Install SSO on Oracle Access Manager 11g

Navigate to the Oracle Access Manager 11g Oracle Access Manager Console URL (http://oam_server:port/oamconsole) and login with the Oracle Access Manager Admin credentials.

Select the System Configuration Tab.

Select the Access Manager Settings sub menu in the left navigation window of the browser.

Double-click the SSO Agents > OAM Agents option to open the OAM Agents sub window.

Click the Create 11g Webgate button and enter the following details:

Name: ArgusAnalyticsPolicy
Security: Open
Host Identifier: <obiee_server>
Auto Create Policies: Checked

Note:
The <obiee_server> refers to the server where the Oracle Business Intelligence Enterprise Edition 12c is installed along with Oracle Web Tier and Oracle Webgate.

Click Apply to save and register the 11g Webgate and policies with Oracle Access Manager.

On the subsequent page, update the details for the ArgusAnalyticsPolicy created in the above step:

Cache Pragma Header: Private
Cache Control Header: Private

Click Apply.

Navigate to the Policy Configuration tab.

Expand and double-click the Shared Components > Resource Type > Host Identifiers > <obiee_server> (like, hsdevwv0096.oracle.com) to open the Host Identifiers window and add the following details:

<obiee_server>
<obiee_server> <port>
<obiee_server_ip>
<obiee_server_ip> <port>

Note:

<obiee_server> refers to the server where the Oracle Business Intelligence Enterprise Edition 12c is installed along with Oracle Web Tier and Oracle Webgate. The port refers to the Oracle Web Tier Port.

Example:

Hostname	Port
obiee_server.oracle.com	--
obiee_server.oracle.com	7777
<ip address>	--
<ip address>	7777

Expand and double-click Application Domains > ArgusAnalyticsPolicy > Authentication Policies > Protected Resource Policy.

Ensure that the Authentication Scheme is set as LDAPScheme.

Ensure that the following resources are present:

/
/…/*

Add the following Response variables:

Name: OAM_REMOTE_USER
Type: Header
Value: $user.attr.uid [based on the LDAP schema setup]

Click Apply and save the changes.

Expand and double-click Application Domains > ArgusAnalyticsPolicy > Authorization Policies > Protected Resource Policy

Ensure that the following resources are present:

/
/…/*

Add the following Response variables:

Name: OAM_REMOTE_USER
Type: Header
Value: $user.attr.uid [as based on the LDAP schema setup]

Click Apply to save the changes

Navigate to the OPVA Web Tier Machine [<obiee_server>], which is the machine where you have installed the OPVA Oracle Business Intelligence Enterprise Edition Server, and run the installer for Webgate (OFM Webgate 11g for Oracle Access Manager 11g) to complete the installation.

Configure the 11g Webgate using the following steps to communicate with the Oracle Access Manager 11g server:

Note:

Refer to the following link for advanced details:

http://docs.oracle.com/cd/E21764_01/install.1111/e12002/webgate.htm

Move to the following directory under your Oracle Home for Webgate:

On UNIX Operating Systems:

<Webgate_Home>/webgate/ohs/tools/deployWebGate

On Windows Operating Systems:

Webgate_Home>\webgate\ohs\tools\deployWebGate
On the command line, run the following command to copy the required bits of agent from the Webgate_Home directory to the Webgate Instance location:
On UNIX Operating Systems:

./deployWebgateInstance.sh -w <Webgate_Instance_Directory> -oh <Webgate_Oracle_Home>

On Windows Operating Systems:

deployWebgateInstance.bat -w <Webgate_Instance_Directory> -oh <Webgate_Oracle_Home>

Where <Webgate_Oracle_Home> is the directory where you have installed Oracle HTTP Server Webgate and created as the Oracle Home for Webgate, as shown in the following example:
```
MW_HOME>/Oracle_OAMWebGate1
```
The <Webgate_Instance_Directory> is the location of Webgate Instance Home, which is the same as the Instance Home of Oracle HTTP Server, as shown in the following example:
```
<MW_HOME>/Oracle_WT1/instances/instance2/config/OHS/ohs1
```
Run the following command to ensure that the LD_LIBRARY_PATH variable contains <Oracle_Home_for_Oracle_HTTP_Server>/lib:

