This section provides the following topics:
Configure Access Manager to use Windows Native Authentication.
The following overview outlines the tasks that must be performed to set up WNA with Access Manager and the SharePoint Server.
Task overview: Setting up WNA with SharePoint Server
Complete the following prerequisite tasks:
Perform tasks in "Required Microsoft Components".
Create a SharePoint Web site, as described in "Creating a New Web Application in Microsoft SharePoint Server".
Configure the SharePoint site collection, as described in "Creating a New Site Collection for Microsoft SharePoint Server".
Test the configuration to ensure that users who are present in the directory server can log in to the SharePoint Web site and get proper roles, as described in your SharePoint documentation.
Install Access Manager as described in "Installing Access Manager for WNA and SharePoint Server".
This step includes installing the WebGate for IIS and configuring Webgate.dll for the individual SharePoint Web site.
Configure the Active Directory authentication provider, as follows:
Login to the WebLogic Console.
Go to Security Realm and click the realm being used.
Go to the Provider tab provider, click New.
Enter the provider name, select the Type ActiveDirectoryAuthenticator, click OK.
Select the newly created Provider, change Control Flag to Sufficient, and Save.
Go to Provider Specific tab, enter details for your Active Directory, and save these.
Perform "Testing Your WNA Implementation".
You perform this task after you perform all prerequisites described in step 1 of the "Setting Up WNA With SharePoint Server". Installing most Access Manager components for this integration scenario is the same as for any other situation.
Installing the IIS WebGate is similar to installing any other WebGate. The WebGate should be installed with the IIS v7 Web server; later it can be configured at the specific SharePoint Web site level to be protected. For IIS, the WebGate must be configured at the "web sites" level. For Microsoft SharePoint Server, you must configure the WebGate for the specific SharePoint Web site level to be protected.
To install Access Manager for WNA and SharePoint Server
Install Access Manager as described in the Oracle Fusion Middleware Installation Guide for Oracle Identity and Access Management.
Install the ISAPI WebGate as follows:
Installing WebGates
Installing Web components for the IIS Web server
Next, you configure Webgate.dll at the SharePoint Web site that yo want to protect. Configuring Webgate.dll at the "Website level" protects all Web sites on the IIS Web server. However, configuring Webgate.dll at the "SharePoint Website" protects only the expected Web site.
Configure Webgate.dll at the SharePoint Web site that you want to protect. For example:
Start the Internet Information Services (IIS) Manager: Click Start, Programs, Administrative Tools, Internet Information Services (IIS) Manager.
Select the hostname from the Connections pane.
From the host name Home pane, double-click ISAPI Filters, look for any Webgate.dll; if it is present, select it and click Remove from the Action pane.
In the Connection pane, under Sites, click the name of the Web Site for which you want to configure a WebGate filter.
In the Home pane, double-click ISAPI Filters.
In the Actions pane, click Add…
In the Filter name text box of the Add ISAPI Filter dialog box, type WebGate as the name of the ISAPI filter.
In the Executable box, type the file system path of the WebGate ISAPI filter file or click the ellipsis button (...) to go to the folder that contains the Webgate.dll ISAPI filter file, and then click OK.
WebGate_install_dir\access\oblix\apps\Webgate\bin\Webgate.dll
Creating a Virtual Directory
Expand the Sites pane and select the Web Site for which you just configured the ISAPI filter (Webgate.dll).
On the Action pane, click View Virtual Directories and then select Add Virtual Directory.
In the Alias field, specify access and the physical path to the WebGate \access folder (or click the ellipsis button (...), go to the \access folder, then click OK).
WebGate_install_dir\access\
Set permissions on the Virtual Directory:
Select the "access" virtual directory created in Step 3.
From the access Home pane, double click Handler Mappings; from the Action pane, select Edit Feature Permissions….
Select Read, Script, and Execute, then click OK
Configure Access Manager to use Windows Native Authentication.
Configure Microsoft SharePoint Server Authentication to Classic Mode Authentication while creating a new Web Application in Microsoft SharePoint. In the Authentication Provider section, select Negotiate(Kerberos).
Go to IIS newly created SharePoint site and:
Open Authentication, Windows Authentication, Advance Settings.
Select Enable Kernel mode authentication.
Select providers, delete NTLM provider.
Add Negotiate:Kerberos and move it to the top level.
Restart IIS.
Proceed to "Testing Your WNA Implementation".