Setting Up the UIO ISA Proxy

6-38 Oracle Fusion Middleware Developers Guide for Oracle Adaptive Access Manager 2. URL that contains the change password form 3. Names of the input fields like password, new-password, confirm-password used to submit the change password request 4. URL to which the change password form submits the passwords 5. Identifying the status successfailure of the change password request. This would often be derived by looking for certain text in the response. Reset password Follows the same process as Change password. Change LoginId 1. URL to which the login-id change is posted to the application 2. Names of the input fields like new-login used to submit the change password request. 3. Identifying the status successfailure of the change login-id request. On successful change login-id request, the changeUserId.do page in OAAM Server should be called to update the login-id in the Oracle Adaptive Access Manager database. Forgot password Forgot-password options provided by the application must be reviewed for understanding. Most applications ask for alternate ways to identity the user account numberPIN, SSNPIN, questionanswer, and other ways; some applications provide more than one option. Some applications let the user reset the password after successfully entering alternate credentials; others send a new password to the user by mailemail; and some other applications would require the user to call customer care. For each of the supported scenarios, the following data should be captured: 1. URL that starts the forgot-password process 2. URL that contains the forgot-password form 3. Names of the input fields and URLs to submit the forgot-password request 4. Identifying the status successfailure of the forgot-password request.

6.8 Samples

The proxy configuration to add multifactor authentication to the BigBank Web application is shown below. The BigBank web application is a sample application which shows a login flow. The example will demonstrate the integration of the UIO Proxy into the login flow of an application. For ISA proxy use: ?xml version=1.0 encoding=utf-8? BharosaProxyConfig xmlns=http:bharosa.com xmlns:xsi=http:www.w3.org2001XMLSchema-instance xsi:schemaLocation=http:bharosa.com BharosaProxy.xsd For Apache proxy use: ?xml version=1.0 encoding=utf-8? BharosaProxyConfig xmlns=http:bharosa.com RequestInterceptor id=AddAppIdToOAAMServerRequests-BigBank