety of Methods" and "Running Oracle

Fusion Middleware Repository Creation Utility (RCU)" topics in the

guide Oracle Fusion Middleware Repository Creation Utility User's Guide.

For information about troubleshooting RCU, see the "Troubleshooting

Repository Creation Utility" topic in the guide Oracle Fusion

Middleware Repository Creation Utility User's Guide.

Before Installing Oracle Identity and Access Management (11.1.1.5.0)

Preparing to Install 3-9

■For Oracle Identity Manager, select the Identity Management - Oracle Identity

Manager schema. The SOA Infrastructure schema, the User Messaging Service

schema, and the Metadata Services schema are also selected, by default.

■For Oracle Adaptive Access Manager, select the Identity Management - Oracle

Adaptive Access Manager schema. By default, the AS Common Schemas -

Metadata Services schema is also selected.

For Oracle Adaptive Access Manager with partition schema support, select the

Identity Management - Oracle Adaptive Access Manager (Partition Supp...)

schema. By default, the AS Common Schemas - Metadata Services schema is also

selected.

■For Oracle Access Manager, select the Identity Manager - Oracle Access Manager

schema. By default, the AS Common Schema - Audit Services schema is also

selected.

■For Oracle Entitlements Server, select the Identity Management - Oracle

Entitlements Server schema. By default, the AS Common Schemas - Metadata

Services schema is also selected.

3.2.7 Upgrading an Existing Database Schema

If you want to reuse an existing database schema, you must upgrade your old

database schema to work with Oracle Fusion Middleware 11g products and

components.

For information about upgrading your existing database schema, see Oracle Fusion

Middleware Upgrade Guide for Oracle Identity Management.

3.2.8 Installing the Latest Version of Oracle SOA Suite (Oracle Identity Manager Users

Only)

If you are installing Oracle Identity Manager, you must install the latest version of

Oracle SOA Suite (11.1.1.5.0).

Follow the instructions in this section to install the latest Oracle SOA Suite software.

The installation of Oracle SOA Suite is a prerequisite for configuring Oracle Identity

Manager.

Note: For information about Oracle Adaptive Access Manager

schema partitions, see OAAM Partition Schema Reference.

Note: When you create a schema, be sure to remember the schema

owner and password that is shown in RCU.

If you are creating schemas on databases with Oracle Database Vault

installed, note that statements such as CREATE USER, ALTER USER,

DROP USER, CREATE PROFILE, ALTER PROFILE, and DROP

PROFILE can only be issued by a user with the DV_ACCTMGR role.

SYSDBA can issue these statements by modifying the Can Maintain

Accounts/Profiles rule set only if it is allowed.

See: The Oracle Fusion Middleware Repository Creation Utility User's

Guide for complete information.

Before Installing Oracle Identity and Access Management (11.1.1.5.0)

3-10 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

Installing the latest version of Oracle SOA Suite 11g involves the following steps:

1. Obtaining the Latest Oracle WebLogic Server and Oracle SOA Suite Software

2. Installing Oracle WebLogic Server and Creating the Middleware Home

3. Installing the Latest Version of Oracle SOA Suite

3.2.8.1 Obtaining the Latest Oracle WebLogic Server and Oracle SOA Suite

Software

Refer to the following for more information about the latest Oracle WebLogic Server

and Oracle Fusion Middleware 11g software:

■You can download the latest Oracle Fusion Middleware 11g software from the

Oracle Technology Network (OTN):

http://www.oracle.com/technetwork/index.html

■At the time this document was published, the latest release of Oracle Fusion

Middleware 11g was 11g Release 1 (11.1.1.5.0), which provides new features and

capabilities that supersede those available in Oracle Fusion Middleware 11g

Release 1 (11.1.1.1.0) through 11g Release 1 (11.1.1.4.0).

■For complete information about patching your Oracle Fusion Middleware 11g to

the latest release, refer to the Oracle Fusion Middleware Patching Guide.

3.2.8.2 Installing Oracle WebLogic Server and Creating the Middleware Home

Oracle SOA Suite requires Oracle WebLogic Server and a Middleware Home

directory. For more information, see "Install Oracle WebLogic Server" in Oracle Fusion

Middleware Installation Planning Guide. In addition, see "Running the Installation

Program in Graphical Mode" in Oracle Fusion Middleware Installation Guide for Oracle

WebLogic Server.

3.2.8.3 Installing the Latest Version of Oracle SOA Suite

Note that only Oracle Identity Manager requires Oracle SOA Suite 11g (11.1.1.5.0). This

step is required because Oracle Identity Manager uses process workflows in Oracle

SOA Suite to manage request approvals.

Follow the instructions in Table 3–2 to install Oracle SOA Suite. If you need additional

help with any of the installation screens, click Help to access the online help.

To start the Oracle SOA Suite installation wizard, you must complete the following

steps:

1. Extract the contents of the soa.zip (11.1.1.5.0) to a directory, such as soa.

2. From your present working directory, move to the Disk1 directory under soa.

3. From the Disk1 directory, run runInstaller (on UNIX) or setup.exe (on

Windows) executable files to launch the Oracle SOA Suite 11.1.1.5.0 installation

wizard.

Note: If you have already created a Middleware Home before

installing Oracle Identity and Access Management components, do

not create a new Middleware Home again. You must use the same

Middleware Home for installing Oracle SOA Suite.

Before Installing Oracle Identity and Access Management (11.1.1.5.0)

Preparing to Install 3-11

Table 3–2 Installation Flow for Install Only Option

No. Screen Description and Action Required

1 Welcome Screen Click Next to continue.

2 Prerequisite Checks Screen Click Next to continue.

3 Specify Installation Location Screen Specify the Middleware Home and Oracle Home locations. You must

specify the location of the same Middleware Home that contains

Oracle Identity and Access Management components.

For more information about these directories, see "Understanding

Oracle Fusion Middleware Concepts and Directory Structure" in the

Oracle Fusion Middleware Installation Planning Guide.

Click Next to continue.

4 Specify Security Updates Screen Provide your E-mail address to be informed of the latest product

issues.

Click Next to continue.

5 Installation Summary Screen Verify the information on this screen.

Click Install to begin the installation.

6 Installation Progress Screen If you are installing on a UNIX system, you may be asked to run the

ORACLE_HOME/oracleRoot.sh script to set up the proper file and

directory permissions.

Click Next to continue.

7 Installation Complete Screen Click Finish to dismiss the installer.

Before Installing Oracle Identity and Access Management (11.1.1.5.0)

3-12 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

Performing Common Installation Tasks 4-1

Performing Common Installation Tasks

This chapter describes tasks that are common to most Oracle Identity Management

installations and configurations. It includes the following topics:

■Common Installation Tasks for Oracle Identity Management (11.1.1.6.0)

■Common Installation Tasks for Oracle Identity and Access Management

(11.1.1.5.0)

4.1 Common Installation Tasks for Oracle Identity Management

(11.1.1.6.0)

This section discusses the following topics:

■Identifying Installation Directories

■Determining Port Numbers

■Optional: Configuring the Minimum Amount for Oracle WebLogic Server’s

Maximum Heap Size

■Locating Installation Log Files

Note: By completing the common installation tasks in this chapter,

you are not installing or configuring Oracle Identity Management

software.

For complete information about installing Oracle Identity

Management software, see the following:

■Installing and Configuring Oracle Identity Management

(11.1.1.6.0)

■Installing Oracle Identity and Access Management (11.1.1.5.0)

For complete information about configuring Oracle Identity

Management software, see the individual component specific chapters

in the following links:

■Installing and Configuring Oracle Identity Management

(11.1.1.6.0)

■Installing and Configuring Oracle Identity and Access

Management (11.1.1.5.0)

Common Installation Tasks for Oracle Identity Management (11.1.1.6.0)

4-2 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

4.1.1 Identifying Installation Directories

This topic describes directories you must identify in most Oracle Identity Management

installations and configurations—it does not describe one particular Installer screen.

During installation, you will have to identify other component-specific directories not

described in this topic.

The common directories described in this section include the following:

■Oracle Middleware Home Location

■Oracle Home Directory

■WebLogic Server Directory

■Oracle Instance Location

■Oracle Instance Name

4.1.1.1 Oracle Middleware Home Location

Identify the location of your Oracle Middleware Home directory. The Installer creates

an Oracle Home directory for the component you are installing under the Oracle

Middleware Home that you identify in this field. The Installer also creates an Oracle

Common Home directory under the Oracle Middleware Home. The Oracle Common

Home contains the binary and library files required for Oracle Enterprise Manager

Fusion Middleware Control and Oracle Java Required Files (JRF). There can be only

one Oracle Common Home within each Oracle Middleware Home.

The Oracle Middleware Home directory is commonly referred to as MW_HOME.

4.1.1.2 Oracle Home Directory

Enter a name for the component’s Oracle Home directory. The Installer uses the name

you enter in this field to create the Oracle Home directory under the location you enter

in the Oracle Middleware Home Location field. The Installer installs the files (such as

binaries and libraries) required to host the component in the Oracle Home directory.

The Oracle Home directory is commonly referred to as ORACLE_HOME.

4.1.1.3 WebLogic Server Directory

Enter the path to your Oracle WebLogic Server Home directory. This directory

contains the files required to host the Oracle WebLogic Server. It is commonly referred

to as WL_HOME.

Note: To install Oracle Identity Management components in an

existing Oracle WebLogic Server administration domain, each Oracle

Middleware Home directory in the domain must have identical

directory paths and names.

Note: To install Oracle Identity Management components in an

existing Oracle WebLogic Server administration domain, each Oracle

Home directory in the domain must have identical directory paths

and names.

Common Installation Tasks for Oracle Identity Management (11.1.1.6.0)

Performing Common Installation Tasks 4-3

4.1.1.4 Oracle Instance Location

Enter the path to the location where you want to create the Oracle Instance directory.

The Installer creates the Oracle Instance directory using the location you enter in this

field and using the name you enter in the Oracle Instance Name field. Do not enter a

path to an existing directory that contains files—if you enter a path to an existing

directory, that directory must be empty.

The Installer installs the component's configuration files and runtime components in

the Oracle Instance directory. Runtime components will write only to this directory.

