Etienne Remillon & Nahil Khan's OOW2013 presentation

1. 1
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

2. Next-Generation
Optimized Directory:
Oracle Unified Directory
Etienne Remillon
Sr. Principal Product Manager - Oracle
Nahil Khan
Sr. Member Technical Staff
Systems Engineering - Verizon Wireless

3. The following is intended to outline our general product direction. It is intended
for information purposes only, and may not be incorporated into any contract.
It is not a commitment to deliver any material, code, or functionality, and should
not be relied upon in making purchasing decisions. The development, release,
and timing of any features or functionality described for Oracle’s products
remains at the sole discretion of Oracle.
3
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

4. Oracle Fusion Middleware
Business Innovation Platform for the Enterprise and Cloud
 Complete and Integrated
Web
Social
Mobile
 Best-in-class
User Engagement
Business
Process
Management
 Open standards
Content
Management
Service Integration
Business
Intelligence
Data Integration
Identity Management
Development
Tools
4
Cloud Application
Foundation
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
Enterprise
Management
 On-premise and Cloud
 Foundation for Oracle Fusion
Applications and Oracle Cloud

5. Program Agenda
 Directory Drivers and Trends
 Introduction to Oracle Unified Directory
 Unleash your Potential with OUD 11gR2
 Customer Deployments
5
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

6. Directory Drivers and Trends
6
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

7. Identity Core to Business Transformation
Mobile
 Growing number of
connected devices
 Location based new
applications
 Users expecting
environment
customization
Cloud
 On premise, private,
public apps
 Identity for SaaS apps
 Fragments identity
 Protect Identity and
Personal data
Social
 Interaction with many
users
 Maintain relational links
to many users
 Increased traffic
 Increased
customization
Internet of Things
 Millions, billions of
devices connecting
 Generate massive data
 Billions of credentials
Platform
 Simplification,
defragmentation
 Address full identity
lifecycle
 Reduce Total Cost of
Ownership
 Remove latency &
integration errors
 Simplify upgrades
7
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

8. Market Trends – Social Media
SOCIAL MEDIA MERGES
WORK & PLAY
44%
Plan to social enable
applications in the near
future
Source: Enterprise strategy group 2012
82%
8
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
Of the world reached by
social media sites
ComScore Datamine Jan 2012

9. Market Trends – Internet of Things
• Smart devices
increasing
• Bring Your Own
Device(BYOD)
• Cars, Fridges, TV’s
• Smart Meters
9
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

10. Market Trends – Clear Upgrade Path
Hybrid
Cloud
Social
Sites
Behavior
Monitoring
Mobile
Point Solutions
10
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
Platform
Intelligence

11. Market Trends – Infrastructure Consolidation
 Complex customizations required to meet
individual requirements
 Accelerate configuration/deployment cycles
and simplify maintenance
 Multi-vendor gaps, performance issues,
integration challenges, upgrade cycle timing
 Higher Total Cost of Ownership (TCO) with
“integrated best of breed”
11
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

12. Oracle Unified Directory
12
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

13. Introducing Oracle Unified Directory
Extreme scale
Next Generation
Integrated and
Interoperable
13
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
• Scale to 10’s of Billions
• Convergence of Directories
• Integrated with Oracle Directory
Services Manager for
configuration and Enterprise
Manager for monitoring
• Inter-operable with all certified
ODSEE ISV software
• Integrated with ODS+

14. Extreme Scale
Compared to ODSEE
3X
Read
Performance
5X
Write
Performance
Core Components
•
•
•
•
Directory Server
Proxy / Distribution Server
Replication Server
Replication Gateway
14
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
Built on OpenDS
Convergence of directories
Advanced Replication
Flexible Deployment
Horizontal data vs. Monolithic data
scale approach

15. Ready for Drop-In: Interoperable and Compatible
OUD Replication GTW for DSEE
• Fully Compatible With
ODSEE
• Bi-directional replication
with ODSEE
• Run mixed OUD and
DSEE environment
15
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
ODSEE
OUD
Replication
Replication
Topology
Topology
ODSEE
Directory
Server 1
Replication Gateway
ODSEE
Directory
Server 2
Replication Gateway
OUD
OUD
OUD Directory
Server 1
OUD Directory
Server 2

16. Interoperable and Compatible
Directory Integration Platform for other Directories and DB
 Bi-directional synchronization with
OUD / OID / ODSEE / AD, IBM TDS,
Novell eDir, Oracle DB and LDIF files
 Extensibility Framework for other
synchronization connectors
 Synchronization mapping rules (dn,
attribute level, custom mappings)
 Oracle Password Filter DLL to sync
Password with AD
16
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

17. Complete Reliability, Complete Service Assurance
Identity is Core to All Computing
 Performance bottleneck controlled at all levels
 Security assured at all levels
 High Volume proved at all levels
 Availability and reliability committed at all levels
Oracle is the only vendor with a complete modern directory solution
17
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

18. Unleash your potential with
latest version of Oracle
Unified Directory 11gR2
(11.1.2.1.0)
18
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

