Index

A B C D E F G H I J K L M O P R S T U V W X

A

account lockout, 3.2.4

addsub.csh script, 10.4

Administer External Applications page, 5.1

administration pages

accessing, 2.6

debugging, A.5, A.5

external applications, 5.1

application service providers, 10.1

authentication adapters. See authentication plugins

authentication dynamics

certificate-enabled sign-on, 7.1, 7.1

identity management realms, 10.3.2, 10.3.2

third-party access management, 13.1, 13.1.2

Windows native authentication, 8.2, 8.2

authentication levels, 6.3.1, 6.3.1

authentication plugins, 6.3.2, 6.3.2

B

backup and recovery, 9.3.6.3

basic authentication method, 5.1.1, 5.2.3

browser settings

standard, 2.5

Windows native authentication, 8.4.7.2

Internet Explorer 5.0, 8.4.7.1

Internet Explorer 6.0, 8.4.7.1, 8.4.7.2

C

certificate revocation lists, 7.4

certificate-enabled sign-on

authentication dynamics, 7.1, 7.1

configuring

Oracle HTTP Server, 7.3.1, 7.3.1.2

Oracle Internet Directory, 7.3.3, 7.3.3

single sign-on server, 7.3.2

user name mapping module, 7.3.2.3, 7.3.2.4

CRL maintenance, 7.4

error messages, A.2.3, A.2.3.2

sample files, 2.10

change password page

behavior, 3.2.3

error messages, 12.3.2

installing, 12.6.1

overview, 1.2.5

parameters, 12.2.3

configuration files

httpd.conf, 4.3.2.2, 4.3.2.2, 9.3.2.2, 9.3.2.2, A.2.3.2

jazn-data.xml, 8.4.6.2

krb5.conf, 8.4.6.1

opmn.xml, 8.4.6.2

osso.conf, 4.2, 4.2.1, 4.3.2.4, 9.3.2.2

policy.properties, 6.3.1, 7.3.2.2, A.2.3.1, A.3, C

ssl.conf, 7.3.1, 7.3.1.2

sso_apache.conf, 9.1.3.1

targets.xml, 11.4, 11.4

web.xml, 8.4.6.3

x509CertAuth.properties, 7.3.2.3, 7.3.2.4

D

debugging

administration pages, A.5, A.5

PL/SQL pages, A.4, A.4

deployment scenarios

geographically distributed instances, 9.3.5.1

multilevel authentication, 6.4, 6.4, 6.4.2, 6.4.2

multiple middle tiers, 9.3.2.1

partner applications, 4.3

replicated directory, 9.3.4.1

deployment-specific pages

examples, 12.7

globalization support, 12.4

guidelines, 12.5, 12.5

installing, 12.6, 12.6.3, 12.6.3

sample files, 2.10

support for OracleAS Wireless, 12.6.2

Details of Login Failures page, 11.3

directory access

configuring, 3.4

scripts, 3.4

directory entries, for OracleAS Single Sign-On, 3.3, 3.3

disaster recovery, 9.3.6.2

Distributed Cluster Management, 4.3.2.4, 9.3.2.2

E

Edit SSO Server page, 2.7, 2.7

enblhstg.csh script, 10.4

error messages

basic, A.2.1, A.2.1

certificate-enabled sign-on, A.2.3, A.2.3.2

export and import, 14.6

password policies, A.2.4

Windows native authentication, A.2.2, A.2.2

export and import

error messages, 14.6

scenarios, 14.3.1.1

scripts, 14.3.2, 14.3.2

external applications

access using mod_osso/mod_proxy, 5.2

adding, 5.1.1

administration pages, 5.1

authentication dynamics, 1.2.3, 1.2.3.3

authentication methods

basic, 5.1.1, 5.2.3

GET, 5.1.1

POST, 5.1.1

editing, 5.1.2

overview, 1.1.3

External Applications portlet, 5.2

F

force change password feature, 3.2.3.4

G

GET authentication method, 5.1.1

global user inactivity timeout

configuring, 2.9, 2.9

overview, 1.2.6, 1.2.6

scripts, 2.9

globalization support

deployment-specific pages, 12.4

standard pages, 2.8

grace login, 3.2.3.3

H

high server availability

configuring, 9.3.6.3

deployment options

geographically distributed instances, 9.3.5

multiple middle tiers, 9.3.2

OracleAS Active Failover Clusters, 9.3.3, 9.3.3

replicated directory, 9.3.4, 9.3.4.2

httpd.conf file, 4.3.2.2, 4.3.2.2, 4.4, 4.4, 4.4, 9.3.2.2, 9.3.2.2, A.2.3.2

I

iASAdmins administrative group, 2.2

identity management infrastructure database

configuring for SSL, 9.1.2

replicating, 9.4

support for multiple realms, 10.1

identity management realms

administrative privileges, 10.5

authentication dynamics, 10.3.2, 10.3.2

benefits, 10.1

configuring, 10.4

overhead, 10.2

overview, 10.1

support for partner applications, 10.3.2

IP checking, 2.7

J

jazn-data.xml file, 8.4.6.2

K

Kerberos protocol, 8.1

krb5.conf file, 8.4.6.1

L

LDAP command-line tools, 3.1

LDAP connection cache, A.7

load balancers

OracleAS Web Cache, 9.3.2.2, 9.3.2.2, 9.3.2.2

with multiple partner applications, 4.3, 4.3.2.3

with multiple single sign-on middle tiers, 9.3.2, 9.3.2, 9.3.2.2, 9.3.2.2, 9.3.2.2, 9.3.4.1, 9.3.4.1, 9.3.4.1, 9.3.4.2

