What's New in This Guide?

This chapter provides a brief description of new features introduced with the latest release of Oracle Identity Federation, and points you to more information about each one. It contains these topics:

• Updates in 11g Release 1 (11.1.1) Patch Set 4

• New Features in Oracle Identity Federation 11g Release 1 (11.1.1) Patch Set 3

• New Features In Oracle Identity Federation 11g Release 1 (11.1.1)

Note:

The Oracle Identity Federation server is referred to as the federation server in this chapter.

Updates in 11g Release 1 (11.1.1) Patch Set 4

This document has been updated to correct a number of doc errata.

New Features in Oracle Identity Federation 11g Release 1 (11.1.1) Patch Set 3

11g Release 1 (11.1.1) Patch Set 3 provides these features:

• Separate keystore and encryption key passwords

  See Section 8.2.1, "Signing and Encryption Passwords".

• Global logout enhancements

  See Section 6.8.3, "Configuring On-Demand Global Logout".

• Configuring Oracle Identity Federation/SP to authenticate itself to Oracle Access Manager.

  See Section 3.2.5, "Oracle Identity Federation/SP Authenticating to Oracle Access Manager".

• Support for the OpenID protocol

  See Section 1.2.4.10, "OpenID Profiles and Extensions".

• New HTTP header authentication engine

  See Section 5.15.1, "Authentication Engines - HTTP Header".

• Certification with Oracle Access Manager 11g

  See Section 3.2.4, "Deploying Oracle Identity Federation with Oracle Access Manager 11g".

• Import and export of a provider's settings through WLST

  See Section 9.2.36, "extractproviderprops" and Section 9.2.37, "setproviderprops".

• Restrictions on assertion validity

  See Section 6.21, "Configuring Audience Restrictions for Assertions".

• The ability to override NameID mapping per partner

  See Section 6.20, "Overriding NameID Mapping Per Partner."

• Support for SAML 1.x Source ID

  See Section 4.3.5, "Set Up Single Sign-On for SAML 1.x and WS-Federation".

• Custom pre- and post-processing actions

  See Chapter 12, "Custom Actions."

• Support for the eAuth specifications

  See Section 6.8.1, "Configuring for eAuth Mode".

• Support for HTTP header collector

  See Section 5.15, "Configuring Authentication Engines".

The following documentation changes appear in this release:

• The customization features are collected under a separate part, Part III, "Oracle Universal Federation Framework".

• The pdf version of the document is split into two volumes.

New Features In Oracle Identity Federation 11g Release 1 (11.1.1)

• WebLogic Server Integration: Oracle Identity Federation is now a Java component managed by the Oracle WebLogic Server.

  See Also:

  • Oracle Fusion Middleware Components

  • Oracle Fusion Middleware Concepts

• Fusion Middleware Control: You can manage Oracle Identity Federation by using a graphical user interface called Oracle Enterprise Manager Fusion Middleware Control

  See Also:

  Getting Started Managing Oracle Fusion Middleware

• Integration with Common Auditing Infrastructure: Oracle Identity Federation is now integrated with the Oracle Fusion Middleware audit framework. You can configure auditing from the command line or by using Fusion Middleware Control.

  See Also:

  • Section 7.4, "Auditing"

  • Oracle Fusion Middleware Application Security Guide

• Support for Oracle Single Sign-On and Oracle Access Manager 10g (10.1.4.2.0) or later: Oracle Fusion Middleware 11g Release 1 (11.1.1) does not include Oracle Single Sign-On or Oracle Access Manager. Oracle Identity Federation 11g Release 1 (11.1.1), however, is compatible with Oracle Single Sign-On and Oracle Access Manager 10g (10.1.4.2.0) or later.