19. OUD 11gR2
SPARC and Solaris
– Seeing 3x-5x the performance compared
with DSEE
• OUD and OVD convergence
•
19
DSEE 6.3.1
ODSEE 11g
OUD 11g
Coverage of OVD routing features
• Proximity/location based LDAP
search for SN
• Oracle Database EUS support
• Modern platforms
•
20X
Search ops/sec.
 Optimized OUD for T4/T5
Solaris 11, Oracle Linux 6.x, AIX 6.1/7.1
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
4X
1X
0
20
40
60
# of cores
80
100

20. OUD 11gR2PS1 Update (1/2)
Further enable upgrades from DSEE:
Macro ACI
Extensibility framework
Enable EUS with 3rd party directories:
Support for proxy mode to AD, OUD, ODSEE, eDirectory
Support for additional DB versions: 10.2, 11.1, 11.2
Kerberos and Certificate based authentications
Support of LDAP in TNSnames
Enable ODSM deployments on IBM WebSphere
20
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

21. OUD 11gR2PS1 Update
(2/2)
More secure:
SHA-2 password encryption by default
Pass Through Authentication with Kerberos
Increased performance:
Export and import / ACI evaluation / BIND operation
Out of the box tuning for DB caches and entry cache for groups operation
Smaller footprint: Reduced database size
Improved maintainability: “logger” for admin connector
21
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

22. OUD 11gR2PS1 vs. ODSEE 11gR1PS2 on T5-2* SPARC
10M entries @ 4.4KB (120+ attributes)
Search Ops/s
Modify Ops/s
180,000
12,000
160,000
10,000
140,000
8,000
120,000
100,000
6,000
80,000
4,000
60,000
40,000
2,000
20,000
0
0
ODSEE 11.1.1.7.0 (T4)
22
OUD 11.1.2.1 (T4)
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
OUD 11.1.2.1 (T5-2*)
– Do Not Distribute
ODSEE 11.1.1.7.0 (T4)
OUD 11.1.2.1 (T4)
OUD 11.1.2.1 (T5-2*)

23. Oracle Optimized Solution for Oracle Unified Directory
Optimized Solution pre-tuned to get the best
performance
10x higher scalability than previous DS products
Scalable to the highest levels,
5 Billion+ operations per day
5x Faster than previous Directory Server products
3x SPARC T4-1 servers
3x storage array Sun Storage 2500-M2
1x Integrated Load Balancer (ILB)
10GbE Switching among all servers (optimally)
Download Technical White Paper from http://www.oracle.com/optimizedsolutions
23
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
Fully tested implementation guide speeds
deployment by 3x

24. OUD Customer Adoption Momentum
Mature and Proven
Retail Brazil
Semiconductor Company
Canadian Telecommunication
Banking Card Industry
Computer Manufacturer
Agency for Health and Pensions
 In live production
 In pre-production
 In UAT
 In testing
24
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
Global Food Company
Large US University
Global Insurance Governmental Health Service
US Mobile Operator
European Telecom Operator
Spanish Insurance
Communication and Media
Asian Mobile Operator Australian Finance Company
European Car Manufacturer
Pharmaceutical
Oracle IT
Software Provider
US Bank
Industrial Gases Manufacturer

25. Customer Upgraded from Sun DSEE 6.3
Solutions
 Modernize Sun DSEE 6.3 to achieve better
Large US University
performance and longer support time frames
 2 OUD servers + 1 isolated master for DR, 200+
apps; 2M entries and expected to grow
 “Dump and Load” upgrade approach:
– Temp ODSEE 11g replica in staging area
– Run OUD tools (ds2oud) to migrate
schema, config and diagnose user data
– Project handled in 4 months, zero downtime
25
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
Download white paper from Oracle.com

26. Customer Switched from Open Source LDAP
Solutions
 Upgrade from OpenLDAP for superior Scalability
 Get Strong support vs. open source
 Auth/profiles for public end user portal for a global
couponing program
 27 M users
 Accommodating 50K/day new users
 2 OUD servers + 2 OUD in standby for DR
26
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
Global US Food Company
+

27. Customer Upgraded from Sun DS 5.2
Solutions
 Asian largest Mobile Telco in the
country
 Directory used to manage 36M
users and mobile devices with over
200M ops/day
 Upgrade includes co-existence with
Sun DS 5.2 for smooth transition
 OUD selected because of
performances on read/writes and
import/export
27
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.
Large Asian Mobile Operator

28. 200M: Real World Large Scale Access and
Directory Deployment at Verizon
Solutions
 Validating migration from Sun DSEE
6.3 to OUD leveraging Oracle BDB
 Validate scalability and performance
for very large number of users
 Deployment includes six ways multi-
master setup in 3 data-centers
See Nahil’s presentation on Directory as part of session:
CON4535: 200M: Real World Large Scale Access and
Directory Deployment at Verizon
28
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

29. Join the Oracle Community
Twitter
twitter.com/OracleIDM
Facebook
facebook.com/OracleIDM
Oracle Blogs
blogs.oracle.com/OracleIDM
blogs.oracle.com/directoryservices
Oracle.com/Identity
29
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

30. Graphic Section Divider
30
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

31. 31
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.

32. 32
Copyright © 2013, Oracle and/or its affiliates. All rights reserved.