Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Document Organization
• Documentation Accessibility
• Related Documents
• Conventions

What's New in This Guide?

• New Content for Oracle Fusion Middleware 11g Release 1 (11.1.1.5)
• New Content for Oracle Fusion Middleware 11g Release 1 (11.1.1.4)

1 Security in Oracle Fusion Middleware

• 1.1 Terminology
• 1.2 Scope of Security in Oracle Fusion Middleware
  • 1.2.1 About Authentication and Single Sign-On
  • 1.2.2 About Oracle Platform Security Services
  • 1.2.3 About Security for Oracle SOA Suite
  • 1.2.4 About Security for Oracle WebCenter
• 1.3 Oracle Fusion Middleware and the Three-Tier Architecture
  • 1.3.1 Tools for Managing Oracle Fusion Middleware

2 About Oracle Platform Security Services

• 2.1 Overview of Oracle Platform Security Services (OPSS)
  • 2.1.1 Oracle Platform Security Services in Oracle Fusion Middleware
  • 2.1.2 How Applications Can Use Oracle Platform Security Services
• 2.2 Oracle Platform Security Services Architecture
• 2.3 Overview of Services
  • 2.3.1 Authentication
    • 2.3.1.1 Authentication Recommendations
  • 2.3.2 Authorization
  • 2.3.3 Credential Store Framework
  • 2.3.4 User and Role API
  • 2.3.5 Policy Store and the Policy API
  • 2.3.6 Single Sign-On
  • 2.3.7 SSL Support
  • 2.3.8 Auditing
  • 2.3.9 Oracle Security Developer Toolkit

3 Developing Secure Applications

• 3.1 ADF Security
  • 3.1.1 About Oracle ADF
  • 3.1.2 About Oracle ADF Security
  • 3.1.3 Using Oracle ADF Security
• 3.2 JavaEE Security
• 3.3 End-to-End Security Example

4 Infrastructure Hardening

• 4.1 What is Infrastructure Hardening?
• 4.2 Keystores
• 4.3 Enabling SSL
• 4.4 Port and Environment Management
• 4.5 Password Management
• 4.6 Lockdown

5 Common Security Scenarios and Tasks

• 5.1 Single Sign-On
  • 5.1.1 Single Sign-On Options
  • 5.1.2 Deployment Scenarios
    • 5.1.2.1 Setting up Oracle SOA or Oracle WebCenter 11g for the First Time
    • 5.1.2.2 Setting up Oracle SOA or Oracle WebCenter 11g with existing Oracle Application Server
    • 5.1.2.3 Setting up 11g Portal, Forms, Reports or Discover
    • 5.1.2.4 Setting up Oracle SOA or Oracle WebCenter 11g with 11g Portal, Forms, Reports or Discover
    • 5.1.2.5 Setting up 11g Oracle Fusion Middleware with Oracle E-Business Suite
    • 5.1.2.6 Delegating Authentication from Oracle Single Sign-On to Oracle Access Manager
• 5.2 Summary of Common Security Tasks
• 5.3 Task-Based References
  • 5.3.1 References for Security Tasks During Development
  • 5.3.2 References for Security Tasks During Deployment
  • 5.3.3 References for Authentication
  • 5.3.4 References for Authorization
  • 5.3.5 References for SSL
  • 5.3.6 References for Auditing
  • 5.3.7 References for Logging and Diagnostics

Index