1. Developing and Customizing Applications for Oracle Identity Governance
  2. Reports and Audit
  3. Configuring Reports

25 Configuring Reports

You can configure and use reports when standalone Oracle Analytics Server is deployed.

This chapter describes how to configure Oracle Identity Governance reports. It contains the following topics:

25.1 What are Oracle Identity Governance Reports?

Oracle Identity Governance reports enable you to use Oracle Analytics Server (7.0) as the reporting solution for Oracle Identity Management products.

Note:

Oracle Identity Governance reports are classified based on the functional areas, for instance, Access Policy Reports, Request and Approval Reports, Password Reports, and so on. It is no longer named Operational and Historical.

Oracle Identity Governance reports provide a restricted-use license for Oracle Analytics Server (7.0) and easy-to-use reporting packages for multiple Oracle Identity Management products.

As shown in Figure 25-1, Oracle Identity Governance reports use Oracle Analytics Server to query and report on information in Oracle Identity Management product databases. With minimal setup, Oracle Identity Governance reports provide a common method to create, manage, and deliver Oracle Identity Governance reports.

Figure 25-1 Oracle Identity Manager Reports Architecture

Description of Figure 25-1 follows
Description of "Figure 25-1 Oracle Identity Manager Reports Architecture"

The report templates included in Oracle Identity Governance reports are standard Oracle Analytics Server (7.0) templates. However, you can customize each template to change its look and feel. If schema definitions for an Oracle Identity Management product are available, you can use that information to create your own custom reports.

Note:

Oracle strongly recommends creating back-up copies of the original default report templates before customizing them.

25.2 What is Oracle Analytics Server?

Oracle Analytics Server (7.0) is an Oracle's enterprise reporting solution and provides a single reporting environment to author, manage, and deliver all of your reports and business documents.

Utilizing a set of familiar desktop tools, such as Microsoft Word, Microsoft Excel, or Adobe Acrobat, you can create and maintain report layouts based on data from diverse sources, including Oracle Identity Management products.

25.3 Oracle Analytics Server (7.0) Licensing

Oracle Analytics Server (7.0) is included when you separately license Oracle Identity Governance.

Oracle Identity Governance can be separately licensed, independent of any Oracle Application Server or WebLogic edition. Oracle Analytics Server (7.0) is included when you separately license Oracle Identity Governance:

  • Shipped Oracle Analytics Server (7.0) reports. Layout changes are allowed, AND

  • Shipped or newly created Oracle Analytics Server (7.0) reports that are modified to access data from the existing Identity Management schema that has not been customized.

Note:

Oracle Analytics Server (7.0) is certified with this release of Oracle Identity Governance.

25.4 Installing and Configuring Oracle Analytics Server (7.0)

Install Oracle Analytics Server (7.0) software and configure Oracle Analytics Server with new schema option.

To install and configure Oracle Analytics Server (7.0):
  1. Install Oracle Analytics Server (7.0) software. See Installing the Oracle Analytics Server Software in Installing and Configuring Oracle Analytics Server.

    Note:

    Create a separate Middleware home directory for installing standalone Oracle Analytics Server (7.0). As a prerequisite, install WebLogic in the same Middleware home before installing standalone Oracle Analytics Server (7.0).
  2. Configure Oracle Analytics Server (7.0). After Oracle Analytics Server installation, configure only with new schema option using the MW_HOME/bi/bin/config.sh utility. While doing so, create a new OAS domain. See Configuring Oracle Analytics Server in Installing and Configuring Oracle Analytics Server.

    Note:

    During Oracle Analytics Server (7.0) configuration for Oracle Identity Manager, you must configure only Oracle Analytics Publisher. If you select other components during Oracle Analytics Server configuration, then the integration with Oracle Identity Manager may not work.

25.5 Integrating Standalone Oracle Analytics Server with Oracle Identity Governance

After installing and configuring standalone Oracle Analytics Server (7.0), you integrate the same with Oracle Identity Governance to run and view Oracle Identity Governance reports.

