Policy Server Guides › Policy Server Configuration Guide › User Directories › How to Configure an Oracle Directory Server Enterprise Edition User Directory Connection

How to Configure an Oracle Directory Server Enterprise Edition User Directory Connection

You can use Oracle Directory Server Enterprise Edition to function as a CA SiteMinder® user store. The following process lists the steps for creating the user store connection:

1. Ping the user store system.
2. Configure the Oracle Directory Server Enterprise Edition user directory connection.

Ping the User Store System

Pinging the user store system verifies that a network connection exists between the Policy Server and the user directory or database.

Note: Some user store systems may require the Policy Server to present credentials.

Configure Oracle Directory Server Enterprise Edition User Directory Connections

You configure a user directory connection to let the Policy Server communicate with the CA SiteMinder® user store.

Follow these steps:

1. Click Infrastructure, Directory.

   Objects related to user directories appear on the left.

2. Click User Directories.

   The User Directories screen appears.

3. Click Create User Directory.

   The Create User Directory screen appears and displays the required settings to configure an LDAP connection.

   Note: Click Help for descriptions of settings and controls, including their respective requirements and limits.

4. Complete the required connection information in the General and Directory Setup areas.

   Note: If the Policy Server is operating in FIPS mode and the directory connection is to use a secure SSL connection when communicating with the Policy Server, the certificates used by the Policy Server and the directory store must be FIPS compliant.

5. Configure the LDAP search and LDAP user DN lookup settings in the LDAP Settings area.
6. (Optional) Do the following in the Administrator Credentials area:
   1. Select Require Credentials.
   2. Enter the credentials of an administrator account.

      Note: Oracle recommends using an administrator account other than cn=Directory Manager. Using cn=Directory Manager can cause performance issues due to security policies applied to this account. Create a user with sufficient privileges to manage the directory and specify that user in Username.

7. (Optional) Specify the user directory profile attributes that are reserved for CA SiteMinder® use in the User Attributes area.
8. (Optional) Click Create in the Attribute Mapping List area to configure user attribute mapping.
9. Click Submit.

   The user directory connection is created.

More information:

LDAP Load Balancing and Failover

Define an Attribute Mapping