Oracle Database Single Sign-On Made Easy – Oracle18c/19c Centrally Managed Users (CMU)

Simon Pane
Principal Consultant at Pythian

Simon enjoys sharing technical knowledge and has presented at many user groups and at almost every major conference in North America and Europe including at Oracle OpenWorld many times.

Simon is Oracle Certified, an Oracle ACE, and a member of several formal industry and community Advisory Boards. With almost 25 years of experience, he has experience with literally thousands of database environments and is a regular presenter.

An exciting new feature of Oracle Database 18c and 19c is Centrally Managed Users (CMU). This, for the first time, allows for simple and complete database single sign-on (SSO) and user management integration with Microsoft Active Directory (AD). It requires no additional licenses.

Previously, Oracle Enterprise User Security (EUS) and Oracle Unified Directory (OUD) were needed as an intermediate component bridging the Oracle Database to Active Directory. And while EUS/OUD is still present and offers some additional features and benefits, it’s no longer required for database-AD user integration and management.

This presentation details the advantages of using CMU over the previous technologies, covers the installation/setup process, and gives practical examples and use cases for organizations to leverage and benefit from the simplified integration of database user management (authentication and authorization) with AD.

• Objective #1: Understand the business and security benefits of integrating Oracle Database authentication and authorization with Active Directory.
• Objective #2: Learn the technical implementation process including what changes are required to the Active Directory schema as well as how to provision in the Oracle Database.
• Objective #3: Show a number of issues and technical problems encountered along with the associated solutions or fixes.