1/28
Contents
List of Figures
List of Tables
Title and Copyright Information
Preface
Audience
Documentation Accessibility
Related Documents
Conventions
1
Introduction to the Developer's Guide
1.1
Native Integration
1.2
Universal Installation Option Integrations
1.3
Features Integration
1.4
Customizations and Extension
1.5
Authentication and Password Management Integration
1.6
Lifecycle Management
1.7
Troubleshooting/FAQ
Part I Native Integration
2
Natively Integrating with Oracle Adaptive Access Manager
2.1
Overview
2.1.1
Using Web Services and SOAP API
2.1.2
Using Static Linking
2.2
Integration Options
2.2.1
Integrating with Virtual Authentication Devices and Knowledge-Based Authentication
2.2.1.1
User Name Page (S1)
2.2.1.2
Device Fingerprint Flow (F2)
2.2.1.3
Running Pre-Authentication Rules (R1)
2.2.1.4
Running Virtual Authentication Device Rules (R2)
2.2.1.5
Generating a Generic TextPad (P2)
2.2.1.6
Generating a Personalized TextPad or KeyPad (P3)
2.2.1.7
Displaying TextPad and KeyPad (S4 and S5)
2.2.1.8
Decoding Virtual Authentication Device Input (P4)
2.2.1.9
Validate User and Password (CP1)
2.2.1.10
Update Authentication Status (P5)
2.2.1.11
Password Status (C1)
2.2.1.12
Post-Authentication Rules (R3)
2.2.1.13
Check Question Registration for User (C2)
2.2.1.14
Registration Required Rules (R4)
2.2.1.15
Challenging the User with QuestionPad (S6)
2.2.1.16
Checking Answers to Challenge Questions (C3)
2.2.1.17
Run Challenge Rules (R5)
2.2.1.18
Lock Out Page (S2)
2.2.1.19
Landing or Splash Page (S3)
2.2.2
Integrating with Knowledge-Based Authentication
3
Integrating Native .NET Applications
3.1
Overview
3.2
Installing Oracle Adaptive Access Manager .NET SDK
3.3
Application Configuration
3.4
Properties
3.5
User-Defined Enumerations
3.6
User Details
3.7
User Logins and Transactions
3.8
Rules Engine
3.8.1
Device ID
3.8.2
Creating and Updating Bulk Transactions
3.9
Validating a User with Challenge Questions
3.10
Resetting Challenge Failure Counters
3.11
Virtual Authentication Devices
3.11.1
Creating a Virtual Authentication Device
3.11.2
Embedding a Virtual Authentication Device in a Web Page
3.11.3
Validating User Input with a Virtual Authentication Device
3.12
Specifying Credentials to the Oracle Adaptive Access Manager SOAP Server
3.13
Encrypting Property Values
3.14
Tracing Messages
3.15
ASP.NET Sample Applications
3.15.1
SampleWebApp
3.15.2
SampleWebAppWithTracker
3.15.3
SampleWebAppWithAuthTracker
3.15.4
SampleWebAppWithKBATracker
4
Integrating Native Java Applications
4.1
About the Oracle Adaptive Access Manager Shared Library
4.1.1
Using Oracle Adaptive Access Manager Shared Library in Applications
4.1.2
Customizing/Extending/Overriding Oracle Adaptive Access Manager Properties
4.2
About VCryptResponse
4.3
Oracle Adaptive Access Manager APIs
4.3.1
handleTrackerRequest
4.3.2
createTransaction
4.3.3
updateTransaction
4.3.4
handleTransactionLog
4.3.5
updateTransactionStatus
4.3.6
updateLog
4.3.7
getUserByLoginId
4.3.8
updateAuthStatus
4.3.9
processPatternAnalysis
4.3.10
markDeviceSafe
4.3.11
IsDeviceMarkedSafe
4.3.12
clearSafeDeviceList
4.4
Rules Engine
4.4.1
processRules
4.5
Customer Care
4.5.1
getFinalAuthStatus
4.5.2
setTemporaryAllow
4.5.3
cancelAllTemporaryAllows
4.5.4
resetUser
4.5.5
getRulesData
4.5.6
getActionCount
Part II Universal Installation Option and Related Integrations
5
Oracle Adaptive Access Manager Proxy
5.1
Introduction
5.1.1
Important Terms
5.1.2
Architecture
5.1.3
References
5.2
Installing Oracle Adaptive Access Manager Proxy for Microsoft ISA
5.2.1
Proxy Web Publishing Configuration
5.2.1.1
Web Listener Creation
5.2.1.2
Web Publishing Rule Creation
5.2.2
Registering the Oracle Adaptive Access Manager Proxy for Microsoft ISA DLL
5.2.3
Settings to Control the Proxy
5.2.3.1
Configuration files
5.2.3.2
Configuration Reload
5.2.3.3
Session ID Cookie
5.2.3.4
Configuring Session Id Cookie attributes via Global Variables
5.2.3.5
Session Inactive Interval
5.2.3.6
Settings for Troubleshooting
5.3
Installing Oracle Adaptive Access Manager Proxy for Apache
5.3.1
Proxy Files for Windows and Linux
5.3.1.1
Windows
5.3.1.2
Linux
5.3.2
Apache httpd Requirements
5.3.2.1
Windows
5.3.2.2
Linux
5.3.3
Copying the Oracle Adaptive Access Manager Proxy for Apache and Supported Files to Apache
5.3.3.1
Windows
5.3.3.2
Linux
5.3.4
Configuring Memcache (for Linux only)
5.3.5
Configuring httpd.conf
5.3.5.1
Basic Configuration without SSL
5.3.5.2
Configuration with SSL
5.3.6
Modifying the Oracle Adaptive Access Manager Proxy for Apache Settings
