tag:blogger.com,1999:blog-1816408742331555186.post8948212794544298670..comments2023-05-22T03:03:54.478-07:00Comments on Oracle Fusion Middleware Security: Important Topic: WebLogic Domain Models for installing the Oracle Identity Management SuiteChris Johnson (Oracle)http://www.blogger.com/profile/13331466366556759355noreply@blogger.comBlogger11125tag:blogger.com,1999:blog-1816408742331555186.post-52305654127652467612011-05-27T08:17:26.806-07:002011-05-27T08:17:26.806-07:00Moin,
I feel your pain. One thing I worry about ...Moin,<br /><br />I feel your pain. One thing I worry about is whether or not SOA 11.1.1.4 uninstalled cleanly or if there are still some 11.1.1.4 libraries floating around your FMW home that could be incompatible with IAM 11.1.1.3.<br /><br />That being said, on the topic of OAM and OIM in separate domains, the documentation says they need to be in the same domain. <br /><br />However, I have heard that this is due to the fact that the step-by-step instructions rely on the domain agent to protect the self service pages of OIM and that if you are using a real webgate/agent to protect the OIM self service pages that OIM and OAM can then be in separate domains.<br /><br />Keep in mind though that I have not tried this myself and the official support for OIM/OAM integration with them in separate domains is ambiguous.<br /><br />Another option might be to try and push through and resolve your OIM/schema problems.Brian Eidelmanhttps://www.blogger.com/profile/00527044305949442012noreply@blogger.comtag:blogger.com,1999:blog-1816408742331555186.post-83315472762564318182011-05-23T12:45:59.675-07:002011-05-23T12:45:59.675-07:00Hi Brian, thanks for this informative blog.
I'...Hi Brian, thanks for this informative blog.<br />I'm facing an issue related to upgrade and downgrade of SOA 11g. <br />I'd installed IAM package 11.1.1.3.0. Had configured OAM. Later in the same middleware home, thought of configuring OIM. With OIM, I needed SOA. Hence installed SOA 11.1.1.4.0, created schema using RCU 11.1.1.4.0. Now the issue I faced here was SOA 11.1.1.4.0 is not compatible with OIM 11.1.1.3.0(which I came to know later), hence had to uninstall SOA and install SOA 11.1.1.3.0 and create schema using RCU 11.1.1.3.3. Now while configuring domain for OIM, am facing JDBC connection issue for OWSM MDS schema. Connection is established but no rows are retrieved. <br />If I want to reinstall OIM, I cannot do it in the same middleware home, because that would override the OAM configuration. So can I create new middleware home for OIM alone and can OAM and OIM in different domains be integrated if required??<br /><br />Thanks,<br />MoinMohin Chilwanhttps://www.blogger.com/profile/01366688040202590225noreply@blogger.comtag:blogger.com,1999:blog-1816408742331555186.post-15477521796251791782011-05-23T06:02:08.986-07:002011-05-23T06:02:08.986-07:00Yes, it is possible. In fact, installing SOA is a...Yes, it is possible. In fact, installing SOA is a pre-requisite for OIM 11g today and they do have to be in the same domain. <br /><br />That being said, they also have to be at the same release level (ie 11.1.1.3).<br /><br />I also recommend that if you are using SOA suite on its own, seperate from OIM, that you install a seperate instance of SOA suite on a seperate domain for the seperate usage.Brian Eidelmanhttps://www.blogger.com/profile/00527044305949442012noreply@blogger.comtag:blogger.com,1999:blog-1816408742331555186.post-16383724845830734212011-05-18T17:09:20.434-07:002011-05-18T17:09:20.434-07:00Hi Brian,
Already I have a SOA 11g installed and ...Hi Brian,<br /><br />Already I have a SOA 11g installed and working for other things. Is it possible to use that SOA for OIM 11g that I am going to install now?? I read that both things have to be in same domain. But is this scenario possible??<br /><br />Thanks & Regards,<br /><br />vasuVasu Kurukundahttps://www.blogger.com/profile/10056622436080422327noreply@blogger.comtag:blogger.com,1999:blog-1816408742331555186.post-38184891242674528562011-03-02T12:40:43.417-08:002011-03-02T12:40:43.417-08:00Yes, you should be able to install BI publisher in...Yes, you should be able to install BI publisher in a separate environment. <br /><br />As for the renaming, maybe I'm being overly cautious. If it seems to work in your sandbox and you've tested it extensively then maybe it is OK.Brian Eidelmanhttps://www.blogger.com/profile/00527044305949442012noreply@blogger.comtag:blogger.com,1999:blog-1816408742331555186.post-43655125826435292011-02-23T08:25:22.682-08:002011-02-23T08:25:22.682-08:00Thanks