Click the Provider Specific tab and specify the following required settings

Configuring Single Sign-On Using Oracle Access Manager 10g 16-71

3. From the WebLogic Administration Console, go to Security Realms, myrealm,

Roles and Policies, Global Roles. 4. Select View Conditions for the Admins Role. 5. Add the group and click Save.

16.8.6 Client in Cluster with Load-Balanced WebGates

Out of the box, Oracle Access Manager does not support load balanced AccessGates; you must use a third-party load balancer. Suppose you have two WebGates: WebGateA and WebGateB. You can use the OAMCfgTool to create the profile to be shared by the two WebGates. If you have an Oracle Fusion Middleware Application installed you already have the OAMCfgTool. In this case, skip Step 1. Solution: 1. No Oracle Fusion Middleware Application : Obtain the OAMCfgTool if you have no Oracle Fusion Middleware application installed.

a. Log in to Oracle Technology Network at:

http:www.oracle.comtechnologysoftwareproductsmiddlewareht docs111110_fmw.html

b. Locate the OAMCfgTool ZIP file with Access Manager Core Components

10.1.4.3.0: oamcfgtoolversion.zip

c. Extract and copy oamcfgtool.jar to the computer hosting WebGate:

2. Log in to the computer for WebGateA even if WebGate is not yet installed.

3. Change to the file system directory containing OAMCfgTool and run a command

like the following one to create one AccessGate Profile to be shared by the two WebGates. For example: java -jar oamcfgtool.jar mode=CREATE app_domain=SharedA_B app_agent_password=WebGate_password cookie_domain=preferred_http_cookie_domain ldap_host=wxyz ldap_port=6633 ldap_userdn=orcladmin ldap_userpassword=ldap_userpassword oam_aaa_host=abcd oam_aaa_port=7789 oam_aaa_mode=cert log_file=OAMCfg_date.log log_level=INFO output_ldif_file=LDIF_filename

4. Review the information provided by the tool. For example, the parameters and

values in Step 3 would provide the following information: Processed input parameters Initialized Global Configuration Successfully completed the Create operation. See Also: Introduction to OAMCfgTool on page 16-15 16-72 Oracle Fusion Middleware Application Security Guide Operation Summary: Policy Domain : SharedA_B Host Identifier: SharedA_B_WD Access Gate ID : SharedA_B_AG

5. Output LDIF Created

: Import the LDIF to write information to the directory server. Otherwise, skip this step.

6. WebGates Not Installed

: Install WebGateA and WebGateB and specify the same values as you did when creating the profile plus additional values to properly finish the installation.

7. Installed WebGates

: Using output from the OAMCfgTool Create command, run the Oracle Access Manager configureWebGate tool to set up the WebGate. For example: a. Go to: WebGate_install_dir \access\oblix\tools\configureWebGate where WebGate_install_dir is the directory where WebGate is installed. b. Run the following command to configure the WebGate using values specified with OAMCfgTool and other values needed to finish the installation. For example: configureWebGate -i WebGate_install_dir -t WebGate SharedA_B_AG -P WebGate_password -m open|simple|cert -h Access_Server_Host_Name -p Access_Server_Port -a Access_Server_ID -r Access_Server_Pass_Phrase must be the same as the WebGate_password -Z Access_Server_Retry count c. Repeat these steps to configure WebGateB.

8. Confirm Profile in the Access System Console

: Perform the following steps to view or modify the WebGate profile. a. Log in to the Access System Console as a Master or Delegated Access Administrator. For example: http:hostname:portaccessoblix hostname refers to computer that hosts the Web server; port refers to the HTTP port number of the Web server instance; accessoblix connects to the Access System Console.

b. Click Access System Configuration, and then click AccessGate

Configuration . Note: ■ Perform Step 5 if you have WebGate installed. ■ Perform Step 6 if WebGate is not yet installed. See Also: Configuring AccessGates and WebGates in the Oracle Access Manager Access Administration Guide