Oracle ADF Integration and Cert Mode

17-4 Oracle Fusion Middleware Application Security Guide 7. A response is sent to the user through the Oracle HTTP Server, and access to the application is granted.

17.1.1.3 Consumption of Headers with OSSO Identity Asserter

This topic describes the headers sent by Oracle HTTP Server and the tokens set in the header and the headers consumed by the OSSO Identity Asserter. If the application needs to use the JAAS subject, configure OSSO Identity Asserter. Table 17–1 provides the list of headers set by Oracle HTTP Server mod_osso and mod_weblogic. An application whose logic consumes the JAAS subject for identifying user information, should be configured to use the OSSO Identity Asserter. which uses the OracleAS SSO token type set in bold in the table Proxy-Remote-User. The OSSO Identity Asserter looks for the Proxy-Remote-User header and asserts the user’s identity. The follow up OID Authenticator populates the JAAS subject. Applications that do not require the JAAS subject for identifying user information, can read the headers directly using the request.getHeader API. Such applications are free to read any header they need. Headers with user info are Osso-User-Dn, Osso-User-Guid, and Proxy-Remote-User.

17.1.2 New Users of the OSSO Identity Asserter

The new OracleAS Single Sign-On solution includes the OSSO Identity Asserter, one of the two new Authentication Providers for the Oracle WebLogic Server. To have your application use the OSSO solution, you need the components described in the following task. Task overview: Deploying and configuring the OSSO Identity Asserter 1. Install the following components: a. OracleAS Single Sign-On Server 10g 10g OSSO server Table 17–1 Headers Sent by Oracle HTTP Server Attribute Sample Value Description Cookie OHS-Stads42.us.oracle.com:7777=....... Cookies Osso-User-Guid 4F4E3D2BF4BFE250E040548CE9816D7E GUID of the authenticated user Osso-User-Dn cn=orcladmin,cn=users, dc=us,dc=oracle,dc=com DN of the authenticated user Osso-Subscriber DEFAULT COMPANY Subscriber name Osso-Subscriber-Dn dc=us,dc=oracle,dc=com Base DN of the subscriber Osso-Subscriber-Guid 4F4E3D2BF410E250E040548CE9816D7E GUID of the subscriber Proxy-Remote-User ORCLADMIN The authenticated user Proxy-Auth-Type Basic SSO Authentication type Note: If you already have components installed and set up, you do not need more. You can skip any steps that do not apply to your deployment. Configuring Single Sign-On using OracleAS SSO 10g 17-5 b. An Oracle Internet Directory repository configured to be used by the 10g OSSO server. Ensure that the directory server is tuned for your deployment. c. One of the following Web servers based on Apache 2: – Oracle HTTP Server 11g as a front end to the Oracle WebLogic Server. This installation includes mod_osso and mod_weblogic. – OHS 10g, available in the companion CD release Oracle HTTP Server 10.1.3. This includes mod_osso. However, mod_weblogic must be added. d. Oracle WebLogic Server 10.3.1+ e. An Oracle Fusion Middleware product such as Oracle Identity Management, Oracle SOA Suite, or Oracle WebCenter is required; it includes the provider required for OSSO by Oracle WebLogic Server in the following path: ORACLE_INSTANCEmodulesoracle.ossoiap_11.1.1ossoiap.jar 2. Configure mod_weblogic so that it forwards requests to Oracle WebLogic Server, as explained in section Configuring mod_weblogic on page 17-6. 3. Register the module mod_osso with the 10g SSO Server as a partner application, as described in Registering Oracle HTTP Server mod_osso with OSSO Server 10.1.4 on page 17-7. 4. Configure mod_osso, as described in Configuring mod_osso to Protect Web Resources on page 17-8. See Also: Oracle Application Server Installation Guide on Oracle Technology Network at: http:www.oracle.comtechnologydocumentationoim10 14.html See Also: The following manuals for Release 11g 11.1.1.1.0 ■ Oracle Fusion Middleware Installation Guide for Oracle Identity Management ■ Oracle Fusion Middleware Administrators Guide for Oracle Internet Directory See Also: The following manuals for Release 11g 11.1.1.1.0 ■ Oracle Fusion Middleware Installation Guide for Web Tier ■ Oracle Fusion Middleware Administrators Guide for Oracle HTTP Server See Also: Oracle Fusion Middleware Getting Started With Installation for Oracle WebLogic Server See Also: ■ Oracle Fusion Middleware Installation Guide for Oracle Identity Management ■ Oracle Fusion Middleware Installation Guide for Oracle SOA Suite ■ Oracle Fusion Middleware Installation Guide for Oracle WebCenter