Integrating Collection Manager with Oracle Internet Directory (LDAP) for Authentication

After installing Oracle Application Express (APEX), you can integrate Oracle Health Check Collections Manager with Oracle Internet Directory (OID) using LDAP authentication.

Note:

The user interface referenced in this procedure is based on an APEX 18.x release. Labels and navigation might differ in later APEX releases.

Verify that LDAP authentication is working correctly.

Locate the ldapbind utility:

which ldapbind

Example output:

/scratch/testuser/Middleware/Oracle_Home/bin/ldapbind

For a non-SSL LDAP connection, run:

ldapbind -h host.example.com -p 3060 -D 'cn=orcladmin' -w ********

A successful connection returns:

bind successful

For an SSL LDAP connection, run:

ldapbind -h host.example.com -p 3131 -U 1 -D 'cn=orcladmin' -w ********

A successful connection returns:

bind successful

Log in to APEX as the Collection Manager workspace administrator.

For example:
```
Workspace: orachkcm
User: orachkcm
Password: ********
```
Click App Builder, and then select the Collection Manager application.
Click Shared Components, and then select Security: Authentication Schemes.
On the Authentication Schemes page, click Create.
On the Create Authentication Scheme page, select Based on a pre-configured scheme from the gallery, and then click Next.
The Create/Edit Authentication Scheme page appears.
Specify the authentication scheme name and type.
For example:
```
Name: AHF_CM_OID_AUTH
Scheme Type: LDAP Directory
```
Selecting LDAP Directory displays the additional LDAP configuration settings.
Configure the LDAP settings for your Oracle Internet Directory environment.
For example:
```
Host: host.example.com
Port: 3131
Use SSL: SSL
Distinguished Name (DN) String: cn=%LDAP_USER%
Use Exact Distinguished Name: Yes
```
Replace the example values with the values appropriate for your OID environment.
Click Test LDAP Login.
APEX uses the configured LDAP settings to prepare the authentication test.
Under Credentials for Test Login, enter the LDAP user name and password that you want to test.
Click Test Login.
If the LDAP configuration and credentials are correct, APEX displays an Authenticated message.

Note:
If authentication fails, verify the LDAP connection details using the ldapbind command from an OID client home. Correct the configuration as required, click Apply Changes, and then test the LDAP login again.

After successfully validating the configuration, click Create Authentication Scheme.

The newly created LDAP Directory authentication scheme becomes the current authentication scheme. Verify that the required LDAP Directory scheme is marked Current.
Sign out of the ORACHKCM workspace administrator session.
Log in directly to Oracle Health Check Collections Manager using an LDAP user account.
For example:
```
User: orcladmin
Password: ********
```
A successful login confirms that Oracle Health Check Collections Manager is authenticating users through Oracle Internet Directory.