Active Directory Notes

I was working on integration on Active Directory with Oracle UCM 11g and I have the following notes that may be helpful:

- Change DefaultAuthenticator's Control Flag from REQUIRED to SUFFICIENT

- We are not using Oracle UCM LDAP Providers for integration with Active Directory anymore

- Users mapping between Oracle UCM and Weblogic embedded LDAP is done using JpsUserProvider provider

- In Oracle UCM 11g, you can give default roles and accounts for authenticated users, to do that from Oracle UCM Providers page edit a provider called JpsUserProvider and in Default Network Roles field add the default roles separated with commas, for default accounts use Default Network Accounts field

- Any weblogic ldap user assigned to administrators group, he will have Oracle UCM admin role

AD integration in OpenText Hummingbird vs Oracle UCM

I am working in Oracle IDM project currently, and I have to provision users to Hummingbird and Hummingbird in this case integrated with Active Directory. So I were in my mind making a comparison between Oracle UCM and OpentText Hummingbird and I want to share it here.

In Oracle UCM, it is a full integration why because user roles and accounts will be represented in AD as security groups, so I want to give an AD user the contributor role, just assign to him contributor security group form inside AD. Also you can make a custom user attributes from inside UCM to AD user attributes like user manager or any other attribute.

In OpenText Hummingbird especially with Document Management module and Records Management modules, the admin have to import users from AD manually and assign security groups and permissions from inside the system, which means it is not full integration, Hummingbird is just using AD as a repository of users info not a repository for security.

Another thing Oracle UCM is like an open source application it is open, you can change any functionality you want, its database schema is not sealed and the schema is very easy to be used and modified. But Hummingbird's database is not allowing that, if you tried to add new records or delete records, the system will throw exceptions and errors.

In my opinion, Oracle UCM is one of the best applications you can integrate with. So If I am a decision maker I will always choose UCM because of integrations easiness.

Integrating Universal Content Management with Active Directory

Here I will list steps for integrating Active Directory with Universal Content Management, then I will list troubleshooting tips for this integration. I wish it will be helpful for someone.

Integration Steps

1. Create organization unit in Active Directory named Stellent

2. Create a sub organization unit under Stellent named Roles

3. Under Roles create AD Security Groups with the same name as UCM Roles (like contributor, and admin)

4. In Content Server Home Page, open Admin Server page

5. Open Content Server instance that we will integrate on

6. Open Internet Configuration page

7. From Use Microsoft Security options choose Active Directory Security option

8. Restart Content Server for the current instance

9. In Content Server Home Page, under Administration tab open Filter Administration page

10. In front of Active Directory Security, click on Configure link

11. Under Role Prefix, add the following “OU=Roles,OU=Stellent[1]”

12. Click Update, at end of the Filter Administration page

13. Restart Content Server, and IIS (restart IIS from Servcies)

Troubleshooting Steps

If you faced any problem after the above steps, check the following

1. In IIS, open Direct Security, for Content Server website, then edit Authentication and access control, then ensure that Anonymous access and Integrated Windows authentication are enabled. After modification restart IIS

2. In Active Directory and Active Directory Configuration page (in Content Server Home Page) ensure that you didn’t misspell organization units names and AD security groups

3. In Active Directory Configuration page (in Content Server Home Page) ensure that you didn’t but spaces between words under Role Prefix

4. If you still face a problem restart IIS (from Services, not from Administration), and Content Server.

5. At last, if you still face a problem ensure you did the above steps well, and Restart Windows