26 Handling Lifecycle Management Changes

Because of integrated deployment of Oracle Adaptive Access Manager with other applications, Oracle Virtual Directory, Oracle Identity Manager, Oracle Access Management Access Manager, Oracle Internet Directory, and configuration changes in those applications, various configuration changes might be required in Oracle Adaptive Access Manager. Instructions for handling such types of configuration changes are described in these sections:

References are also provided for moving Oracle Adaptive Access Manager from a test environment to a production environment:

26.1 Oracle Virtual Directory (OVD) Host, Port, and SSL Enablement Changes

To change the Oracle Virtual Directory host, port, and SSL enablement:

  1. Start the Oracle Adaptive Access Manager server-related managed server.

  2. Navigate to OAAM Admin:

    http://OAAM_Managed_Server_Host:OAAM_Admin_Managed_Server_Port/oaam_admin

  3. Log in as a user with access to the OAAM Properties Editor.

  4. Open the OAAM Property Editor modify parameters:

    • Change the password authentication provider to LDAP.

    • Rewire existing Oracle Adaptive Access Manager for Oracle Virtual Directory host name.

    • Rewire existing Oracle Adaptive Access Manager for Oracle Virtual Directory port changes.

    • Rewire existing Oracle Adaptive Access Manager for SSL Enablement of Oracle Virtual Directory (Change Plain Text Communication to SSL for wiring between Oracle Adaptive Access Manager and Oracle Virtual Directory).

    Table 26-1 Configuring Oracle Directory Manager Property Values

    Property Name Property Values

    bharosa.uio.default.password.auth.provider.classname

    com.bharosa.vcrypt.services.LDAPOAAMAuthProvider

    oaam.uio.ldap.host

    OVD_host

    For example, host.oracle.com

    oaam.uio.ldap.port

    OVD_port

    oaam.uio.ldap.userdn.template

    User_Search_DN

    For example, uid= {USER_ID}, cn=user,dc=us,dc=oracle,dc=com.

    oaam.uio.ldap.isSSL

    false

    For information on setting properties in Oracle Adaptive Access Manager, see Oracle Fusion Middleware Administrator's Guide for Oracle Adaptive Access Manager.

  5. Restart the Oracle Adaptive Access Manager server-related managed server.

26.2 Oracle Identity Manager (OIM) URL Changes

Follow these steps to rewire an existing deployment of Oracle Adaptive Access Manager with Oracle Identity Manager:

  1. Start the Oracle Adaptive Access Manager server-related managed server.

  2. Navigate to OAAM Admin:

    http://OAAM_Managed_Server_Host:OAAM_Admin_Managed_Server_Port/oaam_admin

  3. Log in as a user with access to the Properties Editor.

  4. Open the Oracle Adaptive Access Manager Property Editor to modify parameters to:

    • Rewire existing Oracle Adaptive Access Manager for password flow

    • Rewire existing Oracle Adaptive Access Manager for other redirection

    Table 26-2 Configuring Oracle Identity Manager Property Values

    Property Name Property Values

    oaam.oim.url

    		 
    t3://OIM-Managed-Server:OIM-Managed-Port

    For example:

    t3://host.mycorp.example.com:14000

    bharosa.uio.default.signon.links.enum.selfregistration.url

    The URL for Self Registrations is as follows:

    http://OIM-Managed-Server-Host:
OIM-Managed-Server-Port/identity/faces/
register?&backUrl=http://OIM-Managed-Server-Host:OIM-Managed-Server-Port/identity

    Note: If Oracle HTTP Server is configured in front of OIM, then the Oracle HTTP Server host and port should be used in the value instead of the OIM managed server host and port. For example:

    http://OHS-HOST:OHS-PORT/identity/faces/register?&backUrl=http://OHS-HOST:OHS-PORT/identity

    bharosa.uio.default.signon.links.enum.trackregistration.url

    The URL for Track Registrations is as follows:

    http://OIM-Managed-Server-Host:
OIM-Managed-Server-Port/identity/faces/
trackregistration?&backUrl=http://OIM-Managed-Server-Host:OIM-Managed-Server-Port/identity

