端到端的身份管理解决方案 - Oracle Integrated Cloud
Oracle的操作系统身份认证
非oracle安装用户本机sqlplus “sys/change_on_install as sysdba”能登录
非oracle安装用户远程sqlplus “/ as sysdba_on_install@sid as sysdba”能登录
os认证：如果启用了os认证，以sysdba登录，那么我们只要用oracle软件的安装用户就能登录：sqlplus “/ as sysdba”。如果我们要禁用os认证，只利用密码文件登录，我们首先要有一个密码文件：
orapwd file=C:\oracle\product\10.2.0\db_1\database\PWDoralocal.ora password=maximo entries=10;
设置初始化参数 REMOTE_LOGIN_PASSWORDFILE ：
在 Oracle 数据库实例的初始化参数文件中，此参数控制着密码文件的使用及其状态。它可以有以下几个选项：
1、NONE ：指示 Oracle 系统不使用密码文件，特权用户的登录通过操作系统进行身份验证；
2、EXCLUSIVE ：指示只有一个数据库实例可以使用此密码文件。只有在此设置下的密码文件可以包含有除 SYS 以外的用户信息，即允许将系统权限 SYSOPER /SYSDBA 授予除 SYS 以外的其他用户。此设置oracle 9i中为缺省值。有朋友说是shared,其实不然.
（3）REMOTE_LOGIN_NTICATION_SERVICES= (NTS)：
oracle安装用户本地sqlplus “/ as sysdba”能登录
非oracle安装用户本机sqlplus “sys/change_on_install as sysdba”无法登录
Oracle 身份验证方式
Oracle 身份验证方式Oracle 身份验证方式有如下几种：•操作系统身份验证•口令文件验证•口令身份验证•外部身份验证•全局身份验证前两项技术仅供管理员使用，最后一项技术要求使用LDAP 目录服务器。
LDAP 目录服务器是Oracle Internet Directory(OID)，作为Oracle 应用服务器的一部分发布。
1. 操作系统和口令文件身份验证要为账户启用操作系统和口令身份验证（二者是相配的），必须为用户授予SYSDBA 或者SYSOPER 权限：GRANT [ sysdba | sysoper ] TO username ;如果向用户授予这些权限之一或者所有权限，则会将用户口令从数据字典复制到外部口令文件中，此时，即使数据库未处于打开状态，实例也可以读取口令。
要使用口令文件身份验证，用户可以在使用SQL*Plus 时通过以下语法连接：CONNECT username / password [ @db_alias ] AS [ SYSOPER | SYSDBA ] ;注意，可使用口令文件身份验证，通过Oracle Net 连接到远程数据库。
要使用操作系统身份验证，用户必须被确认为有权限访问Oracle 二进制文件的操作系统用户之后，且在使用SQL*Plus 时通过以下语法连接之前首先登陆到数据库服务器：CONNECT / AS [ SYSOPER | SYSDBA ] ;与SYSDBA 和SYSOPER 以同一种方式运行的第三种权限是SYSSAM，此权限仅适用于ASM 实例。
2. 口令身份验证在使用SQL*Plus 时，通过口令身份验证进行连接的语法如下：CONNECT username / password [ @db_alias ]这是Oracle 一般用户使用得最多的一种身份验证方式。
在使用口令身份验证进行连接时，实例将针对在数据字典中的用户账户存储的口令。
验证给定的口令。
Oracle身份管理(OracleAS_IDmanagement_10g_WP_cn)
Oracle身份管理简介Oracle白皮书2003年8月Oracle身份管理简介概述身份管理是机构管理终端用户和网络实体整个安全生命周期的过程。
健全而可靠的身份管理策略可以降低成本、加快应用部署、改善用户体验，同时提高应用程序的安全性。
Oracle Identity Management（Oracle身份管理）是一个集成的、可伸缩的、健壮的身份管理基础架构。
Oracle Identity Management包括LDAP目录服务、目录集成和供应服务、一个委托管理服务应用程序、认证和授权服务以及一个X.509 V3认证中心（certificate authority）。
Oracle Identity Management的关键优势在于其健壮性和可伸缩性、对Oracle产品即需即用的部署支持、用作与其他企业身份管理解决方案的单一集成点、以及可以开放地基于标准地进行实施。
身份管理简介定义身份管理身份管理是机构管理终端用户和网络实体整个安全生命周期的过程。
身份管理最通常是指对机构用户的管理，其安全生命周期包括账号创建、删除、中止、权限更改和属性管理等步骤。
所管理的网络实体包括设备、过程、应用程序、服务器或任何需要在联网环境中交互的其他实体。
身份管理过程管理的实体可能还包括机构以外的用户，例如客户、供应商或贸易合作伙伴。
采用身份管理的原因身份管理对于IT部署非常重要，有很多原因：身份管理可节约资金。
对于大多数企业，应用程序的用户管理非常费钱、费力而且容易出错。
身份管理将很多这样的艰苦工作加以集中并自动化，降低了管理成本同时提高了准确性和安全性。
身份管理可以实现更快速的部署。
通常，提供一个新的应用程序意味着创建和管理独立的用户账户和它们的权限。
身份管理使新的应用程序可以利用现有的基础架构来进行用户管理，从而缩短了部署和管理新应用程序的时间。
身份管理改善了终端用户的体验。
身份管理策略使新用户可以快速访问其应用程序，避免了员工时间的浪费。
Oracle 10g数据库的安全性和身份管理
Oracle数据库10g为Oracle身份管理提供了一种安全、可伸缩的基础。
Oracle互联网目录(OID)是作为一个运行在Oracle数据库10g上的应用程序来实施的，使OID能够在一个单一服务器上或者某个网格中的各个节点上支持数T字节的目录信息。
Oracle数据库10g凭借诸如虚拟私有数据库等这样强大的功能来保护原始数据。
重要的数据库安全性特性包括：◆企业用户安全性Oracle数据库10g的企业用户安全性特性，涵盖企业访问权限管理和共享的模式(schemas)，允许每个用户访问数据，同时支持在Oracle互联网目录中进行集中的用户管理。
用户权限(由角色来体现)和对象约束条件(由访问控制清单来体现)可以存储在OID 数据库中。
◆虚拟私有数据库虚拟私有数据库(VPD)允许开发人员将安全政策附加到应用程序表、视图或同义词中。
安全性政策可以使用安全应用上下文(Secure Application Context)来确定如何运用这个政策。
Oracle数据库10g还在虚拟私有数据库中引入了与列相关的安全性政策执行机制，以及可以选择的列遮蔽机制。
◆Oracle标签安全性Oracle数据库10g允许在Oracle身份管理基础设施中集中创建Oracle 标签安全性政策。
通过使用Oracle互联网目录，人们可以在一个集中的位置创建Oracle标签安全性政策，从而简化在企业或网格中的所有数据库中进行安全性保障和管理的过程。
可以在一个位置管理机构的敏感性标签及应用程序用户安全性许可证。
◆细粒度的审计任何有效的安全性政策的一个重要方面都是维护系统的活动记录，来确保用户对自己的行为负责。
Oracle在Oracle数据库的现有强大而全面的审计功能的基础上，又纳入了细粒度的审计功能。
如果用户错误地使用了数据访问权限，则这种功能可以作为机构的预警系统，也可以作为对数据库本身入侵的检测系统。
◆代理认证Oracle数据库10g支持代理认证，它通过允许将一个SSL证书(X.509证书或DN)传送到数据库来识别(而不是认证)用户，从而提供三层安全性功能。
Oracle的数据仓库解决方案
Oracle的数据仓库解决方案在数据驱动的时代，企业越来越重视数据的收集、分析和利用。
数据仓库作为数据集中存储和管理的关键组件，成为企业实现数据驱动决策的重要基础。
Oracle作为全球领先的数据库技术提供商，也提供了强大的数据仓库解决方案。
Oracle的数据仓库解决方案主要包括以下几个关键组件和特点：1. 数据采集和清洗：Oracle提供了丰富的数据采集工具和方案，可以从各种关系型数据库和非关系型数据库等数据源中提取、转换和加载数据到数据仓库中。
此外，Oracle还可以对数据进行清洗和预处理，确保数据的准确性和一致性。
2. 数据存储和管理：Oracle的数据仓库解决方案采用高性能的数据库引擎来存储和管理数据。
它支持多种存储结构，如关系型、多维和列式存储等，以满足不同的数据分析和查询需求。
此外，Oracle还提供了强大的数据压缩和索引技术，以优化数据存储和查询性能。
3. 数据集成和转换：Oracle的数据仓库解决方案可以帮助企业将分散、异构的数据集成到一个统一的数据模型中。
它提供了强大的ETL（抽取、转换和加载）工具，可以对数据进行清洗、转换和整合，使数据在数据仓库中具有一致的结构和格式。
4. 数据分析和挖掘：Oracle的数据仓库解决方案提供了丰富的分析和挖掘功能，帮助企业发现数据中的模式、规律和趋势。
它支持各种常用的分析工具和技术，如OLAP（在线分析处理）、数据挖掘和机器学习等，以帮助企业实现更深入、高效的数据分析。
5. 数据安全和权限控制：Oracle的数据仓库解决方案提供了全面的数据安全和权限控制机制，以保护企业的数据资产安全。
它支持各种安全功能，如数据加密、访问控制和审计等，以确保数据的机密性、完整性和可用性。
综上所述，Oracle的数据仓库解决方案提供了全面、可靠的解决方案，帮助企业构建高效、可扩展的数据仓库。
它的强大功能和灵活性使得企业能够深入挖掘数据的价值，提升决策能力和竞争优势。
Oracle数据库云化整合方案
Oracle数据库云化整合方案整合最佳实践：借助 Oracle Database 进入云时代目录概要 (2)企业云之旅 (3)通过标准化降低复杂性 (4)整合降低成本并提高可管理性 (5)通过Oracle Database 12c 实现整合 (6)新式多租户架构的主要优势 (6)选择整合方式 (8)PDB 如何解决IT 复杂性问题 (8)选择合适的隔离级别 (9)隔离及其对整合的影响 (9)可插拔数据库整合 (10)数据库整合 (13)整合多个CDB (15)模式整合 (17)云池设计 (19)CPU (19)内存 (21)存储 (22)互补性负载 (23)Oracle Enterprise Manager 12c Cloud Management Pack (25)Consolidation Planner (25)执行所有供应活动的Database Provisioning 控制台 (26)计费 (26)总结 (27)概要传统上，IT 组织将各个数据库和应用程序部署在专用服务器基础架构上，以支持不同的部门或业务线(LOB)。