with OracleAS Active Failover Clusters, 9.3.3

log files, A.1

error messages, 12.3.1, 12.3.1

installing, 12.6.1

parameters, 12.2.1, 12.2.1

password reset feature, 12.2.2

third-party access, 13.1

Windows native authentication, 8.6

M

master definition site, 9.3.4.1

mod_osso

compared with single sign-on SDK, 1.1.4

overview, 1.1.4

registering, 4.1

reregistering, 4.3.2.4, 4.3.2.4, 9.3.2.2, 9.3.2.2, 9.3.2.2, 9.5.2

mod_osso.conf file, 2.9, 2.9, 4.4

monitoring home page, 11.2, 11.2

monitoring pages

accessing, 11.1

ports, 11.4, 11.4

multilevel authentication

authentication levels, 6.3.1, 6.3.1

configuring, 6.4, 6.4.2

flow, 6.2

plugins, 6.3.2

multimaster replication, 9.4.1

O

oidprovtool, 9.6

opmn.xml file, 8.4.6.2

Oracle Delegated Administration Services, 1.2.5, 3.1

Oracle Directory Manager, 2.2, 3.1

Oracle HTTP Server

configuring

certificate-enabled sign-on, 7.3.1, 7.3.1.2

partner application middle tier, 4.3.2.2

single sign-on middle tier, 9.3.2.2, 9.3.2.2

SSL configuration, 9.1.1

starting and stopping, 2.4.1

Oracle Internet Directory

configuring for certificate-enabled sign-on, 7.3.3, 7.3.3

configuring for SSL, 9.1.3.2, 9.2

configuring for Windows native authentication, 8.4.4

role in third-party access management, 13.2

synchronization with Microsoft Active Directory, 13.2

OracleAS Active Failover Clusters, 9.3.3, 9.3.3.1

OracleAS Certificate Authority, 7.3.1.2

OracleAS Cold Failover Cluster, 9.3.6.1

OracleAS Discoverer, 14.1, 14.2.2, 14.3.1.2

OracleAS Portal

External Applications portlet, 5.2

registering, 4.1

OracleAS Single Sign-On

administrative pages, 1.2.1

administrators, 2.1

benefits, 1

browser preferences, 2.5, 2.5

configuring directory access, 3.4

directory information tree, 3.3, 3.3

external applications, 5.1.1, 5.1.2

globalization support, 2.8, 12.4

home page, 1.2.1

nondefault configuration, 9

password policies, 3.2.1, 3.2.6

passwords, 1.2.5

sample files, 2.10

schema, 1.2.1

scripts

addsub.csh, 10.4

enblhstg.csh, 10.4

ssocfg, 9.3.2.2, 9.3.4.2, 9.3.4.2, 9.5.2

ssogito.sql, 2.9

ssomig, 14.2

ssooconf.sql, 3.4, 9.4.2, A.2.1, A.2.1

ssoreoid.sql, 3.5, 3.5, A.2.1, A.8

timeouts, 1.2.6, 1.2.6

user accounts, 3.1

user attributes, 1.1.4

OracleAS Web Cache, 4.3.2.3, 9.3.2.2, 9.3.2.2, 9.5.2

OracleAS Wireless, 1.2.7

ossoca.jar tool, 2.8, 2.8

osso.conf file, 4.2, 4.2.1, 4.3.2.4, 9.3.2.2

ossoreg.jar tool

example, 4.2.2

parameters, 4.2.1, 4.2.1

syntax, 4.2.1

P

partner applications

configuring for high availability, 4.3

deploying, 4.3

examples of, 1.1.2

overview, 1.1.2

registering, 4.1

reregistering, 4.3.2.4, 4.3.2.4, 9.1.5, 9.3.2.2, 9.3.2.2, 9.3.2.2

password policies, 3.2.1, 3.2.6

passwords

changing, 1.2.5, 3.2.3.2

configuring, 3.2.6

expiry, 3.2.2

external applications, 1.1.3

force change password feature, 3.2.3.4

management, 3.2

resetting, 1.2.5, 3.2.3.1, 12.2.2

rules, 3.2.1

schema, 3.5, B