To configure Oracle Identity Governance reports in the Oracle Analytics Server (7.0) domain:
  1. Log in to Oracle Enterprise Manager of OIG.
  2. Click weblogic_domain and select System Mbean browser.
  3. In the System MBean, navigate to the path Application Defined MBeans, oracle.iam, Server: <oim_server_name>, Application: oim, XMLConfig, Config, XMLConfig.DiscoveryConfig, Discovery.
  4. Update the value of the BIPublisherURL attribute with Oracle Analytics Server URL.
  5. Click Apply.
  6. Create OIG system administrator user (for example xelsysadm) under the default security realm by using the WebLogic Administrative Console. To do so:

    Note:

    Creating OIM system administrator user under the default security realm is required to use the default security model of Oracle Analytics Server (OAS), which is Oracle Fusion Middleware security model. If you want to use some other security model, then refer the OAS documentation.

    1. Log in to OAS Server WLS Console http://HOST:PORT/console by using WebLogic admin credentials.

    2. Go to the Security Realms link, and click the myrealm link.

    3. Click the Users and Groups tab.

    4. Click New, and provide the credentials of Oracle Identity Governance system administrator user.

  7. Assign the BIServiceAdministrator application role to OIG system administrator user (for example xelsysadm) by using Oracle Enterprise Manager. To do so:

    1. Log in to OAS Server EM Console using WebLogic admin credentials.

    2. Click Weblogic Domain, and select Security, Application roles.

    3. Search for the default application role in the obi stripe.

    4. Click the BIServiceAdministrator role, and click Edit.

    5. Click Add, and search with the User type.

    6. Select the system administrator user, and click OK.

25.6 Configuring Oracle Identity Governance Reports

After standalone Oracle Analytics Server is integrated with Oracle Identity Governance, you can deploy the predefined reports for using them.

To deploy Oracle Identity Governance reports:
  1. Copy and unzip the predefined report MW_HOME/idm/server/reports/oim_product_BIPReports_12c.zip file to OAS_DOMAIN_HOME/bidata/components/bipublisher/repository/Reports/ directory.
  2. Add folder level permission to the BIServiceAdministrator application role to view and run the predefined Oracle Identity Governance reports. To do so:
    1. Log in to Oracle Analytics Server by using WebLogic admin credentials. For example - http://oas.example.com:9502/xmlpserver.

      Click the Catalog link at the top. The Oracle Identity Manager named folder under Shared Folders is displayed in the left pane. Select the Oracle Identity Manager named folder.

    2. Click the Permissions option under the Tasks window on the bottom left.

    3. Click the plus sign and perform a blank search on the available role.

    4. Select the BI Service Administrator role, and add to the right panel. Click OK.

  3. Logout as WebLogic user, login as Oracle Identity Governance system administrator user to Oracle Analytics Server console, and run the Oracle Identity Governance reports.

25.7 Configuring Data Sources for Running Oracle Identity Governance Reports

For running and viewing Oracle Identity Governance reports using Oracle Anaytics Server, Oracle Identity Governance JDBC connection and BPEL-based JDBC connection is required.

This section describes how to configure data sources for running Oracle Identity Governance reports. It contains the following topics:

25.7.1 Configuring Oracle Identity Governance JDBC Connection

To configure Oracle Identity Governance JDBC connection:

  1. Click the Administration link on the top of the Oracle Analytics Server Home page. The OAS Administration page is displayed.
  2. Under Data Sources, click the JDBC Connection link. The Data Sources page is displayed.
  3. In the JDBC tab, click Add Data Source to create a JDBC connection to your database. The Add Data Source page is displayed.
  4. Enter values in the following fields:

    • Data Source Name: Specify the Oracle Identity Manager JDBC connection name.

    • Driver Type: Select a driver type to suit your database. For example, you can select Oracle 11g or Oracle 12c to suit your database.

    • Database Driver Class: Specify a driver class to suit your database, such as oracle.jdbc.driver.OracleDriver.

    • Connection String: Specify the database connection details in the format jdbc:oracle:thin:@HOST_NAME:PORT_NUMBER:SID. For example, jdbc:oracle:thin:@localhost:7003:orcl.

    • User name: Specify the Oracle Identity Manager database user name having postfix as _OIM.

    • Password: Specify the Oracle Identity Manager database user password.

  5. Click Test Connection to verify the connection, and then click Apply to establish the connection.
  6. If the connection to the database is established, a confirmation message is displayed indicating the success. Click Apply.

