2.3 SQL Authentication Provider configuration

This topic describes the systematic instruction to SQL Authentication Provider configuration option.

Steps to configure SQL Authentication Providers changes into WebLogic console.

1. Login to WebLogic console with admin login and navigate to “Security Realms”.

   Figure 2-19 Security Realms

   
   

   
   Description of "Figure 2-19 Security Realms"

   
   
2. → Click on myrealm or your realm name present in screen. Navigate to “Providers” tab.

   Figure 2-20 Providers

   
   

   
   Description of "Figure 2-20 Providers"

   
   
3. Click on New button to create new Authentication Provider.
   Fill the below mentioned fields with appropriate values and click on OK.

   1. Name: Name of authentication provider.
   2. Type :Select value as “ReadOnlySQLAuthenticator”.

   Figure 2-21 Create New Authentication Provider

   
   

   
   Description of "Figure 2-21 Create New Authentication Provider"

   
   
4. Open newly created authentication provider (e.g. SQLAuth). Select the value of Control Flag as “SUFFICIENT”.

   Figure 2-22 Settings for Read Only SQL Authentication Provider

   
   

   
   Description of "Figure 2-22 Settings for Read Only SQL Authentication Provider"

   
   
5. Navigate to “Provider Specific” tab to configuration related to SQL Authentication.
6. Provide the values to fields mentioned below with given value in case it is not auto populated.
   1. Data Source Name: NONXA
   2. SQL Get Users Password: SELECT U_PASSWORD FROM USERS WHERE U_NAME = ?
   3. SQL User Exists: SELECT U_NAME FROM USERS WHERE U_NAME = ?
   4. SQL List Users: SELECT U_NAME FROM USERS WHERE U_NAME LIKE ?
   5. SQL List Groups: SELECT G_NAME FROM GROUPS WHERE G_NAME LIKE ?
   6. VI. SQL Group Exists: SELECT G_NAME FROM GROUPS WHERE G_NAME = ?
   7. SQL Is Member: SELECT G_MEMBER FROM GROUPMEMBERS WHERE G_NAME = ? AND G_MEMBER = ?
   8. SQL List Member Groups: SELECT G_NAME FROM GROUPMEMBERS WHERE G_MEMBER = ?
   9. SQL Get User Description: - SELECT U_DESCRIPTION FROM USERS WHERE U_NAME = ?
   10. SQL Get Group Description: - SELECT G_DESCRIPTION FROM GROUPS WHERE G_NAME = ?

   Figure 2-23 Settings for Read Only SQL Authentication Provider

   
   

   
   Description of "Figure 2-23 Settings for Read Only SQL Authentication Provider"

   
   
7. Click on Save.
8. Navigate to “Security Realms” → myrealms → Providers and click on Reorder button.

   Figure 2-24 Authentication

   
   

   
   Description of "Figure 2-24 Authentication "

   
   
9. Reorder the authentication providers as given below.
   1. SAML Authentication Provider
   2. SQL Authentication Provider
   3. Default Authenticator

   Figure 2-25 Reorder Authentication Providers

   
   

   
   Description of "Figure 2-25 Reorder Authentication Providers "

   
   
10. Restart all the servers in domain including Admin Server.

    Note:

    Accessing /saml2 uri from OHS (<OHS_URL>/saml2), /saml2 uri has to be proxy bypassed from OHS