You can identify any location on your system for the Oracle Instance directory—it

does not have to reside inside the Oracle Middleware Home directory.

4.1.1.5 Oracle Instance Name

Enter a name for the Oracle Instance directory. The Installer uses the name you enter

in this field to create the Oracle Instance directory at the location you specify in the

Oracle Instance Location field. This directory is commonly referred to as ORACLE_

INSTANCE.

Instance names are important because Oracle Fusion Middleware uses them to

uniquely identify instances. If you install multiple Oracle Fusion Middleware

instances on the same computer, for example, an Oracle Identity Management instance

and an Oracle WebLogic Server instance, you must give them different names.

The name you enter for the Oracle Instance directory must:

■Contain only alphanumeric and underscore (_) characters

■Begin with an alphabetic character (a-z or A-Z)

■Consist of 4-30 characters

■Not contain the hostname or IP address of the computer

4.1.2 Determining Port Numbers

If you want to install an Oracle Identity Management 11g Release 1 (11.1.1) component

against an existing Oracle Identity Management 11g Release 1 (11.1.1) component, you

may need to identify the ports for the existing component. For example, if you want to

install Oracle Directory Integration Platform 11g Release 1 (11.1.1) against an existing

Oracle Internet Directory 11g Release 1 (11.1.1) component, you must identify its port

when you install Oracle Directory Integration Platform.

You can get information about ports using the following:

■WebLogic Server Administration Console.

what ports are in use for the Administration Server and Managed Servers.

■$ORACLE_INSTANCE/config/OPMN/opmn/ports.prop

Note: To install Oracle Identity Management components in an

existing Oracle WebLogic Server administration domain, each Oracle

WebLogic Server Home directory in the domain must have identical

directory paths and names.

Note: You cannot change the Oracle Instance name after installation.

Common Installation Tasks for Oracle Identity Management (11.1.1.6.0)

4-4 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

■The $ORACLE_INSTANCE/bin/opmnctl status -l command to see port numbers

of components managed by OPMN.

4.1.3 Optional: Configuring the Minimum Amount for Oracle WebLogic Server’s

Maximum Heap Size

After installing Oracle Identity Management 11g Release 1 (11.1.1), if you want to

configure the minimum (lowest) level of maximum heap size (-Xmx) required for

Oracle WebLogic Server to host Oracle Identity Management components, perform the

steps in this section.

The minimum (lowest) levels for maximum heap size are:

■Oracle WebLogic Administration Server: 512 MB

■Oracle WebLogic Managed Server: 256 MB

Perform the following steps to configure the heap size for Oracle WebLogic

Administration Servers and Oracle WebLogic Managed Servers:

1. Open the setDomainEnv script (.sh or .bat) in the MW_HOME/user_

projects/domains/DOMAIN_NAME/bin/ directory.

2. Locate the last occurrence of the EXTRA_JAVA_PROPERTIES entry.

3. In the last occurrence of the EXTRA_JAVA_PROPERTIES entry, locate the last

occurrence of heap size parameters: -Xmx, -Xms, and so on.

4. Set the heap size parameters (-Xms and -Xmx) for the Oracle WebLogic

Administration Server as desired, for example: -Xms256m and -Xmx512m

5. To set the heap size parameters for the Oracle WebLogic Managed Server, enter

the text in Example 4–1 immediately below the last occurrence of the EXTRA_

JAVA_PROPERTIES entry and:

■Set the heap size parameters (-Xms and -Xmx) as desired, for example:

-Xms256m -Xmx256m

■Replace wls_ods1 with the name of the Oracle WebLogic Managed Server

hosting Oracle Directory Services Manager.

■Replace wls_oif1 with the name the Oracle WebLogic Managed Server

hosting Oracle Identity Federation.

Example 4–1 Heap Size Parameters for Oracle WebLogic Managed Server

if [ "${SERVER_NAME}" = "wls_ods1" -o "${SERVER_NAME}" = "wls_oif1" ] ; then

Note: If you change a component's port number after installation,

the ports.prop file is not updated.

Note: This is an optional step, typically performed only for test,

development, or demonstration environments.

Note: These are the heap size parameters for the Oracle WebLogic

Administration Server.

Common Installation Tasks for Oracle Identity and Access Management (11.1.1.5.0)

Performing Common Installation Tasks 4-5

EXTRA_JAVA_PROPERTIES=" ${EXTRA_JAVA_PROPERTIES} -Xms256m -Xmx256m "

export EXTRA_JAVA_PROPERTIES

6. Save and close the setDomainEnv script.

7. Restart the Oracle WebLogic Administration Server and the Oracle WebLogic

Managed Server by referring to Appendix D, "Starting or Stopping the Oracle

Stack."

4.1.4 Locating Installation Log Files

The Installer writes log files to the ORACLE_INVENTORY_LOCATION/logs directory

on UNIX systems and to the ORACLE_INVENTORY_LOCATION\logs directory on

Windows systems.

On UNIX systems, if you do not know the location of your Oracle Inventory directory,

you can find it in the ORACLE_HOME/oraInst.loc file.

On Microsoft Windows systems, the default location for the inventory directory is

C:\Program Files\Oracle\Inventory\logs.

The following install log files are written to the log directory:

■installDATE-TIME_STAMP.log

■installDATE-TIME_STAMP.out

■installActionsDATE-TIME_STAMP.log

■installProfileDATE-TIME_STAMP.log

■oraInstallDATE-TIME_STAMP.err

■oraInstallDATE-TIME_STAMP.log

■opatchDATE-TIME_STAMP.log

4.2 Common Installation Tasks for Oracle Identity and Access

Management (11.1.1.5.0)

This section discusses the following topics:

■Starting an Installation

■Starting Oracle Fusion Middleware Configuration Wizard

■List of Executable Files

■Identifying Installation Directories

■Determining Port Numbers

Note: On UNIX systems, if you execute the ps -ef command and

grep for AdminServer or the name of the Oracle WebLogic

Managed Server (for example, ps -ef | grep AdminServer or

ps -ef | grep wls_oif1), the output contains multiple

occurrences of heap size parameters (-Xmx and -Xms).

Be aware that the last occurrence of the heap size parameters in the

output are effective and have precedence over the preceding

occurrences.

Common Installation Tasks for Oracle Identity and Access Management (11.1.1.5.0)

4-6 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

■Completing an Installation

■Locating Installation Log Files

■Optional: Updating the WebLogic Administrator Server User Name in Oracle

Enterprise Manager Fusion Middleware Control (OIM Only)

4.2.1 Starting an Installation

This topic explains the steps that are common to starting most Oracle Identity and

Access Management installations and configurations. It begins with starting the

Installer and ends after you complete the steps on the Prerequisites Check screen.

Perform the following steps to start an Oracle Identity and Access Management

installation:

1. Extract the contents of the ofm_iam_generic_11.1.1.5.0_disk1_1of1.zip

file to a directory.

2. Move to the Disk1 directory.

3. Start the Installer by executing one of the following commands:

UNIX: <full path to the runInstaller directory>/runInstaller

-jreLoc <Middleware Home>/jrockit_1.6.0_24/jre

Windows: <full path to the setup.exe directory>\ setup.exe

-jreLoc <Middleware Home>\jrockit_1.6.0_24\jre

Notes:

■If you are installing on an IBM AIX operating system, you must

run the rootpre.sh script from the Disk1 directory before you

start the installer.

■Starting the Installer as the root user is not supported.

Common Installation Tasks for Oracle Identity and Access Management (11.1.1.5.0)

Performing Common Installation Tasks 4-7

After the Installer starts, continue by referring to Installing and Configuring

Oracle Identity and Access Management (11.1.1.5.0).

4.2.2 Starting Oracle Fusion Middleware Configuration Wizard

To start the Oracle Fusion Middleware Configuration Wizard, which is used to

configure Oracle Identity and Access Management products in a new or existing

WebLogic administration domain, run the <MW_HOME>/oracle_

common/bin/config.sh script (on UNIX). On Windows, run the <MW_

HOME>\oracle_common\bin\config.cmd script. The Oracle Fusion Middleware

Configuration Wizard is displayed.

Note: The installer prompts you to enter the absolute path of the JDK

that is installed on your system. When you install Oracle WebLogic

Server, the jrockit_1.6.0_24 directory is created under your

Middleware Home. You must enter the absolute path of the JRE folder

located in this JDK when launching the installer. For example, on

Windows, if the JRE is located in

D:\oracle\Middleware\jrockit_1.6.0_24, then launch the

installer from the command prompt as follows:

D:\setup.exe -jreLoc D:\oracle\Middleware\jrockit_

1.6.0_24\jre

If you do not specify the -jreLoc option on the command line when

using the Oracle JRockit JDK, the following warning message is

displayed:

-XX:MaxPermSize=512m is not a valid VM option.

Ignoring

This warning message does not affect the installation. You can

continue with the installation.

On 64 bit platforms, when you install Oracle WebLogic Server using

the generic jar file, the jrockit_1.6.0_24 directory will not be

created under your Middleware Home. You must enter the absolute

path of the JRE folder from where your JDK is located.

Common Installation Tasks for Oracle Identity and Access Management (11.1.1.5.0)

4-8 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

4.2.3 List of Executable Files

Table 4–1 lists the executable files that are included in the Oracle WebLogic Server,

Oracle Identity and Access Management, Oracle SOA Suite, Oracle Web Tier, and

Oracle HTTP Server 11g Webgate for Oracle Access Manager Installers.

Note: When you run the config.cmd or config.sh command, the

following error message might be displayed:

*sys-package-mgr*: can't create package cache dir

The error message indicates that the default cache directory is not

valid. You can change the cache directory by including the

-Dpython.cachedir=<valid_directory> option in the

command line.

After starting the Oracle Fusion Middleware Configuration Wizard,

configure Oracle Identity and Access Management products, as

described in the following links:

■Configuring Oracle Identity Navigator

■Configuring Oracle Identity Manager

■Configuring Oracle Access Manager

■Configuring Oracle Adaptive Access Manager

■OAM and OAAM Joint Domain Configuration Scenarios

■Installing and Configuring Oracle Entitlements Server

Common Installation Tasks for Oracle Identity and Access Management (11.1.1.5.0)

Performing Common Installation Tasks 4-9

Table 4–1 Executable Files

File Description

ofm_iam_generic_

11.1.1.5.0_disk1_

1of1.zip

After you extract the

contents of the ofm_iam_

generic_11.1.1.5.0_

disk1_1of1.zip file to a

directory, you can see the

executable file

runInstaller (for

UNIX) or setup.exe (for

Windows) in the Disk1

directory.

Oracle Identity and Access Management 11g Release 1 (11.1.1.5.0)

Installer for Oracle Identity Manager, Oracle Access Manager, Oracle

Adaptive Access Manager, Oracle Entitlements Server, and Oracle

Identity Navigator

wls_linux32.bin for

32-bit Linux systems,

wls_win32.exe for

32-bit Windows systems,

and wls_generic.jar

for all 64-bit platforms

Oracle WebLogic Server Installer

soa.zip

After you extract the

contents of the soa.zip

file to a directory, you can

see the executable file

runInstaller (for

UNIX) or setup.exe (for

Windows) in the Disk1

directory.

Oracle SOA Suite 11g Release 1 Installer

soa_patchset.zip

After you extract the

contents of the soa_

patchset.zip file to a

directory, you can see the

executable file

runInstaller (for

UNIX) or setup.exe (for

Windows) in the Disk1

directory.

Oracle SOA Suite 11g Release 1 Patch Set Installer

Common Installation Tasks for Oracle Identity and Access Management (11.1.1.5.0)

4-10 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

4.2.4 Identifying Installation Directories

This topic describes directories you must identify in most Oracle Identity and Access

Management installations and configurations—it does not describe one particular

Installer screen. During installation, you will have to identify other component-specific

directories not described in this topic.

The common directories described in this section include the following:

■Oracle Middleware Home Location

■Oracle Home Directory

■Oracle Common Directory

■Oracle WebLogic Domain Directory

■WebLogic Server Directory

4.2.4.1 Oracle Middleware Home Location

Identify the location of your Oracle Middleware Home directory. The Installer creates

an Oracle Home directory for the component you are installing under the Oracle

Middleware Home that you identify in this field. The Oracle Middleware Home

directory is commonly referred to as MW_HOME.

webtier.zip

After you extract the

contents of the

webtier.zip file to a

directory, you can see the

executable file

runInstaller (for

UNIX) or setup.exe (for

Windows) in the Disk1

directory.

Oracle Web Tier 11g Release 1 (11.1.1) Installer

webgate.zip

After you extract the

contents of the

webgate.zip file to a

directory, you can see the

executable file

runInstaller (for

UNIX) or setup.exe (for

Windows) in the Disk1

directory.

Oracle HTTP Server 11g Webgate for Oracle Access Manager Installer

rcuHome.zip

After you extract the

contents of the

rcuHome.zip file to a

directory, you can see the

executable file rcu in the

BIN directory.

Oracle Fusion Middleware Repository Creation Utility (RCU)

Table 4–1 (Cont.) Executable Files

File Description

Common Installation Tasks for Oracle Identity and Access Management (11.1.1.5.0)

Performing Common Installation Tasks 4-11

4.2.4.2 Oracle Home Directory

Enter a name for the Oracle Home directory of the component. The Installer uses the

name you enter in this field to create the Oracle Home directory under the location

you enter in the Oracle Middleware Home Location field.

The Installer installs the files required to host the component, such as binaries and

libraries, in the Oracle Home directory. The Oracle Home directory is commonly

referred to as ORACLE_HOME.

4.2.4.3 Oracle Common Directory

The Installer creates this directory under the location you enter in the Oracle

Middleware Home Location field.

The Installer installs the Oracle Java Required Files (JRF) required to host the

components, in the Oracle Common directory. There can be only one Oracle Common

Home within each Oracle Middleware Home. The Oracle Common directory is

commonly referred to as oracle_common.

4.2.4.4 Oracle WebLogic Domain Directory

A WebLogic domain includes a special WebLogic Server instance called the

Administration Server, which is the central point from which you configure and

manage all resources in the domain. Usually, you configure a domain to include

additional WebLogic Server instances called Managed Servers. You deploy Java

components, such as Web applications, EJBs, and Web services, and other resources to

the Managed Servers and use the Administration Server for configuration and

management purposes only.

Managed Servers in a domain can be grouped together into a cluster.

The directory structure of a domain is separate from the directory structure of the

WebLogic Server home. It can reside anywhere; it need not be within the Middleware

home directory. A domain is a peer of an Oracle instance.

The Oracle Fusion Middleware Configuration Wizard creates a domain in a directory

named user_projects under your Middleware Home (MW_HOME).

4.2.4.5 WebLogic Server Directory

Enter the path to your Oracle WebLogic Server Home directory. This directory

contains the files required to host the Oracle WebLogic Server. It is commonly referred

to as WL_HOME.

4.2.5 Determining Port Numbers

If you want to install an Oracle Identity and Access Management 11g Release 1 (11.1.1)

component against an existing Oracle Identity and Access Management 11g Release 1

(11.1.1) component, you may need to identify the ports for the existing component. For

example, if you want to install Oracle Identity Manager 11g Release 1 (11.1.1) against

an existing Oracle Internet Directory 11g Release 1 (11.1.1) component, you must

identify its port when you install Oracle Identity Manager.

Note: Avoid using spaces in the directory names, including Oracle

Home. Spaces in such directory names are not supported.

Common Installation Tasks for Oracle Identity and Access Management (11.1.1.5.0)

4-12 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

4.2.6 Completing an Installation

This topic explains the steps that are common to completing most Oracle Identity and

Access Management installations and configurations. It begins with the steps on the

Installation Summary screen and ends after the Installation Complete screen.

When the Installation Summary screen appears, perform the following steps to

complete the installation:

1. Verify the installation and configuration information on the Installation Summary

screen.

■Click Save to save the installation response file, which contains your

responses to the Installer prompts and fields. You can use this response file to

perform silent installations. Refer to Performing a Silent Installation for more

information.

■Click Install. The Installation Progress screen appears.

2. Monitor the progress of your installation. The location of the installation log file is

listed for reference. After the installation progress reaches 100%, click OK. The

Installation Complete screen appears.

3. Click Save to save the installation summary file. This file contains information

about the configuration, such as locations of install directories, that will help you

get started with configuration and administration.

Click Finish to close and exit the Installer.

4.2.7 Locating Installation Log Files

The Installer writes log files to the ORACLE_INVENTORY_LOCATION/logs directory

on UNIX systems and to the ORACLE_INVENTORY_LOCATION\logs directory on

Windows systems.

On UNIX systems, if you do not know the location of your Oracle Inventory directory,

you can find it in the ORACLE_HOME/oraInst.loc file.

On Microsoft Windows systems, the default location for the inventory directory is

C:\Program Files\Oracle\Inventory\logs.

The following install log files are written to the log directory:

■installDATE-TIME_STAMP.log

■installDATE-TIME_STAMP.out

■installActionsDATE-TIME_STAMP.log

■installProfileDATE-TIME_STAMP.log

■oraInstallDATE-TIME_STAMP.err

■oraInstallDATE-TIME_STAMP.log

Note: The installation response file is not saved by default—you

must click Save to retain it.

Note: The installation summary file is not saved, by default—you

must click Save to retain it.

Common Installation Tasks for Oracle Identity and Access Management (11.1.1.5.0)

Performing Common Installation Tasks 4-13

4.2.8 Optional: Updating the WebLogic Administrator Server User Name in Oracle

Enterprise Manager Fusion Middleware Control (OIM Only)

Read this section only if the user name for the WebLogic Administrator for the domain

is not weblogic. This task is required only if you are using Oracle Identity Manager.

If your WebLogic administrator user name is not weblogic, complete the following

steps:

1. Ensure that the Oracle Identity Manager Managed server is up and running.

2. Log in to Oracle Enterprise Manager Fusion Middleware Control using your

WebLogic Server administrator credentials.

3. Click Identity and Access > oim > oim(11.1.1.2.0). Right-click and select System

MBean Browser. The System MBean Browser page is displayed.

4. Under Application Defined MBeans, select oracle.iam > Server:oim_

server1 > Application: oim > XMLConfig > config >

>XMLConfig.SOAConfig > SOAConfig.

5. View the attribute username. By default, the value of the attribute is weblogic.

Change this value to your WebLogic administrator user name.

6. Click Apply. Exit Oracle Enterprise Manager Fusion Middleware Control.

7. On the command line, use the cd command to move from your present working

directory to the <IAM_Home>/common/bin directory. IAM_Home is the example

IDM_Home directory for Oracle Identity Manager, Oracle Access Manager, Oracle

Adaptive Access Manager, Oracle Entitlements Server, and Oracle Identity

Navigator.

8. Launch the WebLogic Scripting Tool (WLST) interface as follows:

On UNIX: Run ./wlst.sh on the command line.

On Windows: Run wlst.cmd.

At the WLST command prompt (wls:/offline>), type the following:

connect()

You are prompted to enter the WebLogic Administration Server user name,

password, and URL. For more information about using the WLST interface, see

the topic "Using the WebLogic Scripting Tool" in the guide Oracle Fusion

Middleware Oracle WebLogic Scripting Tool.

a. Run the deleteCred WLST command:

deleteCred(map="oim", key="SOAAdminPassword");

b. Run the createCred WLST command, and replace the ADMIN_PASSWORD

with your WebLogic administrator password:

createCred(map="oim", key="SOAAdminPassword",

user="xelsysadm",password="<ADMIN_PASSWORD>");

c. Run the following WLST command to verify the values:

listCred(map="oim", key="SOAAdminPassword");

d. Type exit() to exit the WLST command shell.

9. Open the Oracle Identity Manager Administration Console, and log in as user

xelsysadm.

10. Create a new user for the user name of your WebLogic administrator.

Common Installation Tasks for Oracle Identity and Access Management (11.1.1.5.0)

4-14 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

11. Search for the Administrators role. Open the role details, and click the Members

tab.

12. Remove all the existing members of the Administrators role.

13. Add the newly created user (the one with your WebLogic administrator user

name) as a member of the Administrators role.

14. Restart Oracle Identity Manager Managed Server, as described in Starting the

Stack.