    In the JDBC page, you can see the newly defined Oracle Identity Manager JDBC connection in the list of JDBC data sources.

25.7.2 Configuring BPEL-Based JDBC Connection

You can configure a secondary source for BPEL-based reports.

This section describes how to configure BPEL-based JDBC connection. It contains the following topics:

25.7.2.1 About Reports With Secondary Data Source

In Oracle Analytics Server, only one data source can be assigned to a report. The first data source is the Oracle Identity Manager data source. The following reports have a secondary data source, which connects to the BPEL database to retrieve BPEL data:

  • Task Assignment History

  • Request Details

  • Request Summary

  • Approval Activity

25.7.2.2 Configuring a Secondary Data Source for BPEL-Based Reports

To configure a secondary data source for BPEL-based reports:

  1. In the Oracle Analytics Server Home page, click Administration. The Oracle Analytics Server Administration page is displayed.
  2. Under Data Sources, click the JDBC Connection link. The Data Sources page is displayed.
  3. In the JDBC tab, click Add Data Source to create a JDBC connection to your database. The Add Data Source page is displayed.
  4. Enter values in the following fields:

    • Data Source Name: Specify the BPEL JDBC connection name.

    • Driver Type: Select a driver type to suit your database. For example, you can select Oracle 11g or Oracle 12c to suit your database.

    • Database Driver Class: Specify a driver class to suit your database, such as oracle.jdbc.driver.OracleDriver.

    • Connection String: Specify the database connection details in the format jdbc:oracle:thin:@HOST_NAME:PORT_NUMBER:SID. For example, jdbc:oracle:thin:@localhost:7003:orcl.

    • User name: Specify the SOA database user name.

    • Password: Specify the SOA database user password.

  5. Click Test Connection to verify the connection, and then click Apply to establish the connection.
  6. If the connection to the database is established, a confirmation message is displayed indicating the success. Click Apply.

    In the JDBC page, you can see the newly defined BPEL JDBC connection in the list of JDBC data sources.

25.8 Generating Oracle Identity Governance Reports

Oracle Identity Governance reports can be generated against the sample data source, Oracle Identity Governance JDBC data source, or BPEL-based JDBC data source.

This section describes how to generate Oracle Identity Governance reports. It contains the following topics:

Note:

Oracle Analytics Server can be accessed through the Identity Self Service for viewing the certification reports. But for all other reports, you must open Oracle Analytics Server explicitly to access the Oracle Identity Governance 12c reports.

25.8.1 Generating Sample Reports Against the Sample Data Source

To generate reports against the sample data source, you must first create the sample date source.

This section describes how to create the sample data source and generate sample reports against the sample data source. It contains the following topics:

25.8.1.1 Creating the Sample Data Source

If you want to see an example of what report data will look like without running a report against the production JDBC Data Source, you can generate a sample report against the Sample Data Source. You must create the Sample Data Source before you can generate sample reports.

25.8.1.2 Generating the Reports Against the Sample Data Source

After you create a Sample Data Source, you can generate sample reports against it by performing the following steps:

  1. Log in to Oracle Analytics Server.
  2. Click Shared Folders, Oracle Identity Manager Reports, and then select Sample Reports.
  3. Click View for the sample report you want to generate.
  4. Select an output format for the sample report and click View.

    The sample report is generated.

25.8.2 Generating Reports Against the Oracle Identity Governance JDBC Data Source

To generate reports against the OIG JDBC data source, navigate to Oracle Identity Governance reports by logging in to Oracle Analytics Server, and select an output format for the report you want to generate.

To generate reports against the Oracle Identity Governance JDBC data source:

  1. Log in to Oracle Analytics Server.

  2. Navigate to Oracle Identity Governance reports. To do so:

    1. In the Oracle Analytics Server Home page, under Browse/Manage, click Catalog Folders. Alternatively, you can click Catalog at the top of the page.

      The Catalog page is displayed with a tree structure on the left side of the page and the details on the right.

    2. On the left pane, expand Shared Folders, and navigate to Oracle Identity Governance. All the objects in the Oracle Identity Governance folder are displayed.

      You are ready to navigate to OAS and use the Oracle Identity Governance OAS reports.

