Installation of Oracle Identity Analytics 11g

1.      What is OIA?

http://idm-oracle.blogspot.com/2010/07/oracle-identity-analytics.html

2.      Oracle  Identity Analytics  Download Links :

http://www.oracle.com/technetwork/middleware/downloads/oid-11g-161194.html

3.      For Oracle Identity Analytics Installation :

Details:

a.      Java JDK 1.6.0_21 (http://java.sun.com/javase/downloads/)

b.       Tomcat Application Server6.0.29 (http://tomcat.apache.org/download-70.cgi)

c.       MySQL 5.1 Database (http://dev.mysql.com/downloads/mysql/)

d.     OIA Setup (http://www.oracle.com/technetwork/middleware/downloads/oid-11g-161194.html

4.      Installation Startup :

·        JAVA SETUP

1.      Install Java JDK on your machine

2.      Set   PATH in your environment variables

PATH=%JAVA_HOME%;%PATH%;C:\Windows;C:\Windows\system32;C:\Program Files\Java\jdk1.6.0_21\bin

3.      Set  JAVA_HOME = C:\Program Files\Java\jdk1.6.0_21

4.      Go to Command Prompt and java –version to verify everything is correct.

·         APPLICATION  SERVER SETUP (TOMCAT)

1.      Unzip Tomcat. Unzip tomcat-6.0.28-preconfigured.zip into your C/D/E drive.

2.      E.g. Location is : E:\apache-tomcat-6.0.29

3.      Set CLASSPATH in your environment variables

CLASSPATH = .;C:\apache-tomcat-6.0.29\lib\servlet-api.jar;C:\apache-tomcat-6.0.29\lib\jsp-api.jar;C:\apache-tomcat-6.0.29\lib\el-api.jar;C:\Servlets+JSP;..;..\..

4.      Test the Server: Go to E:\apache-tomcat-6.0.29\bin and click on startup –Serve r should be started.

5.      Check  http://localhost:8080

·         SETUP MYSQL  DATABASE

1.      Download the installation setup from the link provided above.

2.      Typical Setup

3.      Skip Sign-Up

4.      Make sure "Configure the MySQL Server now" is checked

5.      "Detailed Configuration"

6.      "Developer Machine"

7.      "Multifunctional Database"

8.      "InnoDB Tablespace Settings" - leave everything default

9.      "Decision Support (DSS)/OLAP"

10.   Make sure "Enable TCP/IP Networking" is checked and leave the port number at 3306 (at this point, if you have a firewall, it will usually try to access itself on the localhost)
Leave "Enable Strict Mode" checked

11.  "Standard Character Set"

12.  Check "Install as Windows Service" and I would recommend leaving "Launch the MySQL Server automatically" checked.

13.  Enter a root password (and remember/write it down) and I would recommend leaving "Enable root access from remote machines" unchecked

14.  Then hit "execute" and it'll install and set it up.

·         SETUP   ORACLE  IDENTITY ANALYTICS

1. Create a folder E:\OIA and copy the download installation from the link above and extract it. It should look like below:

db

sample

conf

reports

legal

rbacx.war

2. This will be your RBACX_HOME, set the environment variable.

                       3. From sample folder, copy import and export directories and paste it to RBACX_HOME.

4. Setup database for OIA, use the schema script from RBACX_HOME\db folder.

For e.g. to load schema on mySQL database, use script named rbacx11.1.1.3.0_mysql_schema.sql

Go to mySQL folder on your drive through command prompt.