Evaluating Single Sign-On Installations 5-1

Evaluating Single Sign-On Installations

This chapter includes the following topics:

■Important Notes for Oracle Portal 11g Installations

■Before You Begin

■Single Sign-On Options

■Single Sign-On Preparation Considerations

■Oracle Single Sign-On Known Limitations

■Recommendations

5.1 Important Notes for Oracle Portal 11g Installations

New installations of Oracle Portal 11g require Oracle Single Sign-On 10g during the

installation process. Such Oracle Portal 11g users should use their existing Oracle

Single Sign-On 10g installation. If you must perform a new installation of Single

Sign-On 10g, consider hardware issues, system corruption, and any unforeseen issues.

Oracle recommends that you follow the system framework supported by 10g for a new

Single Sign-On 10g installation.

After installing Oracle Portal 11g, you may upgrade Oracle Single Sign-On 10g to

Oracle Access Manager 11g. For more information, see Oracle Fusion Middleware

Upgrade Guide for Oracle Identity Management.

5.2 Before You Begin

Before performing any upgrade or installation, you should read the following

documents to ensure that your Oracle Fusion Middleware environment meets the

minimum installation requirements for the products you are installing.

■Review System Requirements and Specifications

■Review Certification Information

■Review Interoperability and Compatibility Information

Note: Existing Oracle Single Sign-On 10g users are encouraged to

upgrade to Oracle Access Manager 11g for a more advanced single

sign-on solution.

Single Sign-On Options

5-2 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

5.2.1 Review System Requirements and Specifications

Oracle Fusion Middleware System Requirements and Specifications document is available

at:

http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-requirem

ents-100147.html

This document covers information such as hardware and software requirements,

database schema requirements, minimum disk space and memory requirements, and

required system libraries, packages, or patches.

5.2.2 Review Certification Information

Oracle Fusion Middleware Supported System Configurations document is available at:

http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certific

ation-100350.html

This document contains certification information related to supported 32-bit and 64-bit

operating systems, databases, web servers, LDAP servers, adapters, IPv6, JDKs, and

third-party products.

5.2.3 Review Interoperability and Compatibility Information

For interoperability and compatibility issues that may arise when installing, refer to

Oracle Fusion Middleware Interoperability and Compatibility Guide.

This document contains important information regarding the ability of Oracle Fusion

Middleware products to function with previous versions of other Oracle Fusion

Middleware, Oracle, or third-party products. This information is applicable to both

new Oracle Fusion Middleware users and existing users who are upgrading their

existing environment.

5.3 Single Sign-On Options

Following are the options available for a single sign-on solution:

■Use an existing Oracle Single Sign-On 10g 10.1.2.3.

■Use an existing Oracle Single Sign-On 10g 10.1.4.3.

■Install a new Oracle Single Sign-On 10g 10.1.2.3 as part of Oracle Identity

Management 10g 10.1.2.3. For more information, refer to the following link:

http://download.oracle.com/docs/cd/B14099_19/idmanage.htm

■Install a new Oracle Single Sign-On 10g 10.1.4.3 as part of Oracle Identity

Management 10g 10.1.4.3. For more information, refer to the following link:

http://download.oracle.com/docs/cd/B28196_01/idmanage.htm

■Use Oracle Access Manager 11g. For more information on installing and

configuring Oracle Access Manager 11g Release 1 (11.1.1), see Installing Oracle

Identity and Access Management (11.1.1.5.0) and Configuring Oracle Access

Manager.

5.4 Single Sign-On Preparation Considerations

Consider the following when preparing for a single sign-on solution:

Recommendations

Evaluating Single Sign-On Installations 5-3

■What Oracle Fusion Middleware products will be installed or configured to use a

single sign-on solution?

■Will the single sign-on solution be configured during installation or as a

post-installation step?

■If you have an existing Oracle Single Sign-On 10g, when will this installation be

upgraded to Oracle Access Manager 11g?

■Oracle Access Manager 11g is an additional installation after installing Oracle

Internet Directory 11g.

5.5 Oracle Single Sign-On Known Limitations

Following are the Oracle Single Sign-On known limitations:

■New installations of Oracle Portal 11g require Oracle Single Sign-On 10g (10.1.2.3

or 10.1.4.3) during the configuration phase.

■Premier support ends for Oracle Single Sign-On 10g (10.1.2.3) and Oracle Single

Sign-On 10g (10.1.4.3) soon. For complete information, refer to the Oracle Lifetime

Support Policy document available at:

http://www.oracle.com/us/support/library/lifetime-support-middleware-06

9163.pdf

■Premier support has been extended until December 2012 for the use of Oracle

Single Sign-On 10g (10.1.4.3) with existing Oracle Portal, Forms, Reports, and

Discoverer 11g environments, thereby enabling you to prepare for Oracle Access

Manager 11g upgrade.

■New installations of Oracle Single Sign-On 10g (10.1.2.3) are not supported against

the 11g environment.

■New installations of Oracle Single Sign-On 10g (10.1.4.3) have been supported

with the 11g environment through version 11.1.1.4.

5.6 Recommendations

Oracle recommends that you carefully consider the following requirements and

options when choosing a single sign-on solution:

■If an Oracle Single Sign-On 10g with Delegated Administration Services

environment is necessary, use an existing Oracle Single Sign-On 10g with

Delegated Administration Services environment.

■If a new Oracle Single Sign-On 10g environment must be installed, install under

previously supported framework. For example, a full Oracle Identity Management

10g infrastructure, with the intention of upgrading to Oracle Access Manager 11g

in near future and decommission rest of 10g.

■If you are not using Oracle Portal, install and configure Oracle Fusion Middleware

products with Oracle Access Manager 11g.

■If you are installing Oracle Portal 11g for upgrade purposes, use an existing Oracle

Single Sign-On 10g connection during the installation, and upgrade to Oracle

Access Manager 11g at a later time. For more information on upgrading to Oracle

Access Manager 11g, see Oracle Fusion Middleware Upgrade Guide for Oracle Identity

Management.

Recommendations

5-4 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

If you are using Delegated Administration Services, ensure that you run it on

Oracle Application Server Containers for J2EE. Move from Oracle Single Sign-On

10g to Oracle Access Manager 11g on Oracle WebLogic Server.

■New Oracle Forms and Oracle Reports installations should use Oracle Forms and

Oracle Reports Release 2 (11.1.2). This installation has an option to install with

Oracle Single Sign-On 10g or Oracle Access Manager 11g. You may upgrade

Oracle Single Sign-On 10g to Oracle Access Manager 11g before or after this

installation. For more information, see Oracle Fusion Middleware Installation Guide

for Oracle Forms and Reports.

■If you are installing only Oracle Discoverer, do not install the Oracle Single

Sign-On solution during Oracle Discoverer installation. Configure Oracle Access

Manager 11g after the installation.

Part II

Installing and Configuring Oracle Identity

Management (11.1.1.6.0)

Part II provides information about installing and configuring the following Oracle

Identity Management products:

■Oracle Internet Directory (OID)

■Oracle Virtual Directory (OVD)

■Oracle Directory Services Manager (ODSM)

■Oracle Directory Integration Platform (ODIP)

■Oracle Identity Federation (OIF)

Part II contains the following chapters:

■Chapter 6, "Installing and Configuring Oracle Identity Management (11.1.1.6.0)"

■Chapter 7, "Configuring Oracle Internet Directory"

■Chapter 8, "Configuring Oracle Virtual Directory"

■Chapter 9, "Configuring Oracle Directory Integration Platform"

■Chapter 10, "Configuring Oracle Directory Services Manager"

■Chapter 11, "Configuring Oracle Identity Federation"

Installing and Configuring Oracle Identity Management (11.1.1.6.0) 6-1

6 Installing and Configuring Oracle Identity

Management (11.1.1.6.0)

This chapter includes the following topics:

■Important Notes Before You Begin

■Installing Oracle Identity Management Using "Install and Configure" Option

■Configuring Oracle Identity Management for "Install Software - Do Not

Configure" Option

6.1 Important Notes Before You Begin

Before you start installing and configuring Oracle Identity Management products,

keep the following points in mind:

■This chapter provides information for installing and configuring Oracle Identity

Management (11.1.1.6.0) for new users. If you are an existing Oracle Identity

Management 11g user, refer to "Applying the Latest Oracle Fusion Middleware

Patch Set" in the Oracle Fusion Middleware Patching Guide.

For complete information about patching your Oracle Fusion Middleware 11g to

the latest release, refer to the Oracle Fusion Middleware Patching Guide.

■The Select Installation Type screen in the Installer presents two options: Install

and Configure and Install Software - Do Not Configure. For more information

about these options, see Installation Types: "Install Software - Do Not Configure"

vs. "Install and Configure".

6.2 Installing Oracle Identity Management Using "Install and Configure"

Option

Follow the instructions in this section to install and configure the latest Oracle Identity

Management software.

Installing and configuring the latest version of Oracle Identity Management 11g

components involves the following steps:

1. Obtaining the Oracle Fusion Middleware Software

2. Installing Oracle Database

3. Creating Database Schema Using the Oracle Fusion Middleware Repository

Creation Utility (RCU)

Installing Oracle Identity Management Using "Install and Configure" Option

6-2 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

4. Required Installation Privileges for Oracle WebLogic Server and Oracle Identity

Management on Windows Operating Systems

5. Installing Oracle WebLogic Server 11g Release 1 (10.3.6) and Creating the

Middleware Home

6. Creating the Inventory Directory (UNIX Only)

7. Starting an Installation

8. Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.6.0)

Software

6.2.1 Obtaining the Oracle Fusion Middleware Software

For installing Oracle Identity Management, you must obtain the following software:

■Oracle WebLogic Server 11g Release 1 (10.3.6)

■Oracle Database

■Oracle Repository Creation Utility

■Oracle Identity Management Suite

For more information on obtaining Oracle Fusion Middleware 11g software, see Oracle

Fusion Middleware Download, Installation, and Configuration ReadMe available at:

http://download.oracle.com/docs/cd/E23104_01/download_readme.htm

6.2.2 Installing Oracle Database

You must install an Oracle Database before you can install some Oracle Identity

Management components, such as:

■Oracle Internet Directory

■Oracle Identity Federation, if you want to use an RDBMS data store

For the latest information about supported databases, visit the following Web site:

http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html

The database must be up and running to install the relevant Oracle Identity

Management component. The database does not have to be on the same system where

you are installing the Oracle Identity Management component.