技术与业务职能部门之间的这种细分式协调不仅导致技术基础架构利用率极低，而且管理这种部署的管理资源利用率也很低。
此外，这种孤岛式部署还抑制了IT 组织快速响应不断变化的业务需求的能力。
为应对这些挑战，许多组织正利用企业私有云来实现成本节省，同时提高业务敏捷性。
这种向云计算模型的转移涉及到多项变革。
整合是这一历程中的关键步骤之一，它可以提高资源利用率，降低资本支出和运营支出，从而帮助组织提高运营效率。
实现这些节省的关键是实现标准化以及减少需要管理的不同环境的数量。
Oracle Database 12c 为整合应用程序负载提供了巨大优势。
这些优势包括：1. 简化管理—减少需要管理的不同环境的数量。
多合一管理。
2. 简化供应和打补丁3. 易于整合—无需更改应用程序即可实现整合。
在本文中，我们将介绍这些功能并说明Oracle Database 12c 如何帮助执行整合以及加快您的云之旅。
Oracle Cloud 管理与 Enterprise Manager 白皮书说明书
Managing Oracle Cloud With Enterprise Manager EXECUTIVE SUMMARYO R A C L E W H I T E P A P E R|D E C E M B E R2015Executive SummaryCloud computing is a significant advancement in the delivery of information technology and services. Oracle defines Cloud computing as a style of computing based on shared, elastic resources delivered to users in a self-service, metered manner using Web technologies. Yet, if you ask five people “what is cloud computing?” you can expect five different answers. Why? Because what matters to them is not what Cloud computing is, but what it does for them. Efficient Cloud management empowers Oracle Cloud to help organizations drive innovation and business transformation by increasing business agility, lowering costs, and reducing IT complexity.Traditionally deployments require applications to be bound to a particular infrastructure. This results in low utilization, diminished efficiency, and inflexibility. Cloud brings in capabilities to allow applications to be dynamically deployed onto the appropriate infrastructure at runtime. While C loud’s elastic aspect allows applications to scale and grow on demand without needing traditional patches or upgrades, the Cloud itself requires continual capacity checks.IT departments and infrastructure providers are under increasing pressure to provide computing infrastructure at the lowest possible cost. To do this, the concepts of resource pooling, virtualization, dynamic provisioning, utility and commodity computing could be leveraged within a public Cloud or create a private Cloud that meets these needs. Customers driven by concerns over security, regulatory compliance, control over Quality of Service (QoS), and long-term costs, will build internal private Clouds. Private Clouds allow internal IT providers and application development team greater control of data security to meet their governance regulations. There are also a growing number of public Cloud providers that are looking for ways to build a versatile Cloud Infrastructure to support their clientele. However, as the technology matures and these concerns ease, we will see more customers adopting a hybrid Cloud model that makes use of both private and public Clouds using the most suitable of the hybrid strategies. Whether it is the pubic cloud, the private cloud or the hybrid cloud, a cloud’s successful management involves standardizatio n, integration, risk management and automation.Oracle Cloud, industry’s broadest and most integrated public cloud, offers best-in-class services across software as a service (SaaS), platform as a service (PaaS), infrastructure as a service (IaaS), and data as a service (DaaS). Enterprise Manager, Oracle’s flagship Systems and Applications Management product, is used to provide 24x7 management of Oracle Cloud to ensure 99.99% availability of Cloud Services. Enterprise Managerprovides an overview of tenant cloud usage, service availability, health of service and service infrastructure on Service Dashboards. It also provides incident and problem management, service life cycle management, gold standards for service configuration, compliance scoring of service/infrastructure vis-à-vis CPU patches and STIG compliance. Additionally operational tasks like management of security certificates and password expiry, monitoring cloud accessmanagement and Oracle Cloud service provisioning are automated for Cloud Agility using Enterprise Manager restful APIs and Jython EMCLI.A Cloud solution portfolio that illustrates the following characteristics requires the stringent compliance to standards and complete automation provided by Enterprise Manager:A tenant user gets just a simple portfolio of business application cloud services presented in unified environment providing flexible cloud infrastructure whilst Enterprise Manager obscures the complexity of managing the powerful standards-based cloud platform in 19 worldwide tier 4datacenters.∙ A broad spectrum of business applications to support the core business processes and operations. Examples include Sales, Marketing, Financials, Human Capital Management,and Supply Chain Management.∙Platforms and frameworks to develop and run custom processes, applications, and integration components.∙Reliable and highly available infrastructure components to support the quality of service requirements of the business.