    Note: If Oracle HTTP Server is configured in front of OIM, then the Oracle HTTP Server host and port should be used in the value instead of the OIM managed server host and port. For example:

    http://OHS-HOST:OHS-PORT/identity/faces/trackregistration?&backUrl=http://OHS-HOST:OHS-PORT/identity

    For information on setting properties in Oracle Adaptive Access Manager, see Oracle Fusion Middleware Administrator's Guide for Oracle Adaptive Access Manager.

  5. Restart the Oracle Adaptive Access Manager server-related managed server.

26.3 Oracle Access Management Access Manager Host and Port Changes

For information on rewiring Oracle Access Management Access Manager for Oracle Adaptive Access Manager host name and port changes, see Oracle Fusion Middleware Administrator's Guide for Oracle Access Management.

26.4 Oracle Internet Directory (OID) Host and Port Changes and SSL Enablement

Follow these steps to change the Oracle Internet Directory Host, Port and SSL enablement in an existing deployment of Oracle Adaptive Access Manager:

  1. Start the Oracle Adaptive Access Manager server-related managed server.

  2. Navigate to OAAM Admin:

    http://OAAM_Managed_Server_Host:OAAM_Admin_Managed_Server_Port/oaam_admin

  3. Log in as a user with access to the Properties Editor.

  4. Open the Oracle Adaptive Access Manager Property Editor to modify parameters to:

    • Change the password authentication provider to LDAP

    • Rewire existing Oracle Adaptive Access Manager for Oracle Internet Directory host name

    • Rewire existing Oracle Adaptive Access Manager for Oracle Internet Directory port changes

    • Rewire existing Oracle Adaptive Access Manager for SSL Enablement of Oracle Internet Directory (Change Plain Text Communication to SSL for wiring between Oracle Adaptive Access Manager and Oracle Internet Directory)

    Table 26-3 Configuring Oracle Directory Manager Property Values

    Property Name Property Values

    bharosa.uio.default.password.auth.provider.classname

    com.bharosa.vcrypt.services.LDAPOAAMAuthProvider

    oaam.uio.ldap.host

    OID host

    For example, host.oracle.com

    oaam.uio.ldap.port

    OID port

    oaam.uio.ldap.userdn.template

    User Search DN

    For example, uid= {USER_ID}, cn=user,dc=us,dc=oracle,dc=com.

    oaam.uio.ldap.isSSL

    false

    For information on setting properties in Oracle Adaptive Access Manager, see Oracle Fusion Middleware Administrator's Guide for Oracle Adaptive Access Manager.

  5. Restart the Oracle Adaptive Access Manager server-related managed server.

26.5 Database Host and Port Changes

After installing Oracle Adaptive Access Manager, if there are any changes in the database host or port number, follow these instructions:

  1. Navigate to the ORACLE_HOME of the database.

  2. Change the port number in ORACLE_HOME /network/admin/listener.ora.

  3. Stop and then restart the Oracle listener.

  4. Change the database pointer in the data sources screen in the Oracle WebLogic Administration Console

To changes the data source:

  1. In the Oracle WebLogic Administrative Console, navigate to Services, select JDBC, select Data Sources, and then oaamDS.

  2. Click oaamDS and edit it for host name/port or user name/password.

26.6 Moving Oracle Adaptive Access Manager to a New Production Environment

For information on moving Oracle Adaptive Access Manager to a new production environment, see Oracle Fusion Middleware Administrator's Guide.

26.7 Moving Oracle Adaptive Access Manager to an Existing Production Environment

For information on moving Oracle Adaptive Access Manager to an existing production environment, see Oracle Fusion Middleware Administrator's Guide.