Oracle Fusion Middleware Quick Installation Guide for Oracle Identity Management, 11g Release 1 (11.1.1)

11g Release 1 (11.1.1)

E10033-09

Contents

Title and Copyright Information

Preface

- Audience

- Documentation Accessibility

- Related Documents

- Conventions

1 Understanding Oracle Identity Management Installation

- 1.1 Overview and Structure of Oracle Identity Management 11g Installation

- 1.1.1 Overview

- 1.1.2 Structure of the Installation

- 1.2 Understanding Oracle Identity Management (11.1.1.6.0) Installation

- 1.3 Understanding Oracle Identity and Access Management (11.1.1.5.0) Installation

2 Preparing to Install Oracle Identity Management

- 2.1 Before Installing Oracle Identity Management (11.1.1.6.0)

- 2.1.1 Reviewing System Requirements and Certification

- 2.1.2 Understanding Oracle Fusion Middleware Support of 64-bit JDK

- 2.1.3 Installing and Configuring Java Access Bridge (Windows Only)

- 2.1.4 Managing the Oracle WebLogic Server Node Manager Utility for Oracle Identity Management Installations

- 2.2 Before Installing Oracle Identity and Access Management (11.1.1.5.0)

- 2.2.1 Reviewing System Requirements and Certification

- 2.2.2 Installing and Configuring Java Access Bridge (Windows Only)

- 2.2.3 Obtaining the Latest Oracle WebLogic Server and Oracle Fusion Middleware 11g Software

- 2.2.4 Installing Oracle WebLogic Server and Creating the Oracle Middleware Home

- 2.2.5 Installing Oracle Database

- 2.2.6 Creating Database Schema Using the Oracle Fusion Middleware Repository Creation Utility (RCU)

- 2.2.7 Upgrading an Existing Database Schema

- 2.2.8 Installing the Latest Version of Oracle SOA Suite (Oracle Identity Manager Users Only)

- 2.2.8.1 Obtaining the Latest Oracle WebLogic Server and Oracle SOA Suite Software

- 2.2.8.2 Installing Oracle WebLogic Server and Creating the Middleware Home

- 2.2.8.3 Installing the Latest Version of Oracle SOA Suite

3 Performing Common Installation Tasks

- 3.1 Common Installation Tasks for Oracle Identity Management (11.1.1.6.0)

- 3.1.1 Identifying Installation Directories

- 3.1.1.1 Oracle Middleware Home Location

- 3.1.1.2 Oracle Home Directory

- 3.1.1.3 WebLogic Server Directory

- 3.1.1.4 Oracle Instance Location

- 3.1.1.5 Oracle Instance Name

- 3.1.2 Determining Port Numbers

- 3.1.3 Optional: Configuring the Minimum Amount for Oracle WebLogic Server's Maximum Heap Size

- 3.1.4 Locating Installation Log Files

- 3.2 Common Installation Tasks for Oracle Identity and Access Management (11.1.1.5.0)

- 3.2.1 Starting an Installation

- 3.2.2 Starting Oracle Fusion Middleware Configuration Wizard

- 3.2.3 List of Executable Files

- 3.2.4 Identifying Installation Directories

- 3.2.4.1 Oracle Middleware Home Location

- 3.2.4.2 Oracle Home Directory

- 3.2.4.3 Oracle Common Directory

- 3.2.4.4 Oracle WebLogic Domain Directory

- 3.2.4.5 WebLogic Server Directory

- 3.2.5 Determining Port Numbers

- 3.2.6 Completing an Installation

- 3.2.7 Locating Installation Log Files

4 Installing and Configuring Oracle Identity Management (11.1.1.6.0)

- 4.1 Important Notes Before You Begin

- 4.1.1 Installation Types: "Install Software - Do Not Configure" vs. "Install and Configure"

- 4.1.1.1 Understanding the "Install Software - Do Not Configure" Option

- 4.1.1.2 Understanding the "Install and Configure" Option

- 4.2 Installing Oracle Identity Management Using "Install and Configure" Option

- 4.2.1 Obtaining Oracle Fusion Middleware 11g Software

- 4.2.2 Installing Oracle Database

- 4.2.3 Creating Database Schema Using the Oracle Fusion Middleware Repository Creation Utility (RCU)

- 4.2.4 Installing Oracle WebLogic Server and Creating the Middleware Home

- 4.2.5 Creating the Inventory Directory (UNIX Only)

- 4.2.6 Starting an Installation

- 4.2.7 Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.6.0) Software

- 4.3 Configuring Oracle Identity Management for "Install Software - Do Not Configure" Option

- 4.3.1 OID with ODIP, ODSM, and Fusion Middleware Control in a New WebLogic Domain

- 4.3.1.1 Appropriate Deployment Environment

- 4.3.1.2 Components Deployed

- 4.3.1.3 Dependencies

- 4.3.1.4 Procedure

- 4.3.2 Only OID Without a WebLogic Domain

- 4.3.2.1 Appropriate Deployment Environment

- 4.3.2.2 Components Deployed

- 4.3.2.3 Dependencies

- 4.3.2.4 Procedure

- 4.3.3 OVD with ODSM and Fusion Middleware Control in a New WebLogic Domain

- 4.3.3.1 Appropriate Deployment Environment

- 4.3.3.2 Components Deployed

- 4.3.3.3 Dependencies

- 4.3.3.4 Procedure

- 4.3.4 OIF with OID in a New WebLogic Domain for LDAP Authentication, User Store, and Federation Store

- 4.3.4.1 Appropriate Deployment Environment

- 4.3.4.2 Components Deployed

- 4.3.4.3 Dependencies

- 4.3.4.4 Procedure

5 Installing and Configuring Oracle Identity and Access Management (11.1.1.5.0)

- 5.1 Installing Oracle Identity and Access Management (11.1.1.5.0)

- 5.1.1 Applications Installed

- 5.1.2 Dependencies

- 5.1.3 Procedure

- 5.2 After Installing the Oracle Identity and Access Management Software

- 5.3 Basic Installation and Configuration Scenarios

- 5.3.1 Configuring OIN in a New WebLogic Domain

- 5.3.2 Configuring OIM Server

- 5.3.3 Configuring OAM in a New WebLogic Domain

- 5.3.4 Configuring OAAM in a New WebLogic Domain

- 5.3.5 Configuring OAAM (Offline) in a New WebLogic Domain

- 5.3.6 Configuring OES in a New WebLogic Domain

- 5.4 Configuring OIM Server, Design Console, and Remote Manager

- 5.5 Installing Oracle HTTP Server 11g WebGate for OAM

- 5.6 Setting Up Integration Between OIM and OAM

6 Configuring OIM Server, Design Console, and Remote Manager

- 6.1 Overview

- 6.2 Prerequisites

- 6.3 Starting the Oracle Identity Manager 11g Configuration Wizard

- 6.4 Configuring OIM Server

- 6.5 Installing and Configuring Only OIM Design Console on Windows

- 6.6 Configuring OIM Design Console

- 6.7 Configuring OIM Remote Manager

7 Verifying the Installed Components

- 7.1 Verifying Oracle Identity Management (11.1.1.6.0)

- 7.1.1 Oracle Internet Directory or Oracle Virtual Directory

- 7.1.2 Oracle Directory Integration Platform

- 7.1.3 Oracle Directory Services Manager

- 7.1.4 Oracle Identity Federation

- 7.2 Verifying Oracle Identity and Access Management (11.1.1.5.0)

- 7.2.1 Verifying the OIM Installation

- 7.2.2 Verifying the OAM Installation

- 7.2.3 Verifying the OAAM Installation

- 7.2.4 Verifying the OES Installation

- 7.2.5 Verifying the OIN Installation

A Deinstalling and Reinstalling Oracle Identity Management

- A.1 Deinstalling Oracle Identity Management

- A.1.1 Deinstalling the Oracle Identity Management Oracle Home

- A.1.2 Deinstalling the Oracle Common Home

- A.1.3 Deinstalling Applications Registered with Oracle Single Sign-On 10g Release 10.1.4.3.0

- A.2 Reinstalling Oracle Identity Management

B Starting and Stopping the Oracle Stack

- B.1 Starting the Stack

- B.2 Stopping the Stack

Index

Oracle® Fusion Middleware

Quick Installation Guide for Oracle Identity Management

11g Release 1 (11.1.1)

E10033-09

November 2011

Oracle Fusion Middleware Quick Installation Guide for Oracle Identity Management, 11g Release 1 (11.1.1)

E10033-09

Copyright © 2001, 2011, Oracle and/or its affiliates. All rights reserved.

Primary Author:  Nisha Singh

This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.

The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.

If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, the following notice is applicable:

U.S. GOVERNMENT RIGHTS Programs, software, databases, and related documentation and technical data delivered to U.S. Government customers are "commercial computer software" or "commercial technical data" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, the use, duplication, disclosure, modification, and adaptation shall be subject to the restrictions and license terms set forth in the applicable Government contract, and, to the extent applicable by the terms of the Government contract, the additional rights set forth in FAR 52.227-19, Commercial Computer Software License (December 2007). Oracle USA, Inc., 500 Oracle Parkway, Redwood City, CA 94065.

This software or hardware is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.

Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners.

This software and documentation may provide access to or information on content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services.

Preface

This preface includes the following topics:

- Audience

- Documentation Accessibility

- Related Documents

- Conventions

Audience

This document is intended for users of Oracle Identity Management.

Documentation Accessibility

For information about Oracle's commitment to accessibility, visit the Oracle Accessibility Program website at http://www.oracle.com/pls/topic/lookup?ctx=acc&id=docacc.

Access to Oracle Support

Oracle customers have access to electronic support through My Oracle Support. For information, visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=info or visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=trs if you are hearing impaired.

Related Documents

For more information, see the following documents in the Oracle Fusion Middleware Release 11g Release 1 documentation set:

- Oracle Fusion Middleware Installation Guide for Oracle Identity Management

- Oracle Fusion Middleware Administrator's Guide

- Oracle Fusion Middleware Upgrade Guide for Oracle Identity Management

Conventions

The following text conventions are used in this document:

Convention

Meaning

boldface

Boldface type indicates graphical user interface elements associated with an action, or terms defined in text or the glossary.

italic

Italic type indicates book titles, emphasis, or placeholder variables for which you supply particular values.

monospace

Monospace type indicates commands within a paragraph, URLs, code in examples, text that appears on the screen, or text that you enter.

1 Understanding Oracle Identity Management Installation

This chapter provides an overview of Oracle Identity Management 11g Release 1 (11.1.1) installation.

It includes the following topics:

- Overview and Structure of Oracle Identity Management 11g Installation

- Understanding Oracle Identity Management (11.1.1.6.0) Installation

- Understanding Oracle Identity and Access Management (11.1.1.5.0) Installation

1.1 Overview and Structure of Oracle Identity Management 11g Installation

This section discusses the following topics:

- Overview

- Structure of the Installation

1.1.1 Overview

Oracle Identity Management 11g includes two distinct suites comprising the following Oracle Identity Management products:

- Oracle Identity Management 11g Release 1 (11.1.1.6.0) Components

- Oracle Identity and Access Management 11g Release 1 (11.1.1.5.0) Components

Oracle Identity Management 11g Release 1 (11.1.1.6.0) Components

To install Oracle Identity Management 11g Release 1 (11.1.1.6.0), use ofm_idm_win_11.1.1.6.0_32_disk1_1of1.zip (for Windows) or ofm_idm_linux_11.1.1.6.0_32_disk1_1of1.zip (for Linux) comprising the following products:

- Oracle Internet Directory (OID)

- Oracle Virtual Director (OVD)

- Oracle Directory Services Manager (ODSM)

- Oracle Directory Integration Platform (ODIP)

- Oracle Identity Federation (OIF)

Note:

See Chapter 4, "Installing and Configuring Oracle Identity Management (11.1.1.6.0)" in this guide for installing and configuring these products.

Oracle Identity and Access Management 11g Release 1 (11.1.1.5.0) Components

To install Oracle Identity and Access Management 11g Release 1 (11.1.1.5.0) Components, use ofm_iam_generic_11.1.1.5.0_disk1_1of1.zip comprising the following Oracle Identity and Access Management 11.1.1.5.0 products:

- Oracle Access Manager (OAM)

- Oracle Adaptive Access Manager (OAAM)

- Oracle Identity Manager (OIM)

- Oracle Entitlements Server (OES)

- Oracle Identity Navigator (OIN)

Note:

See Chapter 5, "Installing and Configuring Oracle Identity and Access Management (11.1.1.5.0)" in this guide for installing and configuring these products.

1.1.2 Structure of the Installation

If you install Oracle Identity Management suite and Oracle Identity and Access Management on the same machine, two Oracle Home (also referred to as IDM_Home and IAM_Home in this guide) directories are created on the machine. For information about identifying installation directories, see Identifying Installation Directories.

Note that two IDM_Home directories are mentioned in descriptions and procedures throughout this guide. For example, the first one, IDM_Home can be the IDM_Home directory for Oracle Internet Directory, Oracle Virtual Directory, Oracle Directory Services Manager, Oracle Directory Integration Platform, and Oracle Identity Federation. The second one, IAM_Home can be the IDM_Home directory for Oracle Identity Manager, Oracle Access Manager, Oracle Adaptive Access Manager, Oracle Entitlements Server, and Oracle Identity Navigator.

However, note that IDM_Home and IAM_Home are used as examples in this guide. You can specify any name for either of your IDM_Home directories. In addition, you can install the two distinct Oracle Identity Management suites in any order on your machine.

If you choose to use the default names, the first installation creates an Oracle_IDM1 directory, and the second installation creates an Oracle_IDM2 directory.

1.2 Understanding Oracle Identity Management (11.1.1.6.0) Installation

The following is an overview of the steps to install Oracle Internet Directory (OID), Oracle Virtual Directory (OVD), Oracle Directory Services Manager (ODSM), Oracle Directory Integration Platform (ODIP), and Oracle Identity Federation (OIF):

1. Review the certification information. For more information, see the following link:
http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html

2. Review the system requirements. For more information, see the following link:
http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-requirements-100147.html

3. Satisfy all dependencies, such as installing Oracle WebLogic Server and, when required, installing an Oracle Database and creating schema.

4. Install Oracle Identity Management 11.1.1.6.0 software.

5. Run the Oracle Identity Management Configuration Wizard from the Oracle Identity Management Home directory to configure Oracle Internet Directory, Oracle Virtual Directory, Oracle Directory Services Manager, Oracle Directory Integration Platform, or Oracle Identity Federation.

6. Verify the installation.

1.3 Understanding Oracle Identity and Access Management (11.1.1.5.0) Installation

The following is an overview of the steps to install Oracle Identity Manager (OIM), Oracle Access Manager (OAM), Oracle Adaptive Access Manager (OAAM), Oracle Entitlements Server (OES), and Oracle Identity Navigator (OIN):

1. Review the certification information.

2. Review the system requirements.

3. Satisfy all dependencies, such as installing Oracle WebLogic Server and, when required, installing an Oracle Database and creating schemas.

4. Install the Oracle Identity and Access Management 11.1.1.5.0 software containing Oracle Identity Manager, Oracle Access Manager, Oracle Adaptive Access Manager, Oracle Entitlements Server, and Oracle Identity Navigator.

5. If you are installing Oracle Identity Manager, you must install the Oracle SOA Suite 11g Release 1 (11.1.1.5.0) software.

6. Run the Oracle Fusion Middleware Configuration Wizard to configure Oracle Identity Manager, Oracle Access Manager, Oracle Adaptive Access Manager, Oracle Entitlements Server, or Oracle Identity Navigator.

7. If you are configuring Oracle Identity Manager, run the Oracle Identity Manager Configuration Wizard only once during the initial setup to configure Oracle Identity Manager Server, Design Console (on Windows only), and Remote Manager. Note that you must run the Oracle Identity Manager Configuration Wizard on the machine where the WebLogic Administration Server is running.

8. Verify the installation.

2 Preparing to Install Oracle Identity Management

This chapter provides information you should review before installing Oracle Identity Management 11g Release 1 (11.1.1) components.

It includes the following topics:

- Before Installing Oracle Identity Management (11.1.1.6.0)

- Before Installing Oracle Identity and Access Management (11.1.1.5.0)

Note:

For information about prerequisites for installing the 11g (11.1.1.6.0) version of Oracle Internet Directory (OID), Oracle Virtual Directory (OVD), Oracle Directory Services Manager (ODSM), Oracle Directory Integration Platform (ODIP), and Oracle Identity Federation (OIF), see Before Installing Oracle Identity Management (11.1.1.6.0).
For information about prerequisites for installing the 11g (11.1.1.5.0) version of Oracle Identity Manager (OIM), Oracle Access Manager (OAM), Oracle Adaptive Access Manager (OAAM), Oracle Entitlements Server (OES), and Oracle Identity Navigator (OIN), see Before Installing Oracle Identity and Access Management (11.1.1.5.0).

2.1 Before Installing Oracle Identity Management (11.1.1.6.0)

This topic provides information you should review before installing OID, OVD, ODSM, ODIP, and OIF (11.1.1.6.0).