policy.properties file

in certificate-enabled sign-on, 7.3.2.2

in debugging, A.2.3.1, A.3

in multilevel authentication, 6.3.1

in third-party access management, 13.4.1

purpose, 2.3

sample, C

POST authentication method, 5.1.1

proxy authentication, 5.2

proxy server

configuring, 9.5.1, 9.5.2

function, 9.5

R

refresh script, 3.5

Remember My Login Information For This Application check box, 5.1.3

remote master site, 9.3.4.1

Replication Environment Management Tool, A.9, A.9.2

reverse proxy, 9.5

S

sample files

certificate-enabled sign-on, 2.10

deployment-specific pages, 2.10

scripts

ssogito.sql, 2.9

ssomig, 14.2, 14.2.2

ssooconf.sql, 3.4

ssoreoid.sql, 3.5, 3.5

server cache, 3.5, 3.5

single sign-off page

installing, 12.6.3

parameters, 12.2.4, 12.2.4

single sign-on administrators

assigning privileges to, 2.2

duties, 2.1

single sign-on server

accessing, 1.2.1

cache, 3.5, 3.5

configuring directory access, 3.4

configuring for Windows native authentication, 8.4.6

deployment options

geographically distributed instances, 9.3.5

multiple middle tiers, 9.3.2, 9.3.4

OracleAS Active Failover Clusters, 9.3.3, 9.3.3

replicated directory, 9.3.4, 9.3.4, 9.3.4.2

LDAP connection cache, A.7

log files, A.1

overview, 1.1.1

role in third-party access management, 13.1

starting and stopping, 2.4.3

with reverse proxy, 9.5

single sign-on session timeout, 2.7

SSL (Secure Sockets Layer), 9.1

ssl.conf file, 4.4, 4.4, 7.3.1, 7.3.1.2

SSO Server Administration page, 2.6

sso_apache.conf file, 9.1.3.1

ssocfg script, 9.3.2.2, 9.3.4.2, 9.3.4.2, 9.5.2

ssogito.sql script, 2.9

ssomig script

executing, 14.3.2, 14.3.2

parameters, 14.2.2, 14.2.2

syntax, 14.2.1

ssomig.log file, 14.4

ssooconf.sql script, 3.4, 9.4.2, A.2.1, A.2.1

ssoreoid.sql script, 3.5, 3.5, A.2.1, A.8

ssoReplSetup.jar tool, 9.4.2, 9.4.2

synchronization

between directory and single sign-on server, 9.6, 9.6

between Microsoft Active Directory and Oracle Internet Directory, 8.4.3

between third-party directory and Oracle Internet Directory, 13.2

T

targets.xml file, 11.4, 11.4

third-party access management

authentication dynamics, 13.1, 13.1.2

code example, 13.4.1, 13.4.1

logout, 13.4.2, 13.4.2

migration, 13.4.3

timeouts

global user inactivity timeout, 1.2.6, 1.2.6, 2.9, 2.9

single sign-on session timeout, 2.7

U

URLs, configuring for SSL, 9.1.3.2

URLs, protecting, 9.1.2, 9.3.2.2

user accounts

lockout, 3.2.4

management, 3.1

user management tools, 3.1

user name mapping module, 7.3.2.3.1

custom implementation, 7.3.2.4, 7.3.2.4

default implementation, 7.3.2.3.1

V

virtual hosts, 4.4, 4.4, 9.5

W

web.xml file, 8.4.6.3

Windows native authentication

authentication dynamics, 8.2, 8.2, 8.2

browser settings, 8.4.7, 8.4.7.2

configuring, 8.4

error messages, A.2.2, A.2.2

fallback authentication, 8.5, 8.5

overview, 8.1

system requirements, 8.3, 8.3

X

X509CertAuth.properties file, 7.3.2.3, 7.3.2.4