5.3.6.1
UIO_Settings.xml
5.3.6.2
UIO_log4j.xml
5.3.6.3
Application configuration XMLs
5.4
Setting Up Rules and User Groups
5.5
Setting Up Policies
5.6
Configuring the Oracle Adaptive Access Manager Proxy
5.6.1
Elements of the Proxy Configuration File
5.6.1.1
Components of Interceptors
5.6.1.2
Conditions
5.6.1.3
Filters
5.6.1.4
Filter Examples - ProcessString
5.6.1.5
Filter Examples - FormatString
5.6.1.6
Actions
5.6.1.7
Variables
5.6.1.8
Application
5.6.2
Interception Process
5.6.3
Configuring Redirection to the Oracle Adaptive Access Manager Server Interface
5.7
Application Discovery
5.7.1
Application Information
5.7.2
Setting Up the Oracle Adaptive Access Manager Proxy for Microsoft ISA
5.7.3
Setting Up the Oracle Adaptive Access Manager Proxy for Apache
5.7.4
Scenarios
5.8
Samples
6
Configuring OAAM Server
6.1
Architecture
6.2
OAAM Server Settings
6.3
Determining Application ID and User Group
6.3.1
Determining the Application ID
6.3.2
Determining Default User Groups
6.4
Customizing User Interface Branding
6.4.1
Custom Header / Footer
6.4.2
Custom CSS
6.4.3
Custom Content and Messaging
6.5
Configuring Application Properties
6.5.1
Property Extension
6.5.2
User-Defined Enums
6.5.3
Overriding Existing User-Defined Enums
6.5.4
Disabling Elements
7
Virtual Authentication Device Properties
7.1
Property Files
7.2
Authentication Devices and Background Images
7.3
Display and Security Feature Properties
7.3.1
TextPad
7.3.1.1
TextPad Visual Elements
7.3.1.2
TextPad Authenticator Properties
7.3.2
QuestionPad
7.3.2.1
QuestionPad Visual Elements
7.3.2.2
QuestionPad Authenticator Properties
7.3.3
Keypad
7.3.3.1
KeyPad Visual Elements
7.3.3.2
KeyPad Authenticator Properties
7.3.4
PinPad
7.3.4.1
PinPad Visual Elements
7.3.4.2
PinPad Authenticator Properties
7.4
Accessibility
7.5
KeysSets
7.5.1
User Defined Enums Overview
7.5.2
KeySet Definition
7.6
Localization
7.6.1
Enabling Localization
7.6.2
Configuring Words Used in the Authenticator Caption
7.6.3
Localizing the KeyPad
7.6.4
Configuring Enter on the Authenticator Forgot Password Page
7.6.5
Configuring Tooltip for TextPad's Enter Button
Part III Features Integrations
8
Configurable Actions
8.1
Integration
8.2
Executing Configurable Actions in a Particular Order and Data Sharing
8.3
How to Test Configurable Actions Triggering
8.4
Sample JUnit Code
9
OTP Anywhere
9.1
OTP Integration
9.2
Implementing Challenge Processors
9.2.1
Create a Challenge Processor
9.2.2
Configure Custom Challenge Processor as Challenge Type with Required Profile Data
9.3
Configuring the Challenge Pad Used for Challenge
9.4
Configuring User Information Properties
9.4.1
Configuration Settings for Information Registration and Preferences and PIN Generation
9.4.2
Set Contact Information Inputs
9.4.3
SMS Configuration to Receive OTP via SMS
9.4.3.1
Enable Registration and Preference Setting
9.4.3.2
Set Input Information
10
Flash Fingerprinting
10.1
Device Fingerprinting
10.2
Definitions of Variables and Parameters
10.3
Option 1
10.3.1
Option 1 Flow
10.3.2
Option 1 Code Example
10.4
Option 2
10.4.1
Option 2 Flow
10.4.2
Option 2 Code Example
10.5
Option 3
10.5.1
Option 3 Flow
10.5.2
Option 3 Code Example
10.6
Common Update
11
Device Registration
Part IV Customizing Oracle Adaptive Access Manager
12
Customizing Oracle Adaptive Access Manager
12.1
Overview
12.2
Add Customizations Using Oracle Adaptive Access Manager Extensions Shared Library
Part V Authentication and Password Management Integration
13
Access and Password Management Integration
13.1
Benefits and Features of the Integration
13.2
Secure Password Collection and Management Scenarios
Part VI Lifecycle Management
14
Handling Lifecycle Management Changes
14.1
Oracle Virtual Directory (OVD) Host, Port, and SSL Enablement Changes
14.2
Oracle Identity Manager (OIM) URL Changes
14.3
Oracle Access Manager (OAM) Host and Port Changes
14.4
Oracle Internet Directory (OID) Host and Port Changes and SSL Enablement
14.5
Database Host and Port Changes
14.6
Moving Oracle Adaptive Access Manager to a New Production Environment
14.7
Moving Oracle Adaptive Access Manager to an Existing Production Environment
Part VII Troubleshooting
15
FAQ/Troubleshooting
15.1
Universal Installation Option Proxy
15.2
Virtual Authentication Devices
15.3
Configurable Actions
15.4
One-Time Password
15.5
Localization
15.6
Man-in-the-Middle/Man-in-the-Browser
Index
Scripting on this page enhances content navigation, but does not change the content in any way.