1) The document discusses Oracle Identity Governance and Access Management projects for several clients, including integrating numerous applications with OIM and implementing ESSO. 2) It provides an overview of integrating applications with OIM using connectors and protecting web applications using OAM with WebGates deployed. 3) Finally, it outlines different deployment approaches for OAM including agent-based, agent-less, using a terminal server as a gateway, and a hybrid approach combining methods.

1. Implementation of Oracle Identity
Governance & Access Management
Powered by
1

2. Our Major Projects on Oracle Identity Governance and
Access Management
Client: Robi (An Axiata Telecom Company)
Project Scope: Supply of hardware and software; integration of 11 applications with OIM;
implementation of ESSO on 20 applications
Client: Banglalink
Project Scope: Integration of 16 applications with OIM; Implementation of ESSO on 24 applications
Client: Acleda Bank Plc, Cambodia
Project Scope: Implementation of ESSO on 15 applications
Client: Grameenphone Ltd
Project Scope: Supply of hardware and software; integration of 134 applications with OIM;
integration of 700+ nodes with OPAM
2

3. Integration with OIM using connectors
3
Application Database
Recon Employee Master Data
Provisioning
Reconciliation Adapter
Provisioning Adapter
Reconciliation
HRMS
Data From Authentic Source
(Trusted Reconciliation)
Oracle Identity Manager
Identity Connector Framework
(ICF)
[DBAT]

4. Protecting Web Application Server using OAM
Web Servers
(Apache, IIS, OHS etc)
Users
OAM Cluster
LDAP Server
(Active Directory/OID/OUD)
OAM WebGate Deployed
to Protect Resources
Verifies User Credentials
Pass Security TokensUser Request Web URL

5. Single Sign On Request Flow in OAM
End Users
User Store (LDAP)
Web Server With WebGate Oracle Access Manager
User Request Web URL Check Protection
Evaluates & Returns Policy DecisionRedirect To App if Unprotected
Sends Login Page if Protected
Send User Credentials Verify User Credentials
Create Sessions , Cookies or HTTP Headers
Check User access
10
Evaluates and Return Authorization
11
Redirects to Application if Authorized
1 2
34
5
6 7
8
9

6. Integration with OAM for SSO using webgate
External Users
Front End Proxy
(Deploy Webgate)
Application Servers
Internal Users
Oracle Traffic Director
Oracle Access Manager
Active Directory
Oracle Internet Directory

7. HOLISTIC VIEW OPAM DEPLOYMENT
77
Remote Users
VPN SSH/RDP
Internal User
RDP
Access Over LAN
OPAM Windows Agent
OPAM Application Server Database Server
Metadata logs
and
Video Capture
SSH RDP SSH SSH/Telnet/Web Browser
User Session Data Flow
Audit Data Flow
OPAM Session Manager
Terminal Server/Jump Server
LDAP Server
OPAM Windows Agent

8. AGENT-BASED DEPLOYMENT (WINDOWS)
8
Database
Server
OPAM Application
Server
Metadata logs
and
Video Capture
OPAM Windows Agent
OPAM Windows Agent
OPAM Windows Agent
OPAM Windows Agent
ActiveDirectoryFileServerApplicationServerDesktop
Remote Users
VPN
RDP
RDP
RDP
Internal User
RDP
Access Over LAN
Local login
Direct Login
User Session Data Flow
Audit Data Flow

9. AGENT-LESS DEPLOYMENT (LINUX/UNIX)
9Database Server
OPAM
Application
Server
Metadata logs
and
Session Capture
Remote Users
VPN
SSH
Internal User
SSH
OPAMSession
Manager
User Session Data Flow
Audit Data Flow
OPAM Session Manager
LDAP Server
Authentication

10. TERMINAL SERVER AS A GATEWAY
10
Remote Users
VPN
RDP
Internal User
RDP
Access Over LAN
Putty
Web Browsers
(Web Portals)
OPAM Windows Agent
OPAM Application Server Database Server
Metadata logs
and
Video Capture
SSH RDP SSH SSH/Telnet/Web Browser
User Session Data Flow
Audit Data Flow
OPAM Agent
Terminal Server/Jump Server

11. FIREWALL CONFIGURATION FOR GATEWAY APPROACH
11
• Network Firewall do not allow end user to bypass Terminal server.
RDP
Internal User
Access Over LAN
Remote Users
VPN
RDP
Terminal Server

12. HYBRID DEPLOYMENT-PROPOSED SOLUTIONS
(AGENT-BASED + AGENT LESS + GATEWAY APPROACH)
1212
Remote Users
VPN
SSH/RDP
Internal User
RDP
Access Over LAN
OPAM Windows Agent
OPAM Application Server Database Server
Metadata logs
and
Video Capture
SSH RDP SSH SSH/Telnet/Web Browser
User Session Data Flow
Audit Data Flow
OPAM Agent
Terminal Server/Jump Server
LDAP Server
OPAM Windows Agent
2FA
2FA
2FA

13. ORACLE ACCESS MANAGER - 2FA
1313
Remote Users
VPN
OPAM Self Service
Console
Internal User
User Login using RDP
Access Over LAN
OPAM Server
Terminal Server/Jump Server
LDAP Server
OAM Server
2FA1
2
Token for 2FA
4
OPAM Windows Agent
3
2 FA Token

14. ON DEMAND ACCESS
1414
OIM & SOA PlatformEnd Users Approval Policy
Terminal Server/Jump Server
LDAP Server
Reset
Password
Authentication
SSH
RDP
SSH/Telnet/Web Browser
Request for
Access
Approval
Process

15. Thank you…
15