The database must also be compatible with Oracle Fusion Middleware Repository

Creation Utility (RCU), which is used to create the schemas that Oracle Identity

Management components require. For information about RCU requirements, refer to

the system requirements document at the following Web site:

http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-requirements-100147.html

Note: Oracle Identity Management 11g Release 1 (11.1.1.6.0) installer

is platform specific.

To install Oracle Identity Management 11g Release 1 (11.1.1.6.0) on a

32-bit operating system, you must use the 32-bit installer and to install

Oracle Identity Management 11g Release 1 (11.1.1.6.0) on a 64-bit

operating system, you must use the 64-bit installer.

Installing Oracle Identity Management Using "Install and Configure" Option

Installing and Configuring Oracle Identity Management (11.1.1.6.0) 6-3

6.2.3 Creating Database Schema Using the Oracle Fusion Middleware Repository

Creation Utility (RCU)

You must create and load the appropriate Oracle Fusion Middleware schema in your

database before installing the following Oracle Identity Management components and

configurations:

■Oracle Internet Directory, if you want to use an existing schema rather than create

a new one using the Installer during installation.

■Oracle Identity Federation Advanced configurations that use RDBMS for the

Federation Store, Session Store, Message Store, or Configuration Store.

You create and load Oracle Fusion Middleware schema in your database using the

RCU, which is available in the Oracle Fusion Middleware 11g Release 1 (11.1.1) release

Note: Ensure that the following database parameters are set:

■'aq_tm_processes' >= 1

■'db_cache_size' >= '150994944'

■'java_pool_size'>= '125829120'

■'shared_pool_size' >= '183500800'

■'open_cursors' >= '500'

If you are installing a new database, be sure to configure your

database to use AL32UTF8 character set encoding. If your database

does not use the AL32UTF8 character set, you will see the following

warning when running RCU: "The database you are connecting is

with non-AL32UTF8 character set. Oracle strongly recommends using

AL32UTF8 as the database character set." You can ignore this warning

and continue using RCU.

Note: When you install Oracle Internet Directory, you have the

choice of using an existing schema or creating a new one using the

Installer. If you want to use an existing schema, you must create it

using the Oracle Fusion Middleware Repository Creation Utility

(RCU) before you can install Oracle Internet Directory. If you choose

to create a new schema during installation, the Installer creates the

appropriate schema for you and you do not need to use the RCU.

If you are installing Oracle Internet Directory and your database is not

configured as per the requirements in the fusion middleware

requirements and prerequisites doc, you would see the following

warnings: "Recommended value for Database initialization parameter

processes is 500. Choose YES to continue or NO to go back to the same

screen and specify different database details." To fix this one can click

No and apply the requisite configuration mentioned in the fusion

middleware requirements and prerequisites doc - section 8 Repository

Creation Utility (RCU) Requirements which can be accessed from the

following link:

http://download.oracle.com/docs/html/E18558_

01/fusion_requirements.htm#CHDJGECA

Installing Oracle Identity Management Using "Install and Configure" Option

6-4 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

media and on the Oracle Technology Network (OTN) Web site. You can access the

OTN Web site at:

http://www.oracle.com/technetwork/index.html

When you run RCU, create and load only the following schema for the Oracle Identity

Management component you are installing—do not select any other schema available

in RCU:

■For Oracle Internet Directory, select only the Identity Management - Oracle

Internet Directory schema

■For Oracle Identity Federation, select only the Identity Management - Oracle

Identity Federation schema

6.2.4 Required Installation Privileges for Oracle WebLogic Server and Oracle Identity

Management on Windows Operating Systems

In order to install Oracle WebLogic Server and Oracle Identity Management on a

Microsoft Windows Vista or newer operating system, the operating system user must

have Windows "Administrator" privileges.

Even when a user with "Administrator" privileges logs in to the machine, the

administrative role is not granted for default tasks. In order to access the Oracle home

files and folders, the user must launch the command prompt or Windows Explorer as

"Administrator" explicitly, even if the user is logged in as the administrator.

To do so, you can do either one of the following:

■Find the Command Prompt icon (for example, from the Start menu or from the

Desktop), right-click on the icon, and select Run as Administrator. Then you can

run the executables (for example, the WebLogic Server installer) from the

command line.

■Start Windows Explorer, find the executable you want to run (for example,

rcu.bat for RCU, config.bat for the Configuration Wizard, or setup.exe for

the installer), right-click on the executable, and select Run as Administrator.

Note: RCU is available only on Linux x86 and Windows x86

platforms. Use the Linux RCU to create schemas on supported UNIX

databases. Use Windows RCU to create schemas on supported

Windows databases.

Note: When you create schema, be sure to remember the schema

owner and password that is shown in RCU. For Oracle Identity

Federation, it is of the form PREFIX_OIF. You will need to provide

this information when configuring Oracle Identity Federation with

RDBMS stores.

See: The Oracle Fusion Middleware Repository Creation Utility User's

Guide for complete information.

Installing Oracle Identity Management Using "Install and Configure" Option

Installing and Configuring Oracle Identity Management (11.1.1.6.0) 6-5

6.2.5 Installing Oracle WebLogic Server 11g Release 1 (10.3.6) and Creating the

Middleware Home

Oracle Identity Management requires Oracle WebLogic Server and a Middleware

home directory.

For more information, see "Install Oracle WebLogic Server" in Oracle Fusion Middleware

Installation Planning Guide. In addition, see Oracle Fusion Middleware Installation Guide

for Oracle WebLogic Server for complete information about installing Oracle WebLogic

Server.

For information on installing the Oracle WebLogic Server, see "Preparing for

Installation" and "Running the Installation Program in Graphical Mode" in the Oracle

Fusion Middleware Installation Guide for Oracle WebLogic Server.

6.2.6 Creating the Inventory Directory (UNIX Only)

If you are installing on a UNIX system, and if this is the first time any Oracle product

is being installed on your system with the Oracle Universal Installer, you will be asked

to provide the location of an inventory directory. This is where the installer will set up

subdirectories and maintain inventory data for each Oracle product that is installed on

this system.

Follow the instructions in Table 6–1 to configure the inventory directory information:

Notes:

■If you are installing Oracle Internet Directory without an Oracle

WebLogic administration domain, you do not need to install

Oracle WebLogic.

■The same user who installed Oracle WebLogic Server must install

Oracle Identity Management.

■Do not log in to the Oracle WebLogic Server Administration

Console during Oracle Identity Management installation.

■If you want to configure the minimum amount for Oracle

WebLogic Server’s maximum heap size, see Optional: Configuring

the Minimum Amount for Oracle WebLogic Server’s Maximum

Heap Size.

Table 6–1 Inventory Directory and Group Screens

Screen Description

Specify Inventory Directory Specify the Oracle inventory directory and group permissions

for that directory. The group must have write permissions to the

Oracle inventory directory.

Click OK to continue.

Inventory Location

Confirmation Run the createCentralInventory.sh script as root.

Click OK to continue.

Installing Oracle Identity Management Using "Install and Configure" Option

6-6 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

6.2.7 Starting an Installation

Perform the following steps to start an Oracle Identity Management installation:

If you are using Sun JDK, start the Installer by executing one of the following

commands:

UNIX: <full path to the runInstaller directory>/runInstaller

Windows: <full path to the setup.exe directory>\ setup.exe

If you are using Oracle JRockit JDK, start the Installer by executing one of the

following commands:

UNIX: <full path to the runInstaller directory>/runInstaller

-jreLoc <Middleware Home>/jrockit_1.6.0_24/jre

Windows: <full path to the setup.exe directory>\ setup.exe

-jreLoc <Middleware Home>\jrockit_1.6.0_24\jre

Note: If you do not want to use the central inventory, you can create

the oraInst.loc file, add the custom location of the inventory, and

run the runInstaller by using the following command:

runInstaller -invPtrLoc <full location to

oraInst.loc>

Note: You must be logged in to the UNIX operating system as a

non-root user to start the Installer.

Installing Oracle Identity Management Using "Install and Configure" Option

Installing and Configuring Oracle Identity Management (11.1.1.6.0) 6-7

6.2.8 Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.6.0)

Software

Follow the instructions in Table 6–2 to install and configure Oracle Identity

Management 11.1.1.6.0.

If you need additional help with any of the installation screens, click Help to access the

online help.

Notes:

■If you are using Oracle JRockit JDK, the installer prompts you to

enter the absolute path of the JDK that is installed on your system.

When you install Oracle WebLogic Server, the jrockit_1.6.0_

24 directory is created under your Middleware Home. You must

enter the absolute path of the JRE folder located in this JDK when

launching the installer. For example, on Windows, if the JRE is

located in D:\oracle\Middleware\jrockit_1.6.0_24, then

launch the installer from the command prompt as follows:

D:\setup.exe -jreLoc D:\oracle\Middleware\jrockit_

1.6.0_24\jre

■If you do not specify the -jreLoc option on the command line

when using the Oracle JRockit JDK, the following warning

message is displayed:

-XX:MaxPermSize=512m is not a valid VM option.

Ignoring

This warning message does not affect the installation. You can continue

with the installation.

■On 64 bit platforms, when you install Oracle WebLogic Server

using the generic jar file, the jrockit_1.6.0_24 directory will

not be created under your Middleware Home. You must enter the

absolute path of the JRE folder from where your JDK is located.

■On 64 bit platforms, the MaxPermSize should be set to 512M.

Before launching the Installer, you can set the MaxPermSize in the

environment as follows:

export _JAVA_OPTIONS=-XX:MaxPermSize=512m

If the MaxPermSize is not set to 512M, you will see the following error

message:

java.lang.OutOfMemoryError: PermGen space

■If you are using Sun JDK on 64 bit platforms, note that JDK1.7 is

not supported.

Installing Oracle Identity Management Using "Install and Configure" Option

6-8 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

Table 6–2 Installation and Configuration Flow for Install and Configure Option

No. Screen

When Does This

Screen Appear? Description and Action Required

1Welcome Always Click Next to continue.