This section discusses the following topics:

- Reviewing System Requirements and Certification

- Understanding Oracle Fusion Middleware Support of 64-bit JDK

- Installing and Configuring Java Access Bridge (Windows Only)

- Managing the Oracle WebLogic Server Node Manager Utility for Oracle Identity Management Installations

2.1.1 Reviewing System Requirements and Certification

Before performing any installation, you should read the system requirements and certification documents to ensure that your environment meets the minimum installation requirements for the products you are installing.

- Oracle Fusion Middleware System Requirements and Specifications at
http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-requirements-100147.html

This document contains information related to hardware and software requirements, minimum disk space and memory requirements, and required system libraries, packages, or patches.

- Oracle Fusion Middleware Supported System Configurations at
http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html

This document contains information related to supported installation types, platforms, operating systems, databases, JDKs, and third-party products.

- For interoperability and compatibility issues that may arise when installing, refer to Oracle Fusion Middleware Interoperability and Compatibility Guide.
This document contains important information regarding the ability of Oracle Fusion Middleware products to function with previous versions of other Oracle Fusion Middleware, Oracle, or third-party products. This information is applicable to both new Oracle Fusion Middleware users and existing users who are upgrading their existing environment.

2.1.2 Understanding Oracle Fusion Middleware Support of 64-bit JDK

If you are using a 64-bit JVM in your environment, ensure that all your Oracle Fusion Middleware components are using the 64-bit JVM. You cannot mix components using a 32-bit JVM with those using a 64-bit JVM.

For more information, refer to the "System Requirements and Supported Platforms for Oracle Fusion Middleware 11gR1" document, available at the following page:

http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html

If your Oracle Fusion Middleware components are running in a 64-bit JVM environment, ensure that WebLogic Server is installed with the 64-bit JDK. For 32-bit JVM support, refer to the Oracle Fusion Middleware Release Notes for information on how to configure your environment for 32-bit JVM support for your platform.

2.1.3 Installing and Configuring Java Access Bridge (Windows Only)

If you are installing Oracle Identity Management on a Windows system, you have the option of installing and configuring Java Access Bridge for Section 508 Accessibility. This is only necessary if you require Section 508 Accessibility features:

1. Download Java Access Bridge from the following Web site:

http://java.sun.com/javase/technologies/accessibility/accessbridge/

2. Install Java Access Bridge.

3. Copy access-bridge.jar and jaccess-1_4.jar from your installation location to the jre\lib\ext directory.

4. Copy the WindowsAccessBridge.dll, JavaAccessBridge.dll, and JAWTAccessBridge.dll files from your installation location to the jre\bin directory.

5. Copy the accessibility.properties file to the jre\lib directory.

2.1.4 Managing the Oracle WebLogic Server Node Manager Utility for Oracle Identity Management Installations

Oracle Directory Integration Platform (ODIP) and Oracle Identity Federation (OIF) are configured with a WebLogic domain. Oracle Internet Directory (OID) and Oracle Virtual Directory (OVD) can be configured with or without a WebLogic domain. For Oracle Identity Management products that require a WebLogic domain, you must configure Node Manager.

You must perform the following steps after installing Oracle WebLogic Server and before installing Oracle Identity Management:

1. Verify the Oracle WebLogic Server Node Manager utility is stopped. If it is running, kill the process. Use the following commands to identify running process and kill the same:
For example, on UNIX:

1) ps-ef | grep -i nodemanager

This will return the Process Id of the Node Manager Process.

2) kill -9 <Process Id of the Node Manager Process>

On Windows:

Use the Windows Task Manager to identify running Node Manager processes and kill the same.

2. Determine if the nodemanager.properties file is present in the WL_HOME/common/nodemanager/directory.

- If the nodemanager.properties file is not present, then follow the instructions below:
On UNIX:

Run startNodeManager.sh (Located at <WL_HOME>/server/bin directory) to start Node Manager.

On Windows:

Run startNodeManager.cmd (Located at <WL_HOME>\server\bin directory) to start Node Manager.

- If the nodemanager.properties file does exist, open it and verify that the ListenPort parameter is included and that it is set. If the ListenPort parameter is not included or set, edit the nodemanager.properties file so that it is similar to the following, where NODE_MANAGER_LISTEN_PORT represents the port the Node Manager listens on, such as 5556:

ListenPort=NODE_MANAGER_LISTEN_PORT

2.2 Before Installing Oracle Identity and Access Management (11.1.1.5.0)

This section discusses the following topics:

- Reviewing System Requirements and Certification

- Installing and Configuring Java Access Bridge (Windows Only)

- Obtaining the Latest Oracle WebLogic Server and Oracle Fusion Middleware 11g Software

- Installing Oracle WebLogic Server and Creating the Oracle Middleware Home

- Installing Oracle Database

- Creating Database Schema Using the Oracle Fusion Middleware Repository Creation Utility (RCU)

- Upgrading an Existing Database Schema

- Installing the Latest Version of Oracle SOA Suite (Oracle Identity Manager Users Only)

2.2.1 Reviewing System Requirements and Certification

Before performing any installation, you should read the system requirements and certification documents to ensure that your environment meets the minimum installation requirements for the products you are installing.

- Oracle Fusion Middleware System Requirements and Specifications at
http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-requirements-100147.html

This document contains information related to hardware and software requirements, minimum disk space and memory requirements, and required system libraries, packages, or patches.

- Oracle Fusion Middleware Supported System Configurations at
http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html

This document contains information related to supported installation types, platforms, operating systems, databases, JDKs, and third-party products.

- For interoperability and compatibility issues that may arise when installing, refer to Oracle Fusion Middleware Interoperability and Compatibility Guide.
This document contains important information regarding the ability of Oracle Fusion Middleware products to function with previous versions of other Oracle Fusion Middleware, Oracle, or third-party products. This information is applicable to both new Oracle Fusion Middleware users and existing users who are upgrading their existing environment.

2.2.2 Installing and Configuring Java Access Bridge (Windows Only)

If you are installing Oracle Identity and Access Management on a Windows operating system, you have the option of installing and configuring Java Access Bridge for Section 508 Accessibility. This is only necessary if you require Section 508 Accessibility features:

1. Download Java Access Bridge from the following URL:

http://java.sun.com/javase/technologies/accessibility/accessbridge/

2. Install Java Access Bridge.

3. Copy access-bridge.jar and jaccess-1_4.jar from your installation location to the jre\lib\ext directory.

4. Copy the WindowsAccessBridge.dll, JavaAccessBridge.dll, and JAWTAccessBridge.dll files from your installation location to the jre\bin directory.

5. Copy the accessibility.properties file to the jre\lib directory.

2.2.3 Obtaining the Latest Oracle WebLogic Server and Oracle Fusion Middleware 11g Software

Refer to the following for more information about the latest Oracle WebLogic Server and Oracle Fusion Middleware 11g software:

- You can download the latest Oracle Fusion Middleware 11g software from the Oracle Technology Network (OTN):
http://www.oracle.com/technetwork/index.html

For information about downloading Oracle WebLogic Server, see "Product Distribution" in the Oracle Fusion Middleware Installation Guide for Oracle WebLogic Server.

- For complete information about patching your Oracle Fusion Middleware 11g to the latest release, refer to the Oracle Fusion Middleware Patching Guide.

2.2.4 Installing Oracle WebLogic Server and Creating the Oracle Middleware Home

Before you can install Oracle Identity and Access Management 11g Release 1 (11.1.1) components, you must install Oracle WebLogic Server and create the Oracle Middleware Home directory.

For more information, see "Install Oracle WebLogic Server" in Oracle Fusion Middleware Installation Planning Guide.

In addition, see Oracle Fusion Middleware Installation Guide for Oracle WebLogic Server for complete information about installing Oracle WebLogic Server.

Oracle WebLogic Server Directory Structure

After you install Oracle WebLogic Server and create a Middleware Home, a home directory, such as wlserver_10.3, is created for Oracle WebLogic Server under your Middleware Home. This home directory is referred to as WL_HOME.

At the same level as WL_HOME, separate directories are created for the following components associated with Oracle WebLogic Server:

- Sun JDK - jdk160_24

- Oracle JRockit - jrockit_1.6.0_24

Note:

Ensure that the JDK version you select is Java SE 6 Update 24 or higher.

Note that WebLogic domains are created in a directory named domains located in the user_projects directory under your Middleware Home. After you configure any of the Oracle Identity and Access Management products in a WebLogic administration domain, a new directory for the domain is created in the domains directory. In addition, a directory named applications is created in the user_projects directory. This applications directory contains the applications deployed in the domain.

2.2.5 Installing Oracle Database

You must install an Oracle Database before you can install some Oracle Identity and Access Management components. The database must be up and running to install the relevant Oracle Identity and Access Management component. The database does not have to be on the same system where you are installing the Oracle Identity and Access Management component.

The following database versions are supported:

- 10.2.0.4

- 11.1.0.7

- 11.2

Note:

You can locate the most recent information about supported databases by referring to the "Reviewing System Requirements and Certification" topic in this chapter.

Table 2-1 lists the databases requirements for RCU at the time of publication:

Table 2-1 RCU Database Requirements

Category

Minimum or Accepted Value

Version

Oracle Database 10.2.0.4, 11.1.0.7, or 11.2 (11.1.0.7 or later for non-XE database).

Note: When installing the database, you must choose the AL32UTF8 character set.

Shared Pool Size

147456 KB

SGA Maximum Size

147456 KB

Block Size

8 KB

Processes

500

Note:

If you are using Oracle Database 11.1.0.7 for Oracle Identity Manager, you should install a set of platform-specific patches before creating Oracle Identity Manager schemas. For more information, see the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.
After installing the Oracle 11g database, you must complete the following steps:

1. Log in to the database as the sys (default) user.

2. Run the following commands:
alter system set session_cached_cursors=100 scope=spfile;

alter system set processes=500 scope=spfile;

3. Bounce the database and continue with the installation of Oracle Fusion Middleware Repository Creation Utility (RCU) and loading of schemas.

2.2.6 Creating Database Schema Using the Oracle Fusion Middleware Repository Creation Utility (RCU)

You must create and load the appropriate Oracle Fusion Middleware schema in your database before installing the following Oracle Identity and Access Management components and configurations:

- Oracle Identity Manager

- Oracle Access Manager

- Oracle Adaptive Access Manager

- Oracle Entitlements Server

You create and load Oracle Fusion Middleware schema in your database using the Oracle Fusion Middleware Repository Creation Utility (RCU), which is available in the Oracle Fusion Middleware 11g Release 1 (11.1.1) release media and on the Oracle Technology Network (OTN) web site. You can access the OTN web site at:

http://www.oracle.com/technetwork/index.html

Note:

RCU is available only on Linux and Windows platforms. Use the Linux RCU to create schemas on supported UNIX databases. Use Windows RCU to create schemas on supported Windows databases. After you extract the contents of the rcuHome.zip file to a directory, you can see the executable file rcu in the BIN directory.
For information about launching and running RCU, see the "Launching RCU with a Variety of Methods" and "Running Oracle Fusion Middleware Repository Creation Utility (RCU)" topics in the guide Oracle Fusion Middleware Repository Creation Utility User's Guide. For information about troubleshooting RCU, see the "Troubleshooting Repository Creation Utility" topic in the guide Oracle Fusion Middleware Repository Creation Utility User's Guide.

When you run RCU, create and load only the following schema for the Oracle Identity and Access Management component you are installing—do not select any other schema available in RCU:

- For Oracle Identity Manager, select the Identity Management - Oracle Identity Manager schema. The SOA Infrastructure schema, the User Messaging Service schema, and the Metadata Services schema are also selected, by default.

- For Oracle Adaptive Access Manager, select the Identity Management - Oracle Adaptive Access Manager schema. By default, the AS Common Schemas - Metadata Services schema is also selected.
For Oracle Adaptive Access Manager with partition schema support, select the Identity Management - Oracle Adaptive Access Manager (Partition Supp...) schema. By default, the AS Common Schemas - Metadata Services schema is also selected.

Note:

For information about Oracle Adaptive Access Manager schema partitions, see the "OAAM Partition Schema Reference" topic in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

- For Oracle Access Manager, select the Identity Manager - Oracle Access Manager schema. By default, the AS Common Schema - Audit Services schema is also selected.

- For Oracle Entitlements Server, select the Identity Management - Oracle Entitlements Server schema. By default, the AS Common Schemas - Metadata Services schema is also selected.

Note:

When you create a schema, be sure to remember the schema owner and password that is shown in RCU.
If you are creating schemas on databases with Oracle Database Vault installed, note that statements such as CREATE USER, ALTER USER, DROP USER, CREATE PROFILE, ALTER PROFILE, and DROP PROFILE can only be issued by a user with the DV_ACCTMGR role. SYSDBA can issue these statements by modifying the Can Maintain Accounts/Profiles rule set only if it is allowed.

See:

The Oracle Fusion Middleware Repository Creation Utility User's Guide for complete information.

2.2.7 Upgrading an Existing Database Schema

If you want to reuse an existing database schema, you must upgrade your old database schema to work with Oracle Fusion Middleware 11g products and components.

For information about upgrading your existing database schema, see Oracle Fusion Middleware Upgrade Guide for Oracle Identity Management.

2.2.8 Installing the Latest Version of Oracle SOA Suite (Oracle Identity Manager Users Only)

If you are installing Oracle Identity Manager, you must install the latest version of Oracle SOA Suite (11.1.1.5.0).

Follow the instructions in this section to install the latest Oracle SOA Suite software. The installation of Oracle SOA Suite is a prerequisite for configuring Oracle Identity Manager.

Installing the latest version of Oracle SOA Suite 11g involves the following steps:

1. Obtaining the Latest Oracle WebLogic Server and Oracle SOA Suite Software

2. Installing Oracle WebLogic Server and Creating the Middleware Home

3. Installing the Latest Version of Oracle SOA Suite

2.2.8.1 Obtaining the Latest Oracle WebLogic Server and Oracle SOA Suite Software

Refer to the following for more information about the latest Oracle WebLogic Server and Oracle Fusion Middleware 11g software:

- You can download the latest Oracle Fusion Middleware 11g software from the Oracle Technology Network (OTN):

http://www.oracle.com/technetwork/index.html

- At the time this document was published, the latest release of Oracle Fusion Middleware 11g was 11g Release 1 (11.1.1.5.0), which provides new features and capabilities that supersede those available in Oracle Fusion Middleware 11g Release 1 (11.1.1.1.0) and 11g Release 1 (11.1.1.2.0).

- For complete information about patching your Oracle Fusion Middleware 11g to the latest release, refer to the Oracle Fusion Middleware Patching Guide.

2.2.8.2 Installing Oracle WebLogic Server and Creating the Middleware Home

Oracle SOA Suite requires Oracle WebLogic Server and a Middleware Home directory. For more information, see "Install Oracle WebLogic Server" in Oracle Fusion Middleware Installation Planning Guide. In addition, see "Running the Installation Program in Graphical Mode" in Oracle Fusion Middleware Installation Guide for Oracle WebLogic Server.

Note:

If you have already created a Middleware Home before installing Oracle Identity and Access Management components, you do not need to create a new Middleware Home again. You must use the same Middleware Home for installing Oracle SOA Suite.

2.2.8.3 Installing the Latest Version of Oracle SOA Suite

Note that only Oracle Identity Manager requires Oracle SOA Suite 11g (11.1.1.5.0). This step is required because Oracle Identity Manager uses process workflows in Oracle SOA Suite to manage request approvals.

Follow the instructions in Table 2-2 to install Oracle SOA Suite. If you need additional help with any of the installation screens, click Help to access the online help.

To start the Oracle SOA Suite installation wizard, you must complete the following steps:

1. Extract the contents of the soa.zip (11.1.1.5.0) to a directory, such as soa.

2. From your present working directory, move to the Disk1 directory under soa.

3. From the Disk1 directory, run runInstaller (on UNIX) or setup.exe (on Windows) executable files to launch the Oracle SOA Suite 11.1.1.5.0 installation wizard.

Table 2-2 Installation Flow for Install Only Option

No.

Screen

Description and Action Required

1

Welcome Screen

Click Next to continue.

2

Prerequisite Checks Screen

Click Next to continue.

3

Specify Installation Location Screen

Specify the Middleware Home and Oracle Home locations. You must specify the location of the same Middleware Home that contains Oracle Identity and Access Management components.

For more information about these directories, see "Oracle Fusion Middleware Directory Structure and Concepts" in Oracle Fusion Middleware Installation Planning Guide.

Click Next to continue.

4

Specify Security Updates Screen

Provide your E-mail address to be informed of the latest product issues.

Click Next to continue.

5

Installation Summary Screen

Verify the information on this screen.

Click Install to begin the installation.

6

Installation Progress Screen

If you are installing on a UNIX system, you may be asked to run the ORACLE_HOME/oracleRoot.sh script to set up the proper file and directory permissions.

Click Next to continue.

7

Installation Complete Screen

Click Finish to dismiss the installer.

