Contents

List of Tables

Title and Copyright Information

Preface

• Audience
• How to Use This Guide
• Documentation Accessibility
• Related Documents
• Conventions

1 Predefined Policies

• Predefined Security Policies
  • MSAS Security Policies
  • Security Polices Supported by MSAS
  • Security Polices Reserved for Future Use
  • oracle/binding_oes_authorization_policy
  • oracle/http_action_over_ssl_policy
  • oracle/http_bmax_jwt_user_token_client_policy
  • oracle/http_bmax_oam_client_policy
  • oracle/http_bmax_oauth_client_policy
  • oracle/http_bmax_spnego_client_policy
  • oracle/http_form_based_auth_over_ssl_service_policy
  • oracle/http_kinit_over_ssl_policy
  • oracle/http_oam_authentication_service_policy
  • oracle/http_oauth2_confidential_client_over_ssl_policy
  • oracle/http_oauth2_mobile_client_over_ssl_policy
  • oracle/http_ntlm_token_client_policy
  • oracle/http_pkinit_over_ssl_policy
  • oracle/http_session_token_issue_policy
  • oracle/http_session_token_verify_policy
  • oracle/http_tlp_over_ssl_policy
  • oracle/inject_header_with_bmax_url_policy
  • oracle/inject_header_with_client_certificate_policy
  • oracle/multi_token_client_policy
  • oracle/multi_token_over_ssl_client_policy
• Predefined Management Policies

2 Predefined Assertion Templates

• Predefined Security Assertion Templates
  • MSAS Security Assertion Templates
  • Security Assertion Templates Supported by MSAS
  • Security Assertion Templates Reserved for Future Use
  • oracle/binding_oes_authorization_template
  • oracle/http_action_over_ssl_template
  • oracle/http_bmax_jwt_user_token_client_template
  • oracle/http_bmax_oam_client_template
  • oracle/http_bmax_oauth_client_template
  • oracle/http_bmax_spnego_client_template
  • oracle/http_form_based_auth_over_ssl_service_template
  • oracle/http_kinit_over_ssl_template
  • oracle/http_ntlm_token_client_template
  • oracle/http_oam_authentication_service_template
  • oracle/http_oauth2_confidential_client_over_ssl_template
  • oracle/http_oauth2_mobile_client_over_ssl_template
  • oracle/http_pkinit_over_ssl_template
  • oracle/http_session_token_issue_template
  • oracle/http_session_token_verify_template
  • oracle/http_tlp_over_ssl_template
  • oracle/inject_header_template
  • oracle/xpath_token_auth_service_template
  • oracle/xpath_username_auth_service_template
• Predefined Management Assertion Templates
  • oracle/security_log_template

3 Assertion Template Settings and Configuration Properties

• Assertion Template Settings
  • Action Match
  • Algorithm Suite
  • Authentication Header—Header Name
  • Authentication Header—Mechanism
  • Constraint Match
  • Is Encrypted
  • Is Signed
  • Resource Match
  • Transport Layer Security
  • Transport Layer Security—Include Timestamp
  • Transport Layer Security—Mutual Authentication Required
  • XPath Expression
  • XPath Namespaces (comma separated)
• Assertion Template Configuration Properties
  • application.name
  • assert.stoken.identity
  • credential.delegation
  • csf.map
  • execute.action
  • Fault
  • http.header.name
  • http.header.value
  • keystore.enc.csf.key
  • keystore.sig.csf.key
  • login.error.page.url
  • login.page.url
  • lookup.action
  • oauth2.client.csf.key
  • oauth2.mobile.client.csf.key
  • password.field.name
  • preemptive.auth
  • propagate.identity.context
  • reference.priority
  • Request
  • Response
  • resource.name
  • resource.type
  • scopes
  • service.principal.name
  • trusted.issuers
  • username.field.name
  • use.single.step