∙Capabilities to support the build-time and runtime Cloud management operations including business management, operations management, model management,orchestration, provisioning, security and policy management.∙Choice of architecture in terms of deployment and engineering. Deployment choices should include on-premises and off-premise deployment models..Operational ManagementEnterprise Manager has reduced administration and operational management costs by at least 35% for Oracle Cloudops (Cloud Operations team) besides increasing productivity, improving collaboration and simplifying proactive Cloud management. The use of Enterprise Manager in Oracle Cloud management can be briefly categorized as follows:»Service Availability Management»Application Performance Management»Cloud Security, Standardization & Risk Management»Service Lifecycle Management»Cloud AutomationService Availability ManagementEnterprise Manager provides comprehensive, robust and integrated monitoring of diverse Oracle Cloud assets - from applications to middleware, database, operating systems and hypervisors to hardware components; rolled up as services. It also provides tenants with visibility into all the activity in their accounts, by service, for optimum usage, availability and application performance. Service Dashboards and Reports present SLA breakdowns to executive, devops and CloudOps line management, with drill downs to specifics of a service outage.Application Performance ManagementOracle Cloud provides the best service levels for Cloud applications through business-driven application management using Enterprise Manager. Daily reports chart varied business metric trends for CloudOps to proactively catch anomalies like latency increases by a millisecond, or Identity Management (IDM) account creation has increased 20%. Real User Experience (RUEI) complements infrastructure monitoring with measurements of the actual application usage and response, as experienced by the end user for issue analysis and usage tracking. Service beacons are defined to perform synthetic tests of some basic transaction flows to ascertain service availability and performance. Performance issue diagnosis is performed using WebLogic Server and Database diagnostic interfaces with drill downs to poor-performing SQL or Java code.Cloud Security, Standardization & Risk ManagementConfiguration compliance is an important aspect of managing the Cloud. Most security breaches happen owing to faulty configuration such as default passwords, relaxed file permissions, an open port or an old techstack. Compliance inherently demands certain disciplines be submerged in the entropy of Cloud. To manage compliance, Oracle Cloud administrators have created gold Service baselines and gather configuration collections in Enterprise Manager for Oracle Cloud Services. Any deviations from the baselines triggers compliance violation notifications to be addressed to mitigate risk. Compliance scores for CPU patches and STIG standards are used to prioirtize compliance projects targeted to mitigate risk.Service Lifecycle ManagementEnterprise Manager has a complete cloud lifecycle management solution to quickly set up, manage and support Oracle Cloud Services. Incident management, Problem Management, Change Management and day-to-day operational tasks of SaaS and PaaS services are performed in Enterprise Manager. Cloudops manage Cloud scale by managing exceptions reported in daily/weekly reports like “Configuration dr ifts from standard Service GoldI mage”, “Service Pod Health Check Reports”, “Service SMTP health check”, “Patch Status of Services”, “Service Diagnosis reports”, “Password Randomization Jobs”, “Upgrade/Patch Logs Analysis”, “Business Metric s trend charting” etc.Cloud AutomationLike any enterprise cloud, Oracle Cloud is managed by total automation. From service provisioning, service maintenance to service sale out, all service lifecycle management tasks are automated. Oracle Cloud administrators make extensive use of Enterprise Manager extensibilities like EMCLI, metric extensions, the Job system, dynamic procedures and configuration extensions for large-scale operations on thousands of tenantservices. Cloud operations like “Service DR setup” or “S cale-up WebLogic cluster” or “E nable synthetic monitoring on a Service” are all orchesterated through Enterprise Manager.ConclusionOracle Cloud is efficiently managed by Enterprise Manager, which provides complete, integrated and business-driven enterprise Cloud management solution. Enterprise Manager scales to manage:»Thousands of concurrent self-service users»Tens of thousands of tenants, 25 million users»Hundreds of thousands service instances»7 Million+ infrastructure targets» 2 Million + automation job executions per