Index

A B C D E F G H I L M O P R S T U V X

A

account lockout, 3.2.4

addsub.csh script, 10.4

Administer External Applications page, 5.1

administration pages

accessing, 2.8

debugging, A.6.4

external applications, 5.1

application service providers, 10.1

authentication adapters. See authentication plugins

authentication dynamics

certificate-enabled sign-on, 8.1, 8.1

identity management realms, 10.3.2, 10.3.2

third-party access management, 13.1, 13.1.2

authentication levels, 6.3.1, 6.3.1

authentication plugins, 6.3.2, 6.3.2

B

backup and recovery, 9.1.5.3

basic authentication method, 5.1.1, 5.2.3

browser settings

standard, 2.7

C

certificate revocation lists, 8.4

certificate-enabled sign-on

authentication dynamics, 8.1, 8.1

configuring

Oracle HTTP Server, 8.3.1, 8.3.1.2

Oracle Internet Directory, 8.3.3, 8.3.3

single sign-on server, 8.3.2

user name mapping module, 8.3.2.2, 8.3.2.3

CRL maintenance, 8.4

error messages, A.3.9

sample files, 2.12

change password page

behavior, 3.2.3

error messages, 12.3.2

installing, 12.6.1

overview, 1.2.5

parameters, 12.2.3

configuration files

httpd.conf, 4.3.2.2, 9.1.2.3, 9.1.2.3, A.3.1

osso.conf, 4.3.2.4, 9.1.2.3

policy.properties, 6.3.1, 8.3.2.1, A.3, A.6.2, C

ssl.conf, 8.3.1, 8.3.1.2

targets.xml, 11.4, 11.4

x509CertAuth.properties, 8.3.2.2, 8.3.2.3

D

debugging

administration pages, A.6.4

PL/SQL pages, A.6.3

deployment scenarios

geographically distributed instances, 9.1.4.1

multilevel authentication, 6.4, 6.4, 6.4.2, 6.4.2

multiple middle tiers, 9.1.2.2

partner applications, 4.3

deployment-specific pages

examples, 12.7

globalization support, 12.4

guidelines, 12.5, 12.5

installing, 12.6, 12.6.3, 12.6.3

sample files, 2.12

support for OracleAS Wireless, 12.6.2

Details of Login Failures page, 11.3

directory access

configuring, 3.4

scripts, 3.4

directory entries, for OracleAS Single Sign-On, 3.3, 3.3

disaster recovery, 9.1.5.2

Distributed Cluster Management, 4.3.2.4, 9.1.2.3

E

Edit SSO Server page, 2.9, 2.9

enblhstg.csh script, 10.4

error messages

basic, A.1.8

certificate-enabled sign-on, A.3.9

export and import, 14.6

type 41400, A.2.6

export and import

error messages, 14.6

scenarios, 14.3.1.1

scripts, 14.3.2, 14.3.2

external applications

access using mod_osso/mod_proxy, 5.2

adding, 5.1.1

administration pages, 5.1

authentication dynamics, 1.2.3, 1.2.3.3

authentication methods

basic, 5.1.1, 5.2.3

GET, 5.1.1

POST, 5.1.1

editing, 5.1.2

overview, 1.1.3

External Applications portlet, 5.2

F

force change password feature, 3.2.3.4

G

GET authentication method, 5.1.1, A.8

global user inactivity timeout, A.8

configuring, 2.11, 2.11

overview, 1.2.6, 1.2.6

scripts, 2.11

globalization support

deployment-specific pages, 12.4

standard pages, 2.10

grace login, 3.2.3.3

H

high server availability

configuring, 9.1.5.3

deployment options

geographically distributed instances, 9.1.4

multiple middle tiers, 9.1.2

replicated directory, 9.1.3

http

//metalink.oracle.com, A.9

httpd.conf file, 4.3.2.2, 4.4, 9.1.2.3, 9.1.2.3, A.3.1

I

iASAdmins administration group, 2.2

identity management infrastructure database

configuring for SSL, 7.2

replicating, 9.2

support for multiple realms, 10.1

identity management realms

administrative privileges, 10.5

authentication dynamics, 10.3.2, 10.3.2

benefits, 10.1

configuring, 10.4

overhead, 10.2

overview, 10.1

support for partner applications, 10.3.2

IP checking, 2.9

L

LDAP command-line tools, 3.1

LDAP connection timeout

configuring, A.1.13

load balancers

OracleAS Web Cache, 9.1.2.3, 9.1.2.3, 9.1.2.3

with multiple partner applications, 4.3, 4.3.2.3

with multiple single sign-on middle tiers, 9.1.2, 9.1.2, 9.1.2.3, 9.1.2.3, 9.1.2.3

