OIM default users

A new out of the box install of Oracle Identity Manager, OIM contains 4 default users

(1)  XELSYSADM

(2)  XELOPERATOR

(3)  WEBLOGIC

(4)  OIMINTERNAL

You can check the USR table for the number of users as below

select count(*) from usr;

COUNT(*)

-------------------

               4

--------------------------------------------------------------------------------------------------------------------------

OIMINTERNAL user

For OIMINTERNAL account, the guidance from Oracle is to never change the password of this account. This account is created during OIM install and is used internally by OIM.

--------------------------------------------------------------------------------------------------------------------------
WEBLOGIC user
Change the WEBLOGIC password
Here is the link that provides steps to change the weblogic password. (same as below)

15.15 Enabling Oracle Identity Manager to Connect to SOA Using the Administrative Users Provisioned in LDAP

Oracle Identity Manager connects to SOA as SOA administrator, with the username weblogic by default. As mentioned in the previous sections, a new administrator user is provisioned in the central LDAP store to manage Identity Management Weblogic Domain.

Perform the following postinstallation steps to enable Oracle Identity Manager to work with the Oracle WebLogic Server administrator user provisioned in the central LDAP store. This enables Oracle Identity Manager to connect to SOA without any problem:

1. Log in to Enterprise Manager at: http://ADMIN.mycompany.com/em
2. Select Farm_IDMDomain –> Identity and Access –> OIM –> oim(11.1.1.3.0).
3. Select System MBean Browser from the menu or right click to select it.
4. Select Application defined Mbeans –> oracle.iam –> Server: wls_oim1 –> Application: oim –> XML Config –> Config –> XMLConfig.SOAConfig –> SOAConfig
5. Change the username attribute to the Oracle WebLogic Server administrator username provisioned in Section 11.5, "Preparing the Identity Store," for example: weblogic_idm.
   Change SOA Config RMI URL to:
   cluster:t3://soa_cluster
6. Click Apply.
7. Select Weblogic Domain –> IDMDomain from the Navigator.
8. Select Security –> Credentials from the down menu.
9. Expand the key oim.
10. Click SOAAdminPassword.
11. Click Edit.
12. Change the username to weblogic_idm and set the password to the accounts password.
13. Click OK.
14. Run the reconciliation process to enable the Oracle WebLogic Server administrator, weblogic_idm, to be visible in the OIM Console. Follow these steps:
    1. Log in to Oracle Identity Manager at: https://SSO.mycompany.com:443/oim as the user xelsysadm.
    2. If prompted, set up challenge questions. This happens on your first login to Oracle Identity Manager.
    3. Click Advanced.
    4. Click the System Management tab.
    5. Click the arrow for the Search Scheduled Jobs to list all the schedulers.
    6. Select LDAP User Create and Update Full Reconciliation.
    7. Click Run Now to run the job.
    8. Go to the Administration page and perform a search to verify that the user is visible in the Oracle Identity Manager console.
15. Select Administration.
16. Click Advanced Search –> Roles
17. Search for the Administrators role.
18. Click the Administrators Role.
19. Click Open.
20. Click the Members tab.
21. Click Assign.
22. Type weblogic_idm in the Search box and Click ->.
23. Select weblogic_idm from the list of available users.
24. Click > to move to Selected Users.
25. Click Save.
26. Restart Oracle Identity Manager managed server.

--------------------------------------------------------------------------------------------------------------------------