Registering the Instantis Application SSO Agent

Register the Instantis EnterpriseTrack application domains and policies that protect resources.

Register SSO Agent

To register the SSO agent:

1. From the Oracle Access Management console, click the Application Security tab.
2. From the SSO Agent Registration page, under Agent Type, choose Webgate.
3. Click Next.
4. From the Version drop-down menu, select 11g.
5. Enter a unique name for the webgate agent.
6. In the Protected Resource List field, add the relative SSO URL to be protected, for example: /SiteWand/Submission/etrack/SSOLogin for Instantis EnterpriseTrack
7. In the Public Resource List field, add the relative URL /SiteWand/** as unprotected resource.
8. Click Finish.
9. Click Apply.

Creating an Authentication Policy

To create an authentication policy:

1. From the Oracle Access Management console, click the Application Security tab.
2. From the Access Manager section, click Application Domains.
3. Click Search. The search displays an application domain with the same name as the SSO agent created in the previous section.
4. From the Authentication Policies tab, select the generated domain name.
5. Click on the Protected Resources Policy link.
   1. From the Authentication Scheme drop-down list, select the scheme you created when creating the Identity Provider Partner. See topic Creating a New Identity Provider and Configuring the Authentication Scheme.
   2. Click Apply.
6. From the Protected Resource Policy page, click the Responses tab:
   1. Click to add a new entry.
   2. In the Type field, select Header.
   3. In the Name field, enter REMOTE_USER.
   4. In the Value field, enter $user.userid.
   5. Click Add.
   6. Click Apply.

Creating an Authorization Policy

To create an authorization policy:

1. From the same Application Domains page, click on the Authorization Policies tab.
2. Click the Protected Policies link.
3. From the Protected Resource page, click the Responses tab:
   1. Clickto add a new entry.
   2. In the Type field, select Header.
   3. In the Name field, enter REMOTE_USER.
   4. In the Value field, enter $user.userid.
   5. Click Add.
4. Click Apply.