Oracle Identity Manager Training in Coimbatore

Why Oracle Identity Manager

The Oracle Identity Manager platform automates access rights management, security, and provisioning of IT resources. Oracle Identity Manager instantly connects users to resources they need to be productive and revokes and restricts unauthorized access to protect sensitive corporate information.
The identity audit and compliance automation component of Oracle Identity Manager also provides automated attestation and reporting.

Features of Oracle Identity Manager

The features of Oracle Identity Manager can be divided into the following categories:

• Business User-Friendly Usage
• Business Friendly Request Interface
• Business User Friendly Request Tracking
• Unified Interface for Self Service and Delegated Administration
• Organization-Scoped Security
• Business User Friendly Personalization
• User Administration
• Password Management
• User Provisioning
• Organization and Role Management.

Business User-Friendly Usage

• In earlier releases of Oracle Identity Manager, the usage of Oracle Identity Manager was IT centric. To request for a role, entitlement, or application, business users had to know details, such as which resource object or IT resource to use.
• From this release onward, Oracle Identity Manager is easy to use. Business users do not need to know about IT-related details.
• Instead, business users can search for an item in the request catalog and add it in the shopping cart.Oracle Identity Manager provides ease of use to business users through simplified request interface that includes shopping cart and catalog-based experience, business-friendly request tracking, unified inbox for approval and certification tasks, and unified interface for self service and delegated administration tasks.

Business Friendly Request Interface

• In earlier releases of Oracle Identity Manager, complex request scenarios could be implemented by using role requests and SOA approval processes. However, the request management engine did not offer the ability to request application entitlements.
• In addition, the overall request process was cumbersome.
• The shopping cart pattern has been introduced to simplify the request interface. End users can request for entities such as roles, entitlements, and application instances from the access request catalog by using the shopping cart pattern.

Business User Friendly Request Tracking

• Administrators and end users can track all requests easily by using the simplified and user-friendly request tracking interface.
• By using the Track Requests page in Oracle Identity Self Service, you can view or close requests by searching for requests based on request ID, status, request type, requested date, beneficiary, and requester.

Unified Interface for Self Service and Delegated Administration

• Unlike earlier releases, the current release of Oracle Identity Manager provides a unified interface for the end user self-service for self and others, and user delegated-administration flows.
• In this release, delegated-administration functions on users are nothing but requests raised on behalf of other users that are automatically approved based on security configuration.
• Oracle Identity Manager provides an organizational-level scoping mechanism for delegated administration and data security of various entities.
• Every entity is published to a set of organizations and only the users in the published organizations are allowed to receive access.

Business User Friendly Personalization

• Oracle Identity Manager allows users to personalize Oracle Identity Self Service for their respective logins.
• Users can rearrange or hide regions in the Home Page, save and reuse regularly searched items, save sorting preferences, and so on.

User Administration

• By deploying self-service features and delegating administrative functions, an organization can increase user productivity, user satisfaction, and operational efficiency.
  Single Interface for Self Service and System Administration
• Oracle Identity Manager provides a single Web-based interface for performing all types of operations related to self, identity administration, and system administration and configuration.

User Profile Management

• Users can view and edit their own profiles by using Oracle Identity Self Service.
• This reduces administrative overhead and provides users with control over their identity profiles.
• Administrators can view and manage the profiles of other users subject to access permissions by using the user interface for Oracle Identity Manager administration. This allows administrators to create and edit user profiles, change passwords of users, and perform other delegated administration tasks.

Request Management

• Oracle Identity Self Service also enables users to create provisioning requests for resources with fine-grained entitlements, profile management requests, and role membership requests.
• The items to be requested can be selected from a Web-based catalog interface. Business approvers, such as team leaders, line managers, and department heads, can use the same Web-based interface to examine and approve incoming requests. This helps organizations in reducing effort and cost.

Delegated Administration

• Oracle Identity Manager features a highly flexible security framework that supports delegation of most administrative functions to any group or user. By moving administration points as close to the user as possible, an organization can achieve tighter control and better security, increasing productivity at the same time.

Password Management

• Password management is one of the foremost issues in organizations nowadays. Implementing a password management solution reduces cost and overhead related to raising tickets or calling help desks. The password management features of Oracle Identity Manager discussed in this section aim to help organizations in this area.

Self-Service Password Management

• Users can manage their own enterprise passwords, which might then be synchronized with their managed accounts depending on how the managed accounts are individually configured. The enterprise passwords are managed by using the self-service capabilities of Oracle Identity Manager.
• If a user forgets the password, Oracle Identity Manager can present customizable challenge questions to enable self-service identity verification and password reset. Research shows that the bulk of help desk calls are related to password reset and account lockout. By reducing the need for help desk calls, this self-service capability lowers costs.

Advanced Password Policy Management

• Most best practices are supported out of the box and are configurable through an intuitive user interface. Supported password complexity requirements include: password length, alphanumeric and special characters usage, uppercase and lowercase usage, full or partial exclusion of user name, minimum password age, and historical passwords.
• Oracle Identity Manager lets you define complex password policies that control the passwords set by users. In addition, Oracle Identity Manager allows the application of multiple policies for each resource. For instance, users with fewer privileges can be subjected to a more relaxed password policy, whereas privileged administrators can be subjected to a more stringent policy.

Password Synchronization

• Oracle Identity Manager can synchronize or map passwords across managed resources and enforce differences in password policies among these resources.
• In addition, if an organization is using the desktop-based password reset feature of Microsoft Windows, the Active Directory (AD) connector of Oracle Identity Manager can intercept password changes at the AD server and subsequently propagate these changes to other managed resources in accordance with policies. Similar bidirectional password synchronization capability is offered in most Oracle Identity Manager connectors for directory servers and mainframes.

9.User Provisioning

• Provisioning provides outward flow of user information from Oracle Identity Manager to a target system. Provisioning is the process by which an action to create, modify, or delete user information in a resource is started from Oracle Identity Manager and passed into the resource. The provisioning system communicates with the resource and specifies changes to be made to the account.
• Automated user identity and account provisioning: This manages user identities and accounts in multiple systems and applications. For example, when an employee working in the payroll department is created in the human resources system, accounts are also automatically created for this user in the e-mail, telephone, accounting, and payroll reports systems.

Workflow and policy management

• This enables identity provisioning. Administrators can use interfaces provided by provisioning tools to create provisioning processes based on security policies.

Reporting and auditing:

• This enables creating documentation of provisioning processes and their enforcement. This documentation is essential for audit, regulatory, and compliance purposes.

Attestation:

• This enables administrators to confirm users' access rights on a periodic basis.

Access deprovisioning:

• When the access for a user is no longer required or valid in an organization, Oracle Identity Manager revokes access on demand or automatically, as dictated by role or attribute-based access policies. This ensures that a user's access is promptly terminated where is it no longer required.
• This is done to minimize security risks and prevent paying for access to costly resources, such as data services.