Skip to content

Commit caa472f

Browse files
mgere-oraclemgere-oracle
committed
Update DBAT OS sample for Oracle DB 19c deployments
1 parent 70fcd96 commit caa472f

File tree

4 files changed

+59
-50
lines changed

4 files changed

+59
-50
lines changed

‎security/identity-and-access-management/oracle-access-governance/dbat-os-accounts-sample/README.md

Lines changed: 13 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ At the time of writing, this capability is not offered natively in OAG.
66

77
The described integration and data can be used for all supported user/account lifecycle operations in OAG, including use in access certification. Note that this simulates a connected system, therefore changes to OS level user access will be reflected in the targeted database tables.
88

9-
Review Date: 10.02.2025
9+
Review Date: 04.08.2025
1010

1111
# When to use this asset?
1212

@@ -29,11 +29,20 @@ Please ensure the requirements listed above have been satisfied.
2929

3030
1. Connect to the database as dba (with sysdba role) and create a schema user for the purposes of the integration, by running:
3131

32+
**Note:** Please adjust the provided sample sizes and naming as needed.
33+
3234
```
35+
CREATE TABLESPACE oagts
36+
DATAFILE 'oagts.dat'
37+
SIZE 100M
38+
REUSE
39+
AUTOEXTEND ON NEXT 100M MAXSIZE 500M;
40+
3341
CREATE USER OAG IDENTIFIED BY <your_secure_password>
34-
DEFAULT TABLESPACE oagts
35-
TEMPORARY TABLESPACE temp QUOTA UNLIMITED ON oagts;
42+
DEFAULT TABLESPACE oagts
43+
TEMPORARY TABLESPACE temp QUOTA UNLIMITED ON oagts;
3644
45+
GRANT CREATE SESSION TO OAG;
3746
GRANT SELECT on dba_role_privs TO OAG;
3847
GRANT SELECT on dba_sys_privs TO OAG;
3948
GRANT SELECT on dba_ts_quotas TO OAG;
@@ -62,7 +71,7 @@ GRANT DROP ANY PROCEDURE TO OAG;
6271
1. Go to **Service Administration -> Manage orchestrated systems**.
6372
2. Click on **+ Add an Orchestrated system**.
6473
3. In the **Select System** step, pick `Database Application Table (Oracle DB)`, and click on Next.
65-
4. In the **Enter Details** step, enter the details provided below. Optionally untick `This is the authoritative source for my identities.` should you want to create the identities through other means, otherwise, for the purposes of this example, the identities will be imported using data from the **OS_ACCOUNT** table. Click on Next.
74+
4. In the **Enter Details** step, enter the details provided below. Ensure the `I want to manage permissions for this system.`option **is ticked**. Optionally, ensure the `This is the authoritative source for my identities.` option remains unticked should you want to create the identities through other means, **otherwise please tick it** to ensure that for the purposes of this example the identities will be imported using data from the **OS_ACCOUNT** table. Click on Next.
6675

6776
```
6877
What do you want to call this system?: OS Account

‎security/identity-and-access-management/oracle-access-governance/dbat-os-accounts-sample/files/OS_Account.sql

Lines changed: 44 additions & 44 deletions
Original file line numberDiff line numberDiff line change
@@ -73,50 +73,50 @@ CREATE TABLE OS_ACCOUNT_HOST
7373
Included names and dates are randomly generated and used fictitiously.
7474
Any resemblance to locales or persons, living or dead, is entirely coincidental. */
7575

76-
INSERT INTO OS_COUNTRY (COUNTRYCODE,COUNTRYNAME) values ('DE', 'Germany');
77-
INSERT INTO OS_COUNTRY (COUNTRYCODE,COUNTRYNAME) values ('AT', 'Austria');
78-
INSERT INTO OS_COUNTRY (COUNTRYCODE,COUNTRYNAME) values ('CH', 'Switzerland');
76+
INSERT INTO OS_COUNTRY (COUNTRYCODE,COUNTRYNAME) VALUES ('DE', 'Germany');
77+
INSERT INTO OS_COUNTRY (COUNTRYCODE,COUNTRYNAME) VALUES ('AT', 'Austria');
78+
INSERT INTO OS_COUNTRY (COUNTRYCODE,COUNTRYNAME) VALUES ('CH', 'Switzerland');
7979

