首页 > 数据库技术 > 详细

LDAP解决方案 - Oracle Identity and Access Management

时间:2014-03-10 21:34:45      阅读:655      评论:0      收藏:0      [点我收藏+]

Oracle Identity and Access Management 
Oracle Identity and Access Management 属于Oracle Fusion Middleware的产品,Oracle Identity and Access Management又可以从逻辑上分为三个部分(即Oracle LDAP方案实现的典型三件套)。
  • Oracle Access Management (OAM)  - 单点登陆的实现模块
  • Oracle Identity Management (OIM) - 身份供应的实现模块
  • Oracle Internet Directory (OID) - LDAP信息存储的数据库
bubuko.com,布布扣
1) Directory Services - overview including OID.
An online directory is a specialized database that stores and retrieves collections of information about objects. The information can represent any resources that require management, for example:
  •     Employee names, titles, and security credentials
  •     Information about partners
  •     Information about shared resources such as conference rooms and printers.
The information in the directory is available to different clients, such as single sign-on solutions, email clients, and database applications. Clients communicate with a directory server by means of the Lightweight Directory Access Protocol (LDAP). Oracle Internet Directory is an LDAP directory that uses an Oracle Database for storage.

2) Access Management:
A) Access Manager
 - Controlling User Access to Enterprise resources. It also provides web based Identity Administration & access control to applications & resources. Provides User, password and group management. User access policies can be defined and enforced with high granularity.

B) Identity Federation – Allows companies to operate independently and enable cross domain user provisioning.

C) Single Sign-on - It provides built in integration with customer’s IM and addressing key challenges (for cross domain access) like automatic mapping, identity mapping access control navigation.

D) eSSO - Enterprise SSO is upcoming product which provide true SSO for all application and resource in an enterprise, without modifying existing applications.

bubuko.com,布布扣

如果你登陆MetalinkOTN,或者eDelivery,可以看到Oracle所使用的单点访问(SSO)解决方案也是基于Oracle Access Management

bubuko.com,布布扣


3) Identity Management:

A) Identity Manager - Allows automated user identity provisioning and deprovisioning. Key features of Identity Manager are password management, workflow & policy management, Identity reconciliation, reporting and Auditing. Identity manager also supports attestation (confirming access rights by user or system manager periodically). This is requirement from SoX compliance.

B) DAS – Delegating Administrative Services provides trusted proxy based administration at User or Administrator level.

bubuko.com,布布扣

参考:


LDAP解决方案 - Oracle Identity and Access Management,布布扣,bubuko.com

LDAP解决方案 - Oracle Identity and Access Management

原文:http://blog.csdn.net/pan_tian/article/details/20927733

(0)
(0)
   
举报
评论 一句话评论(0
关于我们 - 联系我们 - 留言反馈 - 联系我们:wmxa8@hotmail.com
© 2014 bubuko.com 版权所有
打开技术之扣,分享程序人生!