Showing posts with label Security. Show all posts
Showing posts with label Security. Show all posts

Wednesday, September 7, 2011

UCM users cannot reset their passwords!!!

I had an issue that I was trying to avoid, until I worked in a project that needs it. I cannot imagine how Oracle guys missed it, USERS CANNOT RESET THEIR PASSWORDS.

I don't care about how the new UCM has been structured, Users must have the ability to change their passwords. Guys most of the time LDAPS are only used as a repository (it is database) and users are not accessing them, that's beside a lot of customers doesn't have LDAP to work with or integration is not part of the scope.

Do you think this is a minor issue or not an issue at all?

At the end I want to thank Raj from Oracle support for his support.

Saturday, April 23, 2011

Using UCM11g Logout With Site Studio

As most of us remember in Oracle UCM 10g, logout was not there by default. In UCM 11g Oracle has added logout to be there by default.

Also it is noticed there is new Service (LOGOUT) added to UCM 11g for logout and that service make use of redirect template.

What if you want to secure parts of a website designed by Site Studio using Oracle UCM security (may be it is intranet and you want to add security to HR section). Definitely UCM security will be used on a section and/or a layout, however you will need to add logout, and you want logout to redirect you to some page like home page or login screen.

To do that create your logout link like below


<a style="text-decoration:none " href='/cs/idcplg?IdcService=LOGOUT&RedirectUrl=%2Fmywebsite%2Findex.htm'>Logout</a>


Tuesday, March 16, 2010

AD integration in OpenText Hummingbird vs Oracle UCM

I am working in Oracle IDM project currently, and I have to provision users to Hummingbird and Hummingbird in this case integrated with Active Directory. So I were in my mind making a comparison between Oracle UCM and OpentText Hummingbird and I want to share it here.

In Oracle UCM, it is a full integration why because user roles and accounts will be represented in AD as security groups, so I want to give an AD user the contributor role, just assign to him contributor security group form inside AD. Also you can make a custom user attributes from inside UCM to AD user attributes like user manager or any other attribute.

In OpenText Hummingbird especially with Document Management module and Records Management modules, the admin have to import users from AD manually and assign security groups and permissions from inside the system, which means it is not full integration, Hummingbird is just using AD as a repository of users info not a repository for security.

Another thing Oracle UCM is like an open source application it is open, you can change any functionality you want, its database schema is not sealed and the schema is very easy to be used and modified. But Hummingbird's database is not allowing that, if you tried to add new records or delete records, the system will throw exceptions and errors.

In my opinion, Oracle UCM is one of the best applications you can integrate with. So If I am a decision maker I will always choose UCM because of integrations easiness.