Contents

List of Figures

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documentation
• Conventions

1 Introduction to Oracle Authorization Policy Manager

• 1.1 Audience and Prerequisites
• 1.2 What Is Authorization Policy Manager?
• 1.3 The Big Picture
  • 1.3.1 Installing and Configuring Authorization Policy Manager
    • 1.3.1.1 Installation
    • 1.3.1.2 High Availability
    • 1.3.1.3 Single Sign-On
    • 1.3.1.4 SSL
    • 1.3.1.5 Loggers

2 The OPSS Authorization Model

• 2.1 The Basic Security Artifacts
• 2.2 External Roles
• 2.3 The Policy Model
  • 2.3.1 Application Role
  • 2.3.2 Principal
  • 2.3.3 The Resource Catalog
    • 2.3.3.1 Resource Type
    • 2.3.3.2 Resource
    • 2.3.3.3 Permission and Entitlement
  • 2.3.4 Application Policy
  • 2.3.5 Role Categories

3 Getting Started with Oracle Authorization Policy Manager

• 3.1 The Two Major Tabs
  • 3.1.1 The Authorization Management Tab
  • 3.1.2 The System Configuration Tab
• 3.2 The Welcome Page
• 3.3 The Navigation Panel
• 3.4 Finding Artifacts with a Simple Search
• 3.5 Online Help
• 3.6 Some Frequently Used Operations

4 Querying Security Artifacts

• 4.1 Searching External Roles
• 4.2 Searching Application Roles
• 4.3 Searching Application Resource Types
• 4.4 Searching Application Resources
• 4.5 Searching Application Entitlements
• 4.6 Searching Application Policies
  • 4.6.1 Finding Application Policies that Match Entitlements or Resources
  • 4.6.2 Finding Application Policies that Match Principals
• 4.7 Reusing Search Parameter Values

5 Managing Security Artifacts

• 5.1 Managing Application Security Artifacts
  • 5.1.1 Managing Application Roles
    • 5.1.1.1 Creating a Role
    • 5.1.1.2 Modifying a Role
  • 5.1.2 Managing Application Resource Types
    • 5.1.2.1 Creating a Resource Type
    • 5.1.2.2 Modifying a Resource Type
  • 5.1.3 Managing Application Resources
    • 5.1.3.1 Creating a Resource
    • 5.1.3.2 Modifying a Resource
  • 5.1.4 Managing Application Entitlements
    • 5.1.4.1 Creating an Entitlement
    • 5.1.4.2 Modifying an Entitlement
  • 5.1.5 Managing Application Policies
    • 5.1.5.1 Creating a Policy
    • 5.1.5.2 Modifying a Policy
  • 5.1.6 Managing Application Role Categories
• 5.2 Viewing the External Role Hierarchy
• 5.3 Managing the Application Role Hierarchy
  • 5.3.1 Roles that an Application Role Inherits
  • 5.3.2 Roles that Inherit an Application Role
• 5.4 Mapping Application Roles to an External Role
• 5.5 Mapping External Roles to an Application Role

6 Delegated Administration

• 6.1 Delegated Administrators
• 6.2 Managing Delegated Administrators
  • 6.2.1 Managing Delegated Administrators
  • 6.2.2 Managing the Applications Assigned to a Delegated Administrator
  • 6.2.3 Managing the External Roles Mapped to a Delegated Administrator

7 Customizing the User Interface

• 7.1 Customizing Authorization Policy Manager
• 7.2 Customizing Headers, Footers, and Logo
• 7.3 Customizing Color Schemes
• 7.4 Customizing the Login Page

8 Internationalization

• 8.1 Language Support

A Using an OpenLDAP Identity Store

• A.1 Using an OpenLDAP Identity Store

B Troubleshooting Oracle Authorization Policy Manager

• B.1 Unable to Login
• B.2 Need Further Help?

Index