MS User and Group Synchronization

Windows 2000 Integration:

Introduction

This section on integrating OID with Microsoft Active Directory is designed to be a quick study which will enable you to quickly create your own proof of concept. You will learn how to integrate the Oracle environment with the Microsoft environment. This includes bi-directional provisioning and synchronization of user and group information between OID and AD as well as how to configure External Authentication which will allow your Oracle Identity Management user and applications to authenticate using their identities in AD.

However, when you are ready to start planning your production environment, it is highly recommended that you read chapter 43 of the OID Administrators guide. The administrators guide contains more in-depth information including many important configuration decision that are not covered in this hands-on training collateral.

Intended Audience

This hands-on exercise is intended for OID administrators who need to integrate Microsoft Windows 2000 users with the Oracle 10g Application Server.

It is highly recommended that you complete a basic OID administrators training course prior to attempting any of these lessons.

Subjects covered in this lesson:

IMPORT

Configuring the ActiveChgImp Agent

Testing the ActiveChgImp Agent

Configuring the External Authentication Plug-in (Optional)

SSL Configuration (Required for Password Synchronization)

Configuring the OID server Configset for SSL

Creating a Wallet for the OID server

Configuring the DIP server for SSL

Configuring Reversible Passwords for AD Export

EXPORT

Configuring the ActiveExport Agent

Configuring DAS to Provision AD User and Testing the Export Profile