2Install Software

Updates Always Specify any software updates to install before you

install Oracle Identity Management.

To get updates from My Oracle Support, you can select

Search My Oracle Support for Updates, specify a user

name and password, and then click Search for Updates.

Before you search, you can click Proxy Settings to

change the settings for the proxy server and Te st

Connection to test the credentials.

To get updates that you have saved to your computer,

you can select Search Local Directory for Updates,

specify a directory, and then click Search for Updates.

If you do not want to update any software, select Skip

Software Updates, and then click Next to continue the

installation.

3Select Installation Type Always Select Install and Configure option.

Notes:

■If you choose Install Software - Do Not Configure

option, you can configure them at a later time using

the Oracle Identity Management 11g Release 1

(11.1.1.6.0) Configuration Wizard. To start the

Oracle Identity Management 11g Release 1

(11.1.1.6.0) Configuration Wizard, execute the

ORACLE_HOME/bin/config.sh script

(config.bat on Windows). For more information,

see Configuring Oracle Identity Management for

"Install Software - Do Not Configure" Option.

■If you want to configure Oracle Directory

Integration Platform with Oracle Unified Directory

(OUD), or Oracle Directory Integration Platform

with Oracle Directory Server Enterprise Edition

(ODSEE), you must select Install Software - Do

Not Configure option while installing Oracle

Identity Management 11g Release 1 (11.1.1.6.0).

After Oracle Identity Management 11g Release 1

(11.1.1.6.0) installation is complete, depending on

the component you choose to configure with Oracle

Directory Integration Platform, refer to the

following sections:

■Configuring ODIP with

Oracle Unified Directory

(OUD)

■Configuring ODIP with

Oracle Directory Server

Enterprise Edition

(ODSEE)

Click Next to continue.

4Prerequisite Checks Always Ensure that all the prerequisites are met.

Click Next to continue.

Installing Oracle Identity Management Using "Install and Configure" Option

Installing and Configuring Oracle Identity Management (11.1.1.6.0) 6-9

5Select Domain This screen is displayed

if you select Install and

Configure option.

Select one of the following options:

■Create New Domain: Enter the User Name, User

Password, and Domain Name for the domain you

want to create.

Depending on the component you choose, refer to

the following sections:

■OID with ODSM and

Fusion Middleware

Control in a New

WebLogic Domain

■OID with ODIP, ODSM,

and Fusion Middleware

Control in a New

WebLogic Domain

■OID and OVD with

ODSM in a New

WebLogic Domain

■OVD with ODSM and

Fusion Middleware

Control in a New

WebLogic Domain

■Only ODSM in a New

WebLogic Domain

■ODIP with Fusion

Middleware Control in a

New WebLogic Domain

■Advanced Example:

Configuring OIF with

OID in a New WebLogic

Domain for LDAP

Authentication, User

Store, and Federation

Store

■Extend Existing Domain: Enter the Host Name,

Port, User Name, and User Password for the

existing domain you want to extend into.

Depending on the component you choose, refer to

the following sections:

■Only OID in an Existing

WebLogic Domain

■Only OVD in an

Existing WebLogic

Domain

■Only ODSM in an

Existing WebLogic

Domain

■Only ODIP in an

Existing WebLogic

Domain

Table 6–2 (Cont.) Installation and Configuration Flow for Install and Configure Option

No. Screen

When Does This

Screen Appear? Description and Action Required

Installing Oracle Identity Management Using "Install and Configure" Option

6-10 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

6Specify Installation

Location Always Specify the Oracle Middleware Home location, Oracle

Home Directory, WebLogic Server Directory, Oracle

Instance Location, and Oracle Instance Name.

For more information about these directories, see

"Understanding Oracle Fusion Middleware Concepts

and Directory Structure" in Oracle Fusion Middleware

Installation Planning Guide.

Click Next to continue.

7Specify Security

Updates Always This screen allows you to decide how you want to be

notified about security issues:

■If you want to be notified about security issues

through E-mail, enter your E-mail address in the

E-mail field.

■If you want to be notified about security issues

through My Oracle Support (formerly MetaLink),

select the My Oracle Support option and enter your

My Oracle Support Password.

■If you do not want to be notified about security

issues, leave all fields empty. You will see the

following message:

You have not provided an E-mail address. Do you

wish to remain uninformed of critical security

issues in your configuration?

Click Yes to continue.

Click Next to continue.

Table 6–2 (Cont.) Installation and Configuration Flow for Install and Configure Option

No. Screen

When Does This

Screen Appear? Description and Action Required

Installing Oracle Identity Management Using "Install and Configure" Option

Installing and Configuring Oracle Identity Management (11.1.1.6.0) 6-11

8Configure Components This screen is displayed

if you select Install and

Configure option.

■Select the Oracle Identity Management components

that you wish to install and configure.

■For Create Domain installations, the Enterprise

Manager checkbox under Management

Components is automatically selected. Oracle

Enterprise Manager Fusion Middleware Control

Console (Fusion Middleware Control Console) will

be installed and configured; you cannot deselect it.

It is implicitly selected for configuration.

■If you select No Domain Flow, only Oracle Internet

Directory and Oracle Virtual Directory will be

available for configuration.

■In installations in which you select to extend the

Domain, Enterprise Manager (Fusion Middleware

Control Console) is not available as a selectable

component. In the extend the domain installation

only Oracle Directory Services Manager is available

as a selection under the Management Components

area.

■Oracle Directory Services Manager can be installed

and configured as a stand-alone component.

■If you select to install Oracle Internet Directory or

Oracle Virtual Directory in the create domain

installation flow, Oracle Directory Services

Manager is automatically selected and cannot be

deselected. For extend domain or expand cluster,

the Oracle Directory Services Manager can be

deselected by you if you select to install Oracle

Internet Directory or Oracle Virtual Directory.

■The Clustered selection field appears and is

available if you at least one Java component

selected for installation and configuration. Only

managed servers and the applications that are

deployed to them can be clustered. Enterprise

Manager (Fusion Middleware Control Console) is

not clustered during the installation because it is

deployed to the administrative server.

■If you select to expand a cluster installation, at least

one cluster should be present when you select this

option.

■If you select to expand a cluster the Java EE

components which are configured as part of the

cluster will be listed.

Click Next to continue.

9Configure Ports This screen is displayed

if you select Install and

Configure option.

Choose how you want the Installer to configure ports:

■Select Auto Port Configuration if you want the

Installer to configure ports from a predetermined

range.

■Select Specify Ports using Configuration File if

you want the Installer to configure ports using the

staticports.ini file. You can click View/Edit File to

update the settings in the staticports.ini file.

Click Next to continue.

Table 6–2 (Cont.) Installation and Configuration Flow for Install and Configure Option

No. Screen

When Does This

Screen Appear? Description and Action Required

Installing Oracle Identity Management Using "Install and Configure" Option

6-12 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

10 Specify Schema

Database This screen is displayed

if you select Install and

Configure option and

choose to configure

Oracle Internet

Directory.

Choose whether to use an existing schema or to create a

new one using the Installer.

Note: If you want to use an existing schema, it must

currently reside in the database to continue with the

installation. If it does not currently reside in the

database, you must create it now using the Oracle

Fusion Middleware Repository Creation Utility.

To use an existing schema:

1. Select Use Existing Schema.

2. Enter the database connection information in the

Connect String field. The connection string must be

in the form of hostname:port:servicename.

For Oracle Real Application Clusters (RAC), the

connection string must be in the form of

hostname1:port1:instance1^hostname2:po

rt2:instance2@servicename.

3. Enter the password for the existing ODS schema in

the Password field.

4. Click Next to continue.

Note: If your existing ODS and ODSSM schemas

have different passwords, the Specify ODSSM

Password screen will appear after you click Next.

Enter the password for your existing ODSSM

schema and click Next.

To create a new schema:

1. Select Create Schema.

2. Enter the database connection information in the

Connect String field. The connection string must be

in the form of hostname:port:servicename.

For Oracle Real Application Clusters (RAC), the

connection string must be in the form of

hostname1:port1:instance1^hostname2:po

rt2:instance2@servicename.

3. Enter the name of the database user in the User

Name field. The user you identify must have DBA

privileges.

Note: If you are using Oracle Database 11g Release

2 (11.2) or higher version, the database user should

be only 'SYS'.

4. Enter the password for the database user in the

Password field.

5. Click Next. The Enter OID Passwords screen

appears.

6. Create a password for the new ODS schema by

entering it in the ODS Schema Password field.

Enter it again in the Confirm ODS Schema

Password field.

7. Create a password for the new ODSSM schema by

entering it in the ODSSM Schema Password field.

Enter it again in the Confirm ODSSM Schema

Password field.

8. Click Next to continue.

Table 6–2 (Cont.) Installation and Configuration Flow for Install and Configure Option

No. Screen

When Does This

Screen Appear? Description and Action Required

Installing Oracle Identity Management Using "Install and Configure" Option

Installing and Configuring Oracle Identity Management (11.1.1.6.0) 6-13

11 Specify Oracle Virtual

Directory Information This screen is displayed

if you select Install and

Configure option and

choose to configure

Oracle Virtual

Directory.

Enter the following information:

■LDAP v3 Name Space: Enter the name space for

Oracle Virtual Directory. The default value is

dc=us,dc=oracle,dc=com.

■HTTP Web Gateway: Select this option to enable

the Oracle Virtual Directory HTTP Web Gateway.

■Secure: Select this option if you enabled the HTTP

Web Gateway and you want to secure it using SSL.

■Administrator User Name: Enter the user name for

the Oracle Virtual Directory administrator. The

default value is cn=orcladmin.

■Password: Enter the password for the Oracle

Virtual Directory administrator.

■Confirm Password: Enter the password for the

Oracle Virtual Directory administrator again.

■Configure Administrative Server in secure mode:

Select this option to secure the Oracle Virtual

Directory Administrative Listener using SSL. This

option is selected by default. Oracle recommends

selecting this option.

Click Next to continue.

12 Specify OID

Administrator

Password

This screen is displayed

if you select Install and

Configure option and

choose to configure

Oracle Internet

Directory.

