Oracle Identity Management

Oracle Identity Management (OIM) is a software suite from Oracle providing identity and access management (IAM) technologies.

The name of the software suite is very similar to the name of one of its components, Oracle Identity Manager (OIM).

Components

Product	Software Stack	Description	Original name	Notes
Oracle Internet Directory (OID)	OIM	An LDAP directory server which stores its data in an Oracle database.		Following its acquisition of Sun Microsystems, Oracle Corporation maintains both Oracle Internet Directory and the Sun LDAP (renamed to Oracle Directory Server Enterprise Edition) as strategic LDAP products.
Directory Integration Platform (DIP)	OIM/OID	A directory synchronization and provisioning framework included in OID. Supports synchronization of data between heterogenous systems, include multiple vendor LDAPs, databases, flat files and Oracle eBusiness Suite HRMS.
Oracle Authentication Services for Operating Systems (OASOS)	OIM/OID	A product which configures Linux/Unix systems to authenticate against OID via PAM/NSS, etc.
Oracle Directory Server Enterprise Edition	OIM	An LDAP directory server.	Sun LDAP	With the Sun acquisition, both Oracle Internet Directory and the Sun LDAP (renamed to Oracle Directory Server Enterprise Edition) are maintained as strategic LDAPs.
Oracle Virtual Directory (OVD)	OIM	A directory virtualization solution.	OctetString VDE
Oracle Access Manager (OAM)	OIM	Oracle's strategic solution for access management.	Oblix CoreID	The 10g version was written in C; in the 11g version, the server itself has been rewriten in Java, although some of the integration components (web gates) are still written in C.
Oracle OpenSSO, and also OpenAM	OIM	Access management.	Sun OpenSSO	Oracle Access Manager (OAM) is the strategic product, but OpenSSO provides some facilities that OAM/OIF does not offer yet, in particular, Secure Token Service (STS). OpenSSO is developed and supported by ForgeRock under the name of OpenAM.
Oracle Single Sign-On (OSSO)	OIM	Oracle's legacy single sign-on (SSO) solution.		As of 11g, the server component of SSO has been discontinued, but the Apache module (mod_osso) is still provided, with OAM 11g able to interoperate with mod_osso. OSSO is focused on integrating with Oracle products, and has more limited support for integrating with products from third-party vendors than OAM.
Oracle Identity Federation (OIF)	OIM	An identity federation solution, supporting SAML and Liberty protocols.		Formerly an Oblix product.
Oracle Adaptive Access Manager (OAAM)	OIM	Provides fraud detection and countermeasures including strong authentication.		From the Bharosa acquisition.
Oracle Role Manager (ORM)	N/A	Provides role management. (product discontinued)		From the Bridgestream acquisition. Discontinued in favor of Oracle Identity Analytics (OIA) post-Sun acquisition.
Oracle Identity Analytics (OIA)	OIM	Provides role management.	Sun Java System Role Manager	Replaces the former Oracle Role Manager (ORM) component.
Oracle Identity Manager (OIM)	OIM	Provides provisioning, reconciliation, request-based provisioning, self-service, and integration with heterogenous identity systems through connectors (LDAP, operating systems, mainframe/midrange, ERP packages, email/collaboration suites, databases, etc.).		From the Thor Technologies (Thortech) acquisition (2005).[1] The name of this component closely resembles the name of the software suite as a whole.
Oracle Waveset	OIM	Similar features as Oracle Identity Manager (OIM).	Sun Identity Manager	Oracle Corporation continues to maintain this product, but with Oracle Identity Manager as the strategic product. Sun Identity Manager was renamed to Oracle Waveset to avoid confusion, which is actually a reversion to the original name from before Sun acquired Waveset Technologies. Waveset also incorporates connectors and adapters for interfacing to heterogenous systems, similar in principle to those included in Oracle Identity Manager.
Oracle Certificate Authority (OCA)	N/A	An X.509 certificate authority. (product discontinued)		This component has been discontinued in the 11g release with no replacement.
Oracle Enterprise Single Sign-On (eSSO)	OIM	This provides desktop-based single sign-on (SSO), including support for retrofiting single sign-on into legacy fat client applications via automated login form fill-in, and doing the same for web and 3270-based applications.		This was originally OEM-ed from Passlogix, although Passlogix is now being acquired by Oracle.
Oracle Entitlements Server (OES)	OIM	Provides centralized management of security policies, expressible in XACML. Disparate applications can use OES to provide a common framework for managing access control policies.		Originally a BEA Systems product.
Oracle Security Developer Tools (OSDT)	OIM	A library providing implementations of encryption algorithms, XML security, etc., for use by application programmers.
OpenDS	N/A	A directory service. (no longer a product)		This is free, open source software written in Java, originally from Sun. This is no longer offered as a product, but continues as an open-source project.
Oracle Applications Access Control Governor (OAACG)	Applications	Provides segregation of duties (SOD) functionalities for Oracle eBusiness Suite and Peoplesoft. The relevant OIM connectors will call out to OAACG to ensure the SOD policies are enforced via the SIL (SOD Invocation Library). SIL also supports interfacing with SAP Virsa to perform SOD for SAP systems, and is extensible to integrate OIM with arbitrary SOD frameworks.
Oracle Web Services Manager (OWSM)	SOA Suite	Provides web-services security, including the WS-Security protocol.		This is part of the Oracle SOA Suite rather than the Identity Management stack, but overlaps with a number of areas of identity management.
Oracle Information Rights Management (Oracle IRM)	Content Management	Provides for the securing and tracking of sensitive digital information wherever it is stored and used.		This is part of the Oracle Content Management suite (from the Stellent acquisition) rather than the Identity Management stack, but overlaps with a number of areas of identity management.

Other information

Originally, in the 10g and earlier versions, the Java-based poritions of the suite ran mainly on OC4J, although some components (e.g. OIM) supported other J2EE appservers. In the 11g version, the OC4J-based components were ported to WebLogic.

As of November 2008, the software is undergoing Common Criteria evaluation process.^[2]

References

1. ^ McAllister, Neil (2005-11-28). "CA, Oracle Renew Identity Suites". InfoWorld Vol. 27, No. 48 (InfoWorld Media Group, Inc): p. 11. ISSN 0199-6649. http://books.google.com/books?id=xzcEAAAAMBAJ. Retrieved 2011-10-12. "Oracle [...] acquired two new identity-related companies [...]. With the purchase of Thor Technologies, Oracle gains strong cross-platform user provisioning capabilities." 
2. ^ "Oracle Identity Management products earn Common Criteria Security Evaluation". net-security.org. 2008-11-26. http://www.net-security.org/secworld.php?id=6778. Retrieved 9 December 2008. 

See also

• Oracle Fusion Middleware

External links

• Oracle Identity Management