Oracle LDAP解决方案 - Oracle Identity and Access Management Suit

最新推荐文章于 2025-03-21 18:04:50 发布

原创最新推荐文章于 2025-03-21 18:04:50 发布 · 256 阅读

CC 4.0 BY-SA版权

本文详细介绍了OracleIdentityandAccessManagement套件的三个核心模块：OracleAccessManagement(OAM)、OracleIdentityManagement(OIM)和OracleInternetDirectory(OID)，并阐述了它们在企业资源访问控制、身份管理和目录服务中的作用。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

分享一下我老师大神的人工智能教程！零基础，通俗易懂！http://blog.youkuaiyun.com/jiangjunshow

也欢迎大家转载本篇文章。分享知识，造福人民，实现我们中华民族伟大复兴！

Oracle Identity and Access Management 套件属于Oracle Fusion Middleware的产品，Oracle Identity and Access Management套件又可以从逻辑上分为三个部分（即Oracle LDAP方案实现的典型三件套）。

Oracle Access Management (OAM) - 单点登陆的实现模块
Oracle Identity Management (OIM) - 身份供应的实现模块
Oracle Internet Directory (OID) - LDAP信息存储的数据库

1) Directory Services - overview including OID.

An online directory is a specialized database that stores and retrieves collections of information about objects. The information can represent any resources that require management, for example:

Employee names, titles, and security credentials
Information about partners
Information about shared resources such as conference rooms and printers.

The information in the directory is available to different clients, such as single sign-on solutions, email clients, and database applications. Clients communicate with a directory server by means of the Lightweight Directory Access Protocol (LDAP). Oracle Internet Directory is an LDAP directory that uses an Oracle Database for storage.

2) Access Management:
A) Access Manager - Controlling User Access to Enterprise resources. It also provides web based Identity Administration & access control to applications & resources. Provides User, password and group management. User access policies can be defined and enforced with high granularity.

B) Identity Federation – Allows companies to operate independently and enable cross domain user provisioning.

C) Single Sign-on - It provides built in integration with customer’s IM and addressing key challenges (for cross domain access) like automatic mapping, identity mapping access control navigation.

D) eSSO - Enterprise SSO is upcoming product which provide true SSO for all application and resource in an enterprise, without modifying existing applications.

如果你登陆Metalink，OTN，或者eDelivery,可以看到Oracle所使用的单点访问（SSO）解决方案也是基于Oracle Access Management

Oracle的单点登录解决方案（Single Sign-On Solution）可见另外一篇文章:http://blog.youkuaiyun.com/pan_tian/article/details/8691726

3) Identity Management:

A) Identity Manager - Allows automated user identity provisioning and deprovisioning. Key features of Identity Manager are password management, workflow & policy management, Identity reconciliation, reporting and Auditing. Identity manager also supports attestation (confirming access rights by user or system manager periodically). This is requirement from SoX compliance.

B) DAS – Delegating Administrative Services provides trusted proxy based administration at User or Administrator level.