Working with Oracle Database User Management Connector

Brief Overview

• The connector is used to integrate Oracle Identity Manager with database user management tables in the target systems: Oracle Database.
• In Oracle Database, the Login and User entities are treated as a single entity.  

 Installing DBUM Connector in OIM

• Copy the DBUM.zip folder on some path and extract the DBUM.zip to following path: ORACLE_HOME/server/ConnectorDefaultDirectory.

• Use the Manage Connnector under system managemnet to install connector within OIM

Installing the Connector on the Connector Server

If you need to deploy the DBUM connector into the Java Connector Server, then follow these steps:

•   Stop the Java Connector Server.
• Copy org.identityconnectors.dbum-1.0.1116.jar in to into the Java Connector Server   CONNECTOR_SERVER_HOME\bundles directory. 
•  Copy ojdbc6.jar to  path: D:\CONNECTOR_SERVER_HOME\Connector_Server_111210\connector_server_java-1.4.0\lib 

                                  ---After adding the ojdbc.jar ,edit the following
                      Open the ConnectorServer.bat, and add the path of ojdb6.jar          

set CP="%CONNECTOR_SERVER_HOME%\lib\framework\connector-framework.jar";"%CONNECTOR_SERVER_HOME%\lib\framework\connector-framework-internal.jar";"%CONNECTOR_SERVER_HOME%\lib\framework\groovy-all.jar";"%CONNECTOR_SERVER_HOME%\lib\framework\ojdbc6.jar";

• Start the Java Connector Server.

 Creating IT Resource

  Configure IT Resource as below:

 

   And If the IT Resource for Connector server is not already present, create one;

 Lookup Synchronization:
   Required Lookups:  

Lookup Definition	Target Table Name	Target Column Name
Lookup.DBUM.Oracle.Privileges	DBA_SYS_PRIVS	PRIVILEGE
Lookup.DBUM.Oracle.Profiles	dba_users	DISTINCT profile
Lookup.DBUM.Oracle.Roles	DBA_ROLE_PRIVS	GRANTED_ROLE
Lookup.DBUM.Oracle.Temp.Tablespace	dba_users	DEFAULT_TABLESPACE
Lookup.DBUM.Oracle.Tablespaces	dba_users	TEMPORARY_TABLESPACE

 

   1.  To get Tables Spaces from Oracle Database Run DBUM Oracle Tablespaces Lookup Reconciliation 

        

 2.  To get Temporary Table spaces run schedule job: DBUM Oracle Temporary Tablespaces Lookup Reconciliation.

   3. To Get Privileges from Oracle DB run the following schedule job: DBUM Oracle Privileges Lookup Reconciliation

  4.  To bring profiles from Oracle DB run the schedule job: DBUM Oracle Profile Lookup

  Reconciliation

   
 












  5. To bring roles from Oracle DB run following Recon: DBUM Oracle Roles Lookup 
      Reconciliation 

 













  
User Provisioning:

• Go to Catalog and request 'DBUM Application' for user
•  Select Following values and all the required values:

          1.       Default Tablespace                            Oracle DB~USER

          2.       Temporary Tablespace                       Oracle DB~TEMP 

          3.       Profile Name                                      Oracle DB~DEFAULT 

          4.       Role                                                    Oracle DB~ DBA

Troubleshooting:

1. If following exception occurs while running any scheduler;

Exception Message	org.identityconnectors.framework.common.exceptions.ConnectorException: java.lang.ClassNotFoundException: oracle.jdbc.driver.OracleDriver
Exception Detail

 

Solution: the ojdbc6.jar is missing in the  connector server, add it and restartthe connector server

2. If following exception occurs while running any scheduler;

Exception Message

org.identityconnectors.framework.common.exceptions.InvalidCredentialException: Remote framework key is invalid

 

Solution:     The key specified in IT Resource for Connector Server is not correct, regenerate and enter new key and enter the correct key