Integrating Oracle Apps 11i with MS AD 2008

After the release of MS Windows 2008, customers are planning to upgrade their MS AD 2003 deployments to MS AD 2008 (as part of OS upgrade to MS Windows 2008) to achieve the benefits provided by MS Windows 2008. For the companies, which are using Oracle Applications 11i or Oracle Internet Directory 10g products, and have integrated these products with MS AD 2003 to achieve Single Sign-On will not be able to keep the certification intact, after upgrade of MS AD 2003 to MS AD 2008. Reason being, Oracle Apps 11i or Oracle Internet Directory 10g are not certified with MS AD 2008 as of now.

Metalink Note – Is OID 10g Compatible with Microsoft Active Directory 2008 [ID 944298.1] states that OID 10g is not certified with MS AD 2008. However, OID 11g is certified with MS AD 2008.

So, as OID 11g is not yet certified with Oracle Apps 11i, integration deployments with Oracle Apps 11i/OID 10g cannot be integrated with MS AD 2008.

Well, there is a way around to achieve this. However, that will involve introduction of additional component I.e. Oracle Identity Manager (OIM), a component of Oracle Identity Management Suite, provides a identity provisioning solution for Oracle and non-Oracle products. Oracle Identity Manager is certified to use with Oracle Internet Directory 10g and MS Active Directory 2008.

Oracle Identity Manager provides connectors for OID 10g and MS AD 2008, which allows users created in MS AD 2008 to be reconciled into OIM, which in turn will propogate user information to OID. In turn, OID will propagate those changes to Oracle Apps 11i FND_USER table.

References:

• Metalink Note: Is OID 10g Compatible with Microsoft Active Directory 2008 [Doc ID 944298.1]
• Oracle Identity Management