Contents

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents

1 Services Gatekeeper Security Overview

• Basic Security Considerations
• Overview of Services Gatekeeper Security
• About the Services Gatekeeper Environment
• Security Standards and Specifications

2 Performing a Secure Services Gatekeeper Installation

• Installing Services Gatekeeper Securely
  • Recommended Deployment Configurations
• Pre-Installation Tasks
  • Implementing Database Security
    • Creating and Authorizing Database Users
• Installing Services Gatekeeper Securely
  • Securing Services Gatekeeper Components with Firewalls
  • Creating Administrative Users
• Creating a Secure Services Gatekeeper Implementation
  • Securing the Domain
  • Securing the WebLogic Server
  • Configuring JDBC with Database Credentials
  • Securing Oracle Access Manager MBeans
  • Securing Web Services
  • Securing Oracle Service Bus and the Service Oriented Architecture Facades
  • Securing Geographically Redundant Deployments
  • (Optional) Adding Custom Password Validators
  • (Optional) Install Java Cryptography Extension (JCE)

3 Administering Services Gatekeeper Security

• Administering Services Gatekeeper Security
• Maintaining Security Standards
• Securing Partner Relationship Manager
• Monitoring Your Services Gatekeeper Implementation
• Backing Up and Restoring Services Gatekeeper Data

4 Securing Partner Accounts and Services

• Administering Partners
  • Setting Up the Partner Portal and Partner Manager Portal
• Securing Communication Services
  • Authenticating and Authorizing Resources with OAuth
  • Authorizing Access to Services with SLAs
  • Authenticating Service User Requests
    • Securing SOAP-Based Communication Services
    • Securing RESTful Communication Services
    • Securing Native Communication Services
      • Securing Native MM7 Communication Services
      • Securing Native SMPP Communication Services
      • Securing Native UCP Communication Services
  • Securing Communication with Service Interceptors