3 Performing Common Installation Tasks

This chapter describes tasks that are common to most Oracle Identity Management installations and configurations. It includes the following topics:

- Common Installation Tasks for Oracle Identity Management (11.1.1.6.0)

- Common Installation Tasks for Oracle Identity and Access Management (11.1.1.5.0)

Note:

By completing the common installation tasks described in this chapter, you are not installing or configuring the Oracle Identity Management software.
For complete information about installing and configuring Oracle Identity Management software, see the following links:

- Installing and Configuring Oracle Identity Management (11.1.1.6.0)

- Installing and Configuring Oracle Identity and Access Management (11.1.1.5.0)

3.1 Common Installation Tasks for Oracle Identity Management (11.1.1.6.0)

This section discusses the following topics:

- Identifying Installation Directories

- Determining Port Numbers

- Optional: Configuring the Minimum Amount for Oracle WebLogic Server's Maximum Heap Size

- Locating Installation Log Files

3.1.1 Identifying Installation Directories

This topic describes directories you must identify in most Oracle Identity Management installations and configurations—it does not describe one particular Installer screen. During installation, you will have to identify other component-specific directories not described in this topic.

The common directories described in this section include the following:

- Oracle Middleware Home Location

- Oracle Home Directory

- WebLogic Server Directory

- Oracle Instance Location

- Oracle Instance Name

3.1.1.1 Oracle Middleware Home Location

Identify the location of your Oracle Middleware Home directory. The Installer creates an Oracle Home directory for the component you are installing under the Oracle Middleware Home that you identify in this field. The Installer also creates an Oracle Common Home directory under the Oracle Middleware Home. The Oracle Common Home contains the binary and library files required for Oracle Enterprise Manager Fusion Middleware Control and Oracle Java Required Files (JRF). There can be only one Oracle Common Home within each Oracle Middleware Home.

The Oracle Middleware Home directory is commonly referred to as MW_HOME.

Note:

To install Oracle Identity Management components in an existing Oracle WebLogic Server administration domain, each Oracle Middleware Home directory in the domain must have identical directory paths and names.

3.1.1.2 Oracle Home Directory

Enter a name for the component's Oracle Home directory. The Installer uses the name you enter in this field to create the Oracle Home directory under the location you enter in the Oracle Middleware Home Location field. The Installer installs the files (such as binaries and libraries) required to host the component in the Oracle Home directory.

The Oracle Home directory is commonly referred to as ORACLE_HOME.

Note:

To install Oracle Identity Management components in an existing Oracle WebLogic Server administration domain, each Oracle Home directory in the domain must have identical directory paths and names.

3.1.1.3 WebLogic Server Directory

Enter the path to your Oracle WebLogic Server Home directory. This directory contains the files required to host the Oracle WebLogic Server. It is commonly referred to as WL_HOME.

Note:

To install Oracle Identity Management components in an existing Oracle WebLogic Server administration domain, each Oracle WebLogic Server Home directory in the domain must have identical directory paths and names.

3.1.1.4 Oracle Instance Location

Enter the path to the location where you want to create the Oracle Instance directory. The Installer creates the Oracle Instance directory using the location you enter in this field and using the name you enter in the Oracle Instance Name field. Do not enter a path to an existing directory that contains files—if you enter a path to an existing directory, that directory must be empty.

The Installer installs the component's configuration files in the Oracle Instance directory. Runtime components will write only to this directory. You can identify any location on your system for the Oracle Instance directory—it does not have to reside inside the Oracle Middleware Home directory.

3.1.1.5 Oracle Instance Name

Enter a name for the Oracle Instance directory. The Installer uses the name you enter in this field to create the Oracle Instance directory at the location you specify in the Oracle Instance Location field. This directory is commonly referred to as ORACLE_INSTANCE.

Instance names are important because Oracle Fusion Middleware uses them to uniquely identify instances. If you install multiple Oracle Fusion Middleware instances on the same computer, for example, an Oracle Identity Management instance and an Oracle WebLogic Server instance, you must give them different names.

The name you enter for the Oracle Instance directory must:

- Contain only alphanumeric and underscore (_) characters

- Begin with an alphabetic character (a-z or A-Z)

- Consist of 4-30 characters

- Not contain the hostname or IP address of the computer

Note:

You cannot change the Oracle Instance name after installation.

3.1.2 Determining Port Numbers

If you want to install an Oracle Identity Management 11g Release 1 (11.1.1) component against an existing Oracle Identity Management 11g Release 1 (11.1.1) component, you may need to identify the ports for the existing component. For example, if you want to install Oracle Directory Integration Platform 11g Release 1 (11.1.1) against an existing Oracle Internet Directory 11g Release 1 (11.1.1) component, you must identify its port when you install Oracle Directory Integration Platform.

You can get information about ports using the following:

- WebLogic Server Administration Console.
Log in to the Administration Console. Click on Servers under Environment to see what ports are in use for the Administration Server and Managed Servers.

Note:

For Oracle Internet Directory, you cannot get information about ports using WebLogic Server Administration Console.

- $ORACLE_INSTANCE/config/OPMN/opmn/ports.prop

Note:

If you change a component's port number after installation, the ports.prop file is not updated.

- The $ORACLE_INSTANCE/bin/opmnctl status -l command to see port numbers of components managed by Oracle Process Manager and Notification Server (OPMN).

3.1.3 Optional: Configuring the Minimum Amount for Oracle WebLogic Server's Maximum Heap Size

After installing Oracle Identity Management 11g Release 1 (11.1.1), if you want to configure the minimum (lowest) level of maximum heap size (-Xmx) required for Oracle WebLogic Server to host Oracle Identity Management components, perform the steps in this section.

Note:

This is an optional step, typically performed only for test, development, or demonstration environments.
This procedure applies to OID, OVD, ODSM, ODIP, and OIF only.

The minimum (lowest) levels for maximum heap size are:

- Oracle WebLogic Administration Server: 512 MB

- Oracle WebLogic Managed Server: 256 MB

Perform the following steps to configure the heap size for Oracle WebLogic Administration Servers and Oracle WebLogic Managed Servers:

1. Open the setDomainEnv script (.sh or.bat) in the MW_HOME/user_projects/domains/DOMAIN_NAME/bin/ directory.

2. Locate the last occurrence of the EXTRA_JAVA_PROPERTIES entry.

3. In the last occurrence of the EXTRA_JAVA_PROPERTIES entry, locate the last occurrence of heap size parameters: -Xmx, -Xms, and so on.

Note:

These are the heap size parameters for the Oracle WebLogic Administration Server.

4. Set the heap size parameters (-Xms and -Xmx) for the Oracle WebLogic Administration Server as desired, for example: -Xms256m and -Xmx512m

5. To set the heap size parameters for the Oracle WebLogic Managed Server, enter the text in Example 3-1 immediately below the last occurrence of the EXTRA_JAVA_PROPERTIES entry and:

- Set the heap size parameters (-Xms and -Xmx) as desired, for example: -Xms256m -Xmx256m

- Replace wls_ods1 with the name of the Oracle WebLogic Managed Server hosting Oracle Directory Services Manager.

- Replace wls_oif1 with the name the Oracle WebLogic Managed Server hosting Oracle Identity Federation.

Example 3-1 Heap Size Parameters for Oracle WebLogic Managed Server

if [ "${SERVER_NAME}" = "wls_ods1" -o  "${SERVER_NAME}" = "wls_oif1" ] ; then
EXTRA_JAVA_PROPERTIES=" ${EXTRA_JAVA_PROPERTIES} -Xms256m -Xmx256m "
export EXTRA_JAVA_PROPERTIES
fi

6. Save and close the setDomainEnv script.

7. Restart the Oracle WebLogic Administration Server and the Oracle WebLogic Managed Server by referring to Starting the Stack.

Note:

On UNIX systems, if you execute the ps -ef command and grep for AdminServer or the name of the Oracle WebLogic Managed Server (for example, ps -ef | grep AdminServer or ps -ef | grep wls_oif1), the output contains multiple occurrences of heap size parameters (-Xmx and -Xms).
Be aware that the last occurrence of the heap size parameters in the output are effective and have precedence over the preceding occurrences.

3.1.4 Locating Installation Log Files

The Installer writes log files to the ORACLE_INVENTORY_LOCATION/logs directory on UNIX systems and to the ORACLE_INVENTORY_LOCATION\logs directory on Windows systems.

On UNIX systems, if you do not know the location of your Oracle Inventory directory, you can find it in the ORACLE_HOME/oraInst.loc file.

On Microsoft Windows systems, the default location for the inventory directory is C:\Program Files\Oracle\Inventory\logs.

The following install log files are written to the log directory:

- installDATE-TIME_STAMP.log

- installDATE-TIME_STAMP.out

- installActionsDATE-TIME_STAMP.log

- installProfileDATE-TIME_STAMP.log

- oraInstallDATE-TIME_STAMP.err

- oraInstallDATE-TIME_STAMP.log

- opatchDATE-TIME_STAMP.log

3.2 Common Installation Tasks for Oracle Identity and Access Management (11.1.1.5.0)

This section discusses the following topics:

- Starting an Installation

- Starting Oracle Fusion Middleware Configuration Wizard

- List of Executable Files

- Identifying Installation Directories

- Determining Port Numbers

- Completing an Installation

- Locating Installation Log Files

3.2.1 Starting an Installation

This topic explains the steps that are common to starting most Oracle Identity and Access Management installations and configurations. It begins with starting the Installer and ends after you complete the steps on the Prerequisites Check screen.

Notes:

- If you are installing on an IBM AIX operating system, you must run the rootpre.sh script from the Disk1 directory before you start the installer.

- Starting the Installer as the root user is not supported.

Perform the following steps to start an Oracle Identity and Access Management installation:

1. Extract the contents of the ofm_iam_generic_11.1.1.5.0_disk1_1of1.zip file to a directory.

2. Move to the Disk1 directory.

3. Start the Installer by executing one of the following commands:
UNIX: <full path to the runInstaller directory>/runInstaller -jreLoc <Middleware Home>/jrockit_1.6.0_24/jre

Windows: <full path to the setup.exe directory>\ setup.exe -jreLoc <Middleware Home>\jrockit_1.6.0_24\jre

Note:

The installer prompts you to enter the absolute path of the JDK that is installed on your system. When you install Oracle WebLogic Server, the jrockit_1.6.0_24 directory is created under your Middleware Home. You must enter the absolute path of the JRE folder located in this JDK when launching the installer. For example, on Windows, if the JRE is located in D:\oracle\Middleware\jrockit_1.6.0_24, then launch the installer from the command prompt as follows:
D:\setup.exe -jreLoc D:\oracle\Middleware\jrockit_1.6.0_24\jre

If you do not specify the -jreLoc option on the command line when using the Oracle JRockit JDK, the following warning message is displayed:

-XX:MaxPermSize=512m is not a valid VM option. Ignoring

This warning message does not affect the installation. You can continue with the installation.

After the Installer starts, the Welcome screen appears. Continue by referring to the appropriate procedure in this document for the installation you want to perform.

3.2.2 Starting Oracle Fusion Middleware Configuration Wizard

To start the Oracle Fusion Middleware Configuration Wizard, which is used to configure Oracle Identity and Access Management products in a new or existing WebLogic administration domain, run the <IDM_Home>/common/bin/config.sh script (on UNIX). On Windows, run the <IDM_Home>\common\bin\config.bat script. The Oracle Fusion Middleware Configuration Wizard is displayed.

Note:

When you run the config.cmd or config.sh command, the following error message might be displayed:
*sys-package-mgr*: can't create package cache dir

The error message indicates that the default cache directory is not valid. You can change the cache directory by including the -Dpython.cachedir=<valid_directory> option in the command line.

3.2.3 List of Executable Files

Table 3-1 lists the executable files that are included in the Oracle WebLogic Server, Oracle Identity and Access Management, Oracle SOA Suite, Oracle Web Tier, and Oracle HTTP Server 11g WebGate for Oracle Access Manager Installers.

Table 3-1 Executable Files

Name of the File

Description

ofm_iam_generic_11.1.1.5.0_disk1_1of1.zip

Oracle Identity and Access Management 11g Release 1 (11.1.1) Installer for Oracle Identity Manager, Oracle Access Manager, Oracle Adaptive Access Manager, Oracle Entitlements Server, and Oracle Identity Navigator

wls_linux32.bin for 32-bit Linux systems, wls_win32.exe for 32-bit Windows systems, and wls_generic.jar for all 64-bit platforms

Oracle WebLogic Server Installer

soa.zip

Oracle SOA Suite 11g Installer

webtier.zip

Oracle Web Tier 11g Installer

webgate.zip

Oracle HTTP Server 11g WebGate for Oracle Access Manager Installer

rcuHome.zip

Oracle Fusion Middleware Repository Creation Utility

3.2.4 Identifying Installation Directories

This topic describes directories you must identify in most Oracle Identity and Access Management installations and configurations—it does not describe one particular Installer screen. During installation, you will have to identify other component-specific directories not described in this topic.

The common directories described in this section include the following:

- Oracle Middleware Home Location

- Oracle Home Directory

- Oracle Common Directory

- Oracle WebLogic Domain Directory

- WebLogic Server Directory

3.2.4.1 Oracle Middleware Home Location

Identify the location of your Oracle Middleware Home directory. The Installer creates an Oracle Home directory for the component you are installing under the Oracle Middleware Home that you identify in this field. The Oracle Middleware Home directory is commonly referred to as MW_HOME.

3.2.4.2 Oracle Home Directory

Enter a name for the Oracle Home directory of the component. The Installer uses the name you enter in this field to create the Oracle Home directory under the location you enter in the Oracle Middleware Home Location field.

The Installer installs the files required to host the component, such as binaries and libraries, in the Oracle Home directory. The Oracle Home directory is commonly referred to as ORACLE_HOME.

Note:

Avoid using spaces in the directory names, including Oracle Home. Spaces in such directory names are not supported.

3.2.4.3 Oracle Common Directory

The Installer creates this directory under the location you enter in the Oracle Middleware Home Location field.

The Installer installs the Oracle Java Required Files (JRF) required to host the components, in the Oracle Common directory. There can be only one Oracle Common Home within each Oracle Middleware Home. The Oracle Common directory is commonly referred to as oracle_common.

3.2.4.4 Oracle WebLogic Domain Directory

A WebLogic domain includes a special WebLogic Server instance called the Administration Server, which is the central point from which you configure and manage all resources in the domain. Usually, you configure a domain to include additional WebLogic Server instances called Managed Servers. You deploy Java components, such as Web applications, EJBs, and Web services, and other resources to the Managed Servers and use the Administration Server for configuration and management purposes only.

Managed Servers in a domain can be grouped together into a cluster.

The directory structure of a domain is separate from the directory structure of the WebLogic Server home. It can reside anywhere; it need not be within the Middleware home directory. A domain is a peer of an Oracle instance.

The Oracle Fusion Middleware Configuration Wizard creates a domain in a directory named user_projects under your Middleware Home (MW_HOME).

3.2.4.5 WebLogic Server Directory

Enter the path to your Oracle WebLogic Server Home directory. This directory contains the files required to host the Oracle WebLogic Server. It is commonly referred to as WL_HOME.

3.2.5 Determining Port Numbers

If you want to install an Oracle Identity and Access Management 11g Release 1 (11.1.1) component against an existing Oracle Identity and Access Management 11g Release 1 (11.1.1) component, you may need to identify the ports for the existing component. For example, if you want to install Oracle Identity Manager 11g Release 1 (11.1.1) against an existing Oracle Internet Directory 11g Release 1 (11.1.1) component, you must identify its port when you install Oracle Identity Manager.

3.2.6 Completing an Installation

This topic explains the steps that are common to completing most Oracle Identity and Access Management installations and configurations. It begins with the steps on the Installation Summary screen and ends after the Installation Complete screen.

When the Installation Summary screen appears, perform the following steps to complete the installation:

1. Verify the installation and configuration information on the Installation Summary screen.

- Click Save to save the installation response file, which contains your responses to the Installer prompts and fields. You can use this response file to perform silent installations. Refer to the topic "Performing Silent Installations" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

Note:

The installation response file is not saved by default—you must click Save to retain it.

- Click Install. The Installation Progress screen appears.

2. Monitor the progress of your installation. The location of the installation log file is listed for reference. After the installation progress reaches 100%, click OK. The Installation Complete screen appears.

3. Click Save to save the installation summary file. This file contains information about the configuration, such as locations of install directories, that will help you get started with configuration and administration.

Note:

The installation summary file is not saved, by default—you must click Save to retain it.

Click Finish to close and exit the Installer.

3.2.7 Locating Installation Log Files

The Installer writes log files to the ORACLE_INVENTORY_LOCATION/logs directory on UNIX systems and to the ORACLE_INVENTORY_LOCATION\logs directory on Windows systems.

On UNIX systems, if you do not know the location of your Oracle Inventory directory, you can find it in the ORACLE_HOME/oraInst.loc file.

On Microsoft Windows systems, the default location for the inventory directory is C:\Program Files\Oracle\Inventory\logs.

