Oracle Identity Management Components 11g Suite

Oracle Identity Management Components

Oracle Identity Management 11g includes the following components.

Oracle Identity Manager

Oracle Identity Manager (OIM) typically answers the question "Who has access to What,

When, How, and Why?". OIM is designed to administer both intranet and extranet user access

privileges across a company's resources throughout the entire identity management life cycle,

from initial on-boarding to final de-provisioning of an identity. In extranet environments,

OIM’s superior scalability allows enterprises to support millions of customers accessing a

company’s resources using traditional clients (e.g., browsers) or smart phones.

Oracle Identity Analytics

Oracle Identity Analytics (OIA) brings a new dimension to Oracle Identity Management in the

area of identity and access governance. OIA helps you address regulatory mandates, automate

processes, and quickly make compliance a repeatable and sustainable part of business. OIA

provides a comprehensive solution for access certification (correlating identity and access data

across the enterprise), enterprise-level segregation of duties (SoD) enforcement, and an

identity warehouse designed to consolidate identities, resources, and entitlement information.

Oracle Access Manager

Oracle Access Manager (OAM) provides centralized, policy-driven services for

authentication, single sign-on (SSO), and identity assertion. OAM integrates with a broad

array of authentication mechanisms, third-party web servers and application servers, and

standards-based federated SSO solutions to ensure maximum flexibility and a well-integrated,

comprehensive web access control solution. OAM complements its own coarse-grained

authorization and attribute assertion capabilities by integrating with Oracle Entitlements

Server to provide fine-grained authorization to applications, portals, databases, and web

services.

Oracle Web Services Manager

Oracle Web Services Manager (OWSM) is to web services what Oracle Access Manager is to

web applications. OWSM is designed to protect access to multiple types of resources

including standards-compliant web services (Java EE, Microsoft .NET, PL/SQL, etc.);

service-oriented architecture (SOA) composites including Business Process Execution

Language (BPEL) and enterprise service bus (ESB) processes; and Oracle WebCenter’s

remote portlets. OWSM is delivered as part of Oracle SOA.

Oracle Identity Federation

Oracle Identity Federation (OIF) is a self-contained solution enabling browser-based, crossdomain single sign-on using industry standards (SAML, Liberty ID-FF, WS-Federation,

Microsoft Windows CardSpace). In addition, with a Fedlet packaged as a Web Archive

(WAR), a service provider can immediately federate with an identity provider without

requiring a full-blown federation solution in place.

Security Token Service

Oracle’s Security Token Service (STS) establishes a trust relationship between online partners

through web services. STS provides both standard (e.g., SAML, Kerberos) and proprietary

(e.g., PeopleSoft, Siebel) security token issuance, validation, and exchange. STS is part of

Identity and Access Management Suite Plus and Access Management Suite Plus.

Oracle Enterprise Single Sign-On

Oracle Enterprise Single Sign-On (eSSO) is a Microsoft Windows desktop-based suite of

products providing unified authentication and single sign-on to both thick- and thin-client

applications with no modification required to existing applications. Using Oracle eSSO,

enterprise users benefit from single sign-on to all of their applications, whether users are

connected to the corporate network, traveling away from the office, roaming between

computers, or working at a shared workstation.

Oracle Entitlements Server

Oracle Entitlements Server (OES) is a fine-grained authorization engine that externalizes,

unifies, and simplifies the management of complex entitlement policies. OES secures access

to application resources and software components (such as URLs, Enterprise JavaBeans, and

Java Server Pages) as well as arbitrary business objects (such as customer accounts or patient

records in a database). OES provides a centralized administration point for complex

entitlement policies across a diverse range of business and IT systems.

Oracle Adaptive Access Manager

Oracle Adaptive Access Manager (OAAM) provides resource protection through real-time

fraud prevention, software-based multifactor authentication, and unique authentication

strengthening. OAAM consists of two primary components that together create one of the

most powerful and flexible weapons in the war against fraud. Adaptive Strong Authenticator

provides multifactor authentication and protection mechanisms for sensitive information such

as passwords, tokens, account numbers, and other credentials. Adaptive Risk Manager

provides real-time and offline risk analysis, and proactive actions to prevent fraud at critical

log-in and transaction checkpoints.

Oracle Directory Services

Oracle Directory Server Enterprise Edition (ODSEE) offers best-of-breed Lightweight

Directory Access Protocol (LDAP)-based services recommended for heterogeneous

applications and multi-vendor environments. ODSEE is the industry-leading carrier-grade

directory solution.

Oracle Internet Directory (OID) provides Oracle Fusion Middleware components, Oracle

Fusion applications and in-house enterprise applications with a highly-scalable LDAP-based

mechanism for storing and accessing identity data such as user credentials (for

authentication), access privileges (for authorization), and profile information.

Oracle Virtual Directory (OVD) is designed to provide real-time identity aggregation and

transformation without data copying or data synchronization. OVD hides the complexity of

underlying data infrastructures by providing industry-standard LDAP and XML views of

existing enterprise identity information, without moving data from its native location.

Oracle Platform Security Services

Oracle Platform Security Services (OPSS) provides enterprise product development teams,

systems integrators, and independent software vendors with a standards-based, portable,

integrated, enterprise-grade security framework for Java Platform, Standard Edition (Java SE)

and Java Platform, Enterprise Edition (Java EE) applications. OPSS insulates developers from

the intricacies of tasks not directly related to application development by providing an

abstraction layer in the form of standards-based application programming interfaces. OPSS is

the security foundation for Oracle Fusion Middleware: all Oracle Fusion Middleware 11g

components and Oracle Fusion applications “consume” the OPSS framework’s services.