5 Risk Management

Oracle Adaptive Access Manager supports companies by protecting their exposed Web applications, services, and end-users from online threats and insider fraud. Oracle Adaptive Access Manager features include:

risk-aware authentication,
real-time behavior profiling,
transaction and event risk analysis.

Oracle Adaptive Access Manager provides real-time or offline risk analysis by calculating the risk of an access request, an event or a transaction and determining proper outcomes to prevent fraud and misuse. A portion of the risk evaluation is dedicated to verifying a user's identity and determining if the activity is suspicious.

Oracle Adaptive Access Manager provides end-user-facing functionality to prevent fraud through its Virtual Authentication Devices to secure credential data at the entry point.

Oracle Adaptive Access Manager also provides interdiction methods including risk-based authentication, blocking, and configurable actions to interdict in other systems.

This chapter explains how you can integrate Oracle Adaptive Access Manager with other components to provide risk management for your enterprise applications. It contains these sections:

Oracle Adaptive Access Manager for Oracle Identity Management
Oracle Adaptive Access Manager for Custom Applications

5.1 Oracle Adaptive Access Manager for Oracle Identity Management

Oracle Adaptive Access Manager integrates with other Oracle Identity Management components to provide additional risk management support.

Table 5-1 shows the supported integrations:

Table 5-1 Oracle Adaptive Access Manager for Oracle Identity Management

Oracle Adaptive Access Manager Integrated with	Additional Information
Oracle Access Manager	Integrating Oracle Access Manager and Oracle Adaptive Access Manager in the Oracle Fusion Middleware Integration Guide for Oracle Access Manager
Oracle Identity Manager for password flow	Deployment Options for Password Management in the Oracle Fusion Middleware Integration Guide for Oracle Access Manager
Oracle Internet Directory as an authentication provider	Oracle Identity Management Suite-Level Installation Scenarios in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management
Oracle Virtual Directory as an authentication provider	Oracle Identity Management Suite-Level Installation Scenarios in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management

5.2 Oracle Adaptive Access Manager for Custom Applications

Oracle Adaptive Access Manager provides a variety of mechanisms to integrate with custom applications.

Applications can integrate natively with Oracle Adaptive Access Manager using APIs. The Universal Installer reverse proxy deployment option offers login risk-based, multi-factor authentication to web applications without requiring any change to the application code.

Table 5-2 shows the supported integrations:

Table 5-2 Oracle Adaptive Access Manager with Custom Applications

Oracle Adaptive Access Manager Integration	Additional Information
using Web Services and SOAP API	Using Web Services and SOAP API in the Oracle Fusion Middleware Developer's Guide for Oracle Adaptive Access Manager
using Java API	Integrating Native Java Applications in the Oracle Fusion Middleware Developer's Guide for Oracle Adaptive Access Manager
using OAAM Proxy for Internet and Security Acceleration Server (ISA)	Installing Oracle Adaptive Access Manager Proxy for Microsoft ISA in the Oracle Fusion Middleware Developer's Guide for Oracle Adaptive Access Manager
using OAAM Proxy for Apache	Installing Oracle Adaptive Access Manager Proxy for Apache in the Oracle Fusion Middleware Developer's Guide for Oracle Adaptive Access Manager