Corporation Network Router User Manual

Introduction to Enterprise User Security
Getting Started with Enterprise User Security 11-5
Single password authentication lets users authenticate to multiple databases with a
single global password although each connection requires a unique authentication.
The password is securely stored in the centrally located, LDAP-compliant directory,
and protected with security mechanisms including encryption and Access Control
Lists (ACLs). This approach improves usability by reducing the number of
passwords to remember and manage, and by eliminating the overhead of setting up
SSL.
Enterprise User Security requires Oracle Internet Directory 10g (9.0.4). Other
LDAP-compliant directory services are supported by using Oracle Internet
Directory Integration Platform to synchronize them with Oracle Internet Directory.
This section contains the following topics:
■ How Oracle Internet Directory Implements Identity Management
■ Enterprise Users Compared to Database Users
■ About Enterprise User Schemas
■ How Enterprise Users Access Database Resources with Database Links
■ How Enterprise Users Are Authenticated
How Oracle Internet Directory Implements Identity Management
Oracle Internet Directory uses the concept of identity management realms to
organize information in the directory information tree (DIT), which is a hierarchical
tree-like structure consisting of directory object entries. In a directory, each
collection of information about an object is called an entry. This object may be a
person, but it can also be information about a networked device, such as
configuration information. To name and identify the location of directory objects in
the DIT, each entry is assigned a unique distinguished name (DN). The DN of an
entry consists of the entry itself and its parent entries, connected in ascending order,
from the entry itself up to the root (top) entry in the DIT.
See Also: [Oracle Internet Directory Administrator's Guide, for
information aboutusing Oracle Directory IntegrationPlatform with
other directories.
Note: Microsoft Active Directory is only supported for Oracle
databases on Windows platforms.