Chat now with support
Chat with Support

Quest has tools and processes in place to identify, protect, detect, and remediate vulnerabilities and incidents when they occur, including external security partners. As part of our standard security operations, Quest does not use CrowdStrike in any of our operations. We are reviewing our third parties, and so far, there is minimal affect. It is Quest's policy not to provide further technical details unless they directly impact customer data.

Identity Manager 9.2 - Administration Guide for Connecting to Oracle E-Business Suite

Mapping an Oracle E-Business Suite in One Identity Manager Synchronizing Oracle E-Business Suite
Setting up initial synchronization of Oracle E-Business Suite Customizing the synchronization configuration Running synchronization Tasks following synchronization Troubleshooting Ignoring data error in synchronization Pausing handling of target system specific processes (Offline mode)
Managing E-Business Suite user accounts and persons Login credentials Managing entitlement assignments Mapping E-Business Suite objects in One Identity Manager Handling of E-Business Suite objects in the Web Portal Basic configuration data Configuration parameters for managing Oracle E-Business Suite Permissions required for synchronizing with Oracle E-Business Suite Default project templates for synchronizing an Oracle E-Business Suite Editing system objects Example of a schema extension file

Updating schemas

All the schema data (schema types and schema properties) of the target system schema and the One Identity Manager schema are available when you are editing a synchronization project. Only a part of this data is really needed for configuring synchronization. If a synchronization project is finished, the schema is compressed to remove unnecessary data from the synchronization project. This can speed up the loading of the synchronization project. Deleted schema data can be added to the synchronization configuration again at a later point.

If the target system schema or the One Identity Manager schema has changed, these changes must also be added to the synchronization configuration. Then the changes can be added to the schema property mapping.

To include schema data that have been deleted through compression and schema modifications in the synchronization project, update each schema in the synchronization project. This may be necessary if:

  • A schema was changed by:

    • Changes to a target system schema

    • Customizations to the One Identity Manager schema

    • A One Identity Manager update migration

  • A schema in the synchronization project was shrunk by:

    • Enabling the synchronization project

    • Saving the synchronization project for the first time

    • Compressing a schema

To update a system connection schema

  1. In the Synchronization Editor, open the synchronization project.

  2. Select the Configuration > Target system category.

    - OR -

    Select the Configuration > One Identity Manager connection category.

  3. Select the General view and click Update schema.

  4. Confirm the security prompt with Yes.

    This reloads the schema data.

To edit a mapping

  1. In the Synchronization Editor, open the synchronization project.

  2. Select the Mappings category.

  3. Select a mapping in the navigation view.

    Opens the Mapping Editor. For more information about mappings, see the One Identity Manager Target System Synchronization Reference Guide.

NOTE: The synchronization is deactivated if the schema of an activated synchronization project is updated. Reactivate the synchronization project to synchronize.

Configuring department synchronization

To synchronize departments and department memberships, data from the schema types HROrganization and HRPersonInOrganization is loaded. You must filter required objects to synchronize this data, otherwise performance may be seriously affected if all departments are being synchronized.

If you use default mapping for these schema types, you can select the required departments from the organization hierarchy. To do this, edit the synchronization project's scope and create the hierarchy filter.

Departments can also be differentiated from other organization by their type. Since you can customize these types in Oracle E-Business Suite, departments are not filtered by type in the default maps. To filter departments by type, define your own schema classes.

If you use custom mapping for synchronizing departments, define the filter beforehand in the schema class. In addition, you can use hierarchy filters to limit further the number of synchronization objects.

Related topics

Speeding up synchronization with revision filtering

When you start synchronization, all synchronization objects are loaded. Some of these objects have not be modified since the last synchronization and, therefore, must not be processed. Synchronization is accelerated by only loading those object pairs that have changed since the last synchronization. One Identity Manager uses revision filtering to accelerate synchronization.

Oracle E-Business Suite supports revision filtering. The E-Business Suite objects' date of last change is used as a revision counter. Each synchronization saves the last date is was run as a revision in the One Identity Manager database (DPRRevisionStore table, Value column). This value is used as a comparison for revision filtering when the same workflow is synchronized the next time. When this workflow is synchronized the next time, the E-Business Suite objects' change date is compared with the revision saved in the One Identity Manager database. Only those objects that have been changed since this date are loaded from the target system.

Optimized revision filtering is supported because objects are not deleted in the target system by synchronization and Oracle E-Business Suite makes it possible to find out about the last change to a schema type. If the objects of a schema type were neither added nor changed, the synchronization step can be skipped. Objects must not be loaded for comparison. The Oracle E-Business Suite connector provides all the relevant information.

To use optimized revision filtering

  • In the Designer, set the Common | TableRevision configuration parameter.

    Now each time a table changes, the table's revision date updates. This information is stored in the QBMTableRevision table, RevisionDate column. In this way, One Identity Manager identifies whether a table object has been added, changed, or deleted.

Synchronization with revision filtering compares a table's revision date and the schema type's change information against the revision saved in the One Identity Manager database. If the revision date is older, no objects have been changed in this table since the previous synchronization. If the change information of the schema type is also older, no objects in this schema type have been changed since the previous synchronization. Therefore, synchronization does not carry out this step for the affected table. If the revision date or change information is newer, synchronization does carry out this step and the changed objects are determined as described above.

The revision is found at start of synchronization. Objects modified by synchronization are loaded and checked by the next synchronization. This means that the second synchronization after initial synchronization is not significantly faster.

Revision filtering can be applied to workflows and start up configuration.

To permit revision filtering on a workflow

  • In the Synchronization Editor, open the synchronization project.

  • Edit the workflow properties. Select the Use revision filter item from Revision filtering menu.

To permit revision filtering for a start up configuration

  • In the Synchronization Editor, open the synchronization project.

  • Edit the start up configuration properties. Select the Use revision filter item from the Revision filtering menu.

NOTE: If the Common | TableRevision is not set, all revision data in the QBMTableRevision table is deleted.

For more information about revision filtering, see the One Identity Manager Target System Synchronization Reference Guide.

Using specific statements for database initialization

You can make various additional settings on the target system connection, if required due to the configuration of the target system. For example, the default language and time formatting can be overwritten by an SQL statement that is run every time a connection is established.

To use additional statements for database initialization:

  1. In the Synchronization Editor, open the synchronization project.

  2. Enable expert mode.

  3. Edit the target system connection.

    1. Select the Configuration > Target system category.

    2. Click Edit connection.

      This starts the system connection wizard.

    3. Select Database connection startup sequence page and enter the SQL statements to be run every time a connection is established.

      NOTE: Only single instructions are supported. In a multi-line statement, each line is processed individually.

      Example of a multi-line statement

      alter session set nls_date_format = 'DD-MON-YYYY HH24:MI:SS'
      alter session set nls_language = 'AMERICAN'
    4. Click Test.

    5. End the system connection wizard.

      This updates the connection parameters.

  4. Save the changes.

If you are running Synchronization Editor in expert mode, SQL statements can be entered when a synchronization project is set up.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating