The Provisioning Bridge provides a link between your on-premises LDAP applications and
Oracle Identity Cloud Service.
Through synchronization, account data created and updated directly on these applications
is pulled into Oracle Identity Cloud Service and stored for the corresponding users and groups.
As a result, any changes to these records will be transferred into Oracle Identity Cloud Service.
So, if a user is created in one of your LDAP applications, then this change will be
propagated into Oracle Identity Cloud Service.
Let’s suppose you're using an on-premises LDAP application such as Oracle Internet Directory
as an authoritative source for your company's users and groups.
This application lies within your company's firewall.
As the Provisioning Bridge also sits inside of the firewall,
it can communicate with both the application and Oracle Identity Cloud Service,
and serves as a link between them.
Let’s create a Provisioning Bridge.
First, sign in to the Identity Cloud Service console with your administrative credentials.
Expand the Navigation Drawer, click Settings, and then Provisioning Bridges, and Add.
Enter a name and description for this Provisioning Bridge, and save the changes.
By default, this Provisioning Bridge is deactivated.
The Details tab contains high-level information about the Provisioning Bridge, such as the name,
description, Identity Cloud Service URL, Client ID, and Client Secret.
The Identity Cloud Service URL contains the name and port number for
your Oracle Identity Cloud Service identity domain.
The Client ID and Client Secret are used by the Provisioning Bridge to
access Oracle Identity Cloud Service as an administrator.
The Client Secret is encrypted for security purposes.
To see the Secret in clear text, click Show Secret.
You’ll need the Identity Cloud Service URL, Client ID, and Client Secret,
so copy the values for these fields to a text editor.
The Apps tab displays the applications to which the Provisioning Bridge will poll for
changes to users and groups,
and synchronize these changes into
Oracle Identity Cloud Service.
The Connectors tab displays the
Identity Connector Framework connectors
that the Provisioning Bridge uses
to communicate between on-premises LDAP applications such as
Oracle Internet Directory and
Oracle Identity Cloud Service.
Let’s install the client for the Provisioning Bridge.
First, download this client.
In the Downloads page,
download the Identity Cloud Service Provisioning Bridge.
Verify that a Success status appears for the download.
Create a folder on the machine where you’re installing the client,
and then unzip the file that you downloaded.
You’ll see two files: startup.bat and startup.sh.
The startup.bat file is used to
install and start the Provisioning Bridge on a Windows machine.
The startup.sh file is used to install and start the bridge on a Linux or UNIX machine.
For this example, you’re installing the bridge
on a Linux machine, so run the startup.sh install command.
When prompted, enter a password for Oracle Wallet.
The wallet is a secure file that’s used to store sensitive information
about Oracle Identity Cloud Service.
When prompted, re-enter the password.
At the Enter the Identity Cloud Service URL prompt, enter the correct URL.
Then, enter the Client ID that you copied earlier and then the Client Secret.
Skip the proxy server prompts, as an HTTP Proxy Server isn’t required in this example.
The bridge attempts to connect to Oracle Identity Cloud Service.
If a connection can be established, then
information about the Provisioning Bridge created appears.
With the installation complete, let’s start the client.
At the prompt, run the startup.sh normal command.
Then enter the Oracle Wallet password.
The Provisioning Bridge attempts to connect to Oracle Identity Cloud Service.
“The Provisioning Bridge is started.” status message
verifies that a connection has been established
between the Provisioning Bridge and Oracle Identity Cloud Service.
On the Provisioning Bridges page of the Identity Cloud Service console,
the status of the client for the bridge is now Started.
To confirm that the connector can be used by the Provisioning Bridge, click the Connectors tab.
Verify that you see the names and versions of the connectors that are
used by the Provisioning Bridge to communicate with the associated applications.
Now, let’s activate the Provisioning Bridge by clicking Activate and then OK.
The status of the bridge is now Active.
With the Provisioning Bridge active, let’s link it to an on-premises LDAP application,
in this case, Oracle Internet Directory.
Click Applications, Add, and then App Catalog.
Locate the application template for Oracle Internet Directory by entering it in the Search field.
Click Add and then click Next.
Turn on the Enable Provisioning switch to configure synchronization between
Oracle Internet Directory and Oracle Identity Cloud Service.
Grant consent by clicking OK.
Select your Provisioning Bridge and then Enter connectivity information for the
Host Name, Port Number, Administrator Username, Administrator Password, and Base Contexts fields.
with values associated with Oracle Internet Directory.
Then, click Test Connectivity.
The Connection successful status signifies
that a connection can be established to Oracle Internet Directory.
Turn on the Enable Synchronization switch
to synchronize between Oracle Internet Directory
and Oracle Identity Cloud Service.
In the When exact match is found menu of the Configure Synchronization pane,
set the value to Link and confirm.
This way, a link can be established for any users that are
transferred into Oracle Identity Cloud Service from Oracle Internet Directory.
With the Oracle Internet Directory application configuration complete,
add it and then activate it
so that it can be used to pull account data
that’s created and updated directly
on Oracle Internet Directory into Oracle Identity Cloud Service.
Now, let’s verify that the application you created and activated
is associated with your Provisioning Bridge, by navigating to it.
On the Apps tab, the Oracle Internet Directory application
is assigned to this Provisioning Bridge.
With everything configured,
let’s use the bridge to pull a user account
from Oracle Internet Directory into Oracle Identity Cloud Service.
In this example, the Clarence Saladna user account
will be transferred from Oracle Internet Directory to Oracle Identity Cloud Service.
Notice this user doesn’t exist in Oracle Identity Cloud Service
but does exist in Oracle Internet Directory.
Let’s import this user account into Oracle Identity Cloud Service by navigating to
Applications > Oracle Internet Directory > Import, and clicking Import.
Click Refresh until the job status shows Succeeded.
Notice that the user Clarence Saladna is now imported and visible in the Users page.
Now you know how to use the Provisioning Bridge
to synchronize users from your on-premises LDAP applications
to Oracle Identity Cloud Service.
Learn more at cloud.oracle.com