About Application Session Service in Oracle Fusion Middleware

Application Session Service in Oracle Fusion Middleware shows application session service as it is implemented in Oracle Fusion Middleware.

Application Session Service in Oracle Fusion Middleware

Description of the illustration dbfsg_vm_005.png

An application session service is an integrated solution with Oracle Fusion Middleware, to leverage Oracle Fusion Middleware to provide an application session at the database. In Oracle Fusion Middleware:

• The application user is authenticated by the container. In WLS, typically the authenticator works with the SSO server to authenticate the user.

• The application user and group are managed by the Identity Store.

• OPSS is an application security framework to set up the application security context based on the container’s security context. See Oracle Application Server Containers for J2EE Security Guide for more information about application security with OPSS.

The Real Application Security servlet filter sets up the application session transparently and synchronizes the application session with the OPSS subject. The server filter code consists of a set of APIs that function in the application session to:

• Attach, detach, and destroy the session (see “About Application Session APIs”)

• Provide privilege elevation (see “About the Privilege Elevation API”)

• Provide namespace operations (see “About Namespace APIs”)

• Provide authorization (see “About the Check Privilege API”)

Real Application Security provides:

• APIs that support external users and roles in the application session

• Authorizes the session operation through the session manager

• Support for fine-grained access control on namespace