|
| Integration Steps - 10g AS with OAM (COREid) |
| Sunday, May 27, 2007 |
|
We have moved to http://onlineAppsDBA.com kindly check http://onlineAppsDBA.comin future
In today's post I am covering integration of 10g Oracle Application Server with Oracle Access Manager (Oblix COREid)
For overview of Oracle Access Manager & Oracle Application Server integration check my previous post at
http://becomeappsdba.blogspot.com/2007/05/oas-oam-access-manager-oblix-coreid.html
For installation of Oracle Access Manager (Oblix COREid) click here
Here are the integration Steps
---------------------------------------------
1. Install Oracle Application Server 10g
1.1 Install OAS Infrastructure Tier (MR, OID, SSO..)
2. Install Oracle Access Manager component
2.1 Install Identity Server
2.2 Install WebPass
2.3 Install Access Server (including webpass)
3. Configuration step on 10g OAS
3.1 Install WebGate on HTTP Server on 10g AS Middle tier node
3.2 Install webgate on HTTP Server on 10g AS Infra Tier (SSO & OADDAS access)
3.3 Configure OracleAS Single Sign-On for external Authentication
3.4 Configure web browser to allow cookie (as authentication mechanism works on cookie)
4 Integrate 10g OAS with OAM
4.1 Enable Single Sign-On for integration between OAS and OAM (by creationg java class and editing policy.properties)
4.2 Integrating DAS (Delegated administrative services) (If you have configured OAS SSO integration with OAM SSO, oiddas is autmoatically integrated)
4.3 Integrating Portal (No additioanl steps required if OAS-OAM is integrated as mentioned above)
4.4 Enabling SSO on forms (enable OAS-SSO for forms and this will be protected automatically as per OAS - OAM single sign-on integration mentioned above)
4.5 Integrating reports (By defaults reports are Oracle AS single sign-on protected so no additonal steps required )
4.6 Configure OID synchronization with LDAP Server (If Access manager is in different LDAP Server)
4.7 Configure global logout from Oracle AS Single Sign-On and Access Manager (edit policy.properties on OAS SSO server, Add SSO logout URL in Access System console on OAM, provide new global logout page inWebgate Instance configurable via access system console in OAM)
4.8 Finally create policies to protect 10g OAS resources (URL's) in policy manager by access server in OAM (/sso/auth, /oiddas, /pls/orasso, /pls/portal...).
This can be done via OAM Policy Manager in Access Server
Access Server (/access/oblix) -> Policy Manager -> Create Policy Domain
Configuring Oracle Calendar Synchronization directly from your mobile coming soon...Labels: integration, oam |
We have moved to kindly check onLineAppsDBA.com in future
|
|
|
 del.icio.us
¦
 Digg This
¦
 My Yahoo
¦
 Reddit
¦
 BlinkList
¦
 Furl It
¦
Email This
¦
Leave Your Comments
|
posted by Atul Kumar @ 2:11 AM
  |
|
|
|
| OAS - OAM (Access Manager / Oblix COREid) Integration Architecture |
| Friday, May 25, 2007 |
|
|
We have moved to http://onlineAppsDBA.com kindly check http://onlineAppsDBA.comin future
Integrating Oracle 10g Application Server with Oracle Access Manager -Overview
=========================
i) Oracle Application Server (OAS) can be integrated with Oracle Access
Manager (OAM, earlier called as Oblix COREid) for Authentication and
Authorization. Though Oracle Application Server has its own
Authentication and Single Sign-On feature but integrating OAS with OAM
provide more flexibility and security to Oracle Application Server and help in providing fine grained access control for protecting web and other resources.
ii) You also need OAM-OAS integration if you wish to integrate E-Business
Suite with Oracle Access Manager (Oblix COREid) for authentication and
authorization.
iii) If you wish to integrate (protect/authenticate/authorize) any oracle
product (like portal, Forms, BI, E-Business Suite) with Oracle Access
Manager (Oblix COREid) it should be done via Oracle Application Server.
iv) Integration of OAM with OAS will help you to provide identity management functionality to Web based application which run on Oracle Application server or any other Oracle product like Oracle E-Business Suite Self Service applications (iProc, iRec)
iv) While integrating Oracle Access Manager's Authorization functionality, either Oracle Application Server or Oracle Access Manager Single Sign-On can act as authentication mechanism.
OAS (10g AS) - OAM (Oblix COREid) Integration Architecture
-----------------------------------------------------------------------------
As shown in diagram on top, you will have Oracle Access Manager installed and configured with any LDAP Server (AD, OID, iPlanet) and Oracle HTTP Server will be protected by WebGate (OAM web component).
Here is request flow when Oracle Application Server is protected by Oracle Access Manager (Oblix COREid)
i) User try to access web resource (http/https) on oracle application server which is protected by Oracle Access Manager (Oblix COREid), request is received by WebGate (access manager component on Web Server)
ii) Webgate request for policy from Access Server (another component in Oracle Access Manager) to check if resource (URL) is protected or not
iii) If resource/URL is not protected page is returned to user. If resource/URL is protected, webgate ask user to authenticate
iv) Credentials entered by user is validated against LDAP directory via access system.
v) After successful authentication, Oracle Access Manager Single Sign-On cookie (obSSOCookie) is sent to user browser
vi) After successful authorization (pre-defined at access server policy domains), access server executes actions specified in security policy and set HTTP Header variable that maps to Oracle Application Server 10g User ID
vii) Oracle AS Single Sign-On recognizes HTTP Headers set by Oracle Access Manager (HeaderVar), authenticates user and sets Oracle Single Sign-On Cookie.
If your LDAP store for Access is not same OID where Oracle Application Server users are stored then ensure that user data in two LDAP servers is in sync (up to date)
Implementation of 10g AS integration with Oracle Access Manager(Oblix COREid) coming soon ...
Integration of Oracle Access Manager(COREid) with Siebel coming soon...
Labels: integration, oam |
We have moved to kindly check onLineAppsDBA.com in future
|
|
|
|
del.icio.us
¦
Digg This
¦
My Yahoo
¦
Reddit
¦
BlinkList
¦
Furl It
¦
Email This
¦
Leave Your Comments
|
| posted by Atul Kumar @ 10:14 PM
|
|
|
|
|
|
