Types of Account in OIM

There are 3 different types of Account in OIM which are as below:

1. Rogue Account
2. Orphan Account
3. Service Account

1. Rogue Account

A rogue account is an account created "out of process" or beyond the control of the provisioning system. Below are the 2 possible instances where we can call an Account a Rogue Account:

• An account that exists on the target system but has been deprovisioned from the corresponding OIM User in Oracle Identity Manager

• An account that exists on the target system but the OIM User to whom the account is provisioned has been deleted from Oracle Identity Manager

2. Orphan Account

An orphan account is an operational account without a valid owner i.e an account that exists on the target system but has no corresponding owner (OIM User) in Oracle Identity Manager.

Rogue and Orphan account represents serious security risks.

3. Service Account

Service account is like Admin account. Which has different life cycle and privileges. A service account is distinguished from a regular account by an internal flag. When a user is provisioned with a service account, Oracle Identity Manager manages a mapping from the user's identity to the service account. This user is considered the owner of the Service Account.