3.1 Overview

You can configure Oracle TSAM Plus Manager to use OpenID Connect (OIDC) authentication instead of local authentication. This setup integrates Oracle TSAM Plus Manager with Keycloak and enables centralized authentication and role-based access control. You must configure Keycloak and the WebLogic OIDC Asserter to establish trust with the identity provider. You can then enable OIDC using the provided script, deploy the application with OIDC options, and restart WebLogic Server. Finally, you can verify login, logout, and access behavior, or disable OIDC to restore local authentication.

Follow this high-level flow:

  1. Configure Keycloak
  2. Configure the WebLogic OIDC Asserter
  3. Enable OIDC support for Oracle TSAM Plus Manager using the automation script
  4. Deploy or update the Oracle TSAM Plus Manager application
  5. Restart WebLogic and verify login and logout

To enable OIDC in Oracle TSAM Plus Manager, follow the steps below:

  • First, configure Keycloak by defining the realm, client, roles, users, and required endpoints such as redirect and logout URLs
  • Next, configure the WebLogic OIDC Asserter to integrate with the identity provider
  • Then, run TSAMOIDC_enable.sh to enable OIDC support
  • After that, deploy the application using TSAMDeploy.sh with the -enableOIDC option
  • Then, restart WebLogic Server to apply the changes
  • Finally, verify login, logout, and role-based access

To disable OIDC and restore local authentication, follow the steps below:

  • First, run TSAMOIDC_disable.sh
  • Then, redeploy the application using TSAMDeploy.sh
  • Next, restart WebLogic Server
  • Finally, verify that local authentication is restored and working correctly