Prerequisites Making Oracle Identity Federation aware of the Load Balancer Configuring Oracle HTTP Servers To Front End the Oracle Identity Federation Managed Servers

Extending the Domain with Oracle Identity Federation 15-13

15.8 Configuring Oracle Identity Federation to work with the Oracle Web Tier

This section describes how to configure Oracle Access Manager to work with the Oracle Web Tier. This section contains the following topics: ■ Section 15.8.1, Prerequisites ■ Section 15.8.2, Making Oracle Identity Federation aware of the Load Balancer ■ Section 15.8.3, Configuring Oracle HTTP Servers To Front End the Oracle Identity Federation Managed Servers

15.8.1 Prerequisites

Before proceeding, ensure that the following tasks have been performed: 1. Oracle Web Tier has been installed on WEBHOST1 and WEBHOST2. 2. Oracle Access Manager has been installed and configured on IDMHOST1 and IDMHOST2. 3. The load balancer has been configured with a virtual host name sso.myconpany.com pointing to the web servers on WEBHOST1 and WEBHOST2. 4. The load balancer has been configured with a virtual host name admin.mycompany.com pointing to web servers WEBHOST1 and WEBHOST2.

15.8.2 Making Oracle Identity Federation aware of the Load Balancer

To configure the Oracle Identity Federation application to use the load balancer VIP, follow these steps: 1. Log in to the Oracle Enterprise Manager Fusion Middleware Control console using the credentials of the Administrative user for example: weblogic. 2. Navigate to an OIF node in Oracle Enterprise Manager Fusion Middleware Control. the OIF nodes are under Identity and Access in the navigation tree.

3. From the OIF menu, select Administration, and then Server Properties.

Change the host name to sso.mycompany.com and the port to 443. Select SSL Enabled. Click Apply.

4. From the OIF menu in Oracle Enterprise Manager Fusion Middleware Control,

select Administration, and then Identity Provider. Change the URL to https:sso.mycompany.com:443fedidp. Click Apply. 5. From the OIF menu in Oracle Enterprise Manager Fusion Middleware Control, select Administration, and then Service Provider. Change the URL to https:sso.mycompany.com:443fedsp. Click Apply. 15-14 Oracle Fusion Middleware Enterprise Deployment Guide for Oracle Identity Management

15.8.3 Configuring Oracle HTTP Servers To Front End the Oracle Identity Federation Managed Servers

On each of the web servers on WEBHOST1 and WEBHOST2, create a file called oif.conf in the directory ORACLE_ INSTANCE configOHScomponentmoduleconf. Edit this file and add the following lines: Location fed SetHandler weblogic-handler WLProxySSL ON WLProxySSLPassThrough ON WebLogicCluster oifhost1.mycompany.com:7499,oifhost2.mycompany.com:7499 Location Restart the Oracle HTTP Server, as described in Section 20.1, Starting and Stopping Oracle Identity Management Components.

15.9 Validating Oracle Identity Federation