for the feedback Brian, Let me clarify the ...Thanks for the feedback Brian, Let me clarify the BI Publisher question a bit. Can I install it on a separate server (virtual environment, in our case)? In the future, once I clear up the licensing issues, I want to use it for more than IDM. I don't think I want to put it in the same environment as IDM. I want to isolate them from each other. Would that make sense? <br /><br />Bummer about the renaming... I've done it in my sandbox environment... fortunately I haven't gone any further :-)<br /><br />I'm getting the hang of this... slowly but surely.. Thanks again!Anonymoushttps://www.blogger.com/profile/17658714277909985103noreply@blogger.comtag:blogger.com,1999:blog-1816408742331555186.post-32414362931015794312011-02-23T07:39:00.405-08:002011-02-23T07:39:00.405-08:00Richard,
The SOA Suite used by OIM must be instal...Richard,<br /><br />The SOA Suite used by OIM must be installed in the same domain as OIM. That being said, I recommend that people use another installation of SOA Suite for non-OIM purposes. <br /><br />I'm not sure about BI Publisher but I think the same advice would follow. Also, I'm not in sales but if you decide to use the BIPub that comes with OIM for other purposes be sure you have licenses that allow you to use it for other purposes.<br /><br />Finally, I'd be reluctant to rename the install directory (though I do agree with the naming conventions you want to change to). I'd be pretty worried about the original location being written to all sorts of various files. I'd say wait until next time to go with your new names.<br /><br />Good luck,<br /><br />BrianBrian Eidelmanhttps://www.blogger.com/profile/00527044305949442012noreply@blogger.comtag:blogger.com,1999:blog-1816408742331555186.post-815703908161004652011-02-16T15:05:38.821-08:002011-02-16T15:05:38.821-08:00Thanks for the post Brian, very informative! I'...Thanks for the post Brian, very informative! I'm a newbie to IDM - career DBA - and I'm curious about "BP" for installation. Would you separate the SOA and BI Publisher as well? Would you recommend only using the the SOA and BIPub products for IDM or could I point my existing apps at BIPub and take advantage of the capabilities rather than having another install base out there? Also, would you recommend renaming the installation homes? I'm playing with renaming my OIM "app server" install directory to Oracle_OIM1 instead of the typical Oracle_IDM1, rename OID from Oracle_IDM1 to Oracle_OID1, etc. Thanks again and I appreciate your feedback!!Anonymoushttps://www.blogger.com/profile/17658714277909985103noreply@blogger.comtag:blogger.com,1999:blog-1816408742331555186.post-15096461414634821412011-01-15T23:24:25.951-08:002011-01-15T23:24:25.951-08:00Great post.
In Production systems, it would be g...Great post. <br /><br />In Production systems, it would be great if we split these components deploying them in seperate servers based on IDM and IAM Stack. It is easier to investigate if any problems occur in this way.Vijay Chinnasamyhttps://www.blogger.com/profile/09026527935936993914noreply@blogger.comtag:blogger.com,1999:blog-1816408742331555186.post-3305992563110448032011-01-12T15:42:34.070-08:002011-01-12T15:42:34.070-08:00Eric,
Yes, I mean splitting the IAM stack (OAM/OI...Eric,<br /><br />Yes, I mean splitting the IAM stack (OAM/OIM/OAAM) from the IDM stack (OID/OVD). <br /><br />Now, splitting up the individual products within a package into seperate domains is sometimes a good idea as well. For instance, people often install OIF into a different domain from OID and OVD. This is often done because OIF is seen as an "external" facing application where as OID and OVD are often seen as purely "internal". <br /><br />The one thing to watch out for when splitting up the products in one package is that some of the interoperabilities between these products depend on them being in the same domain. The integration between OAM and OIM is one example.<br /><br />Good question, I should probably write a follow-up post.Brian Eidelmanhttps://www.blogger.com/profile/00527044305949442012noreply@blogger.comtag:blogger.com,1999:blog-1816408742331555186.post-34955759638141844102011-01-12T14:46:03.048-08:002011-01-12T14:46:03.048-08:00Brian,
By package do you mean splitting the IAM s...Brian,<br /><br />By package do you mean splitting the IAM stack (OAM/OIM/OAAM) from the IDM stack (OID/OVD) or each individual product in its own Domain?<br /><br />EricEric Fisherhttps://www.blogger.com/profile/03792647777541032296noreply@blogger.com