Chapter 2: Understanding Identity and Access Management

The Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) service gives you full control of your cloud environment, allowing you to decide what type of access you want to give to a group of users. This is done through the unique approach of having an Oracle Cloud ID (OCID) assigned to each resource in your cloud environment.

OCI IAM includes its own IAM service, which can be integrated with an existing Microsoft Active Directory configuration using Active Directory Federation Services (AD FS), along with any SAML 2.0-compliant Identity Provider (IdP). OCI also offers integration with the Oracle Identity Cloud Service for those customers who have previously created IAM entities in that service. This integration enables customers to manage their IAM entities within the OCI console, regardless of whether they have been created within OCI or inside the broader Oracle Cloud Identity Service. The concepts and guidance...