day»11 Million+ Synthetic tests per day» 3 Million+ events processed/day»Tens of thousands of Compliance Evaluations per day»Five-Nine (99.999%) availability»Full disaster recoveryReferences1. MOS Note 1553342.1 - Oracle Enterprise Manager 12c Configuration Best Practices2. MOS Note 1929586.1 – Patch Set and Critical patch Update3. MAA Best Practices Document4. Whitepaper: Deploying a highly available Oracle Enterprise Manager 12c5. Whitepaper: Strategies for Scalable, Smarter Monitoring using Oracle Enterprise Manager Cloud Control 12c6. Patching Agent : Follow Blog: Simplified Agent and Plug-in Deployment7. Website: 8. Enterprise Manager Cloud Control Advance Installation guideOracle Corporation, World Headquarters Worldwide Inquiries 500 Oracle ParkwayPhone: +1.650.506.7000 Redwood Shores, CA 94065, USAFax: +1.650.506.7200Copyright © 2015, Oracle and/or its affiliates. All rights reserved. This document is provided for information purposes only, and the contents hereof are subject to change without notice. This document is not warranted to be error-free, nor subject to any other warranties or conditions, whether expressed orally or implied in law, including implied warranties and conditions of merchantability or fitness for a particular purpose. We specifically disclaim any liability with respect to this document, and no contractual obligations are formed either directly or indirectly by this document. This document may not be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without our prior written permission.Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group. 0615White Paper Title : Oracle Cloud Management by Enterprise Manager December 2015Author: Akshai DuggalContributing Authors: [OPTIONAL]C O N N E C T W I T H U S/oracle/oracle/oracle。
Oracle 21世纪企业集成解决方案指南说明书
Business Integration for the 21st Century Peter BelknapORACLE PRODUCT LOGOProgram Agenda•21st Century Integration Landscape •Oracle SOA Suite and BPM Suites –Industrial SOA for Integration Everywhere –Business-Driven Process ImprovementIntegration or Extension? Oracle Fusion Middleware“Extension”Platform“Integration”PlatformMeeting the “Data Tsunami” ChallengeMuch more data, many more events need to be handledmuch more quicklyNew and existing business processes need to be integrated reliably, securely,and inexpensivelyOperators and customers expectincreased visibility and control IT must respond with a flexible, secure, scalable infrastructureAd Hoc Point to Point IntegrationStandards-based Service Oriented ArchitectureDeclarative Re-use Building a Successful Service-Oriented ArchitectureVisibility, Control, AnalyticsEnterprise SecurityOracle Identity Access, RiskMgmtOracle SOA GovernanceCanonicalServicesLoosely Coupled Layered Architecture Core Business ApplicationsOracle BPEL PM,CEP Oracle AIAOracle Service Bus ERP , Custom ApplicationsExadata Cloud Application Foundation on ExalogicSUNOracle BI, BAM WebCenterIntegration Landscape•Complete•Best-in-Class •Integrated •OpenOracle Fusion MiddlewareUser Engagement User EngagementIdentity Management & Security Identity Management & SecurityBusiness ProcessManagement Management ContentManagement Management BusinessIntelligence IntelligenceService Integration Service Integration Data Integration Data IntegrationDevelopment DevelopmentTools ToolsCloud ApplicationFoundation FoundationEnterprise EnterpriseManagement ManagementWebSocialMobileKey Usages Of SOA in Fusion AppsUsage Category Description UsageProcess Customization (for Developers) Allow developers to customize process to suitbusiness needs.•Simple sequential BPEL process steps.•Customer can modify steps.Human Workflow Support human workflow with complexapprovals including approval hierarchies •Most important usage by many fusion apps•Manual task or approval tasksIntegration Decouple external systems. Allows bringingnew systems online without changing coreProcesses •Mediator is an example•End to End Integration •Flexibility with Rules based routingProcess Composition (for Business Analysts) Make it easier for business analyst to modifyprocess at runtime.