diff --git a/security/identity-and-access-management/oracle-access-governance/README.md b/security/identity-and-access-management/oracle-access-governance/README.md index eff637d70..c0610941a 100644 --- a/security/identity-and-access-management/oracle-access-governance/README.md +++ b/security/identity-and-access-management/oracle-access-governance/README.md @@ -2,7 +2,11 @@ Access Governance is a cloud native identity governance and administration (IGA) service that provides enterprisewide visibility to govern access to cloud and on-premises environments. With an intuitive user experience, dynamic access control, and a prescriptive analytics-driven access review process, it helps customers automate access provisioning, get insights into access permission and cloud infrastructure policy reviews, identify anomalies, and remediate security risks. -Reviewed: 10.02.2025 +![OAG Use Case](images/OAG_Use_Cases.png) + +Oracle Access Governance enables integration with a wide range of authoritative sources (trusted source of identities and their attributes) and managed systems (applications containing account and permissions). **For the most common integration patterns, please see the [Reusable Assets Overview](#reusable-assets-overview) section below**. + +Reviewed: 20.03.2025 # Useful Links @@ -29,7 +33,12 @@ Reviewed: 10.02.2025 **Note:** The below assets are provided for reference purposes only and for use in demos/PoC activities where required. -- [DBAT OS Account Sample integration for OAG](dbat-os-accounts-sample/README.md) +| **No.** | **Business Use Case** | **Components** | **Use Case Scope** | **Reusable Asset(s)** | +|-----------|-----------------------|----------------|--------------------|-----------------------| +| 1 | Access Governance for Active Directory with user, access management & **who has access to what** of users, groups, permissions. | • OAG - HCM, EBS and Active Directory | • **Authoritative Sources - Fusion HCM & EBS**
• **Managed System - Active directory**
• On-boarding and Mover
• Self-service request, approval workflows
• Access review/re-certification and close loop remediation | • [Fusion HCM & EBS to MS AD integration for OAG](fusion-hcm-ebs-msad/README.md) | +| 2 | Oracle Access Governance Manages **complete Identity Life cycle** in terms Administration and governance for Entra ID using HCM and Flat file as source of authority. | • OAG - HCM, Flat File
• Entra ID | • **Authoritative Sources - Fusion HCM for employees and Flat file for contractor**
• **Managed System - Entra ID**
• Employee and Contractor On-boarding
• Transfer and Request based access
• Access review/re-certification, Self-service request, approval workflows, close loop remediation | • [Fusion HCM to Entra ID integration for OAG](fusion-hcm-msentraid/README.md) | +| 3 | Access Governance for Oracle Cloud Infrastructure (OCI) - **continuous discovery** of users, groups, roles, applications, permissions and policies | • OAG - OCI IAM | • **Authoritative Sources - EBS HRMS**
• **Managed System - OCI IAM**
• Intelligent access reviews & Deep visibility
• Review of users, groups, role, applications, permissions, and policies in OCI compartments and OCI IAM domains
• User and groups management in OCI IAM | • [EBS HRMS to OCI IAM integration for OAG](ebs-hrms-oci-iam/README.md) | +| 4 | Access Governance for **disconnected systems** | • OAG - DBAT (**D**ata**B**ase **A**pplication **T**ables) | • **Authoritative Sources - DBAT**
• **Managed System - DBAT**
• Managing Disconnected system(s) with database tables using the DBAT connector
• User provisioning and Access reviews | • [DBAT OS Account Sample integration for OAG](dbat-os-accounts-sample/README.md)

• [DBAT integration tutorial for OAG](https://www.youtube.com/watch?v=SNyyI0vO_yw) | # License diff --git a/security/identity-and-access-management/oracle-access-governance/ebs-hrms-oci-iam/LICENSE b/security/identity-and-access-management/oracle-access-governance/ebs-hrms-oci-iam/LICENSE new file mode 100644 index 000000000..8dc7c0703 --- /dev/null +++ b/security/identity-and-access-management/oracle-access-governance/ebs-hrms-oci-iam/LICENSE @@ -0,0 +1,35 @@ +Copyright (c) 2025 Oracle and/or its affiliates. + +The Universal Permissive License (UPL), Version 1.0 + +Subject to the condition set forth below, permission is hereby granted to any +person obtaining a copy of this software, associated documentation and/or data +(collectively the "Software"), free of charge and under any and all copyright +rights in the Software, and any and all patent rights owned or freely +licensable by each licensor hereunder covering either (i) the unmodified +Software as contributed to or provided by such licensor, or (ii) the Larger +Works (as defined below), to deal in both + +(a) the Software, and +(b) any piece of software and/or hardware listed in the lrgrwrks.txt file if +one is included with the Software (each a "Larger Work" to which the Software +is contributed by such licensors), + +without restriction, including without limitation the rights to copy, create +derivative works of, display, perform, and distribute the Software and make, +use, sell, offer for sale, import, export, have made, and have sold the +Software and the Larger Work(s), and to sublicense the foregoing rights on +either these or other terms. + +This license is subject to the following condition: +The above copyright notice and either this complete permission notice or at +a minimum a reference to the UPL must be included in all copies or +substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. \ No newline at end of file diff --git a/security/identity-and-access-management/oracle-access-governance/ebs-hrms-oci-iam/README.md b/security/identity-and-access-management/oracle-access-governance/ebs-hrms-oci-iam/README.md new file mode 100644 index 000000000..21ef4fdc9 --- /dev/null +++ b/security/identity-and-access-management/oracle-access-governance/ebs-hrms-oci-iam/README.md @@ -0,0 +1,23 @@ +# EBS HRMS