Working with Affiliations Oracle Fusion Middleware Online Documentation Library

Additional Server Configuration 6-7 ■ Set the userldapconnectionreadtimeout long property from the datastore group to the read timeout in seconds to configure the LDAP user data store read timeout: setConfigPropertydatastore, userldapconnectionreadtimeout, long, 10 ■ Set the fedldapconnectionreadtimeout long property from the datastore group to the read timeout in seconds to configure the LDAP federation data store read timeout: setConfigPropertydatastore, fedldapconnectionreadtimeout, long, 10

6.3.3 ECID Support for LDAP Connections

Oracle Identity Federation 11g supports execution context ID ECID for DMS and audit purposes. When creating an LDAP connection with Oracle Internet Directory, Oracle Identity Federation can pass the ECID context to the OID LDAP Connection. This feature is disabled by default. To enable disable the feature, set the following properties to true false: ■ Set the ldapuseecid boolean property in authnengines group of config for LDAP authn engine ■ Set the userldapuseecid boolean property in authnengines group of config for the LDAP user store ■ Set the fedldapuseecidboolean property in authnengines group of config for LDAP federation data store

6.4 Additional Configuration for High Availability

This section contains additional topics for high availability configuration: ■ Configuring High Availability LDAP Servers ■ Configuring the HTTP Session State SleepRetry Interval

6.4.1 Configuring High Availability LDAP Servers

By default, Oracle Identity Federation is not configured to integrate with a high availability LDAP server. To integrate Oracle Identity Federation with HA LDAP servers to serve as user data store, federation data store, or authentication engine, Oracle Identity Federation needs to be configured for based on the LDAP servers function. Enter the WLST script environment for Oracle Identity Federation, then set the following properties as needed: ■ To integrate the user data store with an HA LDAP server, set the userldaphaenabled boolean property from the datastore group to true; otherwise set it to false: setConfigPropertydatastore, Note: The LDAP server for which ECID support is being enabled must be Oracle Internet Directory 11g Release 1 11.1.1 or later.