Configuring the CDC Profile as an Identity Provider Configuring the CDC Profile as a Service Provider

Additional Server Configuration 6-21 1. Log in to Fusion Middleware Control and navigate to the Oracle Identity Federation instance.

2. Navigate to Administration, then Service Provider.

3. In the Common tab, check Enable Identity Provider Discovery Service, and enter the following property: ■ Service URL: The location of the custom page displaying the IdP choices.

6.11.1 Create the IdP Discovery Service Page

Oracle Identity Federation redirects to the IdP Discovery Service page with the following parameters: ■ return: This is the URL to which the page should send the new request containing the chosen IdP provider ID to Oracle Identity Federation. ■ returnIDParam: This is the name of the parameter to use to specify the chosen IdP provider ID in the request sent to Oracle Identity Federation. The page gets the value of these parameters, display a list of IdPs, and send a new request to Oracle Identity Federation specifying the chosen IdP Provider ID. Example The following is an example of an IdP discovery service page. This page allows the user to select an identity provider from the list of provider IDs: http:idp1.com, http:idp2.com, http:idp3.com, and submit the chosen provider ID to Oracle Identity Federation to continue the SSO flow. page buffer=5kb autoFlush=true session=false page language=java import=java.util., java.net. Set the Expires and Cache Control Headers response.setHeaderCache-Control, no-cache; response.setHeaderPragma, no-cache; response.setHeaderExpires, Thu, 29 Oct 1969 17:04:19 GMT; Set request and response type request.setCharacterEncodingUTF-8; response.setContentTypetexthtml; charset=UTF-8; String submitURL = request.getParameterreturn; String returnIDParam = request.getParameterreturnIDParam; List idps = new ArrayList; idps.addhttp:idp1.com; idps.addhttp:idp2.com; idps.addhttp:idp3.com; html See Also: Section 5.5, Configuring Service Providers Note: Check that the URL query parameter values are correctly URL-encoded. 6-22 Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation title Select an Identity Provider title body bgcolor=FFFFFFform method=POST action==submitURL id=PageForm name=PageForm autocomplete=off center table cellspacing=2 cellpadding=5 border=0 width=500 trtd colspan=2 align=center Select an Identity Provider tdtr tr tr td align=rightProvider IDtd td select size=1 name==returnIDParam Iterator idpIT = idps.iterator; whileidpIT.hasNext { String idp = StringidpIT.next; option value==idp=idpoption } select td tr tr td colspan=2 align=center input type=submit value=Continue td tr table center form body html

6.12 Setting up Infocard

Oracle Identity Federation can use Infocard as an authentication engine where the server acts as an RP Resource Provider for Infocard. The flow is as follows: ■ Oracle Identity Federation determines that the user needs to be challenged for authentication and selects the Infocard Authn Engine ■ Oracle Identity Federation displays the login page containing the Infocard links. These links contain the claims that Oracle Identity Federation is requesting from the STS servers, and optionally the type of assertion to be returned. Oracle Identity Federation can also individually list the STS servers it recognized, or only one Infocard link, thus not listing the known STS servers. ■ the user clicks on a link ■ the Identity Selector installed on the users machine is launched and displays the cards that can be used for this operation