modifyBootStrapCredential Managing Credentials with OPSS Scripts

11-4 Oracle Fusion Middleware Application Security Guide – event-specific attributes like authentication method, source IP address, target user, resource, and so on – contextual attributes like the execution context ID ECID, session ID, and others ■ Common mechanism for audit policy configuration Oracle Fusion Middleware Audit Framework offers a unified method for configuring audit policies in the domain. ■ Leverages the Oracle Fusion Middleware 11g infrastructure – is usable across Oracle Fusion Middleware 11g components and services such as Oracle Web Services Manager, Oracle Internet Directory, Oracle Virtual Directory, and Oracle Directory Integration and Provisioning – integrates with Oracle Enterprise Manager Fusion Middleware Control for UI-based configuration and management – integrates with wlst for command-line, script-based configuration – integrates with Oracle Platform Security Services to provide multiple benefits

11.3 Oracle Fusion Middleware Audit Framework Concepts

This section introduces basic concepts of the Oracle Fusion Middleware Audit Framework: ■ Audit Architecture ■ Key Technical Concepts ■ Audit Record Storage ■ Analytics

11.3.1 Audit Architecture

The Oracle Fusion Middleware Audit Framework consists of the following key components: ■ Audit APIs These are APIs provided by the audit framework for any audit-aware components integrating with the Oracle Fusion Middleware Audit Framework. During runtime, applications may call these APIs where appropriate to audit the necessary information about a particular event happening in the application code. The interface allows applications to specify event details such as username and other attributes needed to provide the context of the event being audited. ■ Audit Events and Configuration The Oracle Fusion Middleware Audit Framework provides a set of generic events for convenient mapping to application audit events. Some of these include common events such as authentication. The framework also allows applications to define application-specific events. These event definitions and configurations are implemented as part of the audit service in Oracle Platform Security Services. Configurations can be updated through Enterprise Manager UI and WLST command-line tool ■ The Audit Bus-stop