×

IDMWORKS Blog

Oracle Identity Management / Governance (OIM/OIG) 12c Installation and Configuration


This post will walk through the installation process for Oracle Identity Manager/Oracle Identity Governance 12c (12.2.1.3.0), and its supporting infrastructure, in a *nix environment. This post will NOT cover installation via the Oracle Quick Installer. We’ll be installing and configuring FMW Infrastructure, SOA, and OIM using their separate installers.

I will also point out some caveats with the current 12c installation and configuration processes, as well as some helpful environment shortcuts that I always like to include in order to make life a little easier when navigating our hosts.

This post assumes a database is already installed and running, and that a certified JDK is installed as required.

This example installation will have all products installed a single, portable, host, so make sure to substitute your actual hostnames where we have specified “localhost”.

Also, make sure to set up your file system structure beforehand with the proper permissions (Here is how Oracle recommends the file system to be structured)

First thing we’ll need to do is install the binaries for FMW infrastructure, SOA, and IDM.

Make sure the installers are run with the proper JDK. Use the full path to launch the Jars.

1. Install FMW Binaries

 

2. Install SOA Binaries

 

3. Install OIM Binaries

 

4. Once the products are installed, run the RCU to create the database schemas

Note: If you get errors during the RCU process about the number of cursors or xaview, run sqlplus as sys as sysdba and execute the following commands, respectfully, as relevant:

 

5. Configure The WebLogic Domain

You’ll notice in the screenshots below that we do not include OAM in the domain configuration. This is because configuring OIM and OAM in the same domain will cause issues. If you want to install OAM, you’ll need to go through the steps below a second time and create a new domain path for the OAM domain.

 

Post Installation 

Now that everything is installed, and the domain is configured, we need to update our environment variables to make sure JAVA_HOME and DOMAIN_HOME are pointing to our installations.

Next we need to run the offlineConfigManager

Watch the output of the command and make sure there are no errors.

1. Set Aliases

At this point, the products are installed and the domain and OIM is configured and ready to be started. But before starting up the stack, I like to set my shortcuts/aliases to make things easier in the future. Below is an example of aliases I like to set in my .bash_profile. They provide shortcuts for navigating the directory structure, starting and stopping the Admin server and Node Manager, and quickly viewing logs in real time.

Whenever updating your .bash_profile, execute the following command in order to apply the changes to your current login session

2. Start Node Manager and WebLogic Admin server

Now that everything is installed and ready to go, and we have our aliases set, we can start the stack. Make sure the database is running and the TNS listener is listening.

Note: some common errors that occur during startup are discussed at the very end of this post.

  • Start Node Manager

  • Watch the Node Manager log while it’s starting up to make sure there are no errors.

  • Start WebLogic Admin server

  • Watch the Node Manager log while it’s starting up to make sure there are no errors.

3. Start The Managed Servers Via the WebLogic Admin Console

Once the Node Manager and WebLogic Admin servers are up and running, log into the admin console to start the managed servers. First start SOA and wait until it is confirmed to be up and running before starting OIM. Make sure to tail the logs while each server is starting up in order to catch any errors.

Once all managed servers are up and running, log into the OIM Identity and Sysadmin consoles to verify the installation is functioning properly.

4. Integrate SOA and OIM

Now that we have the stack up and running, we’ll update the OIMSOAIntegrationMBean in order to integrate SOA with our OIM installation.

  • Log into Enterprise Manager (http://hostname:7001/em)
  • Navigate to the System Mbean Browser
  • Search for OIMSOAIntegrationMBean
  • Under the Operations tab of the MBean, select integrateWithSOAServer
  • Enter the required attributes and click Invoke

The above process does not require a restart. At this point your OIM 12c installation is good to go, and ready to be customized and integrated with the rest of your systems.

Potential Errors You May See During The Installation Process

There may be OIM startup errors (failure to write to null) if your server is using IPv6. If this is the case in your installation environment, go to the OIM managed server(s) in Admin console. On the Start Server tab, in the Arguments box, add the following argument

 

If you get a weblogic LibraryDeploymentException – Cannot register Library “oracle.idm.ipf” with Specification-Version set, because other registered Libraries with the same name do not have Specification-Version set, log into Oracle support and look up Doc ID 2323021.1 (LibraryDeploymentException: Related to oracle.idm.ipf In the Log When Starting OIM After Upgrading to OIM 12.2.1.3)

If you get ADFContext leak detected errors, they can be safely ignored.

Questions, comments or concerns? Feel free to reach out to us below, or email us at IDMWORKS to learn more about how you can protect your organization and customers.

Leave a Reply

Your email address will not be published. Required fields are marked *