•Business Analysts arrange orchestrationflow of “pre-canned” tasks / processes•Process Composer use caseLong Running or Batch Processing Support Batch processing and other longrunning jobs as scheduled /async processes •Executed as a batch or is a long running process•Processing itself happens outside •Orchestration, fault handling and compensations are keyEvent Processing Support event processing using SOA model. •Event driven integration•Events to add flexibility and loose coupling2. Process DecompositionDecomposition of Long Running Processes• BPEL for main process and subprocesses • Rules• Mediator (dynamic routing) • Asynchronous services1. Human ApprovalsHuman Interactions within the process (most prevalent)• BPEL (or BPMN)• Human Tasks/AMX with HCM integration• Rules for dynamic routing • ADF Task flows• Customizable Worklist• Actionable email notifications3. Business EventsDecoupling using business events•Events publication from ADF •Event Delivery Network•Async invocation of process, human tasks or ESS jobs5. Enabling Edge Integration4. Batch jobs6. Synchronous MicroflowsSynchronous Processes•Synchronous processes•Dynamic processing using rules •Straight through processing with BPEL & ADF services •SDO entity variablesLong Running batch jobs•Scheduler for time basedscheduling and job incompatibility •BPEL for orchestration•Asynchronous Services/jobs •ODI integrationEdge Integration•Dynamic endpoints•Support multiple protocols •Mediator with differenttransformations based on end point8. Process CompositionFusion Micro Patterns7. Activity GuideMultistep human interactions•BPEL/BPMN processes with human tasks•Activity guide metadata •ADF task flows•AG controls in apps UIBusiness user driven process composition•BPMN based process templates •BPMN/BPEL Rules, human workflow •BPM composer for customization •Service catalogApplication Integration ArchitectureSolutions Which Deliver Sustainable Integration•Powered by Oracle Fusion MiddlewareLeverage Oracle’s best -in-class, standards-based SOA Middleware platform•Reference Process ModelsOptimize business performance leveraging Oracle’s extensive experience and best practices•Pre-Built IntegrationsAccelerate implementation of discreet business processes using AIA’s pre -built integrations across Oracle Applications•Foundation PackBuild cross-functional business processes across any of your applications utilizing a standardized approach and methodologyComplete. Open. Integrated.BPM SuiteProcess ManagementRegistry &Repository Service ManagementSOA Governance ProcessIntegration B2B IntegrationSOA Suite ODI SuiteBulk DataProcessing Data QualityFoundation PackReference ProcessModelsCommon Objects & Standard Shared ServicesSOA/BPM Framework &MethodologyDeveloper UtilitiesPre-Built IntegrationsPackaged Integration Accelerators For Specific Applications & Processes:Process Integration Packs and Direct IntegrationsArtifactsPoliciesImplementationEfficiency, Reuse & ConsolidationSecuritySystematic Enforcement of PolicyDefinitionBusiness/IT AlignmentMetadataMonitoring andManagementProduction Assurance for SLAsOracle Governance SolutionComplete solution for Application Integration ProjectsArchitects Business OwnersDesignersITOperationsRelease ManagementDevelopers &IntegratorsSecurity EngineersConsumer Provisioning& LEADING IDEs & LEADING IDEs& ENTERPRISE GATEWAY & ENTERPRISE GATEWAYEnterprise Repository for Oracle Fusion Applications https://Program Agenda•21st Century Integration Landscape •Oracle SOA Suite and BPM Suites –Industrial SOA for Integration Everywhere –Business-Driven Process ImprovementConnect & normalizeAdaptersERP MAINFRAME SERVICES PARTNERSDB •Over 200 adapters•For all technologies & applications: EBS, PSFT, Siebel, SAP , Databases, Files, FTP , JMS, MQ, B2B, etc. •Graphical introspection of target •Abstract complexity of underlying applications•Convert from proprietary formats to XMLTPS TPSmsg msg/s /s1,000’sservicesservices Virtualize, route, scaleOracle Service BusERPMAINFRAMESERVICES PARTNERSDB SERVICE BUS SERVICE BUS•Foundation for yourshared services infrastructure•Convert from one protocol and format to another, on the fly (ex: consume a Mainframe service from .NET over SOAP)•Add scalability through cachingOracleCoherence Data GridWorklistPortalMS Office MAINFRAME Online ShoppingMobile DevicesApplicationInstance 1ApplicationInstance 2Application Instance 3Proxy Services•Enforces agility by replacing direct coupling with a flexible virtual endpoint to the consumerXBusiness Services•Access service from multiple endpoints•Ensures high availability when apps go down and during maintenance ORACLE SERVICE BUSOracle Service Bus - Service Virtualization,Automated Service PoolingOracle Service BusKey Ingredients for an Enterprise Service BusUnified SecurityFTP MQ Adaptive MessagingSMTP MetadataReportingSLA AlertsContent Based RoutingTransformation Import / Export Validation Service ManagementService VirtualizationConfiguration Framework HTTP/S JCAJMSFile Change CenterMonitoringWSRM Tux EJBService ChainingREST AuthenticationAuthorization Identity Sign/EncryptJDBC AQ SAP EBS PSFT JDE SBLReduced RiskService results available even when application is downImproved PerformanceEliminate repeated application requests for static dataPredictable ScalabilityCached results maintained internally resulting in less dependence on 3rd party service provider availabilityScalability & PerformanceService Result Cache – Coherence in