80-
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) values ('BFRANK','BFRANK','Bernd','Frank',,'[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','DE');
81-
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) values ('DSTAUSS','DSTAUSS','Dirk','Stauss',,'[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','AT');
82-
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) values ('DJONES','DJONES','Dora','Jones',,'[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','DE');
83-
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) values ('EBRANDT','EBRANDT','Ewald','Brandt',,'[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','CH');
84-
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) values ('GKLEIN','GKLEIN','Gerrit','Klein',,'[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','DE');
85-
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) values ('GVOGT','GVOGT','Gitta','Vogt',,'[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','CH');
86-
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) values ('HSCHUMACHER','HSCHUMACHER','Helene','Schumacher',,'[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','DE');
87-
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) values ('LSCHULTE','LSCHULTE','Lothur','Schulte',,'[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','AT');
88-
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) values ('LDERICHS','LDERICHS','Lutz','Derichs',,'[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','AT');
89-
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) values ('RPROTZ','RPROTZ','Rosemarie','Protz',,'[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','DE');
90-
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) values ('WSCHUBERT','WSCHUBERT','Wolf','Schubert',,'[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','DE');
80+
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) VALUES ('BFRANK','BFRANK','Bernd','Frank','','[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','DE');
81+
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) VALUES ('DSTAUSS','DSTAUSS','Dirk','Stauss','','[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','AT');
82+
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) VALUES ('DJONES','DJONES','Dora','Jones','','[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','DE');
83+
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) VALUES ('EBRANDT','EBRANDT','Ewald','Brandt','','[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','CH');
84+
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) VALUES ('GKLEIN','GKLEIN','Gerrit','Klein','','[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','DE');
85+
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) VALUES ('GVOGT','GVOGT','Gitta','Vogt','','[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','CH');
86+
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) VALUES ('HSCHUMACHER','HSCHUMACHER','Helene','Schumacher','','[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','DE');
87+
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) VALUES ('LSCHULTE','LSCHULTE','Lothur','Schulte','','[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','AT');
88+
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) VALUES ('LDERICHS','LDERICHS','Lutz','Derichs','','[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','AT');
89+
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) VALUES ('RPROTZ','RPROTZ','Rosemarie','Protz','','[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','DE');
90+
INSERT INTO OS_ACCOUNT (USERID,USERNAME,FIRSTNAME,LASTNAME,PASSWORD,EMAIL,PROVISIONDATE,STATUS,COUNTRYCODE) VALUES ('WSCHUBERT','WSCHUBERT','Wolf','Schubert','','[email protected]',to_date('24-OCT-24','DD-MON-RR'),'ACTIVE','DE');
9191

92-
INSERT INTO OS_HOST (HOSTID,HOSTNAME) values ('host001','unixhost1');
93-
INSERT INTO OS_HOST (HOSTID,HOSTNAME) values ('host002','unixhost2');
94-
INSERT INTO OS_HOST (HOSTID,HOSTNAME) values ('host003','linuxhost1');
95-
INSERT INTO OS_HOST (HOSTID,HOSTNAME) values ('host004','linuxhost2');
92+
INSERT INTO OS_HOST (HOSTID,HOSTNAME) VALUES ('host001','unixhost1');
93+
INSERT INTO OS_HOST (HOSTID,HOSTNAME) VALUES ('host002','unixhost2');
94+
INSERT INTO OS_HOST (HOSTID,HOSTNAME) VALUES ('host003','linuxhost1');
95+
INSERT INTO OS_HOST (HOSTID,HOSTNAME) VALUES ('host004','linuxhost2');
9696

97-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('BFRANK','host001');
98-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('BFRANK','host002');
99-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('BFRANK','host003');
100-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('DJONES','host001');
101-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('DJONES','host002');
102-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('DJONES','host003');
103-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('DSTAUSS','host001');
104-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('DSTAUSS','host003');
105-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('EBRANDT','host001');
106-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('EBRANDT','host003');
107-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('GKLEIN','host001');
108-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('GKLEIN','host003');
109-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('GKLEIN','host004');
110-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('GVOGT','host001');
111-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('GVOGT','host003');
112-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('HSCHUMACHER','host001');
113-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('HSCHUMACHER','host003');
114-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('LDERICHS','host001');
115-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('LDERICHS','host003');
116-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('LSCHULTE','host001');
117-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('LSCHULTE','host003');
118-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('RPROTZ','host001');
119-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('RPROTZ','host003');
120-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('RPROTZ','host004');
121-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('WSCHUBERT','host001');
122-
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) values ('WSCHUBERT','host003');
97+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('BFRANK','host001');
98+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('BFRANK','host002');
99+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('BFRANK','host003');
100+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('DJONES','host001');
101+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('DJONES','host002');
102+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('DJONES','host003');
103+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('DSTAUSS','host001');
104+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('DSTAUSS','host003');
105+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('EBRANDT','host001');
106+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('EBRANDT','host003');
107+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('GKLEIN','host001');
108+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('GKLEIN','host003');
109+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('GKLEIN','host004');
110+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('GVOGT','host001');
111+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('GVOGT','host003');
112+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('HSCHUMACHER','host001');
113+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('HSCHUMACHER','host003');
114+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('LDERICHS','host001');
115+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('LDERICHS','host003');
116+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('LSCHULTE','host001');
117+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('LSCHULTE','host003');
118+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('RPROTZ','host001');
119+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('RPROTZ','host003');
120+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('RPROTZ','host004');
121+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('WSCHUBERT','host001');
122+
INSERT INTO OS_ACCOUNT_HOST (USERID,HOSTID) VALUES ('WSCHUBERT','host003');

