Configure Authentication Mechanisms - SAML 1.x

Configuring Oracle Identity Federation 5-89

5.15.1 Authentication Engines - HTTP Header

The HTTP Header authentication engine authenticates a user based on the value of an HTTP header. The typical deployment for such an engine consists of: ■ Oracle Identity Federation server deployed in the domain ■ a web server such as Oracle HTTP Server fronting the WebLogic managed server where Oracle Identity Federation is running see Section 3.2.1, Deploying Oracle Identity Federation with Oracle HTTP Server for details on how to deploy and integrate Oracle HTTP Server if it is not yet installed. ■ a web agent integrated on the web server, protecting the HTTP header authentication engine URL https:oif-host:oif-portfeduserauthnhttp ■ a web agent policy for the HTTP header authentication engine URL that instructs the agent to set the users identity as an HTTP header variable ■ Oracle Identity Federation configured to retrieve the HTTP header variable from the HTTP request that contains the users identity Since the Web agent protects the HTTP header authentication engine URL, any requests processed by the Oracle Identity Federation server on this URL means that the user was authenticated by the Web Access Management system to which the Web agent belongs.

5.15.1.1 Configuring the HTTP Header Authentication Engine

The HTTP Header tab contains these fields: ■ Enable Authentication Engine - Check this box to enable the engine, and uncheck the box to disable the engine. If enabled, this engine appears on the list of available engines in the list-box associated with Default Authentication Engine. ■ User Unique ID Header - When Oracle Identity Federation uses the HTTP header engine as an authentication engine, a Web agent is integrated with Oracle HTTP ServerOracle Identity Federation and protects an Oracle Identity Federation URL. The policy domain for the Oracle Identity Federation URL is configured to provide the user identifier as an HTTP header. Use this field to specify the name of the HTTP header containing the user identifier provided by the Web agent. ■ Logout Enabled - Check this box to enable logouts with this engine. When enabling logouts, related fields include: – Logout URL - The is the URL where Oracle Identity Federation needs to redirect the user for the Web Access Management system logout. Updates you make on this tab are saved if you move to tabs for other authentication engines. When you are done, click Apply to save the changes, or Revert to reset the data to its previous state.