the boxCRM SalesERPBusiness AppsXCloud Vendor ACloud Vendor BENTERPRISE SERVICE BUSResult accessedfrom cache Result accessed from cacheERP MAINFRAME SERVICES EVENTSPARTNERS DB BPEL & BPMN BPEL & BPMN BUSINESS RULES BUSINESS RULES HUMAN WORKFLOW HUMAN WORKFLOW SERVICE BUS SERVICE BUSOrchestrateStandards-based BPEL & BPMN•Build process logic•Involve people(human workflow) as well as systems •Self-describinggraphical design-time environment•Build compensation logic for non-transactional servicesUnified Platform for Services, Events & Processes Unified Process PlatformProtocol BindingsDeclarative Composite AssemblySOA Composite Editor•Drag & Drop•Visual•Single Unit ofDeployment•Easyversioning•Based onSCA standardBuilt-In Business RulesHuman Workflow ServiceWorkspace applicationHuman Workflow ServiceWSDLTaskHuman Workflow MetadataProcess(BPMN/BPEL)ADF task flow to show work item details in workspaceTaskCompletedAssign TasksSupervisor Task Assignee Process OwnerTask Metadata including routing slip, AMX stage and list builder configurationsRules engineProcess ComposerBusiness Analyst-Driven Process ModelingSimple Drag andDrop ProcessModelingLeverage Existing Models •Import Visio and XPDL modelsBusiness IT CollaborationSingle Model From Modeling to ExecutionStudio – Comprehensive IDE for Developers Empower business analyst withcatalog of implementationartifactsSingle BPMN 2.0modelSimulate Before You ImplementKPIsRich set of ChartsQueue Buildups and What-ifsAdd security, management, governance and eventingCOMPLEXEVENT PROCESSINGBAMEM JDev WebPOLICY MANAGERERP MAINFRAME SERVICES PARTNERS DB BPEL & BPMN BPEL & BPMN BUSINESS RULES BUSINESS RULES HUMAN WORKFLOW HUMAN WORKFLOWSERVICE BUS SERVICE BUSDATA INTEGRATOR DATA INTEGRATORGOLDENGATE GOLDENGATEEVENTSClearly separates: •process logic from•security concernsCentralized policy management & visibility: versioning, rollback, auditing Global, Policy-driven SecurityAttach/detach policies at design-time…(right in JDeveloper)Or attach/detach policies at runtime, after deployment(in Enterprise Manager)•All-in-onemanagement console•End-to-end (process) instance tracking•No explicit work required fromdeveloper to enable tracing •Unified error handlingBPELHuman Workflow Routing Business RulesExternal ServiceDrill downDrill-down intocomponentsOut-of-the-box visibilityEnd-to-end instance tracking in Enterprise Manager•Unified exception handling framework (“Error hospital”):•Search•Delete•Recover failed instances(individual or batch)•Directly access corresponding log entriesRecoveryActionRecoveryscreenEdit payloadFaults &exceptionslogExceptions HandlingMonitor ExpressInstrument BPEL processesright from JDeveloperAvailable Monitor Objects:Interval / Counter / CaptureFeed into pre-builtBAM dashboards(or build your own)BI Views for BPMN processesOracle Business Activity Monitoring Meaningful, Event-driven Visibility for Business Users Monitor business processes & services in real-timeKey Performance Indicators (KPIs)Service-Level Agreements (SLAs)Analyze events as they occurCorrelate events & KPIsIdentify trends as they emergeAlert users to bottlenecks & solutionsAct on current conditionsEvent-driven alertsReal-time dashboardsBPEL processes & web services integrationReal Time Data CollectionOracle BAMJ M S B u s MS MQ IBM MQ Tibco Oracle AQSonic JMS 1.1 D a t a b a s eSQL ServerSybase Oracle JDBC File SystemWeb ServiceBPM/BPEL/OSB/B2B Oracle E-Business Real-time alertsReal-timedashboard/reportsD a t a S o u r c e sCall Web ServiceDB2 Enterprise ManagerBAM Adapter ODIOracle BAM: Architected for IntegrationInternetBAM DashboardsWebApplicationsStartPage ActiveViewer ActiveStudio Architect AdministratorReportServeriCommandOracle Database(Grid)BAM Data & Metadata External Data ObjectsWebServicesInternetEnterprise Integration FrameworkApplication ServerBIWeb ServicesJMS ConnectorBAM AdapterADFBAM DataControlADF Pages with DVTBAM ServerEventEngineActions & Escalations Notification ServicesReportCacheSnapshots & Change Lists Memory / DiskActiveDataCacheViewSets API KernelDataSets DataStorageEngineODIDatabasesOLTP & Data Warehouses Mobile DevicesData & Metadata Import & ExportBPELBPMMessage Queues CEPOESBNorwegian Shipping Insurance CompanyProject Metrics:Single developer (OSB, jQuery)Just a couple of months to productionWebcache HTTPSOAPDMZ OpenText eDocsOSBIntranetDMInternetjQueryRESTCRMCustomer dataclaim documentsUsed Oracle SOA Suite to provide single-view across internal and cloud applications•65,000 suppliers and 1,200+ retailers worldwide: Wal-Mart, Amazon, Rite-Aid, Ford, …✓Oracle Fusion Middleware reduced processing times by 10x✓Multi-tenant single instance installation provides economies of scaledocument enrichment, transformation and routing•Purchase orders (PO) •Advanced Shipping Notices (ASN) •Catalogs•Inventory inquiries •etc.retailers suppliersOracle B2BEDIEDIOracle B2BProject Metrics:•50,000 business docs/hr (peak)•600,000 BPELinstances/hr (peak)•Growing fast (over 7 million BPEL instances on Black Friday!)