Enter the password for the Oracle Internet Directory

administrator.

Click Next to continue.

Table 6–2 (Cont.) Installation and Configuration Flow for Install and Configure Option

No. Screen

When Does This

Screen Appear? Description and Action Required

Installing Oracle Identity Management Using "Install and Configure" Option

6-14 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

13 Select Oracle Identity

Federation

Configuration Type

This screen is displayed

if you select Install and

Configure option and

choose to configure

Oracle Identity

Federation.

Select one of the following configuration types:

■Basic: You do not need to choose the datastore and

authentication engine types or specify the

connection details for Oracle Identity Federation.

For more information, see Performing Basic Oracle

Identity Federation Configurations

■Advanced: This option will enable you to choose

the configuration types for the datastores, the

authentication engine, and specify the connection

details datastores and authentication engine.

For more information, see Performing Advanced

Oracle Identity Federation Configurations

Note: The procedure in this table shows the screens

that appears when the Basic option is selected. If

you want to select Advanced option, refer to the

following for complete details:

■Performing Advanced

Oracle Identity

Federation

Configurations

■Advanced Example:

Configuring OIF with

OID in a New WebLogic

Domain for LDAP

Authentication, User

Store, and Federation

Store

■Advanced Example:

Configuring OIF in a

New or Existing

WebLogic Domain with

RDBMS Data Stores

Click Next to continue.

Table 6–2 (Cont.) Installation and Configuration Flow for Install and Configure Option

No. Screen

When Does This

Screen Appear? Description and Action Required

Installing Oracle Identity Management Using "Install and Configure" Option

Installing and Configuring Oracle Identity Management (11.1.1.6.0) 6-15

Oracle Identity Management 11g Release 1 (11.1.1.6.0) is installed and configured if

you selected Install and Configure option in the Select Installation Type screen. By

default Oracle_IDM1 is created as the Oracle Identity Management Oracle home

directory. This home directory is also referred to as IDM_Home in this guide.

To locate the installation log files, see Locating Installation Log Files.

14 Specify Oracle Identity

Federation Details This screen is displayed

if you select Install and

Configure option and

choose to configure

Oracle Identity

Federation.

Enter the following information:

■PKCS12 Password: Enter the password Oracle

Identity Federation will use for encryption and for

signing wallets. The Installer automatically

generates these wallets with self-signed certificates.

Oracle recommends using the wallets only for

testing.

■Confirm Password: Enter the PKCS12 password

again.

■Server ID: Enter a string that will be used to

identify this Oracle Identity Federation instance. A

prefix oif will be added to the beginning of the

string you enter. Each logical Oracle Identity

Federation instance within an Oracle WebLogic

Server administration domain must have a unique

Server ID. Clustered Oracle Identity Federation

instances acting as a single logical instance will

have the same Server ID.

Click Next to continue.

15 Installation Summary Always Verify the information on this screen. If you want to

change any options, you can return to a previous screen

by clicking a link in the navigation tree on the left or by

clicking Back until you get to the screen. After you edit

the required options, you can continue the installation

from the previous screen.

Click Save if you want to save a response file. You will

be prompted for a name and location for the response

file, which will contain information specific to your

installation. After the installer creates the response file,

you can use it exactly as is to replicate the installation

on other systems, or you can modify the response file in

a text editor.

Click Install to begin the installation.

16 Installation Progress Always If you are installing on a UNIX system, you may be

asked to run the ORACLE_HOME/oracleRoot.sh

script to set up the proper file and directory

permissions. For more information, see Executing the

oracleRoot.sh Script on UNIX Platforms.

Click Next to continue.

17 Configuration Progress This screen is displayed

if you select Install and

Configure option.

Click Next to continue.

18 Installation Complete Always Click Save to save the installation configuration, and

then click Finish to exit the installer.

Table 6–2 (Cont.) Installation and Configuration Flow for Install and Configure Option

No. Screen

When Does This

Screen Appear? Description and Action Required

Configuring Oracle Identity Management for "Install Software - Do Not Configure" Option

6-16 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

6.3 Configuring Oracle Identity Management for "Install Software - Do Not

Configure" Option

If you selected Install Software - Do Not Configure option in the Select Installation

Type screen while installing Oracle Identity Management 11g Release 1 (11.1.1.6.0), as

described in Installing and Configuring Oracle Identity Management 11g Release 1

(11.1.1.6.0) Software, you must now start the Oracle Identity Management

Configuration Wizard to configure the following components:

■Oracle Internet Directory (OID)

■Oracle Virtual Directory (OVD)

■Oracle Directory Services Manager (ODSM)

■Oracle Directory Integration Platform (ODIP)

■Oracle Identity Federation (OIF)

Run the Oracle Identity Management 11g Configuration Wizard as follows:

On UNIX systems:

ORACLE_IDM1/bin/config.sh

On Windows systems:

ORACLE_IDM1\bin\config.bat

The Oracle Identity Management 11g Configuration Wizard is displayed. You can use

this wizard to configure your component in a new domain, in an existing domain, or

without a domain. Note that you can install and configure only Oracle Internet

Directory and Oracle Virtual Directory without a domain. For more information, see

the following topics:

■Only OID in an Existing WebLogic Domain

■Only OID Without a WebLogic Domain

■OID with ODSM and Fusion Middleware Control in a New WebLogic Domain

■OID with ODIP, ODSM, and Fusion Middleware Control in a New WebLogic

Domain

■OVD with ODSM and Fusion Middleware Control in a New WebLogic Domain

■Only OVD in an Existing WebLogic Domain

■Only OVD Without a WebLogic Domain

■Performing Basic Oracle Identity Federation Configurations

■Performing Advanced Oracle Identity Federation Configurations

■ODIP with Fusion Middleware Control in a New WebLogic Domain

■Only ODIP in an Existing WebLogic Domain

■Configuring ODIP when OID is Running in SSL Mode 2 - Server Only

Authentication

Configuring Oracle Internet Directory 7-1

7 Configuring Oracle Internet Directory

This chapter explains how to configure Oracle Internet Directory (OID).

This chapter discusses the following topics:

■OID with ODSM and Fusion Middleware Control in a New WebLogic Domain

■OID with ODIP, ODSM, and Fusion Middleware Control in a New WebLogic

Domain

■OID and OVD with ODSM in a New WebLogic Domain

■Only OID in an Existing WebLogic Domain

■Only OID Without a WebLogic Domain

■Verifying OID Installation

■Getting Started with OID After Installation

Table 7–1 Oracle Internet Directory Configuration Scenarios

Scenario Description

OID with ODSM and Fusion

Middleware Control in a

New WebLogic Domain

The configuration described in this topic is appropriate for

environments that have all of the following conditions:

■You want to manage Oracle Internet Directory using Fusion

Middleware Control.

■You want Oracle Internet Directory to be in a WebLogic

administration domain.

■There is no WebLogic Administration Server managing

other 11g Release 1 (11.1.1) Oracle Directory Services

components.

■You want to install Oracle Internet Directory and a

WebLogic Administration Server colocated on the same

host.

OID with ODIP, ODSM, and

Fusion Middleware Control

in a New WebLogic Domain

The configuration described in this topic is appropriate for

environments that have both of the following conditions:

■You want to install Oracle Internet Directory and Oracle

Directory Integration Platform colocated on the same host.

■There is no WebLogic Administration Server managing

other 11g Release 1 (11.1.1) Oracle Directory Services

components.

OID with ODSM and Fusion Middleware Control in a New WebLogic Domain

7-2 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

7.1 OID with ODSM and Fusion Middleware Control in a New WebLogic

Domain

This topic describes how to configure Oracle Internet Directory (OID) with Oracle

Directory Services Manager (ODSM) and Fusion Middleware Control in a new

WebLogic administration domain. It includes the following sections:

■Appropriate Deployment Environment

■Components Deployed

■Dependencies

■Procedure

7.1.1 Appropriate Deployment Environment

The configuration described in this topic is appropriate for environments that have all

of the following conditions:

■You want to manage Oracle Internet Directory using Fusion Middleware Control.

■You want Oracle Internet Directory to be in a WebLogic administration domain.

■There is no WebLogic Administration Server managing other 11g Release 1 (11.1.1)

Oracle Directory Services components.

■You want to install Oracle Internet Directory and a WebLogic Administration

Server colocated on the same host.

OID and OVD with ODSM

in a New WebLogic Domain The configuration described in this topic is appropriate for

environments that have the following conditions:

■A new WebLogic Administration Server is necessary to

manage Oracle Internet Directory and Oracle Virtual

Directory components.

■You want to install Oracle Internet Directory and Oracle

Virtual Directory together in the same WebLogic domain,

which can be extended at a later time to add new Oracle

Identity Management components.

Only OID in an Existing

WebLogic Domain The configuration described in this topic is appropriate for

environments that have both of the following conditions:

■A WebLogic Administration Server is available to manage

11g Release 1 (11.1.1) Oracle Directory Services components

and you want Oracle Internet Directory to join that domain.

■You want to install Oracle Internet Directory separately

from the WebLogic Administration Server.

Only OID Without a

WebLogic Domain The configuration described in this topic is appropriate for

environments that have both of the following conditions:

■You do not want to include Oracle Internet Directory in a

WebLogic administration domain for management

purposes.

■You do not want to manage Oracle Internet Directory using

Fusion Middleware Control.

Table 7–1 (Cont.) Oracle Internet Directory Configuration Scenarios

Scenario Description

OID with ODSM and Fusion Middleware Control in a New WebLogic Domain

Configuring Oracle Internet Directory 7-3

7.1.2 Components Deployed

Performing the configuration in this section deploys the following components:

■WebLogic Administration Server

■Oracle Internet Directory

■Oracle Directory Services Manager

■Fusion Middleware Control

7.1.3 Dependencies

The configuration in this section depends on the following:

■Oracle WebLogic Server

■Oracle Database

■If you want to use an existing schema, Identity Management - Oracle Internet

Directory schema existing in the Oracle Database.

7.1.4 Procedure

Perform the following steps to configure Oracle Internet Directory with Oracle

Directory Services Manager and Fusion Middleware Control in a new domain:

1. On the Select Domain screen, select Create New Domain and enter the following

information:

■Enter the user name for the new domain in the User Name field.

