In a hybrid configuration, authentication and authorization data can be stored in the LDAP directory
while the rest of the metadata resides in a transactional relational database. This avoids
the need for replication of participants and entitlements data.
Fuego Directory Interface (FDI) is the internal API the Oracle BPM products use to
access the Directory Service information. All changes performed in the LDAP
directory become automatically visible to FDI applications without
replication. FDI access to the LDAP directory is read-only.
More specifically, when using a hybrid directory service, Oracle
BPM Suite retrieves the following from the LDAP directory:
- Organizational data including users, groups, group assignments and organizational units
- Security credentials of participants (including administrators)
- A portion of authorization data. In this case, groups are assigned in the LDAP directory rather
than from Oracle BPM Process Administrator or any other Oracle BPM component. Roles, however, are stored in the Oracle BPM directory relational database and are assigned to groups by using the Process Administrator.
Note: All other metadata is stored in the relational database.