3 Integrating with Oracle Access Manager

This chapter describes how to configure an Oracle WebLogic Server 12.1.x installation to authenticate Oracle Enterprise Data Quality (EDQ) using Oracle Access Manager (OAM).

This chapter includes the following sections:

3.1 Overview of Configuring WebLogic to use OAM Authentication

You can perform all the required Oracle WebLogic Server configuration under the Security Realms/Providers section.

After you initially configure a domain, the Providers tab has the following contents:

Figure 3-1 Providers Tab in Oracle WebLogic Server

Surrounding text describes Figure 3-1 .

To configure Oracle Access Manager (OAM), you must set up two additional providers - for LDAP and OAM.

3.2 Configuring an LDAP Provider

To configure an LDAP provider:

  1. Click New to create a new authentication provider.

  2. Enter a Name for the authentication provider.

  3. Select OracleInternetDirectoryAuthenticator as the Type:

    Figure 3-2 Creating a New Authentication Provider for LDAP

    Surrounding text describes Figure 3-2 .

  4. Click OK.

  5. Select the name of the newly created provider from the list and set the Control Flag to SUFFICIENT.

  6. Click Save.

  7. Select the Provider Specific tab.

  8. Set the following fields, leaving the remaining fields with default values:

    Field Value

    Host

    hostname of the provider

    Port

    port on the provider

    Principal

    cn=netuser,cn=users,dc=<provider_name>,dc=local

    Credential

    credential for the host

    User Base DN

    dc=<provider_name>,dc=local

    Group Base DN

    dc=<provider_name>,dc=local

  9. Restart the admin server.

  10. On the Security Realm/Users and Groups/Groups tabs, verify that you can see the EDQ groups such as dnadmins.

3.3 Configuring an Oracle Access Manager Provider

To configure an Oracle Access Manager (OAM) provider:

  1. On the providers list, click New and enter OAM as the name and OAMIdentityAsserter as the type:

    Figure 3-3 Creating a New Authentication Provider for OAM

    Surrounding text describes Figure 3-3 .

  2. Click OK.

  3. Select OAM from the list and select the Common tab.

  4. Set the control flag to REQUIRED:

    Figure 3-4 Configuring the Provider

    Surrounding text describes Figure 3-4 .

  5. Select the Provider Specific tab.

  6. Set the following fields, leaving the remaining fields with default values:

    Field Value

    Access gate name

    The host name that you configured when you created the authentication provider. Use the plain host name without domain.

    Primary Access Server

    The primary Access Server, configured as host:port.

  7. Click Save to complete the provider definition.

3.4 Setting Provider Priorities

To set the provider priorities:

  1. On the Providers list, select DefaultAuthenticator and change the Control Flag to SUFFICIENT:

    Figure 3-5 Setting Provider Priorities

    Surrounding text describes Figure 3-5 .

  2. On the Providers list, click Reorder and move OAM to the top with the <provider_name> second:

    Figure 3-6 Reordering Authentication Providers

    Surrounding text describes Figure 3-6 .

Once the server is restarted, WebLogic is ready for OAM use. EDQ now gets all information from the LDAP provider, and the original user weblogic no longer works in EDQ. Instead, log in as user edqadmin with password welcome1.

3.5 Installing Oracle HTTP Server

Install Oracle HTTP Server (OHS) 11 or 12 and the WebGate extension. A WebGate is a Web server plug-in that is shipped out-of-the-box with Oracle Access Manager. The WebGate intercepts HTTP requests from users for Web resources and forwards them to the Access Server for authentication and authorization.

If you use OHS 12, the WebGate software is bundled and you do not need a separate download. For more information, see Installing the WebGate in Oracle Access Manager Installation Guide.

Configure the WebLogic plugin to forward /edq to WebLogic:

<Location /edq>
  SetHandler weblogic-handler
</Location>

Finally install the WebGate artifacts, and restart OHS to complete the installation.