log files, A.6.1

error messages, 12.3.1, 12.3.1

installing, 12.6.1

parameters, 12.2.1, 12.2.1

password reset feature, 12.2.2

third-party access, 13.1

M

mod_osso

compared with single sign-on SDK, 1.1.4

overview, 1.1.4

registering, 4.1

reregistering, 4.3.2.4, 4.3.2.4, 9.1.2.3, 9.1.2.3, 9.1.2.3, 9.3.2

mod_osso.conf file, 2.11, 2.11, 4.4

monitoring home page, 11.2, 11.2

monitoring pages

accessing, 11.1

ports, 11.4, 11.4

multilevel authentication

authentication levels, 6.3.1, 6.3.1

configuring, 6.4, 6.4.2

flow, 6.2

plugins, 6.3.2

multimaster replication, 9.2.1

O

oidprovtool, 9.4

Oracle Delegated Administration Services, 1.2.5, 3.1

Oracle Directory Manager, 2.2, 3.1

Oracle HTTP Server

configuring

certificate-enabled sign-on, 8.3.1, 8.3.1.2

partner application middle tier, 4.3.2.2

single sign-on middle tier, 9.1.2.3, 9.1.2.3

SSL configuration, 7.1

starting and stopping, 2.5.2.1

Oracle Internet Directory

configuring for certificate-enabled sign-on, 8.3.3, 8.3.3

configuring for SSL, 7.3.1

role in third-party access management, 13.2

synchronization with Microsoft Active Directory, 13.2

OracleAS Certificate Authority, 8.3.1.2

OracleAS Cold Failover Cluster, 9.1.5.1

OracleAS Discoverer, 14.1, 14.2.2, 14.3.1.2

OracleAS Portal

External Applications portlet, 5.2

registering, 4.1

OracleAS Single Sign-On

administrative pages, 1.2.1

administrators, 2.1

benefits, 1

browser preferences, 2.7, 2.7

configuring directory access, 3.4

directory information tree, 3.3, 3.3

external applications, 5.1.1, 5.1.2

globalization support, 2.10, 12.4

home page, 1.2.1

nondefault configuration, 9

password policies, 3.2.1, 3.2.6

passwords, 1.2.5

sample files, 2.12

schema, 1.2.1

scripts

addsub.csh, 10.4

enblhstg.csh, 10.4

ssocfg, 9.1.2.3, 9.3.2

ssogito.sql, 2.11

ssomig, 14.2

ssooconf.sql, 3.4, A.1.1, A.1.7

ssoreoid.sql, 3.5, 3.5, A.1.7, A.7.3

timeouts, 1.2.6, 1.2.6

user accounts, 3.1

user attributes, 1.1.4

OracleAS Web Cache, 4.3.2.3, 9.1.2.3, 9.1.2.3

OracleAS Wireless, 1.2.7

ossoca.jar tool, 2.10, 2.10

osso.conf file, 4.3.2.4, 9.1.2.3

P

partner applications

configuring for high availability, 4.3

deploying, 4.3

examples of, 1.1.2

overview, 1.1.2

registering, 4.1

reregistering, 4.3.2.4, 4.3.2.4, 7.5, 9.1.2.3, 9.1.2.3, 9.1.2.3

password policies, 3.2.1, 3.2.6

passwords

changing, 1.2.5, 3.2.3.2

configuring, 3.2.6

expiry, 3.2.2

external applications, 1.1.3

force change password feature, 3.2.3.4

management, 3.2

resetting, 1.2.5, 3.2.3.1, 12.2.2

rules, 3.2.1

schema, 3.5, B

policy.properties file

in certificate-enabled sign-on, 8.3.2.1

in debugging, A.3, A.6.2

in multilevel authentication, 6.3.1

in third-party access management, 13.4.1

purpose, 2.4

sample, C

POST authentication method, 5.1.1, A.8

proxy authentication, 5.2

proxy server

configuring, 9.3.1, 9.3.2

function, 9.3

R

refresh script, 3.5

Remember My Login Information For This Application check box, 5.1.3

reverse proxy, 9.3

S

sample files

certificate-enabled sign-on, 2.12

deployment-specific pages, 2.12

scripts

ssogito.sql, 2.11

ssomig, 14.2, 14.2.2

ssooconf.sql, 3.4

ssoreg, 4.1, 4.2.1, 4.2.1, 4.2.2, 9.3.2

ssoreoid.sql, 3.5, 3.5

server cache, 3.5, 3.5

single sign-off page

installing, 12.6.3

parameters, 12.2.4, 12.2.4

single sign-on administrators

assigning privileges to, 2.2

creating a new group for, 2.3, 2.3

duties, 2.1

single sign-on server

accessing, 1.2.1

cache, 3.5, 3.5

configuring directory access, 3.4

deployment options

geographically distributed instances, 9.1.4

multiple middle tiers, 9.1.2, 9.1.3

replicated directory, 9.1.3, 9.1.3

log files, A.6.1

overview, 1.1.1

role in third-party access management, 13.1

starting and stopping, 2.5.2.3

with reverse proxy, 9.3

single sign-on session timeout, 2.9

SSL (Secure Sockets Layer), 7.1

ssl.conf file, 4.4, 4.4, 8.3.1, 8.3.1.2

SSO Server Administration page, 2.8

ssocfg script, 9.1.2.3, 9.3.2

ssogito.sql script, 2.11

ssomig script

executing, 14.3.2, 14.3.2

parameters, 14.2.2, 14.2.2

syntax, 14.2.1

ssomig.log file, 14.4

ssooconf.sql script, 3.4, A.1.1, A.1.7

ssoreg script

example, 4.2.2

purpose, 4.1

syntax, 4.2.1

usage, 9.3.2

ssoreoid.sql script, 3.5, 3.5, A.1.7, A.7.3

ssoReplSetup.jar tool, 9.2.2

synchronization

between directory and single sign-on server, 9.4, 9.4

between third-party directory and Oracle Internet Directory, 13.2

T

targets.xml file, 11.4, 11.4

third-party access management

authentication dynamics, 13.1, 13.1.2

code example, 13.4.1, 13.4.1

logout, 13.3.3, 13.3.3

migration, 13.4.2

timeouts

global user inactivity timeout, 1.2.6, 1.2.6, 2.11, 2.11

LDAP connections, A.1.13

single sign-on session timeout, 2.9

U

URLs, configuring for SSL, 7.3.1

URLs, protecting, 7.2, 9.1.2.3

user accounts

lockout, 3.2.4

management, 3.1

user management tools, 3.1

user name mapping module, 8.3.2.2.1

custom implementation, 8.3.2.3, 8.3.2.3

default implementation, 8.3.2.2.1

V

virtual hosts, 4.4, 4.4, 9.3

X

X509CertAuth.properties file, 8.3.2.2, 8.3.2.3