1 Introduction

This chapter provides an overview of the Oracle Access Manager integrations for 10g (10.1.4.0.1) described in this guide. For an introduction to Oracle Access Manager, see the Oracle Access Manager Introduction.

Note: Oracle Access Manager was previously known as Oblix NetPoint. However, you may see the name NetPoint in manuals and within the product itself when references are made to specific functions, paths, file names, and so on.

1.1 About Oracle Access Manager Integrations

Integrating Oracle Access Manager 10g (10.1.4.0.1) with other applications and portals requires some knowledge of both products. This guide provides the details you need to successfully set up Oracle Access Manager for specific applications and portals you may integrate with Oracle Access Manager.

1.1.1 Integrations With Other Oracle Products

The following integrations with other Oracle products are described in this guide:

• Oracle HTTP Server (OHS): OHS is a platform in the Oracle security framework that includes the integration of Oracle Access Manager and OracleAS Single Sign-On. See "Integrating the Apache v1.3 and Oracle HTTP Server" for details.

• Oracle Virtual Directory (OVD): This product combines user data from multiple data sources to create an aggregated virtual directory. The virtual directory looks and behaves like any other LDAP directory, and the user does not know that the data has come from heterogeneous sources. See "Integrating the Oracle Virtual Directory" for details.

• OracleAS Single Sign-On: Oracle Application Server Single Sign-On (also referred to as OracleAS Single Sign-On) enables you to use a single user name, password, and optionally a realm ID to log in to all features of the Oracle Application Server as well as to other Web applications. You can enable single sign-on between resources protected by Oracle Access Manager and OracleAS Single Sign-On. See "Integrating with Oracle Application Servers" for details.

• Oracle Identity Federation: Users need to access content on different corporate Web sites. Corporate Web sites need to authenticate and authorize users from different domains that use different security products. The Oracle Identity Federation product addresses these problems. This document describes integrating with Oracle Identity Federation to enable federated authorization. See "Federated Single Sign-On Using Oracle Identity Federation" for details.

• Siebel 7 e-Business Platform: Siebel 7 is a Web-based suite that combines customer relationship management, partner relationship management and employee relationship management applications. See "Integrating Siebel 7" for details.

• Peoplesoft: PeopleSoft is a Web-based eBusiness application suite that provides human resources, supply chain, CRM, analytics, portal, and other applications. See "Integrating PeopleSoft" for details.

• eBusiness Suite: Oracle E-Business Suite is a comprehensive suite of business applications for the enterprise. See "Integrating Oracle eBusiness Suite" for details.

1.1.2 Integrations with Third-Party Products

The following integrations with third-party products are discussed in this guide:

• BEA WebLogic Security Service Provider Interface (SSPI): The Oracle Access Manager Security Provider for WebLogic ensures that only appropriate users and groups can access Oracle Access Manager-protected WebLogic resources to perform specific operations. The Security Provider also enables you to configure single sign-on between Oracle Access Manager and WebLogic resources. See "Integrating the Security Provider for WebLogic SSPI" for details.

• IBM WebSphere: The Oracle Access Manager Connector for WebSphere provides identity management, access control, and single sign-on across J2EE resources and applications developed on the IBM WebSphere platform. See "Integrating with IBM WebSphere" for details.

• Plumtree Corporate Portal (now BEA Aqualogic Interaction): Oracle Access Manager provides identity management, access control, and single sign-on for the Plumtree Corporate Portal. This product is now named BEA Aqualogic Interaction, however, the certified integration is for Plumtree 5.0.4. See Integrating Plumtree Corporate Portal for details.

• mySAP: Integrating Oracle Access Manager with mySAP enables the use of Oracle Access Manager functionality across all mySAP Web-based applications and other Oracle Access Manager-protected enterprise resources and applications. See "Integrating mySAP Applications" for details.

• RSA SecurID Authentication: Oracle Access Manager supports RSA Security features and provides the SecurID authentication plug-in and components needed to integrate a native SecurID authentication scheme into Oracle Access Manager policy domains for Web single sign-on. See "Integrating the RSA SecurID Authentication Plug-In" for details.

• Microsoft Products: Oracle Access Manager supports integration with the following Microsoft features and services:

  • Smart Card Authentication: Oracle Access Manager supports smart card authentication with Active Directory and IIS Web servers using ActivCard Cryptographic Service Provider (CSP) for Windows 2000, ActivCard Gold utilities, and ActivCard USB Reader v2.0 in homogeneous Windows environments. See "Integrating Smart Card Authentication" for details.

  • Microsoft SharePoint Portal Server (SPS) 2003: Oracle Access Manager provides authentication for SPS resources and services, URL level authorization, and single sign-on for seamless navigation between the portal and other protected resources. The SharePoint Portal Server will enforce application-specific authorization polices for capabilities within the SharePoint application and offers the option of controlling access to specific documents. See "Integrating SharePoint Portal Server" for details.

  • Microsoft ASP.NET: Oracle Access Manager supports the ASP.NET component of the Microsoft .NET Framework, which developers can use to build, deploy, and run Web applications and distributed applications. ASP.NET is a set of technologies in the Microsoft .NET Framework that enables the building of Web applications and XML Web services. The Security Connector for ASP.NET supports and enhances native .NET role-based security. See "Integrating With ASP.NET" for details.

  • Authorization Manager: Oracle Access Manager includes a custom authorization plug-in, the Oracle Access Manager AzMan Plug-in to use Authorization Manager services to make authorization decisions for Access Server clients, including WebGates and callers of the Access Manager API. See "Integrating Authorization Manager Services" for details.