Skip to main content

Webcenter Portal SSOwith OAM 11g R2 PS2

Installation of OUD:
Directory server needs to be installed for setting up the SSO. Installation of OUD is described in below post:

 http://idm-world.blogspot.in/2014/08/installation-of-oracle-unified.html

Install OAM:

OAM 11g R2 is required. Below are the steps to install OAM 11gR2:
http://idm-world.blogspot.in/2014/03/installation-of-oam-11g-ps2-high-level.html


 Installation and configuration of WebTier Utility: 

Download and install webtier utility.Steps are as below:

http://idm-world.blogspot.in/2015/07/installation-of-web-tier-utility.html

Set the reverse proxy of OHS to Webcenter. In order to do that navigate to <Middleware_home>/Oracle_WT1/instances/instance1/config/OHS/ohs1/ and Open the file - mod_wl_ohs.conf. Add below para in the file:

<Location />
    SetHandler weblogic-handler
    WebLogicHost server1
    WeblogicPort 8889
</Location>

This will redirect all the OHS request to weblogic server1 port 8889.URL pattern matching can also be achieved here.

Deploy and and configure webgate:

After WebTier utility is installed. Install Webgate on top of this as below:

http://idm-world.blogspot.in/2015/07/installation-of-webgate-11g.html

Deploy and configure the webgate as decribed below:

http://idm-world.blogspot.in/2013/05/high-level-steps-for-protecting-web.html




Configurations in OAM:

Add OUD as identity store in OAM. Create a new 11g Agent in OAM. Auto create policies should be checked.




This will create the two files in the mentioned path ObAccessClient.xml’ and ‘cWallet.sso’. Copy the files in $Middleware Home$/Oracle_WT1/instances/instance1/config/ohs1/webgate/config location.


Configure the Authenticators: 

Login to the Admin console of the Wwbcenter doamin and create a OUD Authenticator.





Change control flag to SUFFICIENT. Create Another autheticator as OAM ID Asserter and reorder the sequence as below:

·         OAMIDAsserter  (REQUIRED)
·         OUDAuthenticator (SUFFICIENT)
·         Default Authenticator (SUFFICIENT)
·         Default IdentiyAsserter





Configure the SSO: 

This is final step. configure the SSO on webcenter. Login to EM console of Webcenter domain and add OAM as SSO mechanism. Add login URI as "/${app.context}/adfAuthentication" and logouturi="/oamsso/logout.html"





 






























Labels:

Comments

Post a Comment

Popular posts from this blog

Developing Prepopulate Adapter with OIM 11g R2

1.      Prepopulate Adapter in OIM uses the plugin point oracle.iam.request.plugins.PrePopulationAdapte r. 2.      Write the Java code which returns the value which has to be populated on the form. 3.      This code will implement the plugin point oracle.iam.request.plugins.PrePopulationAdapte r. Code Snippet: - package com.oracle.oim.utility.eventhandler; import java.io.Serializable; import java.util.Iterator; import java.util.List; import java.util.logging.Logger; import oracle.iam.identity.exception.NoSuchUserException; import oracle.iam.identity.exception.UserLookupException; import oracle.iam.identity.usermgmt.api.UserManager; import oracle.iam.identity.usermgmt.vo.User; import oracle.iam.platform.Platform; import oracle.iam.platform.authz.exception.AccessDeniedException; import oracle.iam.request.exception.RequestServiceException; import oracle.iam.request.vo.Beneficiary; import oracle.iam.request.vo.RequestData; public c
5 comments
Read more

OIM Tuning

Application Module tuning is a critical setting which will affect the UI performance. Following are the recommended application module settings for OIM and these are already set out-of-box (OOB) in later releases of OIM 11g R2. Ensure that these settings are implemented as recommended in your environment. -Djbo.ampool.doampooling=true -Djbo.ampool.minavailablesize=1 -Djbo.ampool.maxavailablesize=120 -Djbo.recyclethreshold=60 - Djbo.ampool.timetolive=-1 -Djbo.load.components.lazily=true - Djbo.doconnectionpooling=true -Djbo.txn.disconnect_level=1 - Djbo.connectfailover=false -Djbo.max.cursors=5 - Doracle.jdbc.implicitStatementCacheSize=5 - Doracle.jdbc.maxCachedBufferSize=19 open DOMAIN_HOME/bin/setDomainEnv.sh file for the WebLogic Server instance.find these lines: JAVA_OPTIONS="${JAVA_OPTIONS}" export JAVA_OPTIONS and change it to: JAVA_OPTIONS="-Djbo.ampool.doampooling=true -Djbo.ampool.minavailablesize=1 -Djbo.ampool.maxavailablesize=120 -D
Post a Comment
Read more

Creating Role through OIM API - 11gR2

package com.oim.utilities; import java.util.HashMap; import oracle.iam.identity.rolemgmt.api.RoleManager; import oracle.iam.identity.rolemgmt.api.RoleManagerConstants; import oracle.iam.identity.rolemgmt.vo.Role; import oracle.iam.platform.OIMClient; public class RoleManagement  { static RoleManager roleManager=null; static OIMClient client=null; @SuppressWarnings("null") public static void createRole(String roleName){ System.out.println("RoleManagement :: createRole :: role name is "+roleName); try  { if (roleName!=null) { HashMap<String, Object> mapAttrs = new HashMap<String, Object>();; mapAttrs.put(RoleManagerConstants.ROLE_NAME, roleName); mapAttrs.put(RoleManagerConstants.ROLE_DISPLAY_NAME,roleName); mapAttrs.put(RoleManagerConstants.ROLE_DESCRIPTION, roleName); Role role = new Role(mapAttrs); // Initialising the OIM Connection client=ClientOIM.initialise(); System.out.println("RoleManagemen
1 comment
Read more