My Oracle Support Banner

Use ROLE_TYPE in LDAPContainerRules RULE Definition for OIM12c (Doc ID 2482205.1)

Last updated on APRIL 14, 2019

Applies to:

Identity Manager - Version and later
Information in this document applies to any platform.


On a fresh install of OIG12c with OAM for the SSO integration and want to use attribute ROLE_TYPE to map the roles created from OIM to the proper LDAP container.

For this, edited LDAPContainerRules.xml with new Rule for the ROLE_TYPE attribute value as follows:



Using this rule, such roles should be created by OIM in LDAP in the container of 'cn=application,ou=OU1,dc=<domain>,dc=com', where domain is the actual value but this does not work.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.