Contents

List of Figures

Title and Copyright Information

Send Us Your Comments

Preface

• Audience
• Related Documents
• Improved Process for Oracle Retail Documentation Corrections
• Oracle Retail Documentation on the Oracle Technology Network
• Conventions

1 Overview

• Product Overview
• General Security Principles
  • Keep Software Up To Date
  • Restrict Network Access to Critical Services
  • Follow the Principle of Least Privilege
  • Monitor System Activity
  • Keep Up To Date on Latest Security Information

2 Secure Installation and Configuration

• Understand Your Environment
• Recommended Deployment Topologies
  • Single Domain Deployment
  • Multiple Domain Deployment
• Installing Retail Infrastructure
  • Pre-installation of Retail Infrastructure in WebLogic
  • Post Installation of Retail Infrastructure in Database
• Installing Allocation Web Services
• Installing ReSA Web Services
• Installing ReIM Web Services
• Installing RMS Common Web Services
• Installing Platform Mobile Security
• Installing Retail Mobile Merchandising
• Post Installation Configuration
• Single Sign-On for Services

3 Security Features

• The Security Model
• Configuring and Using Authentication
• Configuring and Using Access Control
  • Introduction to Duty Roles
  • Role Mappings
• Configuring and Using Secure Data Storage
• Configuring and Using Transport Layer Protection
• Configuring Single Sign-On

4 Security Considerations for Developers

• Reference Information