However, at Oracle we do have some great ways to fix this problem.
And not just by trying to make LDAP look like a database.
There are three ways to do this:
1 - You can use OVD's Web Interfaces - either REST (OVD HTTP/Web Gateway) or SOAP (DSML v2)
2 - Oracle Platform Security Services User/Role API
3 - Oracle Platform Security Services Identity Governance Framework ArisID