Oracle Connector
Introduction
Description
Oracle Connector could manage an Oracle database.
Managed System
This connector is specific for integration with an Oracle database, if you want to connect a generic SQL database, please visit the following page: SQL Connector.
For more information to check if your system may be synchronized with this connector you do not hesitate to contact us through our Contact form
Prerequisites
It is needed a user with sysdba access and permissions.
User management
Criteria:
- Any user or account created will be granted the CREATE SESSION privilege.
- Default tablespace for each user will be the USERS tablespace. It won't be changed for existing users.
- Soffid passwords expiration date will be managed by Soffid. So, Oracle won't be notified about when those passwords need to be expired.
- Roles and groups are automatically created when a user belonging to it is updated.
Exceptions:
- Error SQL: ….There was an error executing an SQL statement.
- Contact with the administrator of the database. It may be a problem of user authorizations, administrator password validity, availability of space in the database, or saturation of it.
Download and Install
This addon is located in the Connectors section and its name is Oracle Connector.
For downloadmore and install the addon you could review our generic documentationinformation about thisthe process: installation process you can visit the Addons installationGetting started page.
Agent Configuration
This connector could manage only Users objects.
Basic
Generic parameters
After the installation of the addon, you may create and configure agent instances.
To configure this Oracle Connector you must select "OracleAgent" in the attribute "Type" of the generic parameters section in the agents page configuration.
For more information about how you may configure the generic parameters of the agent, see the following link: Agents configuration
Custom parameters
Below there are the specific parameters for this agent implementation:
Parameter |
Description |
---|---|
User |
Sysdba user name to authenticate |
Oracle password |
Password of the user to authenticate |
Connection string to database |
Database URL. Use something like jdbc:oracle:thin:@host:port:sid |
Password to protect roles |
Optional password to use on password protected roles |
Default user profile |
Optional profile to set limits on the database resources and the user password |
Default tablespace |
Optional tablespace for user creation |
Temporary tablespace |
Optional temporary tablespace for user creation |
Enable debug |
Two options: [ Yes / No ]. When it is enabled more log traces are printed in the Synchronization Server log |
Load triggers
&&TODO&&Pending to be documented.
Access Control
Oracle connector has the ability to establish an access control for Oracle Users.
If the access control checkbox is enabled, only the users and application that are listed at access control page will be allowed to login. So, you can restrict the IP address and application a user can connect from.
This restriction does not apply to DBA users.
Operational
Monitoring
After the agent configuration you could check in the monitoring page if the service is running in the Synchronization Server, please go to:
Tasks
Authoritative
If you are checked "Authorized identity source", an automatic task to load identities from the managed system to Soffid is available, please go to:
And you will something like "Import authoritative data from <AGENT_NAME>".
Reconcile
To manage an automatic task to synchronize user objects from the managed system to Soffid is available, please go to:
And you will something like "Reconcile all accounts from <AGENT_NAME>".
Synchronization
About the synchronization of the objects, there are two possible options:
- If you are checked the generic attribute "Read Only" in the "Basics" tab, only the changes in the managed systems will be updated in Soffid. We recommend this options until the global configuration of Soffid will be tested.
- If you are not checked the generic attribute "Read Only" in the "Basics" tab, all the changes in Soffid or the managed system will be updated in the other. Note that this synchronization must be configured in the "Attribute mapping" tab correctly.
For more information about how you may configure the generic parameters of the agent, see the following link: Agents configuration