Configuring a Domain for Oracle Identity Governance 12c

Before You Begin

This tutorial shows you how to configure a domain for Oracle Identity Governance 12c.This tutorial takes approximately 15 minutes to complete.

This tutorial is part of the series Getting Started with Oracle Identity Governance 12c. Read them sequentially.

Background

After schemas are loaded into the Oracle Database, an Oracle Identity Governance 12c domain needs to be created.

What Do You Need?

Two environments with:

At least 16 GB of physical memory
Oracle Enterprise Linux 6.6 or later with access to the Internet
A running Oracle Java Development Kit (JDK) 1.8 with the JAVA_HOME set to /u01/app/oracle/product/middleware/jdk
Oracle Identity and Access Management 12c software installed
Super-user (root) and oracle credentials

A running Oracle Database 12.1.0.2 or later on one of the environments.
A basic understanding of Linux

Configure the Oracle Identity Governance 12c Domain

In this section you will configure an Oracle Identity Governance 12c Domain on one of the nodes in a dual node configuration. Later you will replicate this domain onto the second node.

Note: Perform the following steps in Node 1(host01.example.com):

Launch a terminal window as oracle and enter the following command:

$ cd /u01/app/oracle/product/middleware/iam_home/oracle_common/common/bin
$ ./config.sh

Follow the table below to guide you through the configuration screens:

Step	Window Description	Choices or Values
1	Create Domain	Select Create a new domain Domain Location: `/u01/app/oracle/product/middleware/iam_home/user_projects/domains/base_domain`
2	Templates	Create Domain Using Product Template Select Oracle Identity Manager - 12.2.1.3.0[idm]
3	High Availability Options	Select the following options: Default Persistent Store JMS File Store
4	Application Location	Click Next
5	Administrator Account	Password: `Welcome1` Confirm Password: `Welcome1`
6	Domain Mode and JDK	Production
7	Database Configuration Type	Host Name: `host01.example.com` DBMS/Service: `orcl.example.com` Schema Password: `Welcome1` Click Get RCU Configuration If successful, then click Next
8	Component Datasources	Select the checkbox on the right-side of Component Schema Click Next
9	JDBC Test	Click Next
10	Credentials	keystore Username: `keystore` Password: `Welcome1` OIMSchemaPassword Username: `DEV_OIM` Password: `Welcome1` sysadmin Username: `xelsysadm` Password: `Welcome1` WeblogicAdminKey Username: `weblogic` Password: `Welcome1`
11	Keystore	Click Next
12	Advanced Configuration	Administration Server Node Manager Topology Domain Frontend Host Capture Deployments and Services
13	Administration Server	Listen Address: `All Local Addresses`
14	Node Manager	User Name: `weblogic` Password: `Welcome1` Confirm Password: `Welcome1`
15	Managed Servers	Server Name: oim_server1 Listener Address: `host01.example.com` Server Name: soa_server1 Listener Address: `host01.example.com` Select oim_server1 and click Clone. Server Name: `oim_server2` Listener Address: `host02.example.com` Listener Port: Set same as oim_server1 Select soa_server1 and click Clone. Server Name: `soa_server2` Listener Address: `host02.example.com` Listener Port: Set same as soa_server1
16	Clusters	Click Add Cluster Name: `oim_cluster1` Cluster Address: `host01.example.com`, `host02.example.com` Click Add Cluster Name: `soa_cluster1` Cluster Address: `host01.example.com`, `host02.example.com`
17	Server Templates	Click Next
18	Dynamic Servers	Click Next
19	Assign Servers to Clusters	Add oim_server1 and oim_server2 to oim_cluster1 Add soa_server1 and soa_server2 to soa_cluster1
20	Coherence Clusters	Click Next
21	Machines	Go to Machine tab Click Add Name: `Machine_1` Node Manager Listen Address: `host01.example.com` Click Add Name: `Machine_2` Node Manager Listen Address: `host02.example.com`
22	Assign Servers to Machines	Add AdminServer, oim_server1, and soa_server1 to Machine_1 Add oim_server2 and soa_server2 to Machine_2
23	Virtual Targets	Click Next
24	Partitons	Click Next
25	Domain Frontend Host	Plain: `http://host01.example.com:7777`
26	Deployments Targeting	Check and click Next
27	Services Targeting	Check and click Next
28	File Stores	Click Next
29	Configuration Summary	Click Create
30	Configuration Progress	If successful, then click Next
31	End of Configuration	Click Finish

Start the Servers

Launch a terminal window as oracle and enter the following commands to run the offline configuration:
```
$ cd $OIM_HOME/server/bin
$ chmod u+x offlineConfigManager.sh
$ ./offlineConfigManager.sh
```
Enter the following commands to start the Admin Server:
```
$ cd $DOMAIN_HOME/bin
$ ./startWebLogic.sh
```
If prompted during the startup enter the WebLogic administrator credentials (weblogic/Welcome1). Wait until the terminal displays the message Server started in RUNNING mode. Minimize the window.
Open a browser and access the Oracle WebLogic Server Administration console 12c at http://host01.example.com:7001/console.
Login with username and password weblogic/Welcome1.
In Domain Structure menu, select Environment > Cluster to open the Summary of Clusters page. Check if the clusters are created.
In Domain Structure menu, select Environment > Servers to open the Summary of Servers page. Check if the servers are created with correct Listen Port and Machine values.
In Domain Structure menu, select Security Realms to open the Summary of Security Realms. Click the myrealm link to open the Settings for myrealm page. Open Providers tab, check if OIMAuthenticationProvider is created.
In another terminal window start Node Manager by running the following command:
```
$ cd $DOMAIN_HOME/bin
$ ./startNodeManager.sh
```
In the Oracle WebLogic Server Adminstration console 12c, select Domain Structure menu, Environment > Servers to open the Summary of Servers page.
Open Control tab, select soa_server1. Click Start. When prompted to start the server, click Yes. When the soa_server1 is up, the State changes to RUNNING.
Select oim_server1, and click Start. When prompted to start the server, click Yes. When the oim_server1 is up, the State changes to RUNNING.

Test the Installation

Start a browser and access the Oracle Identity Self Service at http://host01.example.com:14000/identity. Login as xelsysadm/Welcome1. You can set the challenge questions and answers if prompted.

Next Tutorial

Setting Up a Dual Node Oracle Identity Governance Cluster