Managing Oracle Identity Providers

This section describes how to manage Oracle identity providers on CCKM. Before proceeding, a connection to your Oracle account must exist on the CipherTrust Manager. Refer to Connection Manager for details.

Oracle identity providers can be added, viewed, modified, or deleted on the External Vaults tab of the Oracle Vaults page. Oracle identity providers are required when adding the Oracle external vaults, refer to External Vaults for details.

Creating Identity Providers

An issuer or an openId configuration URL is required to create an identity provider.

To create an identify provider:

1. Open the Cloud Key Manager Application.

2. In the left pane, click Containers > Oracle Vaults.

3. Click the External Vaults tab.

4. Under IDENTITY PROVIDERS, click Add Identity Provider. The Add Identity Provider screen is displayed.

5. Specify a unique Name for the provider. This is a mandatory field.

6. Select the Provider Verifier. This is a mandatory field.

   The verifier can be:

   • Issuer: Enter a valid Issuer. The jwksURL field is populated automatically based on the specified issuer.

   • OpenID Config URL: Select and specify the OpenId Configuration URL. The URL must be valid. For example, when using SafeNet Trusted Access (STA) as an identity provider, the URL is represented by WELL KNOWN CONFIGURATION URL on the STA Management Console.

7. (Optional) Select jwks Protected URL.

   • Enter Client ID.

   • Enter Client Secret.

8. Click Add.

9. Click Close.

The newly created identity provider appears in the providers list. Similarly, add as many identity providers as required.

Viewing Identity Providers

The Oracle Vaults page shows the available identity providers. The IDENTITY PROVIDERS section shows the Name, Issuer, OpenID Configuration URL, and jwksURL.

To view identity providers:

1. Open the Cloud Key Manager application.

2. In the left pane, click Containers > Oracle Vaults.

3. Click the External Vaults tab.

4. Navigate to IDENTITY PROVIDERS. The list of identity providers is displayed.

   The following details are shown:

   Column	Description
   Name	Name of the identity provider.
   Issuer	Issuer string from the identity provider JWT.
   OpenID Configuration URL	URL of the OpenID configuration.
   jwksURL	URL of JWKS.

Editing Identity Providers

To edit identity providers:

1. Open the Cloud Key Manager application.

2. In the left pane, click Containers > Oracle Vaults.

3. Click the External Vaults tab.

4. Navigate to IDENTITY PROVIDERS. Under Name, click the desired profile. The Edit Identity Provider screen is displayed.

   Alternatively, click the overflow icon corresponding to the desired profile and click Edit.

5. Update the identity provider details, as appropriate.

6. Click Update.

7. Click Close.

Deleting Identity Providers

When an identity provider is no longer needed, delete it from the CipherTrust Manager. Before deleting the provider, ensure that it is not in use by any external vaults.

To delete an identify provider:

1. Open the Cloud Key Manager application.

2. In the left pane, click Containers > Oracle Vaults.

3. Click the External Vaults tab.

4. Under IDENTITY PROVIDERS, click the overflow icon corresponding to the provider you want to delete.

5. Click Delete.

   A warning message appears stating that the provider will be deleted permanently. Do you want to delete this identity provider?

6. Select I wish to delete the identity provider.

7. Click Delete.

The identity provider is removed from the providers list.