Known Issues: JAR Files and OAMCfgTool

Configuring Single Sign-On Using Oracle Access Manager 10g 16-39 c. Extract and copy oamcfgtool.jar to the computer hosting WebGate. 2. Confirm that JDK 1.6 or the latest version is installed and configured. 3. Log in to the computer that is hosting the application to protect, change to the file system directory containing OAMCfgTool. 4. Create a WebGate Profile, Authentication Scheme, and Policy Domain: Run the following command using values for your environment as described in Table 16–5 . For example: echo ldappwd | java -jar oamcfgtool.jar mode=CREATE app_domain=IASSO_App1 protected_uris=myapplogin cookie_domain=preferred_http_cookie_domain ldap_host=wxyz ldap_port=6633 ldap_userdn=orcladmin oam_aaa_host=abcd oam_aaa_port=7789 oam_aaa_mode=cert log_file=OAMCfg_date.log log_level=INFO output_ldif_file=LDIF_filename -noprompt 5. Review the information provided by the tool. For example, the parameters and values in Step 3 would provide the following information: Processed input parameters Initialized Global Configuration Successfully completed the Create operation. Operation Summary: Policy Domain : IASSO_App1 Host Identifier: IASSO_App1 Access Gate ID : IASSO_App1_AG

6. Output LDIF Created

: Import the LDIF to write information to the directory server. Otherwise, skip this step.

7. Validate

: Run OAMCfgTool to validate the policy domain that was created see Table 16–7 . For example: echo ldappwd | java -jar oamcfgtool.jar mode=VALIDATE app_domain=IASSO_App1 protected_uris=myapplogin ldap_host=wxyz ldap_port=6633 ldap_userdn=orcladmin oam_aaa_host=abcd oam_aaa_port=7789 log_file=OAMCfg_date.log log_level=INFO test_username=gcf Note: ■ Fresh Web Tier: Omit web_domain parameter to create and associate a new a profile. Include the cookie_domain parameter. ■ Existing Web Tier: Include web_domain parameter with the value of an existing host identifier. 16-40 Oracle Fusion Middleware Application Security Guide test_userpassword=test_userpassword -noprompt

8. Fresh WebGate ProfileWebGate Not Installed

: Specify the same values when you install the WebGate as you specified when creating the profile plus additional values to properly finish the installation.

9. Fresh WebGate Profile with Installed WebGate

: Using output from the OAMCfgTool Create command, run the Oracle Access Manager configureWebgate tool to set up the installed WebGate. For example: a. Go to: WebGate_install_dir \access\oblix\tools\configureWebGate where WebGate_install_dir is the directory where WebGate is installed. b. Run the following command to configure the WebGate using values specified with OAMCfgTool and other values needed to finish the profile. For example: configureWebGate -i WebGate_install_dir -t WebGate WebGate_Name -P WebGate_password -m open|simple|cert -h Access_Server_Host_Name -p Access_Server_Port -a Access_Server_ID -r Access_Server_Pass_Phrase must be the same as the WebGate_password -Z Access_Server_Retry count

10. Confirm Profile in the Access System Console

: Perform the following steps to view or modify the WebGate profile. a. Log in to the Access System Console as a Master or Delegated Access Administrator. For example: http:hostname:portaccessoblix hostname refers to computer that hosts the WebPass Web server; port refers to the HTTP port number of the WebPass Web server instance; accessoblix connects to the Access System Console.

b. Click Access System Configuration, and then click AccessGate

Configuration . c. Click the All button to find all profiles or select the search attribute and condition from the lists and then click Go. d. Click a WebGates name to view its details. e. Click Cancel to dismiss the page without changes, or click Modify to change values as described in the Oracle Access Manager Access Administration Guide. 11. Repeat Steps 3 through 8 for each application that you are protecting. 12. Proceed to Configuring Providers in the WebLogic Domain .

16.4.3 Configuring Providers in the WebLogic Domain

This topic is divided as follows: ■ About Oracle WebLogic Server Authentication and Identity Assertion Providers See Also: Configuring AccessGates and WebGates in the Oracle Access Manager Access Administration Guide