•Dehydration store close to 1TB a daySPS CommerceOracle SOA Suite used to build a public cloudMobile Applications built on Oracle SOA SuiteEvent Processing Use Cases Financial Services Homeland SecurityAlgorithmic trading Fraud Detection, digital marketing•Filter, correlate and aggregate events from high volume streams with consistent low latency •Handle disparate event and data sources•Facilitate time window processing•Recognize and act on complex patterns•Manage your data before it reaches your database•Protect your core business processes from the “data tsunami” Threat detection, sensor datacorrelation, emergency responseTelecommunications & ServicesMeter alarm filteringPower restoration confirmationMobile work unit tracking UtilitiesOracle Event Processing (OEP)❑ Lightweight OSGI-based container❑ SQL99-compliant Continuous Query Language (CQL)❑ Tight integration with Oracle Coherence and Oracle Spatial❑ Deploy on a high-end server in the datacenter or on a small server in remote locationsLocation Proximity Tracking Highlights “Interest” Area (ZONES)Smart Grid - UtilitiesFinancial Services - Best ExecutionOracle SOA Suite directionsOracle has the most complete stack today Oracle has the most integrated stack today → No technology disruption in 12cFocus areas:→ Industrial SOA→Developer’s productivity→Integration Everywhere (Cloud, Mobile, …)Industrial SOA“heavy duty”“Individual manual labor is often replaced by mechanized mass production and craftsmen are replaced by assembly lines.“1.More out-of-the-box productivity:1.Templating2.Zero-config dev environments3.Mapping improvements2.Performance & Scalability3.Diagnosability4.Built-in GovernanceIndustrial SOAExalogic: Extreme Performance SOA and BPM Platform •High-Performance Compute Nodes•Integrated Storage•InfiniBand Interconnect Fabric•Tuned and Optimized SOA Platform:520ms•Faster XML Processing9X •Scalability optimizations•Platform Optimizations58msOracle SOA and BPM Suites - Summary•The most complete & integrated offering •Mature, widely adopted – and growing faster than any other solution•Stable roadmap→The leading and most capable integration stack→Technical Documentation:/cd/E23943_01/soa.htm。
Oracle人力资源管理软件的基本功能模块
方法/步骤
目标管理 Oracle HCM Cloud目标管理提供组织一个最好的跟踪和管理组织与个人目标的解决方案。同时 Oracle HCM Cloud目标管理与人才管理的整体流程紧密地集成在一起。 Oracle HCM Cloud目标管理可以在组织的不同层级上设定和跟踪各种目标。支持正在进行的整 年绩效考核面谈。业务领导传达高层的目标计划，员工和经理可以基于此设立目标并同组织的目 标保持一致。个人发展计划可以让员工跟踪自己的个人成长和职业生涯发展。 员工间的协同平台可以共享目标，同时协同工具平台套件可以连接目标到共享的工作空间。 Oracle HCM Cloud目标管理可以和Oracle HCM Cloud绩效管理无缝地集成，从而能够在特定期 间评估和查看目标的达成情况。
方法/步骤
人才盘点 Oracle HCM Cloud人才盘点模块通过使用人才概要提供最完整和集成的人才盘点解决方案。人 才盘点可以供管理层和HR专员评价人才，定位风险区域，开拓上升通道，且降低人才流失风险， 预估宏观组织变化趋势，评估人才详细情况，例如人才潜力和流失风险。
方法/步骤
竞赛管理 通过竞赛管理，可以将个人的动机和行为和业务成果有效关联，通过运行竞赛，让员工能更好地 完成工作任务，通过建立一种有趣的工作方式来完成最终业务目标
内容介绍
作为全球最为专业的人力资本解决方案提供商， Oracle公司一直致力于研发全球最为完整、最 为开放及最易集成的解决方案。只有Oracle能够提供全面、专业、完整的人才管理云解决方案， 只有Oracle能够覆盖包括核心人力资源管理、全球薪酬管理、社交寻源、招聘与报到管理、绩效 管理、目标管理、人才盘点、继任计划、培训与学习发展、竞赛管理、声誉管理、社交络等从基 础人力资源管理到专业人才发展的完整的解决方案。
Oracle的SiebelCRM解决方案
Oracle CRM：全球最好的客户关系管理系统
跨行业解决方案
商业智能
客户数据整合
商业流程整合
套装
行业解决方案
托管式
定制
交付选择
最多的成功案例 最佳的销售和最多的实施最佳的客户结果跨行业最多的客户成功
为什么 Oracle 是最佳的合作伙伴
最强功能的软件
最有力的专家意见
洞察力驱动升等销售和交叉销售
洞察力驱动的销售绩效
行业特定的线索到签单流程
GARTNER 2004 CRM
评估象限 地位
2004 IDC 营销和销售联合CMO奖
2004 Gartner 评估象限和地位
METASpectrum 2004 CRM 应用套件评估
行业荣誉
“The real battle is for the number two spot.”—Liz Roche, META
现场服务
B2B CRM
客户服务 & 支持
B2C CRM
销售
Oracle/Siebel
Oracle/Siebel
Oracle/Siebel
Oracle/Siebel
Oracle/Siebel
Oracle/Siebel
CDI
最全面的应用功能
公认产品-分析师
划算的全面CRM，可被业务用户配置
Shared service offering共享服务部署迅速内置分析和CRM最佳实践
On Premise
Private Hosted
On Premise & Hosted Combined
Shared Hosting
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
LDAP
客户端
•
伸缩性
• • Oracle LDAP
•
高可用性
• •
服务器
Oracle
• •
安全性
• 基于访问控制列表(access control lists)的精密安全模型
外部认证 与Radius集成
LDAP
管理平台
网络连接
扩展性 (Plug-in 框架)
• • Oracle
Oracle Identity Manager（身份管理器） 安全的企业级用户管理解决方案
Oracle Identity Manager能 做什么? • 管理用户访问权限的生命周 期 • 自动管理用户身份 • 自助服务 • 提供一个身份供应架构，从 而增强内部“谁-能做什么” 的访问控制
用户供应是任何企业身份和访问管理战略的核心
ou=DivA ou=DivB ou=DivC
ou=Division C, o=Company, c=de
OVD + OAM 架构
身份管理方案的实施策略
用户身份存储
IdM在Oracle融合中间件中的位置
Content Management
Web Content, Digital Assets, Documents, Records, Images
Oracle提供完整的IDM解决方案
身份管理
身份生命周期管理 角色管理 组织结构管理 供应与流程管理 密码管理
访问管理
4 5
问题 #2: 访问和密码管理
1 2 3
想用SSO或用户的AD密码来使访问企业应用变得更简 单；
企业应用用户忘记了密码，需要一种方式让他们重设 密码；
想要使用SSO，但必须确保能了解用户是谁并防止欺 骗行为； 想将企业应用对外显示给web和VPN上所有用户，但缺 乏信任；
4 5
需要对企业应用应用数据进行严密的访问控制 (在用户 界面和数据库层)
定期检查及合规性报告
Oracle Identity Manager
“基于web & Actionable” 定期访问 审查 报告 – 现在的&历史的“谁可以访问 什么?” 报告 – “每个访问请求是谁批准的?”