The following install log files are written to the log directory:

- installDATE-TIME_STAMP.log

- installDATE-TIME_STAMP.out

- installActionsDATE-TIME_STAMP.log

- installProfileDATE-TIME_STAMP.log

- oraInstallDATE-TIME_STAMP.err

- oraInstallDATE-TIME_STAMP.log

4 Installing and Configuring Oracle Identity Management (11.1.1.6.0)

This chapter describes how to install and configure Oracle Identity Management (11.1.1.6.0).

This chapter includes the following topics:

- Important Notes Before You Begin

- Installing Oracle Identity Management Using "Install and Configure" Option

- Configuring Oracle Identity Management for "Install Software - Do Not Configure" Option

4.1 Important Notes Before You Begin

Before you start installing and configuring Oracle Identity Management products, keep the following points in mind:

- This chapter provides information for installing and configuring Oracle Identity Management (11.1.1.6.0) for new users. If you are an existing Oracle Identity Management 11g user, refer to "Applying the Latest Oracle Fusion Middleware Patch Set" in the Oracle Fusion Middleware Patching Guide.
For complete information about patching your Oracle Fusion Middleware 11g to the latest release, refer to the Oracle Fusion Middleware Patching Guide.

- The Select Installation Type screen in the Installer presents two options: Install and Configure and Install Software - Do Not Configure. For more information about these options, see Installation Types: "Install Software - Do Not Configure" vs. "Install and Configure".

4.1.1 Installation Types: "Install Software - Do Not Configure" vs. "Install and Configure"

The Select Installation Type screen in the Installer presents two options: Install and Configure and Install Software - Do Not Configure. This section describes both options:

- Understanding the "Install Software - Do Not Configure" Option

- Understanding the "Install and Configure" Option

4.1.1.1 Understanding the "Install Software - Do Not Configure" Option

Choose the Install Software - Do Not Configure option to install Oracle Identity Management components without configuring them during installation. If you choose the Install Software - Do Not Configure option, the Installer installs the component software and then closes. Oracle Identity Management components will not start running after deploying them using the Install Software - Do Not Configure option, as additional configuration is needed.

After you install components using the Install Software - Do Not Configure option, you can configure them at a later time using the Oracle Identity Management 11g Release 1 (11.1.1.6.0) Configuration Wizard. To start the Oracle Identity Management 11g Release 1 (11.1.1.6.0) Configuration Wizard, execute the ORACLE_HOME/bin/config.sh script (config.bat on Windows).

4.1.1.2 Understanding the "Install and Configure" Option

The Install and Configure option allows you to install Oracle Identity Management components and simultaneously configure some of their fundamental elements, such as passwords, user names, and so on. Oracle Identity Management components start running and are immediately ready for use after deploying them using the Install and Configure option.

4.2 Installing Oracle Identity Management Using "Install and Configure" Option

Follow the instructions in this section to install and configure the latest Oracle Identity Management software.

Installing and configuring the latest version of Oracle Identity Management 11g components involves the following steps:

1. Obtaining Oracle Fusion Middleware 11g Software

2. Installing Oracle Database

3. Creating Database Schema Using the Oracle Fusion Middleware Repository Creation Utility (RCU)

4. Installing Oracle WebLogic Server and Creating the Middleware Home

5. Creating the Inventory Directory (UNIX Only)

6. Starting an Installation

7. Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.6.0) Software

Note:

If you have an existing Oracle Identity Management installation refer to Oracle Fusion Middleware Patching Guide or Oracle Fusion Middleware Upgrade Guide for Oracle Identity Management.

4.2.1 Obtaining Oracle Fusion Middleware 11g Software

- You can download the latest Oracle Fusion Middleware 11g software from the Oracle Technology Network (OTN):

http://www.oracle.com/technetwork/index.html

You must ensure that you have the following versions of Oracle Fusion Middleware Software:

- Oracle WebLogic Server 11g Release 1

- Oracle Database

- Oracle Repository Creation Utility

- Oracle Identity Management Suite

For more information on obtaining Oracle Fusion Middleware 11g software, see Oracle Fusion Middleware Download, Installation, and Configuration ReadMe.

4.2.2 Installing Oracle Database

You must install an Oracle Database before you can install some Oracle Identity Management components, such as:

- Oracle Internet Directory

- Oracle Identity Federation, if you want to use an RDBMS data store

For the latest information about supported databases, visit the following Web site:

http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html

The database must be up and running to install the relevant Oracle Identity Management component. The database does not have to be on the same system where you are installing the Oracle Identity Management component.

The database must also be compatible with Oracle Fusion Middleware Repository Creation Utility (RCU), which is used to create the schemas that Oracle Identity Management components require. For information about RCU requirements, refer to the system requirements document at the following Web site:

http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-requirements-100147.html

Note:

Ensure that the following database parameters are set:

- 'aq_tm_processes' >= 1

- 'db_cache_size' >= '150994944'

- 'java_pool_size'>= '125829120'

- 'shared_pool_size' >= '183500800'

- 'open_cursors' >= '500'

If you are installing a new database, be sure to configure your database to use AL32UTF8 character set encoding. If your database does not use the AL32UTF8 character set, you will see the following warning when running RCU: "The database you are connecting is with non-AL32UTF8 character set. Oracle strongly recommends using AL32UTF8 as the database character set." You can ignore this warning and continue using RCU.

4.2.3 Creating Database Schema Using the Oracle Fusion Middleware Repository Creation Utility (RCU)

You must create and load the appropriate Oracle Fusion Middleware schema in your database before installing the following Oracle Identity Management components and configurations:

- Oracle Internet Directory, if you want to use an existing schema rather than create a new one using the Installer during installation.

Note:

When you install Oracle Internet Directory, you have the choice of using an existing schema or creating a new one using the Installer. If you want to use an existing schema, you must create it using the Oracle Fusion Middleware Repository Creation Utility (RCU) before you can install Oracle Internet Directory. If you choose to create a new schema during installation, the Installer creates the appropriate schema for you and you do not need to use the RCU.

- Oracle Identity Federation Advanced configurations that use RDBMS for the Federation Store, Session Store, Message Store, or Configuration Store.

You create and load Oracle Fusion Middleware schema in your database using the RCU, which is available in the Oracle Fusion Middleware 11g Release 1 (11.1.1) release media and on the Oracle Technology Network (OTN) Web site. You can access the OTN web site at:

http://www.oracle.com/technetwork/index.html

Note:

RCU is available on Linux x86 and Windows x86 platforms only. Use the Linux RCU to create schemas on supported UNIX databases. Use Windows RCU to create schemas on supported Windows databases.

When you run RCU, create and load only the following schema for your Oracle Identity Management components—do not select any other schema available in RCU:

- For Oracle Internet Directory, select only the Identity Management - Oracle Internet Directory schema

- For Oracle Identity Federation, select only the Identity Management - Oracle Identity Federation schema

Note:

When you create schema, be sure to remember the schema owner and password that is shown in RCU. For Oracle Identity Federation, it is of the form PREFIX_OIF. You will need to provide this information when configuring Oracle Identity Federation with RDBMS stores.
Do not change the prefix provided for Oracle Internet Directory.

See:

The Oracle Fusion Middleware Repository Creation Utility User's Guide for complete information.

4.2.4 Installing Oracle WebLogic Server and Creating the Middleware Home

Oracle Identity Management requires Oracle WebLogic Server and a Middleware home directory.

For more information, see "Install Oracle WebLogic Server" in Oracle Fusion Middleware Installation Planning Guide. In addition, see Oracle Fusion Middleware Installation Guide for Oracle WebLogic Server for complete information about installing Oracle WebLogic Server.

Notes:

- If you are installing Oracle Internet Directory without an Oracle WebLogic administration domain, you do not need to install Oracle WebLogic.

- The same user that installed Oracle WebLogic Server must install Oracle Identity Management.

- Do not log in to the Oracle WebLogic Server Administration Console during Oracle Identity Management installation.

- If you want to configure the minimum amount for Oracle WebLogic Server's maximum heap size, see Optional: Configuring the Minimum Amount for Oracle WebLogic Server's Maximum Heap Size

4.2.5 Creating the Inventory Directory (UNIX Only)

If you are installing on a UNIX system, and if this is the first time any Oracle product is being installed on your system with the Oracle Universal Installer, you will be asked to provide the location of an inventory directory. This is where the installer will set up subdirectories and maintain inventory data for each Oracle product that is installed on this system.

Follow the instructions in Table 4-1 to configure the inventory directory information:

Table 4-1 Inventory Directory and Group Screens

Screen

Description

Specify Inventory Directory

Specify the Oracle inventory directory and group permissions for that directory. The group must have write permissions to the Oracle inventory directory.

Click OK to continue.

Inventory Location Confirmation

Run the createCentralInventory.sh script as root.

Click OK to continue.

Note:

If you do not want to use the central inventory, you can create the oraInst.loc file, add the custom location of the inventory, and run the runInstaller by using the following command:
runInstaller -invPtrLoc <full location to oraInst.loc>

4.2.6 Starting an Installation

Perform the following steps to start an Oracle Identity Management installation:

Note:

You must be logged in to the UNIX operating system as a non-root user to start the Installer.

Start the Installer by executing one of the following commands:

UNIX: <full path to the runInstaller directory>/runInstaller -jreLoc <Middleware Home>/jrockit_1.6.0_24/jre

Windows: <full path to the setup.exe directory>\ setup.exe -jreLoc <Middleware Home>\jrockit_1.6.0_24\jre

Note:

The installer prompts you to enter the absolute path of the JDK that is installed on your system. When you install Oracle WebLogic Server, the jrockit_1.6.0_24 directory is created under your Middleware Home. You must enter the absolute path of the JRE folder located in this JDK when launching the installer. For example, on Windows, if the JRE is located in D:\oracle\Middleware\jrockit_1.6.0_24, then launch the installer from the command prompt as follows:
D:\setup.exe -jreLoc D:\oracle\Middleware\jrockit_1.6.0_24\jre

If you do not specify the -jreLoc option on the command line when using the Oracle JRockit JDK, the following warning message is displayed:

-XX:MaxPermSize=512m is not a valid VM option. Ignoring

This warning message does not affect the installation. You can continue with the installation.

On 64 bit platforms, when you install Oracle WebLogic Server using the generic jar file, the jrockit_1.6.0_24 directory will not be created under your Middleware Home. You must enter the absolute path of the JRE folder from where your JDK is located.

4.2.7 Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.6.0) Software

Follow the instructions in Table 4-2 to install and configure Oracle Identity Management 11.1.1.6.0.

If you need additional help with any of the installation screens, click Help to access the online help.

Table 4-2 Installation Flow for Install Only Option

No.

Screen

When Does This Screen Appear?

Description and Action Required

1

Welcome

Always

Click Next to continue.

2

Install Software Updates

Always

Specify any software updates to install before you install Oracle Identity Management.To get updates from My Oracle Support, you can select Search My Oracle Support for Updates, specify a user name and password, and then click Search for Updates. Before you search, you can click Proxy Settings to change the settings for the proxy server and Test Connection to test the credentials.To get updates that you have saved to your computer, you can select Search Local Directory for Updates, specify a directory, and then click Search for Updates.If you do not want to update any software, select Skip Software Updates, and then click Next to continue the installation.

3

Select Installation Type

Always

Select Install and Configure option.

Notes:

- If you choose Install Software - Do Not Configure option, you can configure them at a later time using the Oracle Identity Management 11g Release 1 (11.1.1.6.0) Configuration Wizard. To start the Oracle Identity Management 11g Release 1 (11.1.1.6.0) Configuration Wizard, execute the ORACLE_HOME/bin/config.sh script (config.bat on Windows). For more information, see Configuring Oracle Identity Management for "Install Software - Do Not Configure" Option.

- If you want to configure Oracle Directory Integration Platform with Oracle Unified Directory (OUD) or if you want to configure Oracle Directory Integration Platform with Oracle Directory Server Enterprise Edition (ODSEE), you must select Install Software - Do Not Configure option while installing Oracle Identity Management 11g Release 1 (11.1.1.6.0).
After Oracle Identity Management 11g Release 1 (11.1.1.6.0) installation is complete, depending on the component you choose to configure with Oracle Directory Integration Platform, refer to "Configuring ODIP with Oracle Unified Directory (OUD)" or "Configuring ODIP with Oracle Directory Server Enterprise Edition (ODSEE)" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

Click Next to continue.

4

Prerequisite Checks

Always

Ensure that all the prerequisites are met.

Click Next to continue.

5

Select Domain

This screen is displayed if you select Install and Configure option.

Select one of the following options:

- Create New Domain: Enter the User Name, User Password, and Domain Name for the domain you want to create.

- Extend Existing Domain: Enter the Host Name, Port, User Name, and User Password for the existing domain you want to extend into.

- Expand Cluster: Enter the information for the existing cluster you want to expand your Oracle Identity Management installation into. Enter the Host Name, Port, User Name, and User Password for cluster inclusion.

- Configure Without Domain: You will not be creating or extending the domain of your installation.

For more information, refer to the following:

- OID with ODIP, ODSM, and Fusion Middleware Control in a New WebLogic Domain

- Only OID Without a WebLogic Domain

- OVD with ODSM and Fusion Middleware Control in a New WebLogic Domain

- OIF with OID in a New WebLogic Domain for LDAP Authentication, User Store, and Federation Store

6

Specify Installation Location

Always

Specify the Oracle Middleware Home location, Oracle Home Directory, WebLogic Server Directory, Oracle Instance Location, and Oracle Instance Name.

For more information about these directories, see "Oracle Fusion Middleware Directory Structure and Concepts" in the Oracle Fusion Middleware Installation Planning Guide.

Click Next to continue.

7

Specify Security Updates

Always

This screen allows you to decide how you want to be notified about security issues:

- If you want to be notified about security issues through E-mail, enter your E-mail address in the E-mail field.

- If you want to be notified about security issues through My Oracle Support (formerly MetaLink), select the My Oracle Support option and enter your My Oracle Support Password.

- If you do not want to be notified about security issues, leave all fields empty. You will see the following message:
You have not provided an E-mail address. Do you wish to remain uninformed of critical security issues in your configuration?

Click Yes to continue.

Click Next to continue.

8

Configure Components

This screen is displayed if you select Install and Configure option.

- Select the Oracle Identity Management components that you wish to install and configure.

- For Create Domain installations, the Enterprise Manager checkbox under Management Components is automatically selected. Oracle Enterprise Manager Fusion Middleware Control Console (Fusion Middleware Control Console) will be installed and configured; you cannot deselect it. It is implicitly selected for configuration.

- If you select No Domain Flow, only Oracle Internet Directory and Oracle Virtual Directory will be available for configuration.

- In installations in which you select to extend the Domain, Enterprise Manager (Fusion Middleware Control Console) is not available as a selectable component. In the extend the domain installation only Oracle Directory Services Manager is available as a selection under the Management Components area.

- Oracle Directory Services Manager can be installed and configured as a stand-alone component.

- If you select to install Oracle Internet Directory or Oracle Virtual Directory in the create domain installation flow, Oracle Directory Services Manager is automatically selected and cannot be deselected. For extend domain or expand cluster, the Oracle Directory Services Manager can be deselected by you if you select to install Oracle Internet Directory or Oracle Virtual Directory.

- The Clustered selection field appears and is available if you at least one Java component selected for installation and configuration. Only managed servers and the applications that are deployed to them can be clustered. Enterprise Manager (Fusion Middleware Control Console) is not clustered during the installation because it is deployed to the administrative server.

- If you select to expand a cluster installation, at least one cluster should be present when you select this option.

- If you select to expand a cluster the Java EE components which are configured as part of the cluster will be listed.

Click Next to continue.

9

Configure Ports

This screen is displayed if you select Install and Configure option.

Choose how you want the Installer to configure ports:

- Select Auto Port Configuration if you want the Installer to configure ports from a predetermined range.

- Select Specify Ports using Configuration File if you want the Installer to configure ports using the staticports.ini file. You can click View/Edit File to update the settings in the staticports.ini file.

Click Next to continue.

10

Specify Schema Database

This screen is displayed if you select Install and Configure option and choose to configure Oracle Internet Directory.

Choose whether to use an existing schema or to create a new one using the Installer.

Note: If you want to use an existing schema, it must currently reside in the database to continue with the installation. If it does not currently reside in the database, you must create it now using the Oracle Fusion Middleware Repository Creation Utility.

To use an existing schema:

1. Select Use Existing Schema.

2. Enter the database connection information in the Connect String field. The connection string must be in the form of hostname:port:servicename. For Oracle Real Application Clusters (RAC), the connection string must be in the form of hostname1:port1:instance1^hostname2:port2:instance2@servicename.

3. Enter the password for the existing ODS schema in the Password field.

4. Click Next to continue.
Note: If your existing ODS and ODSSM schemas have different passwords, the Specify ODSSM Password screen will appear after you click Next. Enter the password for your existing ODSSM schema and click Next.

To create a new schema:

1. Select Create Schema.

2. Enter the database connection information in the Connect String field. The connection string must be in the form of hostname:port:servicename. For Oracle Real Application Clusters (RAC), the connection string must be in the form of hostname1:port1:instance1^hostname2:port2:instance2@servicename.

3. Enter the name of the database user in the User Name field. The user you identify must have DBA privileges.
Note: If you are using Oracle Database 11g Release 2 (11.2) or higher version, the database user should be only 'SYS'.

4. Enter the password for the database user in the Password field.

5. Click Next. The Enter OID Passwords screen appears.

6. Create a password for the new ODS schema by entering it in the ODS Schema Password field.
Enter it again in the Confirm ODS Schema Password field.

7. Create a password for the new ODSSM schema by entering it in the ODSSM Schema Password field.
Enter it again in the Confirm ODSSM Schema Password field.

8. Click Next to continue.

11

Specify Oracle Virtual Directory Information

This screen is displayed if you select Install and Configure option and choose to configure Oracle Virtual Directory.

Enter the following information:

- LDAP v3 Name Space: Enter the name space for Oracle Virtual Directory. The default value is dc=us,dc=oracle,dc=com.

- HTTP Web Gateway: Select this option to enable the Oracle Virtual Directory HTTP Web Gateway.

- Secure: Select this option if you enabled the HTTP Web Gateway and you want to secure it using SSL.

- Administrator User Name: Enter the user name for the Oracle Virtual Directory administrator. The default value is cn=orcladmin.

- Password: Enter the password for the Oracle Virtual Directory administrator.

- Confirm Password: Enter the password for the Oracle Virtual Directory administrator again.

- Configure Administrative Server in secure mode: Select this option to secure the Oracle Virtual Directory Administrative Listener using SSL. This option is selected by default. Oracle recommends selecting this option.

Click Next to continue.

12

Specify OID Administrator Password

This screen is displayed if you select Install and Configure option and choose to configure Oracle Internet Directory.

Enter the password for the Oracle Internet Directory administrator.

Click Next to continue.

13

Select Oracle Identity Federation Configuration Type

This screen is displayed if you select Install and Configure option and choose to configure Oracle Identity Federation.

Select one of the following configuration types:

- Basic: You do not need to choose the datastore and authentication engine types or specify the connection details for Oracle Identity Federation.
For more information, see "Performing Basic Oracle Identity Federation Configurations" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

- Advanced: This option will enable you to choose the configuration types for the datastores, the authentication engine, and specify the connection details datastores and authentication engine.
For more information, see "Performing Advanced Oracle Identity Federation Configurations" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

Note: The procedure in this table shows the screens that appears when the Basic option is selected.

Click Next to continue.

14

Specify Oracle Identity Federation Details

This screen is displayed if you select Install and Configure option and choose to configure Oracle Identity Federation.

Enter the following information:

- PKCS12 Password: Enter the password Oracle Identity Federation will use for encryption and for signing wallets. The Installer automatically generates these wallets with self-signed certificates. Oracle recommends using the wallets only for testing.

- Confirm Password: Enter the PKCS12 password again.

- Server ID: Enter a string that will be used to identify this Oracle Identity Federation instance. A prefix oif will be added to the beginning of the string you enter. Each logical Oracle Identity Federation instance within an Oracle WebLogic Server administration domain must have a unique Server ID. Clustered Oracle Identity Federation instances acting as a single logical instance will have the same Server ID.

Click Next to continue.

15

Installation Summary

Always

Verify the information on this screen. If you want to change any options, you can return to a previous screen by clicking a link in the navigation tree on the left or by clicking Back until you get to the screen. After you edit the required options, you can continue the installation from the previous screen.

Click Save if you want to save a response file. You will be prompted for a name and location for the response file, which will contain information specific to your installation. After the installer creates the response file, you can use it exactly as is to replicate the installation on other systems, or you can modify the response file in a text editor.

Click Install to begin the installation.

16

Installation Progress

Always

If you are installing on a UNIX system, you may be asked to run the ORACLE_HOME/oracleRoot.sh script to set up the proper file and directory permissions.

For more information, see the "Executing the oracleRoot.sh Script on UNIX Platforms" topic in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

Click Next to continue.

17

Configuration Progress

This screen is displayed if you select Install and Configure option.

Click Next to continue.

18

Installation Complete

Always

Click Finish to dismiss the installer.

Oracle Identity Management 11g Release 1 (11.1.1.6.0) is installed and configured if you selected Install and Configure option in the Select Installation Type screen. By default Oracle_IDM1 is created as the Oracle Identity Management Oracle home directory. This home directory is also referred to as IDM_Home in this guide.

To locate the installation log files, see Locating Installation Log Files.

4.3 Configuring Oracle Identity Management for "Install Software - Do Not Configure" Option

If you selected Install Software - Do Not Configure option in the Select Installation Type screen while installing Oracle Identity Management 11g Release 1 (11.1.1.6.0), as described in Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.6.0) Software, you must now start the Oracle Identity Management Configuration Wizard to configure the following components:

- Oracle Internet Directory (OID)

- Oracle Virtual Directory (OVD)

- Oracle Directory Services Manager (ODSM)

- Oracle Directory Integration Platform (ODIP)

- Oracle Identity Federation (OIF)

Run the Oracle Identity Management Configuration Wizard as follows:

On UNIX systems:

ORACLE_HOME/bin/config.sh

On Windows systems:

ORACLE_HOME\bin\config.bat

The Oracle Identity Management 11g Configuration Wizard is displayed. You can use this wizard to configure your component in a new domain, in an existing domain, or without a domain. Note that you can install and configure only Oracle Internet Directory and Oracle Virtual Directory without a domain. For more information, see the following topics:

- OID with ODIP, ODSM, and Fusion Middleware Control in a New WebLogic Domain

- Only OID Without a WebLogic Domain

- OVD with ODSM and Fusion Middleware Control in a New WebLogic Domain

- OIF with OID in a New WebLogic Domain for LDAP Authentication, User Store, and Federation Store

4.3.1 OID with ODIP, ODSM, and Fusion Middleware Control in a New WebLogic Domain

This topic describes how to configure Oracle Internet Directory (OID) with Oracle Directory Integration Platform (ODIP), Oracle Directory Services Manager (ODSM), and Fusion Middleware Control in a new WebLogic administration domain. It includes the following sections:

- Appropriate Deployment Environment

- Components Deployed

- Dependencies

- Procedure

4.3.1.1 Appropriate Deployment Environment

The configuration described in this topic is appropriate for environments that have both of the following conditions:

- You want to install Oracle Internet Directory and Oracle Directory Integration Platform colocated on the same host.

- There is no WebLogic Administration Server managing other 11g Release 1 (11.1.1) Oracle Directory Services components.

4.3.1.2 Components Deployed

Performing the configuration in this section deploys the following components:

- WebLogic Administration Server

- Oracle Internet Directory

- WebLogic Managed Server

- Oracle Directory Integration Platform

- Oracle Directory Services Manager

- Fusion Middleware Control

4.3.1.3 Dependencies

The configuration in this section depends on the following:

- Oracle WebLogic Server

- Oracle Database

- If you want to use an existing schema, Identity Management - Oracle Internet Directory schema existing in the Oracle Database.

4.3.1.4 Procedure

Perform the following steps to configure Oracle Internet Directory with Oracle Directory Integration Platform, Oracle Directory Services Manager, and Fusion Middleware Control in a new domain:

1. Ensure that Oracle Internet Directory is installed, as described in Installing Oracle Identity Management Using "Install and Configure" Option.

Note:

If you selected Install and Configure option in the Select Installation Type screen while installing Oracle Identity Management 11g Release 1 (11.1.1.6.0), as described in Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.6.0) Software, the Select Domain screen is displayed.
If you selected Install Software - Do Not Configure option in the Select Installation Type screen while installing Oracle Identity Management 11g Release 1 (11.1.1.6.0), as described in Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.6.0) Software, you must now start the Oracle Identity Management Configuration Wizard. Run <ORACLE_HOME>/bin/config.sh (on UNIX) or <ORACLE_HOME>\bin\config.bat (on Windows) to start the Oracle Identity Management Configuration Wizard. The Select Domain screen is displayed.

2. On the Select Domain screen, select Create New Domain and enter the following information:

- Enter the user name for the new domain in the User Name field.

- Enter the user password for the new domain in the User Password field.

- Enter the user password again in the Confirm Password field.

- Enter a name for the new domain in the Domain Name field.

Click Next. The Specify Installation Location screen appears.

3. Identify the Homes, Instances, and the WebLogic Server directory by referring to Identifying Installation Directories. After you enter information for each field, click Next. The Specify Security Updates screen appears.

4. Choose how you want to be notified about security issues:

- If you want to be notified about security issues through email, enter your email address in the Email field.

- If you want to be notified about security issues through My Oracle Support (formerly MetaLink), select the My Oracle Support option and enter your My Oracle Support Password.

- If you do not want to be notified about security issues, leave all fields empty.

Click Next. The Configure Components screen appears.

5. Select Oracle Internet Directory and Oracle Directory Integration Platform. The Oracle Directory Services Manager and Oracle Fusion Middleware Control will be automatically selected.
Ensure no other components are selected and click Next. The Configure Ports screen appears.

6. Choose how you want the Installer to configure ports:

- Select Auto Port Configuration if you want the Installer to configure ports from a predetermined range.

- Select Specify Ports using Configuration File if you want the Installer to configure ports using the staticports.ini file. You can click View/Edit File to update the settings in the staticports.ini file.

Click Next. The Specify Schema Database screen appears.

7. Choose whether to use an existing schema or to create a new one using the Installer.

Note:

If you want to use an existing schema, it must currently reside in the database to continue with the installation. If it does not currently reside in the database, you must create it now using the Oracle Fusion Middleware Oracle Fusion Middleware Repository Creation Utility or follow the To create a new schema section mentioned below.
Refer to Creating Database Schema Using the Oracle Fusion Middleware Repository Creation Utility (RCU) for more information.

To use an existing schema:

1. Select Use Existing Schema.

2. Enter the database connection information in the Connect String field. The connection string must be in the form: hostname:port:servicename. For Oracle Real Application Clusters (RAC), the connection string must be in the form: hostname1:port1:instance1^hostname2:port2:instance2@servicename.

3. Enter the password for the existing ODS schema in the Password field.

4. Click Next.

Note:

If your existing ODS and ODSSM schemas have different passwords, the Specify ODSSM Password screen will appear after you click Next. Enter the password for your existing ODSSM schema and click Next.

The Create Oracle Internet Directory screen appears.

5. Continue the installation by going to step 8 now.

To create a new schema

1. Select Create Schema.

2. Enter the database connection information in the Connect String field. The connection string must be in the form: hostname:port:servicename. For Oracle Real Application Clusters (RAC), the connection string must be in the form: hostname1:port1:instance1^hostname2:port2:instance2@servicename.

3. Enter the name of the database user in the User Name field. The user you identify must have DBA privileges.

4. Enter the password for the database user in the Password field.

5. Click Next. The Enter OID Passwords screen appears.

6. Create a password for the new ODS schema by entering it in the ODS Schema Password field.
Enter it again in the Confirm ODS Schema Password field.

7. Create a password for the new ODSSM schema by entering it in the ODSSM Schema Password field.
Enter it again in the Confirm ODSSM Schema Password field.

8. Click Next. The Create Oracle Internet Directory screen appears.

8. Enter the following information for Oracle Internet Directory:

- Realm: Enter the location for your realm.

- Administrator Password: Enter the password for the Oracle Internet Directory administrator.

- Confirm Password: Enter the administrator password again.

Click Next.

9. The Installation Summary screen appears. Verify the information on this screen. Click Configure to begin the configuration.

10. The Configuration Progress screen appears. Click Next to continue.

11. The Installation Complete screen appears. Click Save to save the configuration information to a file, and then click Finish to exit the installer.

Note:

You may see the following error message in $Instance_home/diagnostics/logs/OID/oid1/** log files after configuring Oracle Internet Directory:
"2010-02-01T07:27:42+00:00] [OID] [NOTIFICATION:16] [] [OIDLDAPD] [host:stadp47] [pid: 26444] [tid: 0] Main:: FATAL * gslsmaiaInitAudCtx * Audit struct initialization failed. Audit error code: 62005"

You can ignore this error message.

4.3.2 Only OID Without a WebLogic Domain

This topic describes how to configure only Oracle Internet Directory (OID) without a WebLogic administration domain. It includes the following sections:

- Appropriate Deployment Environment

- Components Deployed

- Dependencies

- Procedure

4.3.2.1 Appropriate Deployment Environment

The configuration described in this topic is appropriate for environments that have both of the following conditions:

- You do not want to include Oracle Internet Directory in a WebLogic administration domain for management purposes.

- You do not want to manage Oracle Internet Directory using Fusion Middleware Control.

4.3.2.2 Components Deployed

Performing the configuration in this section deploys only Oracle Internet Directory.

4.3.2.3 Dependencies

The configuration in this section depends on the following:

- Oracle Database

- If you want to use an existing schema, Identity Management - Oracle Internet Directory schema existing in the Oracle Database.

4.3.2.4 Procedure

Perform the following steps to configure only Oracle Internet Directory without a domain:

1. Ensure that Oracle Internet Directory is installed, as described in Installing Oracle Identity Management Using "Install and Configure" Option.
Note that installing Oracle WebLogic Server is optional in this particular scenario. Instead, you can create the Middleware Home by using the Oracle Identity Management Configuration Wizard, as described later in Step 4 of the procedure.

Note:

If you selected Install and Configure option in the Select Installation Type screen while installing Oracle Identity Management 11g Release 1 (11.1.1.6.0), as described in Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.6.0) Software, the Select Domain screen is displayed.
If you selected Install Software - Do Not Configure option in the Select Installation Type screen while installing Oracle Identity Management 11g Release 1 (11.1.1.6.0), as described in Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.6.0) Software, you must now start the Oracle Identity Management Configuration Wizard. Run <ORACLE_HOME>/bin/config.sh (on UNIX) or <ORACLE_HOME>\bin\config.bat (on Windows) to start the Oracle Identity Management Configuration Wizard. The Select Domain screen is displayed.

2. Select Configure without a Domain on the Select Domain screen and click Next. The Specify Installation Location screen appears.

3. Enter the following information in each field:

- Oracle Middleware Home Location: If an Oracle Middleware Home directory already exists, enter the path to it in this field. If an Oracle Middleware Home directory does not exist, enter a path to the location where you want the Installer to create the directory that will contain the Oracle Common Home and Oracle Home directories. The Installer creates an Oracle Common Home directory and an Oracle Home directory inside the directory you identify in this field.
The Oracle Middleware Home directory is commonly referred to as MW_HOME.

Note:

The Oracle Middleware Home directory is not required to contain an Oracle WebLogic Server installation.

- Oracle Home Directory: Enter a name for the Oracle Home directory. The Installer uses the name you enter in this field to create the Oracle Home directory under the location you enter in the Oracle Middleware Home Location field. The Oracle Home directory is commonly referred to as ORACLE_HOME.

- Oracle Instance Location: Enter the directory path to the location where you want to create the Oracle Instance directory. The Installer creates the Oracle Instance directory using the location you enter in this field and using the name you enter in the Oracle Instance Name field. You can identify any location on your system for the Oracle Instance directory—it does not have to reside inside the Oracle Middleware Home directory.

- Oracle Instance Name: Enter a name for the Oracle Instance directory. The Installer uses the name you enter in this field to create the Oracle Instance directory at the location you specify in the Oracle Instance Location field. This directory is commonly referred to as ORACLE_INSTANCE.

After you enter information for each field, click Next. The Specify Security Updates screen appears.

4. Choose how you want to be notified about security issues:

- If you want to be notified about security issues through email, enter your email address in the Email field.

- If you want to be notified about security issues through My Oracle Support (formerly MetaLink), select the My Oracle Support option and enter your My Oracle Support Password.

- If you do not want to be notified about security issues, leave all fields empty.

Click Next. The Configure Components screen appears.

5. On the Configure Components screen, select only Oracle Internet Directory. Ensure no other components are selected and click Next. The Configure Ports screen appears.

6. Choose how you want the Installer to configure ports:

- Select Auto Port Configuration if you want the Installer to configure ports from a predetermined range.

- Select Specify Ports using Configuration File if you want the Installer to configure ports using the staticports.ini file. You can click View/Edit File to update the settings in the staticports.ini file.

Click Next. The Specify Schema Database screen appears.

7. Choose whether to use an existing schema or to create a new one using the Installer.

Note:

If you want to use an existing schema, it must currently reside in the database to continue with the installation. If it does not currently reside in the database, you must create it now using the Oracle Fusion Middleware Repository Creation Utility or follow the To create a new schema section mentioned below.
Refer to Creating Database Schema Using the Oracle Fusion Middleware Repository Creation Utility (RCU) for more information.

To use an existing schema:

1. Select Use Existing Schema.

2. Enter the database connection information in the Connect String field. The connection string must be in the form: hostname:port:servicename. For Oracle Real Application Clusters (RAC), the connection string must be in the form: hostname1:port1:instance1^hostname2:port2:instance2@servicename.