‎security/identity-and-access-management/oracle-identity-governance/postman-scim-samples/README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22

33
A Postman collection of sample SCIM API requests for Oracle Identity Governance (OIG) that showcases the ability to quickly create organizations, managers and users via SCIM API calls. Note that these samples are meant for reference only and are not intended for use in production systems.
44

5-
Review Date: 28.10.2024
5+
Review Date: 04.08.2024
66

77
# When to use this asset?
88

‎security/identity-and-access-management/oracle-identity-governance/postman-scim-samples/files/OIG_POSTMAN_SAMPLES.postman_collection.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -219,7 +219,7 @@
219219
],
220220
"body": {
221221
"mode": "raw",
222-
"raw": "{\r\n \"schemas\":\r\n [\r\n \"urn:ietf:params:scim:schemas:core:2.0:User\",\r\n \"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User\",\r\n \"urn:ietf:params:scim:schemas:extension:oracle:2.0:OIG:User\"\r\n ],\r\n \"userName\": \"{{login}}\",\r\n \"name\": {\r\n \"familyName\": \"{{lastname}}\",\r\n \"givenName\": \"{{firstname}}\"\r\n },\r\n \"displayName\": \"{{firstname}} {{lastname}}\",\r\n \"emails\":\r\n [\r\n {\r\n \"value\": \"{{email}}\",\r\n \"type\": \"work\"\r\n }\r\n ],\r\n \"userType\": \"{{emptype}}\",\r\n \"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User\":\r\n {\r\n \"manager\":\r\n {\r\n \"value\": \"{{manager_id}}\",\r\n \"$ref\": \"http://{{host}}:{{port}}/iam/governance/scim/v1/Users/{{manager_id}}\"\r\n }\r\n },\r\n \"urn:ietf:params:scim:schemas:extension:oracle:2.0:OIG:User\":\r\n {\r\n \"startDate\": \"{{startdate}}\",\r\n \"homeOrganization\":\r\n {\r\n \"value\": {{organization_id}},\r\n \"$ref\": \"http://{{host}}:{{port}}/iam/governance/scim/v1/Organizations/{{organization_id}}\"\r\n }\r\n }\r\n}"
222+
"raw": "{\r\n \"schemas\":\r\n [\r\n \"urn:ietf:params:scim:schemas:core:2.0:User\",\r\n \"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User\",\r\n \"urn:ietf:params:scim:schemas:extension:oracle:2.0:OIG:User\"\r\n ],\r\n \"userName\": \"{{login}}\",\r\n \"name\": {\r\n \"familyName\": \"{{lastname}}\",\r\n \"givenName\": \"{{firstname}}\"\r\n },\r\n \"displayName\": \"{{firstname}} {{lastname}}\",\r\n \"emails\":\r\n [\r\n {\r\n \"value\": \"{{email}}\",\r\n \"type\": \"work\"\r\n }\r\n ],\r\n \"userType\": \"{{emptype}}\",\r\n \"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User\":\r\n {\r\n \"manager\":\r\n {\r\n \"value\": \"{{manager_id}}\",\r\n \"$ref\": \"http://{{host}}:{{port}}/iam/governance/scim/v1/Users/{{manager_id}}\"\r\n }\r\n },\r\n \"urn:ietf:params:scim:schemas:extension:oracle:2.0:OIG:User\":\r\n {\r\n \"startDate\": \"{{startdate}}\",\r\n \"homeOrganization\":\r\n {\r\n \"value\": \"{{organization_id}}\",\r\n \"$ref\": \"http://{{host}}:{{port}}/iam/governance/scim/v1/Organizations/{{organization_id}}\"\r\n }\r\n }\r\n}"
223223
},
224224
"url": {
225225
"raw": "http://{{host}}:{{port}}/iam/governance/scim/v1/Users",

0 commit comments

Comments
 (0)