On UNIX (depending on the shell):

export LD_LIBRARY_PATH=$LD_LIBRARY_PATH:<Oracle_Home_for_Oracle_HTTP_Server>/lib

On Windows:

Set the <Webgate_Installation_Directory>\webgate\ohs\lib location and the <Oracle_Home_for_Oracle_HTTP_Server>\bin location in the PATH environment variable. Add a semicolon (;) followed by this path at the end of the entry for the PATH environment variable.
From your present working directory, move up one directory level:

On UNIX Operating Systems, move to:

<Webgate_Home>/webgate/ohs/tools/setup/InstallTools

On Windows Operating Systems, move to:

<Webgate_Home>\webgate\ohs\tools\EditHttpConf
On the command line, run the following command to copy the apache_webgate.template from the Webgate_Home directory to the Webgate Instance location (renamed to webgate.conf) and update the httpd.conf file to add one line to include the name of webgate.conf:
On UNIX operating systems:

./EditHttpConf -w <Webgate_Instance_Directory> -oh <Webgate_Oracle_Home> -o <output_file>

On Windows operating systems:

EditHttpConf.exe -w <Webgate_Instance_Directory> -oh <Webgate_Oracle_Home> -o <output_file>

Where <Webgate_Oracle_Home> is the directory where you have installed Oracle HTTP Server Webgate for Oracle Access Manager and created as the Oracle Home for Webgate, as shown in the following example:
```
<MW_HOME>/Oracle_OAMWebGate1
```
The <Webgate_Instance_Directory> is the location of Webgate Instance Home, which is the same as the Instance Home of Oracle HTTP Server, as shown in the following example:
```
<MW_HOME>/Oracle_WT1/instances/instance2/config/OHS/ohs1
```
The <output_file> is the name of the temporary output file used by the tool, as shown in the following example:
```
Edithttpconf.log
```
Copy Generated Files (Artifacts) to the Webgate Instance Location from the Oracle Access Manager 11g server.
The 11g Webgate Agent (ArgusAnalyticsPolicy), which was created in the Oracle Access Manager 11g Oracle Access Manager Console earlier, would have also created the following artifacts on the Oracle Access Manager 11g server:

cwallet.sso

ObAccessClient.xml

This is based on the Security Mode that you have configured, which in this case is Open.

On the Oracle Access Manager 11g server, these files are present at the following location:

<OAM_FMW_HOME>/user_projects/domains/<OAM_domain>/output/ArgusAnalyticsPolicy

Copy these files to the <obiee_server> in the following directory:

<Webgate_Instance_Directory>/webgate/config directory
```
[Example:<MW_HOME>/Oracle_WT1/instances/instance2/config/OHS/ohs1/webgate/config]
```
Restart the Oracle HTTP Server Instance.
To stop the Oracle HTTP Server instance, run the following commands on the command line:
```
<MW_HOME>/Oracle_WT1/instances/instance2/bin/opmnctl stopall
```
To restart the Oracle HTTP Server instance, run the following commands on the command line:
```
<MW_HOME>/Oracle_WT1/instances/instance2/bin/opmnctl startall
```

Configure the HTTP Server as a reverse proxy for the WebLogic Server. To execute this, modify the mod_wl_ohs.conf file present at the following location: OracleWebTierHome\instances\instance2\config\OHS\ohs1

The following is a template to configure mod_weblogic:

LoadModule weblogic_module "${ORACLE_HOME}/ohs/modules/mod_wl_ohs.so"

# This empty block is needed to save mod_wl related configuration from EM to this file when changes are made at the Base Virtual Host Level

# WebLogicHost <WEBLOGIC_HOST>

# WebLogicPort <WEBLOGIC_PORT>

# Debug ON

# WLLogFile /tmp/weblogic.log

# MatchExpression *.jsp

SetHandler weblogic-handler