3. Enter the password for the existing ODS schema in the Password field.

4. Click Next.

Note:

If your existing ODS and ODSSM schemas have different passwords, the Specify ODSSM Password screen will appear after you click Next. Enter the password for your existing ODSSM schema and click Next.

The Create Oracle Internet Directory screen appears.

5. Continue the installation by going to step 8 now.

To create a new schema

1. Select Create Schema.

2. Enter the database connection information in the Connect String field. The connection string must be in the form: hostname:port:servicename. For Oracle Real Application Clusters (RAC), the connection string must be in the form: hostname1:port1:instance1^hostname2:port2:instance2@servicename.

3. Enter the name of the database user in the User Name field. The user you identify must have DBA privileges.

4. Enter the password for the database user in the Password field.

5. Click Next. The Enter OID Passwords screen appears.

6. Create a password for the new ODS schema by entering it in the ODS Schema Password field.
Enter it again in the Confirm ODS Schema Password field.

7. Create a password for the new ODSSM schema by entering it in the ODSSM Schema Password field.
Enter it again in the Confirm ODSSM Schema Password field.

8. Click Next. The Create Oracle Internet Directory screen appears.

8. Enter the following information for Oracle Internet Directory:

- Realm: Enter the location for your realm.

- Administrator Password: Enter the password for the Oracle Internet Directory administrator.

- Confirm Password: Enter the administrator password again.

Click Next.

9. The Installation Summary screen appears. Verify the information on this screen. Click Configure to begin the configuration.

10. The Configuration Progress screen appears. Click Next to continue.

11. The Installation Complete screen appears. Click Save to save the configuration information to a file, and then click Finish to exit the installer.

Note:

- If you perform this installation and configuration, but later decide you want to manage Oracle Internet Directory using Fusion Middleware Control, you must register Oracle Internet Directory with a WebLogic Administration Server.
Refer to the "Registering an Oracle Instance or Component with the WebLogic Server" section in the Oracle Fusion Middleware Administrator's Guide for Oracle Internet Directory for more information.

- You may see the following error message in $Instance_home/diagnostics/logs/OID/oid1/** log files after configuring Oracle Internet Directory:
"2010-02-01T07:27:42+00:00] [OID] [NOTIFICATION:16] [] [OIDLDAPD] [host:stadp47] [pid: 26444] [tid: 0] Main:: FATAL * gslsmaiaInitAudCtx * Audit struct initialization failed. Audit error code: 62005"

You can ignore this error message.

4.3.3 OVD with ODSM and Fusion Middleware Control in a New WebLogic Domain

This topic describes how to configure Oracle Virtual Directory (OVD) with Oracle Directory Services Manager (ODSM) and Fusion Middleware Control in a new WebLogic administration domain. It includes the following sections:

- Appropriate Deployment Environment

- Components Deployed

- Dependencies

- Procedure

4.3.3.1 Appropriate Deployment Environment

The configuration described in this topic is appropriate for environments that have all of the following conditions:

- You want to manage Oracle Virtual Directory using Fusion Middleware Control.

- You want Oracle Virtual Directory to be in a WebLogic administration domain.

- There is no WebLogic Administration Server managing other 11g Release 1 (11.1.1) Oracle Directory Services components.

- You want to install Oracle Virtual Directory and a WebLogic Administration Server colocated on the same host.

4.3.3.2 Components Deployed

Performing the configuration in this section deploys the following components.

- WebLogic Administration Server

- Oracle Virtual Directory

- Oracle Directory Services Manager

- Fusion Middleware Control

4.3.3.3 Dependencies

The configuration in this section depends on Oracle WebLogic Server.

4.3.3.4 Procedure

Perform the following steps to configure Oracle Virtual Directory with Oracle Directory Services Manager and Fusion Middleware Control in a new domain:

1. Ensure that Oracle Virtual Directory and Oracle Directory Services Manager are installed, as described in Installing Oracle Identity Management Using "Install and Configure" Option.

Note:

If you selected Install and Configure option in the Select Installation Type screen while installing Oracle Identity Management 11g Release 1 (11.1.1.6.0), as described in Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.6.0) Software, the Select Domain screen is displayed.
If you selected Install Software - Do Not Configure option in the Select Installation Type screen while installing Oracle Identity Management 11g Release 1 (11.1.1.6.0), as described in Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.6.0) Software, you must now start the Oracle Identity Management Configuration Wizard. Run <ORACLE_HOME>/bin/config.sh (on UNIX) or <ORACLE_HOME>\bin\config.bat (on Windows) to start the Oracle Identity Management Configuration Wizard. The Select Domain screen is displayed.

2. On the Select Domain screen, select Create New Domain and enter the following information:

- Enter the user name for the new domain in the User Name field.

- Enter the user password for the new domain in the User Password field.

- Enter the user password again in the Confirm Password field.

- Enter a name for the new domain in the Domain Name field.

Click Next. The Specify Installation Location screen appears.

3. Identify the Homes, Instances, and the WebLogic Server directory by referring to Identifying Installation Directories. After you enter information for each field, click Next. The Specify Security Updates screen appears.

4. Choose how you want to be notified about security issues:

- If you want to be notified about security issues through email, enter your email address in the Email field.

- If you want to be notified about security issues through My Oracle Support (formerly MetaLink), select the My Oracle Support option and enter your My Oracle Support Password.

- If you do not want to be notified about security issues, leave all fields empty.

Click Next. The Configure Components screen appears.

5. Select only Oracle Virtual Directory. The Oracle Directory Services Manager and Fusion Middleware Control management components are automatically selected for this installation.
Ensure no other components are selected and click Next. The Configure Ports screen appears.

6. Choose how you want the Installer to configure ports:

- Select Auto Port Configuration if you want the Installer to configure ports from a predetermined range.

- Select Specify Ports using Configuration File if you want the Installer to configure ports using the staticports.ini file. You can click View/Edit File to update the settings in the staticports.ini file.

Click Next. The Specify Oracle Virtual Directory Information screen appears.

7. Enter the following information:

- LDAP v3 Name Space: Enter the name space for Oracle Virtual Directory. The default value is dc=us,dc=oracle,dc=com.

- HTTP Web Gateway: Select this option to enable the Oracle Virtual Directory HTTP Web Gateway.

- Secure: Select this option if you enabled the HTTP Web Gateway and you want to secure it using SSL.

- Administrator User Name: Enter the user name for the Oracle Virtual Directory administrator. The default value is cn=orcladmin.

- Password: Enter the password for the Oracle Virtual Directory administrator.

- Confirm Password: Enter the password for the Oracle Virtual Directory administrator again.

- Configure Administrative Server in secure mode: Select this option to secure the Oracle Virtual Directory Administrative Listener using SSL. This option is selected by default. Oracle recommends selecting this option.

Click Next.

8. The Installation Summary screen appears. Verify the information on this screen. Click Configure to begin the configuration.

9. The Configuration Progress screen appears. Click Next to continue.

10. The Installation Complete screen appears. Click Save to save the configuration information to a file, and then click Finish to exit the installer.

4.3.4 OIF with OID in a New WebLogic Domain for LDAP Authentication, User Store, and Federation Store

This section describes how to configure Oracle Identity Federation (OIF) with Oracle Internet Directory (OID) in a new WebLogic administration domain for LDAP Authentication, User Store, and Federation Store.

Note:

When you configure Oracle Identity Federation with Oracle Internet Directory, the Installer automatically configures connection, credential, attribute, and container settings using the Oracle Internet Directory configuration.

This section includes the following information about this configuration:

- Appropriate Deployment Environment

- Components Deployed

- Dependencies

- Procedure

4.3.4.1 Appropriate Deployment Environment

Perform the configuration in this topic to quickly deploy Oracle Identity Federation with Oracle Internet Directory as the LDAP repository for Authentication, User Store, and Federation Store.

4.3.4.2 Components Deployed

Performing the configuration in this section deploys the following components:

- WebLogic Managed Server

- Oracle Identity Federation

- Oracle Internet Directory

- Oracle Directory Services Manager

- WebLogic Administration Server

- Fusion Middleware Control

- Optionally, Oracle HTTP Server

4.3.4.3 Dependencies

The configuration in this section depends on the following components:

- Oracle WebLogic Server

- Oracle Database for Oracle Internet Directory

- Identity Management - Oracle Internet Directory schema existing in the database for Oracle Internet Directory.

- Oracle Database for Oracle Identity Federation, if using RDBMS for Session Store, Message Store, or Configuration Store.

- New Identity Management - Oracle Identity Federation schema existing in the database for Oracle Identity Federation, if using RDBMS for Session Store, Message Store, or Configuration Store.

4.3.4.4 Procedure

Perform the following steps to configure Oracle Identity Federation with Oracle Internet Directory in a new domain for LDAP Authentication, User Store, and Federation Store:

1. Decide if you want to use RDBMS for Session Store, Message Store, or Configuration Store. If you do, perform the following steps a and b:

1. Install the database for Oracle Identity Federation. Refer to Installing Oracle Database for more information.

2. Create the Identity Management - Oracle Identity Federation schema in the database. Refer to Creating Database Schema Using the Oracle Fusion Middleware Repository Creation Utility (RCU) for more information.

2. Install the Oracle Database for Oracle Internet Directory. Refer to Installing Oracle Databasefor more information.

3. Create the Identity Management - Oracle Internet Directory schema in the database for Oracle Internet Directory. Refer to Creating Database Schema Using the Oracle Fusion Middleware Repository Creation Utility (RCU) for more information.

4. Ensure that Oracle Identity Federation and Oracle Internet Directory are installed, as described in Installing Oracle Identity Management Using "Install and Configure" Option.

Note:

If you selected Install and Configure option in the Select Installation Type screen while installing Oracle Identity Management 11g Release 1 (11.1.1.6.0), as described in Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.6.0) Software, the Select Domain screen is displayed.
If you selected Install Software - Do Not Configure option in the Select Installation Type screen while installing Oracle Identity Management 11g Release 1 (11.1.1.6.0), as described in Installing and Configuring Oracle Identity Management 11g Release 1 (11.1.1.6.0) Software, you must now start the Oracle Identity Management Configuration Wizard. Run <ORACLE_HOME>/bin/config.sh (on UNIX) or <ORACLE_HOME>\bin\config.bat (on Windows) to start the Oracle Identity Management Configuration Wizard. The Select Domain screen is displayed.

5. On the Select Domain screen, select Create New Domain and enter the following information:

- User Name: Enter the user name for the new domain.

- User Password: Enter the user password for the new domain.
Enter the user password again in the Confirm Password field.

- Domain Name: Enter a name for the new domain.

Click Next. The Specify Installation Location screen appears.

6. Identify the Homes, Instances, and the WebLogic Server directory by referring to Identifying Installation Directories. After you enter information for each field, click Next. The Specify Security Updates screen appears.

7. Choose how you want to be notified about security issues:

- If you want to be notified about security issues through email, enter your email address in the Email field.

- If you want to be notified about security issues through My Oracle Support (formerly MetaLink), select the My Oracle Support option and enter your My Oracle Support Password.

- If you do not want to be notified about security issues, leave all fields empty.

Click Next. The Configure Components screen appears.

8. Select Oracle Internet Directory, Oracle Identity Federation, and optionally, Oracle HTTP Server.

Note:

Oracle HTTP Server is required when using Oracle Identity Federation for enterprise level single sign-on with Oracle Single Sign-On and Oracle Access Manager. Although Oracle Identity Federation can function without Oracle HTTP Server, there are advantages to configuring it as a proxy for Oracle Identity Federation.
When you select Oracle HTTP Server and Oracle Identity Federation on this Configure Components screen, the Configuration Wizard configures the Oracle HTTP Server so that the Oracle Identity Federation application can be accessed through Oracle HTTP Server ports.

Refer to the "Deploying Oracle Identity Federation with Oracle HTTP Server" section in the Oracle Fusion Middleware Administrator's Guide for Oracle Identity Federation for more information.

The Oracle Directory Services Manager and Fusion Middleware Control management components are automatically selected for this installation.

Ensure no other components are selected and click Next. The Configure Ports screen appears.

9. Choose how you want the Installer to configure ports:

- Select Auto Port Configuration if you want the Installer to configure ports from a predetermined range.

- Select Specify Ports using Configuration File if you want the Installer to configure ports using the staticports.ini file. You can click View/Edit File to update the settings in the staticports.ini file.

Click Next. The Specify Schema Database screen appears.

10. Identify the ODS schema for Oracle Internet Directory that you created in step 3 by selecting Use Existing Schema and entering the following information:

- Enter the database connection information in the Connect String field. The connection string must be in the form: hostname:port:servicename. For Oracle Real Application Clusters (RAC), the connection string must be in the form: hostname1:port1:instance1^hostname2:port2:instance2@servicename.

- Enter the password for the ODS schema in the Password field and click Next.

Note:

If your existing ODS and ODSSM schemas have different passwords, the Specify ODSSM Password screen will appear after you click Next. Enter the password for your existing ODSSM schema and click Next.

The Create Oracle Internet Directory screen appears.

11. Enter the following information for Oracle Internet Directory:

- Realm: Enter the location for your realm.

- Administrator Password: Enter the password for the Oracle Internet Directory administrator.

- Confirm Password: Enter the administrator password again.

Click Next. The Specify OIF Details screen appears.

12. Enter the following information:

- PKCS12 Password: Enter the password Oracle Identity Federation will use for encryption and for signing wallets. The Installer automatically generates these wallets with self-signed certificates. Oracle recommends using the wallets only for testing.

- Confirm Password: Enter the PKCS12 password again.

- Server ID: Enter a string that will be used to identify this Oracle Identity Federation instance. A prefix of oif will be added to the beginning of the string you enter. Each logical Oracle Identity Federation instance within an Oracle WebLogic Server administration domain must have a unique Server ID. Clustered Oracle Identity Federation instances acting as a single logical instance will have the same Server ID.

Click Next. The Select OIF Advanced Flow Attributes screen appears.

Notes:

- Notice that the options for Authentication Type, User Store and Federation Store are automatically set to LDAP because you are installing Oracle Internet Directory with Oracle Identity Federation.

- The Installer sets the User Federation Record Context to cn=fed,BASE_REALM, where BASE_REALM is typically dc=us,dc=oracle,dc=com.

13. Select the appropriate option for each configuration item and click Next:

Note:

User Session Store and Message Store appear in the Installer as separate configuration items, however, most deployments use the same type of repository for both stores.

- User Session Store: Memory or RDBMS

- Select Memory to store transient runtime session state data in in-memory tables.

- Select RDBMS to store transient runtime session state data in a relational database.

- Message Store: Memory or RDBMS

- Select Memory to store transient protocol messages in in-memory tables

- Select RDBMS to store transient protocol messages in a relational database.

- Configuration Store: File or RDBMS

- Select File to store Oracle Identity Federation configuration data on the local file system.

- Select RDBMS to store Oracle Identity Federation configuration data in a relational database.

Note:

The screens that appear next depend on the options you selected for the configuration items.

- If you selected RDBMS for User Session Store, Message Store, or Configuration Store, go to step 14 now.

- If you did not select RDBMS for User Session Store, Message Store, or Configuration Store, go to step 16 now.

14. Enter the following information on the Specify Transient Store Database Details screen:

- HostName: Enter the connection string to the database host in the form: hostname:port:servicename. For Oracle Real Application Clusters (RAC), the connection string must be in the form: hostname1:port1:instance1^hostname2:port2:instance2@servicename.

- Username: Enter the name of the schema owner created by RCU, which is of the form PREFIX_OIF.

- Password: Enter the password for the database user.
Click Next.

15. The Installation Summary screen appears. Verify the information on this screen. Click Configure to begin the configuration.

16. The Configuration Progress screen appears. Click Next to continue.

17. The Installation Complete screen appears. Click Save to save the configuration information to a file, and then click Finish to exit the installer.

Note:

To configure Oracle Identity Federation so that it is integrated with Oracle HTTP Server, refer to the "Deploying Oracle Identity Federation with Oracle HTTP Server" section in the Oracle Fusion Middleware Administrator's Guide for Oracle Identity Federation.

5 Installing and Configuring Oracle Identity and Access Management (11.1.1.5.0)

This chapter includes the following topics:

- Installing Oracle Identity and Access Management (11.1.1.5.0)

- After Installing the Oracle Identity and Access Management Software

- Basic Installation and Configuration Scenarios

- Configuring OIM Server, Design Console, and Remote Manager

- Installing Oracle HTTP Server 11g WebGate for OAM

- Setting Up Integration Between OIM and OAM

Note:

This chapter provides information for Installing Oracle Identity and Access Management (11.1.1.5.0) for new users. If you are an existing Oracle Identity and Access Management 11.1.1.3.0 user, refer to "Patching Oracle Identity and Access Management 11.1.1.3.0 to 11.1.1.5.0" in the Oracle Fusion Middleware Patching Guide.