  3. Click View for the report you want to generate.

  4. Select an output format for the report and click View.

    The report is generated.

Note:

See Oracle Analytics Server Documentation to learn more about Oracle Analytics Server.

25.8.3 Generating Reports Against the BPEL-Based JDBC Data Source

Some reports have a secondary data source, which is BPEL-based JDBC data source.

This section describes how to generate reports against the BPEL-based JDBC data source. It contains the following topics:

25.8.3.1 Reports With Secondary Data Source

The following four reports have a secondary data source, which connects to the BPEL database to retrieve BPEL data:

  • Task Assignment History

  • Request Details

  • Request Summary

  • Approval Activity

These reports have a secondary data source, which is the BPEL-based JDBC Data Source, and is called BPEL JDBC.

25.8.3.2 Generating the Reports Against the BPEL-Based JDBC Data Source

To generate reports against the BPEL-based JDBC data source:

  1. Ensure that a BPEL data source exists in Oracle Analytics Server. This BPEL Data Source must point to the BPEL database. See Configuring BPEL-Based JDBC Connection for more information about creating a BPEL data source.

  2. Log in to Oracle Analytics Server.

  3. Navigate to Oracle Identity Manager reports. To do so:

    1. In the Oracle Analytics Server Home page, under Browse/Manage, click Catalog Folders. Alternatively, you can click Catalog at the top of the page.

      The Catalog page is displayed with a tree structure on the left side of the page and the details on the right.

    2. On the left pane, expand Shared Folders, and navigate to Oracle Identity Manager. All the objects in the Oracle Identity Manager folder are displayed.

      You are ready to navigate to OAS and use the Oracle Identity Governance OAS reports.

  4. Click Open for the report you want to generate.

  5. Select an output format for the report, and click Apply.

    The report is generated based on the BPEL-based JDBC data source.

25.9 Configuring Certification Reports

Certification reports are implemented in Oracle Analytics Server. When using a standalone deployment of Oracle Analytics Server, Oracle Identity Manager reports must be deployed on Oracle Analytics Server.

This section describes how to configure certification reports. It contains the following topics:

Note:

  • Oracle Identity Manager reports must be deployed on Oracle Analytics Server. See Generating Certification Reports in Performing Self Service Tasks with Oracle Identity Governance for information about the default certification reports and generating certification reports.

  • If Oracle Analytics Server credentials and URL are not configured in Oracle Identity Manager, then the Reports tab in the Dashboard and the Export to PDF or Excel option in the Certification page are not available.

25.9.1 Configuring the Oracle Analytics Server URL

Update the value of the BIPublisherURL attribute with Oracle Analytics Server URL for the DiscoveryConfig.Discovery mbean in Oracle Enterprise Manager.

To configure Oracle Analytics Server URL:

  1. Log in to Oracle Enterprise Manager.
  2. Click Identity and Access.
  3. Select OIM cluster, OIM node, System MBean Browser.
  4. In the System MBean Browser, navigate to Application Defined MBeans, oracle.iam, Server: <oim_server_name>, Application: oim, XMLConfig, Config, XMLConfig.DiscoveryConfig, Discovery.
  5. Update the value of the BIPublisherURL attribute with Oracle Analytics Server URL.
  6. Click Apply.

25.9.2 Enabling Certification Reports

Select or deselect the Enable Certification Reports option to enable or disable certification reports.

To enable the generation of certification reports, after configuring Oracle Analytics Server credentials and URL, go to the certification configuration screen in Identity System Administration, and select the Enable Certification Reports option.

25.9.3 Enabling the Display of the Reports Tab

The Reports tab can be displayed in the Detailed Information section of the Dashboard.

To configure the display of the Reports tab in the Detailed Information section of the Dashboard:

  1. Log in to Oracle Identity Self Service.
  2. Click the Compliance tab.
  3. Click the Identity Certification box, and select Certification Configuration. The Certification Configuration page is displayed.
  4. Select the Enable Certification Reports option.
  5. Click Save.

25.9.4 Report Formats

The supported formats for report generation are PDF, RTF, HTML, Microsoft Excel, and CSV.

Reports can be generated in the following formats:

  • PDF

  • RTF

  • HTML

  • Microsoft Excel

  • CSV