Security Governance - Governance, Risk, and Compliance Topic for Oracle Applications - page 114

• Creation by Administrators : While the name of this registration process
does not sound all that intriguing, the reason it exists presents a much
more interesting point for discussion. In UMX, the definition of an Account
Administrator is changing from that of one or two select individuals
working in IT or on the helpdesk to users in the Business Units. With
the concept of delegated administration, the ability to create user(s)
can be extended beyond the traditional confines of an organization's
IT department into the business, and even beyond the organization to
business partners and clients, because each account creation registration
process can be made available to select administrators.
The following is a set of role provisioning workflows from UMX:
Identity management
E-Business Suite is now certified with connectors from Oracle Identity Management
(OIM). EBS Employee Reconciliation connect treats E-Business Suite HR store and
in particular the PER_ALL_PEOPLE_F table, as an authoritative source for identities.
OIM has two adapters. The first treats E-Business Suite HR as a trusted source
of identities and allows two-way synchronization between HR_PERSON table and
identities in OIM. The second reconciles FND_USER accounts along with the UMX
Role and responsibilities.