5.      mysql> \.rbacx-11.1.1.3.0_mysql_schema.sql

6.      Go to RBACX_HOME\conf folder and copy jdbc.properties from folder of name of your db to conf folder.

For e.g in case of mysql, copy jdbc.properties file from RBACX_HOME\conf\mysql folder and paste it to conf folder.Edit this properties file as per your database details. For instance, in case of mysql, replace $SERVER_NAME with host name of your database and port with 3306 (default for mysql)

7.      Edit iam.properties  file in RBACX_HOME\conf folder by replacing $RBACX_HOME with path of RBACX_HOME (so for our eg. it will be E:/OIA)

Extract rbacx.war from RBACX_HOME into temp folder.(e.g. C:\temp) [What we will do is to make some changes, add couple of jars and repack it again and deploy on server]

Now navigate to C:\temp\WEB-INF directory and edit below entry in log4j.properties file

log4j.appender.file.file=logs/rbacx.log (default)

log4j.appender.file.file=E:/OIA/logs/rbacx.log

8.      Similarly make changes to conf-context.xml file in C:\temp\WEB-INF folder. Replace $RBACX_HOME with path of RBACX_HOME

            9.  Copy below jars to C:\temp\WEB-INF\lib folder

1. jasper-jdt.jar (http://dlc.sun.com/rolemanager/Certification_And_Reporting)

2. jdbc driver for your database(mysql drivers are already included in lib folder so no need to add them ) For Oracle it would be ojdbc5.jar or ojdbc6.jar

3. Jars for the connectivity of the provisioning server, you will integrate with OIA.

(If OIM is provisioning server then get jars from ext and lib folder of your OIM_HOME)

(They are also available at http://dlc.sun.com/rolemanager/Provisioning_Server_Connectivity/)

10: Pack the folder C:\temp

C:\> cd C:\temp

C:\> jar -cvfm rbacx.war .

Step12: Use this war to deploy on your application server. Copy rbacx.war in WebApps folder of Tomcat and start the server.

Start the server and access the console using url

http://hostname:port/rbacx/

Default user name is rbacxadmin and password is password.

 

Customizing OIM 11g Logo (Oracle identity Manager 11g)

1. Shutdown the OIM Server and Console

2. Navigate to \OIM_HOME\server\apps\oim.ear\iam-consoles-faces.war\images directory

3. Copy the demo.png file to this directory (this will change OIM logo to whatever logo we will give in this file)

4. Using the text editor , open the Admin.jspx file, located in the OIM_HOME\server\apps\oim.ear\admin.war\pages directory.

5. Locate the following line of code :

6. Below this line add the following code:





7. Locate the following line of code : 

8.Below this line add the following code






9. Save your changes to the Admin.jspx file.Close the file.

10. Restart OIM, you can see the change logo in the homepage of the console.

Field added in Lookup.USR_PROCESS_TRIGGERS are missing (Changes in GTC)

Task in Lookup.USR_PROCESS_TRIGGERS is missing if any modifications in GTC.

Solution :

When you add a UDF to Lookup.USR_PROCESS_TRIGGERS you also need to create a field type lookup for that field.
Please see the below example:
1. Create two UDF fields USR_UDF_1 and USR_UDF_2
2. Add the following in Lookup.USR_PROCESS_TRIGGERS
USR_UDF_1 - TaskUDF1
USR_UDF_2 - TaskUDF2
3. Created a new lookup
Code: LookupUDF1
Field: USR_UDF_1
Field Type radio checked
Group: Users
data:
UDF1 - TestUDF1
4. Created a new GTC connector
Results for Lookup.USR_PROCESS_TRIGGERS:
USR_UDF_1 - TaskUDF1 -> remains after the GTC creation
USR_UDF_2 - TaskUDF2 -> is deleted because it has no field type lookup

So please note that the added new row in Lookup.USR_PROCESS_TRIGGERS must be a valid usr table column. If this newly added row doesn't exist as field type lookup, it will be filtered out in OIM code. 

How to disable a user for the targets using Generic Technology Connector(OIM)

1.Find out the disable user field in the target(Field which we want to change in the target when user is disabled from OIM and to What) e.g. Active to Disabled, Yes to No.

2.Once done, create a lookup in oim (Status.Lookup)















3.Go to your GTC and add the lookup.status in the status lookup code and field name in the status attribute as shown below and then test it.