Directories Applications
员工&供应商 经理 资源所有者/系 统管理员 安全/审计专家
基于网络的用户自助服务
Oracle Identity Manager
添加职责
Oracle Identity Manager
个人申请 & 去除职责 每个职责的审批流程是动态的 经理通过自助服务完成审批
修改密码
员工 承包商 供应商
自助服务密码重设
去除职责
Oracle Database
审计及合规性管理方案
检测、报告并移除不正当的账户
利用Oracle BI Publisher生成合规报 告
Databases
Oracle Database
OIM所提供的开箱即用的连接器
Database Servers Directory Servers
Enterprise Applications
Enterprise Messaging
数据库
用户数据源的整合——目录服务虚拟化
Microsoft AD Forest
dc=Division A, dc=Company, dc=de
Tivioli Directory Server
dc=Company, dc=de
dc=Division B, dc=Company, dc=de
Sun ONE Directory
解决方案
Oracle Identity Manager
Option: Oracle Role Manager
自助服务, 密码重设 & 账户申请
待解决的问题
需人工完成新的职责请求，耗时久 需人共完成新的访问/职责审批，且不可审计 用户忘记了密码，需要一种方式让他们重设密码
解决方案
Oracle Identity Manager
供认证与授权的 用户身份
Access Server
加密的 目录服 务访问 协议
LDAP Server
供认证与授权的 安全策略
• • •
20
统一访问控制架构 (认证, 授权和审计) 强认证集成 (多因素认证与欺诈检测,基于策略的认证授权) SSO, 跨域
Strong Auth Server
端到端的单点登录解决方案 －Oracle Access Manager（Oracle访问管理器）
• Oracle成功案例分享
Oracle推荐的身份管理解决方案
Oracle访问控制&SSO 架构
Portal
http(s) http(s)
WebGate
Employees Partners Customers WebGate Vendors
OA应用 邮件系统 其他应用 其他Apps
加密的TCP/IC协议
审计 & 合规
Identity Management Suite
管理
Enterprise Manager IdM Pack
Oracle身份管理对异构环境的支持
“Of all the large platform vendors, Oracle, Novell, CA and BMC seem the most committed to providing significant support for heterogeneous environments.“ - Ray Wagner, Gartner, October 2006
修改访问权限
终止帐户访问
可信的用户源 应用（HR）
* X *
供应服务 引擎
EBS
门户
X *
Exchange
X
适配器工厂
审计系统
OA
其他应用
X
……
自动化用户 & 职责管理
待解决的问题
创建用户帐户和授权应用职责是人工完成的，耗 费高 调动难以处理，不能足够快的消除不再使用的权 限 在终止时去除访问和职责要花费太长时间，且有 很多细微问题难以全部解决 成千的孤立/幽灵账户难以被检测和消除
强认证&基于风险的授权分析
目录服务
身份存储 身份虚拟 身份同步
细粒度授权服务
单点登录 联邦认证 Web Services安全
操作系统安全
平台安全
Application server 安全
Fusion Applications 安全
审计 & 合规
审计 报表 分析 防欺骗
审计核查 职责分工
套件管理
服务管理 性能 配置管理 自动管理
Portals
Application / Web Servers
Applications
Groupware
Directories
Operating Systems
ACF-2 & TSS RACF & IOS/400
议程
• Oracle身份管理战略
• Oracle身份管理解决方案 • Oracle身份管理解决方案的市场地位
“安全性是业务流程的产物”
大型机 员工 TIM/TAM IBM目录服务器
业务实体
公司门户
数据平台 客户
业务角色
Oracle 互联网目录 Microsoft AD
企业管理软件
微软网络服务
文件和打印件
Oracle 单一登录
供应商/合作伙伴
Lotus Notes / Outlook
企业的IT现状…
• 企业账户存储在哪里 • 帐户生命周期如何管理
Oracle身份管理套件
身份管理 访问管理
“身份管理2.0” Role Manager Adaptive Access Manager Entitlement Server Web Services Manager Virtual Directory
目录服务
核心平台
Identity Manager Access Manager Identity Federation Enterprise Single Sign-On Internet Directory Authentication Service for OS
<Insert Picture Here>
端到端的身份管理解决方案
袁京声(jingsheng.yuan@) 中间件资深咨询顾问, Oracle Fusion Middleware
议程
• Oracle身份管理战略
• Oracle身份管理解决方案 • Oracle身份管理解决方案的市场地位
客户需要…
• 业务用户
业务用户
IT人员
信息安全与审计
• 需要尽快得到用户帐户/职责 • 想让访问企业应用和其它应用变得简单 • 最少化或同步密码 • IT 人员 • 需要为以下人员简化用户管理: • 员工 • 客户 • 合作伙伴 • 自动化工作流中的人工流程 • 需要简便的工具来管理IT系统 • 信息安全与审计 • 需要了解风险和保护对象 • 防止数据受损 • 用少量时间检查用户访问 • 需要 “谁访问了（或访问过）什么?”的报告
企业的信息安全性已发生了改变
1996
• 黑客爱好者
• 网站破坏 • 病毒
Now
• 罪犯
• IP 盗窃
• 身份盗窃 • 持续的威胁
• 不频繁的攻击
安全漏洞如今成为头版新闻
合规性要求不断增多
美国
• • • • • • • • • • 健康保险可携性及责任性法案(HIPAA) 联邦法规第21章第11部分 总统管理与预算局公告A-123 美国证交会和国防部的记录保留要求 美国爱国者法案 Gramm-Leach-Bliley法案 美国联邦量刑指南 美国反海外腐败法 关于市场工具的第52款 （加拿大） 欧盟隐私法令