- Installation Guide
- Enable SSL
- Configure SSL for SSO with Oracle Access Manager 12c
Configure SSL for SSO with Oracle Access Manager 12c
- Configure Oracle Analytics Server in SSL mode as given in the Enable SSL in Oracle WebLogic Server.
- Follow the steps as mentioned in the Configure SSO using the Oracle Access Manager 12c, except for the deviations as mentioned here:Update/Create the Webgate Registration in Oracle Access Manager 12c, which you have created in the Configure SSO using the Oracle Access Manager 12c.
Note:
The Oracle Access Manager Server configured in Oracle Access Manager 12c must be running with Security set to Simple, else it does not let you create a Webgate with Security set as Simple.
- Open the Oracle Access Manager 12c Oracle Access Manager Console.
- Navigate to the Policy Configuration tab.
- Expand and double-click Shared Components >
Resource Type > Host
Identifiers >
<oas_server> (for example,
www.example.com) to open the Host Identifiers window and add the
following details in addition to the ones that are already
present:
<oas_server>
<oas_server> <ssl port>
<oas_server_ip>
<oas_server_ip> <ssl port>
Note:
<oas_server> refers to the server, where the Oracle Analytics Server 12c is installed along with Oracle Web Tier and Oracle Webgate. The <ssl port> refers to the Oracle Web Tier SSL Port.
- Click Apply.
- From the System Configuration tab, access the Manager Settings section, expand the SSO Agents node, and expand OAM Agents.
- On the Search page, define your criteria in the Name field as ArgusAnalyticsPolicy and click Search.
- In the Search results, click ArgusAnalyticsPolicy to edit the Agent Registration.
- Locate the Security options and click Simple.
- Click Apply to submit the changes.
- This generates the artifacts again or afresh. Copy the generated Files
(Artifacts) to the Webgate Instance Location from the OAM 12c
server.
The 12c Webgate Agent (ArgusAnalyticsPolicy), which is updated/created in the Oracle Access Manager 12c Oracle Access Manager Console, also creates the following artifacts on the Oracle Access Manager 12c server:
cwallet.sso
ObAccessClient.xml
aaa_cert.pem
aaa_key.pem
password.xml
This is based on the Security Mode that you have configured, which in this case now is Simple. On the Oracle Access Manager 12c server, these files are present at the following location:
<OAM_FMW_HOME>/user_projects/domains/<OAM_domain>/output/ArgusAnalyticsPolicy
.Copy the password.xml, cwallet.sso, and ObAccessClient.xml files to the <oas_server> in the
<Webgate_Instance_Directory>/webgate/config
directory For example:<MW_HOME>/Oracle_WT1/instances/instance2/config/OHS/ohs1/webgate/config
Copy the aaa_cert.pem and aaa_key.pem files to the <oas_server> in the
<Webgate_Instance_Directory>/webgate/config/simple
directory. For example:<MW_HOME>/Oracle_WT1/instances/instance2/config/OHS/ohs1/webgate/config/simple
- Restart the Oracle Access Manager Server.
- The Oracle Web Tier is configured with Oracle Analytics Server as a reverse proxy, as mentioned in step 22 of the Configure SSO using the Oracle Access Manager 12c, In addition to those steps, you also need to enable SSL for
the Oracle Web Tier using the following steps:
- Locate and edit the
<ORACLE_WT_INSTANCE>/config/OHS/ohs1/ssl.conf
. - Find the
VirtualHost
section and ensure the following entry is present:SSLWallet "${ORACLE_INSTANCE}/config/${COMPONENT_TYPE}/${COMPONENT_NAME}/keystores/default"
- Save the file and restart the HTTP Server.
- Locate and edit the
Parent topic: Enable SSL