Articles

zac@instrumentalid.com

Running SailPoint IIQ in Docker

At Navigate 2019, several people expressed interest in IDW’s containerized version of SailPoint IIQ, so here it is in publicly accessible form! I’ve been using this containerized version to do virtually all of my local development since I created it. It takes about two minutes to have a brand new IdentityIQ system up and running…

View details
Automated OIM Configuration Deployments

A majority of organizations implementing Oracle Identity Manager (OIM) struggle with migration and deployment procedures. Migrating a newly developed connector often involves many manual steps, and can result in problems such as a missed deployment steps, importing wrong versions, etc. One solution to those problems is automation, where everything is stored and controlled in a…

View details
OIM and Weblogic vulnerability

Weblogic and OIM are vulnerable to Java deserialization attacks over the network. This vulnerability was reported to Oracle in 2015 and assigned CVE-2015-4852. Oracle has released a series of patches to address the issue, but many systems continue to be vulnerable. The attack is easy and the steps are publicly available. An attack does not…

View details