Integrating with Oracle Identity Management 9-9
■
Section 9.2.2.4, Verifying Successful Creation of the Policy Domain and AccessGate
9.2.2.1 About the Oracle Access Manager Configuration Tool
The Oracle Access Manager Configuration Tool oamcfgtool starts a series of scripts and sets up the required policies. It requires various parameters as inputs. Specifically,
it creates the following:
■
A Form Authentication scheme in Oracle Access Manager
■
Policies to enable authentication in Oracle WebLogic Server
■
A WebGate entry in Oracle Access Manager to enable Oracle HTTP Server WebGates from your Web tier to protect your configured application
■
A Host Identifier, depending on the scenario chosen a default host identifier would be used, if not provided
■
Policies to protect and unprotect the application-specific URL
9.2.2.2 Collecting Information for the Oracle Access Manager Configuration Tool
Collect or prepare the following information before running the Oracle Access Manager Configuration Tool:
■
Password: Create a secure password. This will be used as the password for the WebGate installation performed later.
■
LDAP Host: The host name of the Directory Server or load balancer address, for HAEDG configurations.
■
LDAP Port: The port number of the Directory Server.
■
LDAP USER DN: The DN of the LDAP administrator user for example, cn=orcladmin.
■
LDAP password: The password of the LDAP administrator user.
■
OAM_AA_HOST: The host name of the Oracle Access Manager instance.
■
OAM_AA_PORT: The Oracle Access Manager port number.
9.2.2.3 Running the Oracle Access Manager Configuration Tool
The Oracle Access Manager Configuration Tool is located in the following directory: MW_HOMEoracle_commonmodulesoracle.oamprovider_11.1.1
The tool can be run from any computer with the required installation files. In this case, you run it from APPHOST1.
Run the Oracle Access Manager Configuration Tool, as follows all on a single line: MW_HOME
jrockit_160_22_D1.1.1-3binjava -jar oamcfgtool.jar mode=CREATE app_domain=bifoundation_domain protected_uris=PROTECTED_URI_LIST
public_uris=PUBLIC_URI_LIST ldap_host=oid.mycompany.com ldap_port=389 ldap_userdn=cn=LDAP_admin_user_name
ldap_userpassword=LDAP_admin_user_password oam_aaa_host=OAMHOST1 oam_aaa_port=OAMPORT1 oam_aaa_mode=simple
For PROTECTED_URI_LIST, use: analyticssaw.dll,xmlpserver,ui,bioffice,em,console,uiadfAuthentication
For PUBLIC_URI_LIST, use:
9-10 Oracle Fusion Middleware Enterprise Deployment Guide for Oracle Business Intelligence
analytics,analyticssaw.dllwsdl,xmlpserverservices,xmlpserver report_service,xmlpserverReportTemplateService.xls,xmlpserverGuest,
uidologout,uiimages,biofficeservicessaw?WSDL
You will be prompted for the app_agent_password.
9.2.2.4 Verifying Successful Creation of the Policy Domain and AccessGate