5.1 Installing Oracle Identity and Access Management (11.1.1.5.0)

This section describes how to install the Oracle Identity and Access Management 11g Release 1 (11.1.1.5.0) suite that contains the following products:

- Oracle Identity Manager (OIM)

- Oracle Access Manager (OAM)

- Oracle Adaptive Access Manager (OAAM)

- Oracle Entitlements Server (OES)

- Oracle Identity Navigator (OIN)

It includes the following sections:

- Applications Installed

- Dependencies

- Procedure

5.1.1 Applications Installed

Performing the installation in this section installs the following products:

- Oracle Identity Manager Server

- Oracle Identity Manager Design Console

- Oracle Identity Manager Remote Manager

- Oracle Access Manager

Note:

When you are installing Oracle Access Manager, Oracle Secure Token Service will also be installed. For more information on Oracle Secure Token Service, see Oracle Fusion Middleware Administrator's Guide for Oracle Access Manager with Oracle Security Token Service.

- Oracle Adaptive Access Manager

Note:

For Oracle Identity and Access Management 11.1.1.5.0, Oracle Adaptive Access Manager includes two components

- Oracle Adaptive Access Manager (Online)

- Oracle Adaptive Access Manager (Offline)

- Oracle Identity Navigator

- Oracle Entitlements Server

Note:

When you are installing Oracle Identity and Access Management, only the Administration Server of Oracle Entitlements Server is installed. To install Oracle Entitlements Server Client, see "Installing and Configuring Oracle Entitlements Server" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

5.1.2 Dependencies

The installation in this section depends on the following:

- Oracle WebLogic Server

- Oracle Database

- Oracle SOA 11g Suite 11.1.1.5.0 (required for Oracle Identity Manager only)

- JDK (either Oracle WebLogic JRockit JDK or Sun JDK 1.6.0)

5.1.3 Procedure

Complete the following steps to install the Oracle Identity and Access Management software that contains Oracle Identity Manager, Oracle Access Manager, Oracle Adaptive Access Manager,Oracle Entitlements Server, and Oracle Identity Navigator:

1. Install the Oracle Database. Refer to Installing Oracle Database for more information.

Note:

Ensure that the Oracle database is with the AL32UTF8 character set encoding.

2. Decide if you want to create new schemas for Oracle Identity Manager, Oracle Access Manager, Oracle Adaptive Access Manager, Metadata Services, and SOA Infrastructure by using the Installer during installation or if you want to use an existing schema:

- If you want to create a new schema using the Installer, refer to Creating Database Schema Using the Oracle Fusion Middleware Repository Creation Utility (RCU) for more information about creating schemas. After creating schemas, continue this procedure by going to Step 3.

- If you want to use an existing schema, you must upgrade the schema by using the Upgrade Assistant tool. For more information, see the Oracle Fusion Middleware Upgrade Guide for Oracle Identity Management.

3. Install Oracle WebLogic Server. Refer to Installing Oracle WebLogic Server and Creating the Oracle Middleware Home for more information.

4. Install Oracle SOA 11g suite (11.1.1.5.0) if you want to use Oracle Identity Manager. For information about installing the Oracle SOA 11g suite, refer to Installing the Latest Version of Oracle SOA Suite (Oracle Identity Manager Users Only).

5. Start your installation by performing all the steps in Starting an Installation. After you complete those steps, the Welcome screen appears.

6. Click Next on the Welcome screen. The Prerequisite Checks screen appears.

7. If all prerequisite checks pass inspection, click Next. The Specify Installation Location screen appears.

8. On the Specify Installation Location screen, enter the path to the Oracle Middleware Home installed on your system. Ensure that Oracle WebLogic Server is already installed on the system in the same Middleware Home. This directory is the same as the Oracle Home created in the Oracle WebLogic Server installation.

Note:

If you do not specify a valid Middleware Home directory on the Specify Installation Location screen, the Installer displays a message and verifies whether you want to proceed with the installation of only Oracle Identity Manager Design Console and Oracle Identity Manager Remote Manager. These two components of Oracle Identity Manager do not require a Middleware Home directory.
If you want to install only Oracle Identity Manager Design Console on a Windows machine, you do not need to install Oracle WebLogic Server and create a Middleware Home directory on the Windows machine. Before using Oracle Identity Manager Design Console, you must configure Oracle Identity Manager Server. However, the Server can be installed and configured on a different machine, so you can specify the Oracle Identity Manager Server host and URL information when configuring only Design Console on the Windows machine.

9. In the Oracle Home Directory field, enter a name for the Oracle Home folder that will be created under your Middleware Home. This directory is also referred to as IDM_Home in this book.
Click Next. The Summary Page screen appears.

The Summary Page screen displays a summary of the choices that you made. Review this summary and decide whether to start the installation. If you want to modify any of the configuration settings at this stage, select a topic in the left navigation page and modify your choices. To continue installing Oracle Identity and Access Management, click Install.

This installation process copies the Identity Management software to your system and creates an IDM_Home directory, such as Oracle_IDM1, under your Middleware Home. You must proceed to create a WebLogic Domain, as described in After Installing the Oracle Identity and Access Management Software. In addition, you must configure the Administration Server settings while creating the domain.

To configure Oracle Identity Manager Server, Oracle Identity Manager Design Console, and Oracle Identity Manager Remote Manager, you must launch the Oracle Identity Manager 11g Configuration Wizard, as described in Starting the Oracle Identity Manager 11g Configuration Wizard.

In addition, see Configuring OIM Server, Configuring OIM Design Console, and Configuring OIM Remote Manager.

5.2 After Installing the Oracle Identity and Access Management Software

After installing the Oracle Identity and Access Management software, you must proceed to configure Oracle Identity and Access Management products in a new or existing WebLogic domain. You can use the Oracle Fusion Middleware Configuration Wizard to create a WebLogic domain or extend an existing domain. For more information about WebLogic administration domain options, see the "Introduction to WebLogic Domains" topic in the guide Oracle Fusion Middleware Creating Domains Using the Configuration Wizard.

This chapter discusses some of the basic installation and configuration scenarios. For more information about advanced installation scenarios, see the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

See:

The "Understanding Oracle WebLogic Server Domains" chapter in the Oracle Fusion Middleware Understanding Domain Configuration for Oracle WebLogic Server guide for more information about Oracle WebLogic Server administration domains.

For Oracle Identity Manager users only:

After configuring Oracle Identity Manager in a new or existing WebLogic domain, you must configure Oracle Identity Manager Server, Oracle Identity Manager Design Console, and Oracle Identity Manager Remote Manager, by running the Oracle Identity Manager 11g Configuration Wizard, as described in Overview.

5.3 Basic Installation and Configuration Scenarios

This section includes some of the most basic installation and configuration scenarios for Oracle Identity and Access Management 11g Release 1 (11.1.1.5.0) products, comprising Oracle Identity Manager, Oracle Access Manager, Oracle Adaptive Access Manager, Oracle Entitlements Server and Oracle Identity Navigator.

This section discusses the following topics:

- Configuring OIN in a New WebLogic Domain

- Configuring OIM Server

- Configuring OAM in a New WebLogic Domain

- Configuring OAAM in a New WebLogic Domain

- Configuring OAAM (Offline) in a New WebLogic Domain

- Configuring OES in a New WebLogic Domain

5.3.1 Configuring OIN in a New WebLogic Domain

For more information, see "Configuring OIN in a New WebLogic Domain" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

5.3.2 Configuring OIM Server

For more information, see "Configuring OIM Server" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

5.3.3 Configuring OAM in a New WebLogic Domain

For more information, see "OAM in a New WebLogic Domain" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

5.3.4 Configuring OAAM in a New WebLogic Domain

For more information, see "OAAM in a New WebLogic Domain" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

5.3.5 Configuring OAAM (Offline) in a New WebLogic Domain

For more information, see "Configuring Oracle Adaptive Access Manager (Offline)" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

5.3.6 Configuring OES in a New WebLogic Domain

For more information, see the following:

- "Configuring Oracle Entitlements Server Administration Server" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

- "Configuring Oracle Entitlements Server Client" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

5.4 Configuring OIM Server, Design Console, and Remote Manager

After configuring Oracle Identity Manager (OIM) in a new or existing WebLogic administration domain, you must run the Oracle Identity Manager 11g Configuration Wizard to configure the following:

- Oracle Identity Manager Server

- Oracle Identity Manager Design Console (on Windows operating systems only)

- Oracle Identity Manager Remote Manager

Note:

For information about configuring Oracle Identity Manager Server, Design Console, and Remote Manager after configuring Oracle Identity Manager in a new or existing WebLogic domain, see Chapter 6, "Configuring OIM Server, Design Console, and Remote Manager".

5.5 Installing Oracle HTTP Server 11g WebGate for OAM

For information about installing and configuring Oracle HTTP Server 11g WebGate for Oracle Access Manager (OAM), see the chapter "Installing and Configuring Oracle HTTP Server 11g WebGate for OAM" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

5.6 Setting Up Integration Between OIM and OAM

For information about setting up integration between Oracle Identity Manager (OIM) and Oracle Access Manager (OAM), see "Integrating Oracle Access Manager and Oracle Identity Manager" in the Oracle Fusion Middleware Integration Guide for Oracle Access Manager.

6 Configuring OIM Server, Design Console, and Remote Manager

This chapter explains how to configure Oracle Identity Manager (OIM) Server, Design Console, and Remote Manager after configuring the Oracle Identity Manager application in a new or existing WebLogic domain.

It includes the following topics:

- Overview

- Prerequisites

- Starting the Oracle Identity Manager 11g Configuration Wizard

- Configuring OIM Server

- Installing and Configuring Only OIM Design Console on Windows

- Configuring OIM Design Console

- Configuring OIM Remote Manager

Note:

The Oracle Identity Manager Configuration Wizard enables you to configure only some fundamental non-J2EE elements of Oracle Identity Manager, such as Oracle Identity Manager Server, Oracle Identity Manager Design Console, and Oracle Identity Manager Remote Manager. For more information about configuring and administering Oracle Identity Manager, see the Oracle Identity Manager System Administrator's Guide.
To invoke online help at any stage of the Oracle Identity Manager configuration process, click the Help button on the Oracle Identity Manager Configuration Wizard screens.

6.1 Overview

The Oracle Identity Management 11g Configuration Wizard enables you to configure Oracle Identity Manager (OIM) Server, Design Console (Windows only), and Remote Manager.

You must run this configuration wizard on the machine where the Administration Server is running.

You must complete this additional configuration for Oracle Identity Manager components after configuring Oracle Identity Manager in a new or existing WebLogic administration domain.

Note:

You can run the Oracle Identity Manager Configuration Wizard to configure Oracle Identity Manager Server, Design Console, or Remote Manager only once during the initial setup. After the initial setup, you cannot run the Oracle Identity Manager Configuration Wizard again to modify the configuration of Oracle Identity Manager Server, Design Console, or Remote Manager. For such modifications, you must use Oracle Enterprise Manager Fusion Middleware Control.

Note that Oracle Identity Manager requires Oracle SOA Suite 11g (11.1.1.5.0), which should be exclusive to Oracle Identity and Access Management. You must install Oracle SOA Suite before configuring Oracle Identity Manager. If you are setting up integration between Oracle Identity Manager and Oracle Access Manager, ensure that Oracle Identity Manager, Oracle Access Manager, and Oracle SOA Suite are configured in the same domain.

6.2 Prerequisites

For more information, see "Before Configuring OIM Server, Design Console, or Remote Manager" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

6.3 Starting the Oracle Identity Manager 11g Configuration Wizard

To start the Oracle Identity Manager 11g Configuration Wizard, execute the <IDM_Home>/bin/config.sh script (on UNIX) on the machine where the Administration Server is running. (<IDM_Home>\bin\config.bat on Windows). This IDM_Home is the directory where you installed Oracle Identity Manager, Oracle Access Manager, Oracle Adaptive Access Manager, and Oracle Identity Navigator.

The Oracle Identity Management 11g Configuration Wizard starts, and the Welcome Screen appears.

6.4 Configuring OIM Server

For more information, see "Configuring OIM Server" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

6.5 Installing and Configuring Only OIM Design Console on Windows

For more information, see "Installing and Configuring Only OIM Design Console on Windows" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

6.6 Configuring OIM Design Console

For more information, see "Configuring OIM Design Console" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

6.7 Configuring OIM Remote Manager

For more information, see "Configuring OIM Remote Manager" in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

7 Verifying the Installed Components

This chapter describes how to verify the installation of Oracle Identity Management 11g Release 1 (11.1.1) components.

It contains the following sections:

- Verifying Oracle Identity Management (11.1.1.6.0)

- Verifying Oracle Identity and Access Management (11.1.1.5.0)

7.1 Verifying Oracle Identity Management (11.1.1.6.0)

This topic describes how to verify Oracle Internet Directory (OID), Oracle Virtual Directory (OVD), Oracle Directory Services Manager (ODSM), Oracle Directory Integration Platform (ODIP), and Oracle Identity Federation (OIF) that you installed.

It includes the following sections:

- Oracle Internet Directory or Oracle Virtual Directory

- Oracle Directory Integration Platform

- Oracle Directory Services Manager

- Oracle Identity Federation

7.1.1 Oracle Internet Directory or Oracle Virtual Directory

Verify an Oracle Internet Directory or an Oracle Virtual Directory installation by:

- Executing the $ORACLE_INSTANCE/bin/opmnctl status -l command. For example, if Oracle Internet Directory is configured then the following result can be seen:

Processes in Instance: asinst_1
---------------------------------+--------------------+---------+----------+------------+----------+-----------+------
ias-component                    | process-type       |     pid | status   |        uid |  memused |    uptime | ports
---------------------------------+--------------------+---------+----------+------------+----------+-----------+------
oid1                             | oidldapd           |   24032 | Alive    |  582907955 |   113004 |   0:00:41 | N/A
oid1                             | oidldapd           |   24024 | Alive    |  582907954 |    56288 |   0:00:42 | N/A
oid1                             | oidmon             |   24001 | Alive    |  582907953 |    50232 |   0:00:43 | LDAPS:3131,LDAP:3060
EMAGENT                          | EMAGENT            |   24000 | Alive    |  582907952 |     5852 |   0:00:43 | N/A

- Executing the $ORACLE_HOME/bin/ldapbind command on the non-SSL and SSL ports. For example:
On Non-SSL ports:

$ORACLE_HOME/bin/ldapbind -h <hostname> -p <port> -D cn=orcladmin -w <password>

On SSL ports:

$ORACLE_HOME/bin/ldapbind -h <hostname> -p <port> -D cn=orcladmin -w <password> -U 1

7.1.2 Oracle Directory Integration Platform

Verify the Oracle Directory Integration Platform installation using the dipStatus command located in the $ORACLE_HOME/bin/ directory.

Note:

You must set the WL_HOME and ORACLE_HOME environment variables before executing the dipStatus command.

The following is the syntax for the dipStatus command:

$ORACLE_HOME/bin/dipStatus -h HOST -p PORT -D wlsuser [-help]

- -h | -host identifies the Oracle WebLogic Server where Oracle Directory Integration Platform is deployed.

- -p | -port identifies the listening port of the Oracle WebLogic Managed Server where Oracle Directory Integration Platform is deployed.

- -D | -wlsuser identifies the Oracle WebLogic Server login ID.

Note:

You will be prompted for the Oracle WebLogic Server login password. You cannot provide the password as a command-line argument.
Best security practice is to provide a password only in response to a prompt from the command. If you must execute dipStatus from a script, you can redirect input from a file containing the Oracle WebLogic Server password. Use file permissions to protect the file and delete it when it is no longer necessary.

7.1.3 Oracle Directory Services Manager

To verify the Oracle Directory Services Manager installation, enter the following URL into your browser's address field:

http://host:port/odsm

- host represents the name of the WebLogic Managed Server hosting Oracle Directory Services Manager.

- port represents the WebLogic Managed Server listen port. You can determine the exact port number by examining the

$MW_HOME/ORACLE_IDENTITY_MANAGEMENT_DOMAIN/servers/MANAGED_
SERVER/data/nodemanager/MANAGED_SERVER.url

Oracle Directory Services Manager is installed and running if the Welcome to Oracle Directory Services Manage screen appears.

Note:

While the appearance of the Welcome screen verifies Oracle Directory Services Manager is installed and running, you cannot connect to an Oracle Internet Directory or Oracle Virtual Directory from Oracle Directory Services Manager without the appropriate directory server credentials.

7.1.4 Oracle Identity Federation

Verify the Oracle Identity Federation installation by:

- Accessing the Oracle Identity Federation metadata at the following URL. Oracle Identity Federation was installed and the Oracle Identity Federation server is running if you can access the metadata.
http://host:port/fed/sp/metadata

Note:

host represents the name of the WebLogic Managed Server where Oracle Identity Federation was installed. port represents the listen port on that WebLogic Managed Server.

- Accessing Fusion Middleware Control to verify that Oracle Identity Federation is available and running. For more information, see "Getting Started Using Oracle Enterprise Manager Fusion Middleware Control" in the Oracle Fusion Middleware Administrator's Guide.

7.2 Verifying Oracle Identity and Access Management (11.1.1.5.0)

This topic describes how to verify Oracle Identity Manager (OIM), Oracle Access Manager (OAM), Oracle Adaptive Access Manager (OAAM), Oracle Entitlements Server (OES), and Oracle Identity Navigator (OIN) that you installed.

It includes the following sections:

- Verifying the OIM Installation

- Verifying the OAM Installation

- Verifying the OAAM Installation

- Verifying the OES Installation

- Verifying the OIN Installation

7.2.1 Verifying the OIM Installation

Before you can verify the Oracle Identity Manager (OIM) installation, ensure that the following servers are up and running:

- Administration Server for the domain in which the Oracle Identity Manager application is deployed

- Managed Server hosting Oracle Identity Manager

- Managed Server hosting the Oracle SOA 11g suite

You can verify your Oracle Identity Manager installation by:

- Checking the Oracle Identity Manager Server URL, such as http://<Hostname>:<Port>/oim/faces/faces/pages/Admin.jspx.

- Checking the Identity Management shell, such as http://<Hostname>:<Port>/admin/faces/pages/Admin.jspx. This shell is used for Users and Role Management tasks.

- Checking the Oracle Identity Manager Self Service URL, such as http://<Hostname>/<Port>/oim.

- Verifying the configuration between Oracle Identity Manager and Oracle SOA (BPEL Process Manager) as follows:

1. Log in to the Oracle Identity Manager Administration Console, with xelsysadm:
http://<host>:<oim_port>/oim/faces/pages/Admin.jspx

2. Create a Request, such as modifying a user profile.

3. Log in to the SOA Infrastructure to verify whether the composite applications are displayed.
http://<host>:<bpel_port>/soa-infra

4. Log in to the BPEL Worklist application, with xelsysadm:
http://<host>:<soa_port>/integration/worklistapp

5. In the list of tasks, verify whether the request has come for approval.

6. Click on the task, and click Approve in the Actions tab.

7. Click on the refresh icon. The request comes back. Approve it again.

8. Go to http://<host>:<oim_port>/oim/faces/pages/Admin.jspx and verify whether the request is completed.

9. Go to http://<host>:<oim_port>/admin/faces/pages/Admin.jspx and verify whether the user profile is modified.

- Logging in to the Design Console, xelsysadm, and the appropriate password. A successful login indicates that the installation was successful.

- Starting the Remote Manager service by running remotemanager.sh or remotemanager.bat, as appropriate. (remotemanager.sh on UNIX or remotemanager.bat on Windows resides in your Oracle Home directory under a folder named remote_manager.

7.2.2 Verifying the OAM Installation

After completing the installation process, including post-installation steps, you can verify the installation and configuration of Oracle Access Manager (OAM) as follows:

1. Ensure that the Administration Server and the Managed Server are up and running.

2. Log in to the Administration Console for Oracle Access Manager using the URL: http://<adminserver-host>:<adminserver-port>/oamconsole
When you access this Administration Console running on the Administration Server, you are prompted to enter a user name and password. Note that you must have Administrator's role and privileges.

3. Verify the Oracle WebLogic Server Administration Console. If the installation and configuration of Oracle Access Manager is successful, this console shows the Administration Server (for example, oam_admin) and the Managed Server (for example, oam_server) in the running mode. In addition, if you check Application Deployments in this console, both oam_admin and oam_server must be in active state.

7.2.3 Verifying the OAAM Installation

After completing the installation process, including post-installation steps, you can verify the installation and configuration of Oracle Adaptive Access Manager (OAAM) as follows:

1. Start the Administration Server to register the newly created managed servers with the domain. To start the Administration Server, run the following command:

- On Windows: At the command prompt, run the startWebLogic script to start the Administration Server, as in the following example:
\middleware\user_projects\domains\base_domain\bin\startWebLogic

- On UNIX: At the $prompt, run the startWebLogic.sh script, as in the following example:
sh /MW_HOME/user_projects/domains/base_domain/bin/startWebLogic.sh

2. Start the Managed Server, as described in Starting the Stack.
Wait for the Administration Server and the Managed Server to start up.

3. Log in to the Administration Server for Oracle Adaptive Access Manager using the URL: http://<host>:<port>/oaam_admin

4. Log in to the Oracle Adaptive Access Manager Server using the URL: https://<host>:<sslport>:oaam_server

7.2.4 Verifying the OES Installation

To verify that your Oracle Entitlements Server Administration Server install was successful, go to your Oracle Middleware Home directory associated with the Oracle Identity and Access Management 11g Release 1 (11.1.1.5.0) installation and verify that the OES folder is created under IDM_HOME.

7.2.5 Verifying the OIN Installation

To verify the installation of Oracle Identity Navigator (OIN), complete the following steps:

1. Launch Oracle Identity Navigator in a browser by using the following URL:
http://<host>:7001/oinav/faces/idmNag.jspx

The Oracle Identity Navigator dashboard and the resource catalog are displayed.

2. Click the Edit link on the upper right corner of the screen to switch to the Edit mode.

3. Click the Add Content button on the page. A resource catalog pops up.

4. In the pop-up dialog, click the Open link for the folder IDM Product Launcher. The Launcher task flow pops up.

5. In the pop-up dialog, click the Add link. Verify that the Launcher portlet is added to the page content. Continue to add News task flows to the page, without closing the pop-up dialog. Click the up arrow at the upper left corner. The top folder layout is displayed again. Click the Open link for the folder News. The News and Announcements task flow pops up.

6. In the News and Announcements pop-up dialog, click the Add link. Verify that the Report portlet is added to the page content. Continue to add Reports task flows to the page, without closing the pop-up dialog. Click the up arrow at the upper left corner. The top folder layout is displayed again. Click the Open link for the folder My Reports. Click the Add link and the Close button (X). All the three workflows are added to the page content.

7. Change the default layout, if necessary, by clicking the Pencil icon located on the upper right area of the screen.

8. To exit the Edit mode, click the Close button.
If the task flows are properly added to the page content, the screen displays the task flow content.

9. Test the Product Registration functionality as follows:

1. Create, edit, or delete the product information by clicking the Administration tab.

2. To add a new product, click the Create image icon in the Product Registration section. The New Product Registration dialog pops up.

3. Enter the relevant information in this dialog, and the new product registration is updated accordingly. The new product registration data is updated on the Launcher portlet after you click the Dashboard tab.

4. Click the product link and ensure that a new browser window or tab opens with the registered product URL.

10. Test the News functionality as follows:

1. Click the refresh icon to update the RSS feed content.

2. Click the news item link to open the source of content in a new browser window or tab.

11. Test the Reports functionality as follows:

1. Add a report by clicking the Add icon. The Add Report dialog pops up.

2. In this dialog, select a report to add, and click the Add Report button. Verify that the report is added.

3. Run a report by clicking the report icon. The report opens in a new browser window or tab.

A Deinstalling and Reinstalling Oracle Identity Management

This appendix provides information about deinstalling and reinstalling Oracle Identity Management 11g Release 1. It contains the following topics:

- Deinstalling Oracle Identity Management

- Reinstalling Oracle Identity Management

Note:

Always use the instructions provided in this appendix for removing the software. If you try to remove the software manually, you may experience problems when you try to reinstall the software. Following the procedures in this appendix ensures that the software is properly removed.

A.1 Deinstalling Oracle Identity Management

This topic contains procedures for deinstalling Oracle Identity Management and contains the following sections:

- Deinstalling the Oracle Identity Management Oracle Home

- Deinstalling the Oracle Common Home

- Deinstalling Applications Registered with Oracle Single Sign-On 10g Release 10.1.4.3.0

A.1.1 Deinstalling the Oracle Identity Management Oracle Home

The deinstaller attempts to remove the Oracle Home directory from which it was started. Before you choose to remove your Oracle Identity Management Oracle Home directory, make sure that it is not in use by an existing domain and that you stop all running processes that use this Oracle Home.

Deinstalling Oracle Identity Management will not remove any WebLogic domains that you have created—it only removes the software in the Oracle Identity Management Oracle Home directory.

Note:

The oraInventory is required for removing instances and Oracle Home. For example, on UNIX it can be found in the following location:
/etc/oraInst.loc

This section describes how to deinstall your Oracle Identity Management Oracle Home using the graphical, screen-based deinstaller. However, you can also perform a silent deinstallation using a response file. A deinstall response file template that you can customize for your deinstallation is included in the Disk1/stage/Response directory on UNIX, or in the Disk1\stage\Response directory on Windows.

Perform the following steps to deinstall your Oracle Identity Management Oracle Home using the graphical, screen-based deinstaller:

1. Verify your Oracle Identity Management Oracle Home is not in use by an existing domain.

2. Stop all processes that use the Oracle Identity Management Oracle Home.

3. Open a command prompt and move (cd) into the IDENTITY_MANAGEMENT_ORACLE_HOME/oui/bin directory (UNIX) or the IDENTITY_MANAGEMENT_ORACLE_HOME\oui\bin directory (Windows).

4. Invoke the Deinstaller from command line using the -deinstall option. For example:
On UNIX:

./runInstaller -deinstall

On Windows:

setup.exe -deinstall

The Welcome screen appears.

5. Click Next.

- If you are deinstalling Oracle Internet Directory, Oracle Virtual Directory, Oracle Directory Services Manager, Oracle Directory Integration Platform, or Oracle Identity Federation, the Select Deinstallation Type screen appears.
Select the deinstallation type you want to perform. Table A-1 lists and describes each of the deinstallation types:

Table A-1 Deinstallation Types

Type

Description

Deinstall Oracle Home

Select this option to deinstall the binaries contained in the listed Oracle Identity Management Oracle Home.

If you select this option, the Deinstall Oracle Home screen appears next, where you can save a response file that contains the deinstallation settings before deinstalling.

Deinstall ASInstances managed by WebLogic Domain - Applicable to Oracle Internet Directory and Oracle Virtual Directory only.

Select this option to deinstall the Oracle Identity Management system component instances, such as Oracle Internet Directory and Oracle Virtual Directory, that are registered in a WebLogic domain.

If you select this option, the Specify WebLogic Domain Detail screen appears next where you identify the administration domain containing the system components you want to deinstall. The Select Managed Instance screen appears next, where you identify the instances you want to deinstall.

DeInstall Unmanaged ASInstances - Applicable to Oracle Internet Directory and Oracle Virtual Directory only.

Select this option to deinstall the Oracle Identity Management system component instances, such as Oracle Internet Directory and Oracle Virtual Directory, that are not registered in a WebLogic domain.

If you select this option, the Specify Instance Location screen appears next where you identify the instances you want to deinstall.

Regardless of the option you choose and the subsequent screens that appear, you will arrive at the Deinstall Progress screen, which shows the progress and status of the deinstallation. If you want to quit before the deinstallation is completed, click Cancel.

Click Finish after the deinstallation progresses to 100%. The Deinstallation Complete screen appears.

- If you are deinstalling Oracle Identity Manager, Oracle Access Manager, Oracle Adaptive Access Manager, Oracle Entitlements Server, and Oracle Identity Navigator, the Deinstall Oracle Home screen appears.
In the Deinstall Oracle Home screen, you can save a response file that contains the deinstallation settings before deinstalling. Click Deinstall. The Deinstall Progress screen appears. This screen shows the progress and status of the deinstallation. If you want to quit before the deinstallation is completed, click Cancel.

Click Finish after the deinstallation progresses to 100%. The Deinstallation Complete screen appears.

6. Click Finish on the Deinstallation Complete screen to exit the deinstaller.

A.1.2 Deinstalling the Oracle Common Home

The ORACLE_COMMON_HOME directory located in the MW_HOME directory contains the binary and library files required for Oracle Enterprise Manager Fusion Middleware Control and Oracle Java Required Files (JRF). Before you deinstall the ORACLE_COMMON_HOME directory, ensure that no other Oracle Fusion Middleware software, such as Oracle SOA Suite, depends on ORACLE_COMMON_HOME. You cannot deinstall the ORACLE_COMMON_HOME directory until all software that depends on it has been deinstalled.

Perform the following steps to deinstall the ORACLE_COMMON_HOME directory:

1. Stop all processes that use the ORACLE_COMMON_HOME directory.

2. Deinstall your Oracle Identity Management Oracle Home by performing the steps in Deinstalling Oracle Identity Management.

3. Open a command prompt and move (cd) into the ORACLE_COMMON/oui/bin/ directory (on UNIX) or the ORACLE_COMMON_HOME\oui\bin\ directory (on Windows).

4. Invoke the Deinstaller from command line using the -deinstall option and the -jreLoc option, which identifies the location where Java Runtime Environment (JRE) is installed. For example:
On UNIX:

./runInstaller -deinstall -jreLoc FULL_PATH_TO_JRE_DIRECTORY

On Windows:

setup.exe -deinstall -jreLoc FULL_PATH_TO_JRE_DIRECTORY

The Welcome screen appears.

5. Click Next. The Select Deinstallation Type screen appears.

6. Select the Deinstall Oracle Home option at the top of the Select Deinstallation Type screen.

Note:

The path to the ORACLE_COMMON_HOME directory appears in the text describing the Deinstall Oracle Home option.

Click Next. The Deinstall Oracle Home screen appears.

7. Confirm the correct ORACLE_COMMON_HOME directory is listed and click Deinstall.
The Deinstallation Progress screen appears, along with a Warning dialog box prompting you to confirm that you want to deinstall the ORACLE_COMMON_HOME directory.

8. Click Yes on the Warning dialog box to confirm you want to remove the ORACLE_COMMON_HOME directory. The deinstallation begins.

9. Click Finish after the deinstallation progresses to 100%. The Deinstallation Complete screen appears.

10. Click Finish on the Deinstallation Complete screen to exit the deinstaller.

A.1.3 Deinstalling Applications Registered with Oracle Single Sign-On 10g Release 10.1.4.3.0

To deinstall a partner application registered with Oracle Single Sign-On 10g Release 10.1.4.3.0, you must manually deregister the partner application from Oracle Single Sign-On. Refer to the "Reregister mod_osso on the single sign-on middle tiers" section in Chapter 9 of the Oracle Application Server Single Sign-On Administrator's Guide 10g Release 10.1.4.0.1 available at:

http://www.oracle.com/technetwork/indexes/documentation/index.html

A.2 Reinstalling Oracle Identity Management

Perform the following steps to reinstall Oracle Identity Management:

1. Verify the directory you want to reinstall Oracle Identity Management into does not contain an existing Oracle Identity Management instance. If it does, you must deinstall it before reinstalling. You cannot reinstall Oracle Identity Management 11g Release 1 (11.1.1) in a directory that contains an existing Oracle Identity Management instance.

2. Reinstall Oracle Identity Management as if it was the first installation by performing the steps in the appropriate procedure in this guide.

B Starting and Stopping the Oracle Stack

You must start and stop the components of the Oracle stack in a specific order. This appendix describes that order and contains the following topics:

- Starting the Stack

- Stopping the Stack

Note:

When executing the startManagedWebLogic and stopManagedWebLogic scripts described in the following topics:

- The default value for DOMAIN_NAME is IDMDomain

- SERVER_NAME represents the name of the WebLogic Managed Server. The default value for the Oracle Directory Integration Platform and Oracle Directory Services Manager WebLogic Managed Server is wls_ods1. The default value for the Oracle Identity Federation WebLogic Managed Server is wls_oif1.

- You will be prompted for values for USER_NAME and PASSWORD if you do not provide them as options when you execute the script.

- The value for ADMIN_URL will be inherited if you do not provide it as an option when you execute the script.

B.1 Starting the Stack

Start the stack components in the following order:

1. Start the WebLogic Administration Server by executing the following command:

MW_HOME/user_projects/domains/DOMAIN_NAME/bin/startWebLogic.sh

2. Start system components, such as Oracle Internet Directory and Oracle Virtual Directory, by executing the following command:

ORACLE_INSTANCE/bin/opmnctl startall

You can verify that the system components have started by executing the following command:

ORACLE_INSTANCE/bin/opmnctl status -l

3. Start WebLogic managed components, such as Oracle Directory Integration Platform, Oracle Identity Manager, Oracle Access Manager, Oracle Adaptive Access Manager, Oracle Identity Federation, and Oracle Directory Services Manager, by executing the following command:

MW_HOME/user_projects/domains/DOMAIN_NAME/bin/startManagedWebLogic.sh\
SERVER_NAME {ADMIN_URL}

Note:

You can view the status of WebLogic managed components with Fusion Middleware Control.

B.2 Stopping the Stack

Stop the stack components in the following order:

1. Stop WebLogic managed components, such as Oracle Identity Manager, Oracle Access Manager, and Oracle Adaptive Access Manager, by executing the following command:

MW_HOME/user_projects/domains/DOMAIN_NAME/bin/stopManagedWebLogic.sh \
{SERVER_NAME} {ADMIN_URL} {USER_NAME} {PASSWORD}

2. Stop the WebLogic Administration Server by executing the following command:

MW_HOME/user_projects/domains/DOMAIN_NAME/bin/stopWebLogic.sh

3. Stop system components, such as Oracle Internet Directory and Oracle Virtual Directory, by executing the following command:

ORACLE_INSTANCE/bin/opmnctl stopall

Index

C

C

Configuration Tool

running, 4.3

Copyright © 2001, 2011, Oracle and/or its affiliates. All rights reserved.