■Enter the user password for the new domain in the User Password field.

■Enter the user password again in the Confirm Password field.

■Enter a name for the new domain in the Domain Name field.

Click Next. The Specify Installation Location screen appears.

2. Identify the Homes, Instances, and the WebLogic Server directory by referring to

Identifying Installation Directories. After you enter information for each field,

click Next. The Specify Security Updates screen appears.

3. Choose how you want to be notified about security issues:

Note: If you selected Install and Configure option in the Select

Installation Type screen while installing Oracle Identity Management

11g Release 1 (11.1.1.6.0), as described in Installing and Configuring

Oracle Identity Management 11g Release 1 (11.1.1.6.0) Software, the

Select Domain screen is displayed.

If you selected Install Software - Do Not Configure option in the

Select Installation Type screen while installing Oracle Identity

Management 11g Release 1 (11.1.1.6.0), as described in Installing and

Configuring Oracle Identity Management 11g Release 1 (11.1.1.6.0)

Software, you must now start the Oracle Identity Management

Configuration Wizard. Run <ORACLE_HOME>/bin/config.sh (on

UNIX) or <ORACLE_HOME>\bin\config.bat (on Windows) to start

the Oracle Identity Management Configuration Wizard. The Select

Domain screen is displayed.

OID with ODSM and Fusion Middleware Control in a New WebLogic Domain

7-4 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

■If you want to be notified about security issues through email, enter your

email address in the Email field.

■If you want to be notified about security issues through My Oracle Support

(formerly MetaLink), select the My Oracle Support option and enter your My

Oracle Support Password.

■If you do not want to be notified about security issues, leave all fields empty.

Click Next. The Configure Components screen appears.

4. Select Oracle Internet Directory. The Oracle Directory Services Manager and

Fusion Middleware Control management components are automatically selected

for this installation.

Ensure no other components are selected and click Next. The Configure Ports

screen appears.

5. Choose how you want the Installer to configure ports:

■Select Auto Port Configuration if you want the Installer to configure ports

from a predetermined range.

■Select Specify Ports using Configuration File if you want the Installer to

configure ports using the staticports.ini file. You can click View/Edit File to

update the settings in the staticports.ini file.

Click Next. The Specify Schema Database screen appears.

6. Choose whether to use an existing schema or to create a new one using the

Installer.

To use an existing schema

a. Select Use Existing Schema.

b. Enter the database connection information in the Connect String field. The

connection string must be in the form of hostname:port:servicename. For Oracle

Real Application Clusters (RAC), the connection string must be in the form of

hostname1:port1:instance1^hostname2:port2:instance2@servicename.

c. Enter the password for the existing ODS schema in the Password field.

d. Click Next.

The Create Oracle Internet Directory screen appears.

Note: If you want to use an existing schema, it must currently reside

in the database to continue with the installation. If it does not

currently reside in the database, you must create it now using the

Oracle Fusion Middleware Repository Creation Utility or follow the

To create a new schema section mentioned below.

Refer to Creating Database Schema Using the Oracle Fusion

Middleware Repository Creation Utility (RCU) for more information.

Note: If your existing ODS and ODSSM schemas have different

passwords, the Specify ODSSM Password screen will appear after you

click Next. Enter the password for your existing ODSSM schema and

click Next.

OID with ODSM and Fusion Middleware Control in a New WebLogic Domain

Configuring Oracle Internet Directory 7-5

e. Continue the installation by going to step 7 now.

To create a new schema

a. Select Create Schema.

b. Enter the database connection information in the Connect String field. The

connection string must be in the form of hostname:port:servicename. For Oracle

Real Application Clusters (RAC), the connection string must be in the form of

hostname1:port1:instance1^hostname2:port2:instance2@servicename.

c. Enter the name of the database user in the User Name field. The user you

identify must have DBA privileges.

d. Enter the password for the database user in the Password field.

e. Click Next. The Enter OID Passwords screen appears.

f. Create a password for the new ODS schema by entering it in the ODS Schema

Password field.

Enter it again in the Confirm ODS Schema Password field.

g. Create a password for the new ODSSM schema by entering it in the ODSSM

Schema Password field.

Enter it again in the Confirm ODSSM Schema Password field.

h. Click Next. The Create Oracle Internet Directory screen appears.

7. Enter the following information for Oracle Internet Directory:

■Realm: Enter the location for your realm. For example:

dc=mycompany,dc=com

■Administrator Password: Enter the password for the Oracle Internet Directory

administrator.

■Confirm Password: Enter the administrator password again.

Click Next.

8. The Installation Summary screen appears. Verify the information on this screen.

Click Configure to begin the configuration.

9. The Configuration Progress screen appears. Click Next to continue.

10. The Installation Complete screen appears. Click Save to save the configuration

information to a file, and then click Finish to exit the installer.

Note: If you are using Oracle Database 11g Release 2 (11.2) or higher

version, the database user should be only 'SYS'.

OID with ODIP, ODSM, and Fusion Middleware Control in a New WebLogic Domain

7-6 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

7.2 OID with ODIP, ODSM, and Fusion Middleware Control in a New

WebLogic Domain

This topic describes how to configure Oracle Internet Directory (OID) with Oracle

Directory Integration Platform (ODIP), Oracle Directory Services Manager (ODSM),

and Fusion Middleware Control in a new WebLogic administration domain. It

includes the following sections:

■Appropriate Deployment Environment

■Components Deployed

■Dependencies

■Procedure

7.2.1 Appropriate Deployment Environment

The configuration described in this topic is appropriate for environments that have

both of the following conditions:

■You want to install Oracle Internet Directory and Oracle Directory Integration

Platform colocated on the same host.

■There is no WebLogic Administration Server managing other 11g Release 1 (11.1.1)

Oracle Directory Services components.

7.2.2 Components Deployed

Performing the configuration in this section deploys the following components:

■WebLogic Administration Server

■Oracle Internet Directory

■WebLogic Managed Server

■Oracle Directory Integration Platform

■Oracle Directory Services Manager

■Fusion Middleware Control

7.2.3 Dependencies

The configuration in this section depends on the following:

■Oracle WebLogic Server

■Oracle Database

Note: You may see the following error message in $Instance_

home/diagnostics/logs/OID/oid1/** log files after

configuring Oracle Internet Directory:

"2010-02-01T07:27:42+00:00] [OID] [NOTIFICATION:16]

[] [OIDLDAPD] [host:stadp47] [pid: 26444] [tid: 0]

Main:: FATAL * gslsmaiaInitAudCtx * Audit struct

initialization failed. Audit error code: 62005"

You can ignore this error message.

OID with ODIP, ODSM, and Fusion Middleware Control in a New WebLogic Domain

Configuring Oracle Internet Directory 7-7

■If you want to use an existing schema, Identity Management - Oracle Internet

Directory schema existing in the Oracle Database.

7.2.4 Procedure

Perform the following steps to configure Oracle Internet Directory with Oracle

Directory Integration Platform, Oracle Directory Services Manager, and Fusion

Middleware Control in a new domain:

1. Ensure that Oracle Internet Directory, Oracle Directory Integration Platform, and

Oracle Directory Services Manager are installed, as described in Installation

Roadmap and Installing Oracle Identity Management Using "Install and

Configure" Option.

2. On the Select Domain screen, select Create New Domain and enter the following

information:

■Enter the user name for the new domain in the User Name field.

■Enter the user password for the new domain in the User Password field.

■Enter the user password again in the Confirm Password field.

■Enter a name for the new domain in the Domain Name field.

Click Next. The Specify Installation Location screen appears.

3. Identify the Homes, Instances, and the WebLogic Server directory by referring to

Identifying Installation Directories. After you enter information for each field,

click Next. The Specify Security Updates screen appears.

4. Choose how you want to be notified about security issues:

■If you want to be notified about security issues through email, enter your

email address in the Email field.

■If you want to be notified about security issues through My Oracle Support

(formerly MetaLink), select the My Oracle Support option and enter your My

Oracle Support Password.

■If you do not want to be notified about security issues, leave all fields empty.

Click Next. The Configure Components screen appears.

Note: If you selected Install and Configure option in the Select

Installation Type screen while installing Oracle Identity Management

11g Release 1 (11.1.1.6.0), as described in Installing and Configuring

Oracle Identity Management 11g Release 1 (11.1.1.6.0) Software, the

Select Domain screen is displayed.

If you selected Install Software - Do Not Configure option in the

Select Installation Type screen while installing Oracle Identity

Management 11g Release 1 (11.1.1.6.0), as described in Installing and

Configuring Oracle Identity Management 11g Release 1 (11.1.1.6.0)

Software, you must now start the Oracle Identity Management

Configuration Wizard. Run <ORACLE_HOME>/bin/config.sh (on

UNIX) or <ORACLE_HOME>\bin\config.bat (on Windows) to start

the Oracle Identity Management Configuration Wizard. The Select

Domain screen is displayed.

OID with ODIP, ODSM, and Fusion Middleware Control in a New WebLogic Domain

7-8 Oracle Fusion Middleware Installation Guide for Oracle Identity Management

5. Select Oracle Internet Directory and Oracle Directory Integration Platform. The

Oracle Directory Services Manager and Fusion Middleware Control management

components are automatically selected for this installation.

Ensure no other components are selected and click Next. The Configure Ports

screen appears.

6. Choose how you want the Installer to configure ports:

■Select Auto Port Configuration if you want the Installer to configure ports

from a predetermined range.

■Select Specify Ports using Configuration File if you want the Installer to

configure ports using the staticports.ini file. You can click View/Edit File to

update the settings in the staticports.ini file.

Click Next. The Specify Schema Database screen appears.

7. Choose whether to use an existing schema or to create a new one using the

Installer.

To use an existing schema

a. Select Use Existing Schema.

b. Enter the database connection information in the Connect String field. The

connection string must be in the form of hostname:port:servicename. For Oracle

Real Application Clusters (RAC), the connection string must be in the form of

hostname1:port1:instance1^hostname2:port2:instance2@servicename.

c. Enter the password for the existing ODS schema in the Password field.

d. Click Next.

The Create Oracle Internet Directory screen appears.

e. Continue the installation by going to step 8 now.