Click New to create a provider.

Configuring Single Sign-on 30-27 ErrorPage http:WEBLOGIC_HOME:WEBLOGIC_PORT Location

30.2.6 Additional Single Sign-on Configurations

The configurations described in the following sections may be necessary or helpful in providing additional security for your site. After completing these configurations, continue by testing your OAM installation as described in Section 30.2.7, Testing Your OAM Installation. If your installation requires access to Pagelet Producer formerly Ensemble, SES, or desktop integration, then refer to the relevant sections in Section 30.6, Configuring SSO with Virtual Hosts. ■ Section 30.2.6.1, Configuring WebCenter Spaces for SSO ■ Section 30.2.6.2, Configuring the Discussions Server for SSO ■ Section 30.2.6.3, Configuring the Worklist Service for SSO ■ Section 30.2.6.4, Configuring OAM for RSS Feeds Using External Readers ■ Section 30.2.6.5, Configuring the WebLogic Server Administration Console and Enterprise Manager for OAM 10g ■ Section 30.2.6.6, Configuring the WebLogic Server Administration Console and Enterprise Manager for OAM 11g ■ Section 30.2.6.7, Configuring Oracle Content Server for SSO ■ Section 30.2.6.8, Restricting Access with Connection Filters

30.2.6.1 Configuring WebCenter Spaces for SSO

Configure the WebCenter Spaces application for SSO by adding a setting to EXTRA_JAVA_PROPERTIES. There is a system property that tells WebCenter and ADF that the application is configured in SSO mode and some special handling is required. The following system property is required in this mode: To set this property, edit the setDomainEnv.sh script located in your domainbin directory, and add an entry like the following: Note: The entries in the Location list above map the incoming paths to the appropriate WebLogic Server managed servers on which the corresponding applications reside. Note: If your installation requires the use of Pagelet Producer and desktop integration, then also follow the steps documented in the relevant portions of Section 30.6, Configuring SSO with Virtual Hosts. Field Value Comment oracle.webcenter .spaces.osso true This flag tells WebCenter that SSO is being used, so no login form should be displayed on the default landing page. Instead, it displays a login link that the user can click to invoke the SSO authentication. 30-28 Oracle Fusion Middleware Administrators Guide for Oracle WebCenter EXTRA_JAVA_PROPERTIES=-Doracle.webcenter.spaces.osso=true {EXTRA_JAVA_PROPERTIES} export EXTRA_JAVA_PROPERTIES After making this change, restart the WC_Spaces server.

30.2.6.2 Configuring the Discussions Server for SSO

This section describes how to configure Oracle WebCenter Discussions Server for single sign-on. Before configuring the discussions server for SSO, ensure that it has been configured to use the same identity store LDAP as WebCenter Spaces, as described in Section 28.1, Reassociating the Identity Store with an External LDAP Server. If youve chosen not to move the default administrator account to an external LDAP, be sure to also follow the instructions in Section 28.5.1, Migrating the WebCenter Discussions Server to Use an External LDAP. To set up the discussions server for SSO: 1. Log in to the Oracle WebCenter Discussions Server Admin Console at: http:host:portowc_discussionsadmin Where host and port are the host ID and port number of the WC_Collaboration Managed Server.

2. Open the System Properties page and edit if it already exists or add the

owc_discussions.sso.mode property, setting its value to true.

3. Edit or add the jiveURL property to point to the base URL of the Web Tier. For

example: jiveURL = webtier.example.com:7777owc_discussions The jiveURL property is used when constructing links to forums in emails.

30.2.6.2.1 Creating a Discussions Server Connection for WebCenter Spaces

This section describes how to update the discussions server connection for WebCenter Spaces so that it uses the Web Tier’s host and port values. Note that the steps below assume that the Discussions service has already been installed and configured in the WebCenter domain. 1. Using Fusion Middleware Control or WLST, change the discussion server’s URL host and port settings from the WC_Spaces Managed Server’s settings, to the Web Tier’s host and port settings. For information about how to change these settings, see Section 14.5, Modifying Discussions Server Connection Details. 2. Restart the WC_Spaces Managed Server. When you log in to WebCenter Spaces, you automatically sign on to the discussion server as well.

30.2.6.3 Configuring the Worklist Service for SSO

Assuming that youve already set up a Worklist connection, modify the URL to use the Web Tier host and port instead of the SOA server host and port. You can do this using Fusion Middleware Control or using WLST commands as described in Section 22.4, Setting Up Worklist Connections. After modifying the URL and completing the setup required for OAM SSO, run the following command on the WebCenter Administration server so that the Worklist service changes take effect: