Assigning IDM Administrators Group to Weblogic Administration Groups On the Edit Global Roles page, under the Role Conditions table, click the Add On the Choose a Predicate page, select Group from the drop down list for

Configuring Single Sign-on for Administration Consoles 19-5 20. Restart WebLogic Administration Server and all the Managed Servers, as described in Section 20.1, Starting and Stopping Oracle Identity Management Components.

19.2 Assigning IDM Administrators Group to Weblogic Administration Groups

In an enterprise, it is typical to have a centralized Identity Management domain where all users, groups and roles are provisioned and multiple application domains such as a SOA domain and WebCenter domain. The application domains are configured to authenticate using the central Identity Management domain. In Section 10.4.5, Creating Users and Groups for Oracle WebLogic Server you created a user called weblogic_idm and assigned it to the group IDM Administrators. To be able to manage WebLogic using this account you must add the IDM administrators group to the list of Weblogic Administration groups. This section describes how to add the IDM Administrators Group to the list of WebLogic Administrators. 1. Log in to the WebLogic Administration Server Console.

2. In the left pane of the console, click Security Realms.

3. On the Summary of Security Realms page, click myrealm under the Realms table.

4. On the Settings page for myrealm, click the Roles Policies tab.

5. On the Realm Roles page, expand the Global Roles entry under the Roles table.

This brings up the entry for Roles. Click the Roles link to go to the Global Roles page.

6. On the Global Roles page, click the Admin role to go to the Edit Global Role page:

a. On the Edit Global Roles page, under the Role Conditions table, click the Add

Conditions button.

b. On the Choose a Predicate page, select Group from the drop down list for

predicates and click Next. c. On the Edit Arguments Page, Specify IDM Administrators in the Group Argument field and click Add. 7. Click Finish to return to the Edit Global Rule page. 8. The Role Conditions table now shows the IDM Administrators Group as an entry.

9. Click Save to finish adding the Admin role to the IDM Administrators

Group. 10. Validate that the changes were successful by bringing up the WebLogic Administration Server Console using a web browser. Log in using the credentials for the weblogic_idm user.

19.3 Updating the boot.properties File