to OCI IAM integration + +Review Date: 20.03.2025 + +# When to use this asset? + +TBD + +# How to use this asset? + +TBD + +# Useful Links + +TBD + +# License + +Copyright (c) 2025 Oracle and/or its affiliates. + +Licensed under the Universal Permissive License (UPL), Version 1.0. + +See [LICENSE](https://github.com/oracle-devrel/technology-engineering/blob/main/LICENSE) for more details. diff --git a/security/identity-and-access-management/oracle-access-governance/fusion-hcm-ebs-msad/LICENSE b/security/identity-and-access-management/oracle-access-governance/fusion-hcm-ebs-msad/LICENSE new file mode 100644 index 000000000..8dc7c0703 --- /dev/null +++ b/security/identity-and-access-management/oracle-access-governance/fusion-hcm-ebs-msad/LICENSE @@ -0,0 +1,35 @@ +Copyright (c) 2025 Oracle and/or its affiliates. + +The Universal Permissive License (UPL), Version 1.0 + +Subject to the condition set forth below, permission is hereby granted to any +person obtaining a copy of this software, associated documentation and/or data +(collectively the "Software"), free of charge and under any and all copyright +rights in the Software, and any and all patent rights owned or freely +licensable by each licensor hereunder covering either (i) the unmodified +Software as contributed to or provided by such licensor, or (ii) the Larger +Works (as defined below), to deal in both + +(a) the Software, and +(b) any piece of software and/or hardware listed in the lrgrwrks.txt file if +one is included with the Software (each a "Larger Work" to which the Software +is contributed by such licensors), + +without restriction, including without limitation the rights to copy, create +derivative works of, display, perform, and distribute the Software and make, +use, sell, offer for sale, import, export, have made, and have sold the +Software and the Larger Work(s), and to sublicense the foregoing rights on +either these or other terms. + +This license is subject to the following condition: +The above copyright notice and either this complete permission notice or at +a minimum a reference to the UPL must be included in all copies or +substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. \ No newline at end of file diff --git a/security/identity-and-access-management/oracle-access-governance/fusion-hcm-ebs-msad/README.md b/security/identity-and-access-management/oracle-access-governance/fusion-hcm-ebs-msad/README.md new file mode 100644 index 000000000..137ec6a45 --- /dev/null +++ b/security/identity-and-access-management/oracle-access-governance/fusion-hcm-ebs-msad/README.md @@ -0,0 +1,23 @@ +# Fusion HCM & EBS to MS AD integration + +Review Date: 20.03.2025 + +# When to use this asset? + +TBD + +# How to use this asset? + +TBD + +# Useful Links + +TBD + +# License + +Copyright (c) 2025 Oracle and/or its affiliates. + +Licensed under the Universal Permissive License (UPL), Version 1.0. + +See [LICENSE](https://github.com/oracle-devrel/technology-engineering/blob/main/LICENSE) for more details. diff --git a/security/identity-and-access-management/oracle-access-governance/fusion-hcm-msentraid/LICENSE b/security/identity-and-access-management/oracle-access-governance/fusion-hcm-msentraid/LICENSE new file mode 100644 index 000000000..8dc7c0703 --- /dev/null +++ b/security/identity-and-access-management/oracle-access-governance/fusion-hcm-msentraid/LICENSE @@ -0,0 +1,35 @@ +Copyright (c) 2025 Oracle and/or its affiliates. + +The Universal Permissive License (UPL), Version 1.0 + +Subject to the condition set forth below, permission is hereby granted to any +person obtaining a copy of this software, associated documentation and/or data +(collectively the "Software"), free of charge and under any and all copyright +rights in the Software, and any and all patent rights owned or freely +licensable by each licensor hereunder covering either (i) the unmodified +Software as contributed to or provided by such licensor, or (ii) the Larger +Works (as defined below), to deal in both + +(a) the Software, and +(b) any piece of software and/or hardware listed in the lrgrwrks.txt file if +one is included with the Software (each a "Larger Work" to which the Software +is contributed by such licensors), + +without restriction, including without limitation the rights to copy, create +derivative works of, display, perform, and distribute the Software and make, +use, sell, offer for sale, import, export, have made, and have sold the +Software and the Larger Work(s), and to sublicense the foregoing rights on +either these or other terms. + +This license is subject to the following condition: +The above copyright notice and either this complete permission notice or at +a minimum a reference to the UPL must be included in all copies or +substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. \ No newline at end of file diff --git a/security/identity-and-access-management/oracle-access-governance/fusion-hcm-msentraid/README.md b/security/identity-and-access-management/oracle-access-governance/fusion-hcm-msentraid/README.md new file mode 100644 index 000000000..24bf50a8d --- /dev/null +++ b/security/identity-and-access-management/oracle-access-governance/fusion-hcm-msentraid/README.md @@ -0,0 +1,23 @@ +# Fusion HCM to Entra ID integration + +Review Date: 20.03.2025 + +# When to use this asset? + +TBD + +# How to use this asset? + +TBD + +# Useful Links + +TBD + +# License + +Copyright (c) 2025 Oracle and/or its affiliates. + +Licensed under the Universal Permissive License (UPL), Version 1.0. + +See [LICENSE](https://github.com/oracle-devrel/technology-engineering/blob/main/LICENSE) for more details. diff --git a/security/identity-and-access-management/oracle-access-governance/images/OAG_Use_Cases.png b/security/identity-and-access-management/oracle-access-governance/images/OAG_Use_Cases.png new file mode 100644 index 000000000..891c8e648 Binary files /dev/null and b/security/identity-and-access-management/oracle-access-governance/images/OAG_Use_Cases.png differ