High Availability Considerations for Integration with Oracle Access Manager

8-242 Oracle Fusion Middleware High Availability Guide ■ Oracle WebLogic Scripting Tool WLST

8.13.2.1.2 Cluster-Wide Configuration Changes Configuration changes made through one

cluster member are propagated automatically to all others because the configuration is stored in the shared database. HTTP session replication replicates session information across nodes and is memory intensive and is not recommended. By default, HTTP session replication is disabled. However, if your environment requires HTTP Session Replication to be enabled, follow the steps below: To turn session replication on or off, make updates in the weblogic.xml file on all Managed Servers where Oracle Identity Federation is deployed: 1. Copy the ORACLE_HOMEfedinstalloif.ear file, to a temporary location. 2. Extract the META-INFweblogic.xml file from the web.war file contained in the oif.ear file 3. Update the parameter set persistent-store-type to replicated_if_ clustered. 4. Save the weblogic.xml file 5. Re-package the Oracle Identity Federation application using the appropriate tools. 6. Copy the updated oif.ear file to the ORACLE_HOMEfedinstall directory on all the nodes running Oracle Identity Federation. 7. Redeploy the updated Oracle Identity Federation application on all nodes in your environment running the application.

8. Restart the managed servers

. To disable HTTP Session Replication, follow the previous steps and update the parameter set persistent-store-type to memory in Step 3.

8.13.2.2 High Availability Considerations for Integration with Oracle Access Manager

This section describes the steps to take when you are integrating Oracle Identity Federation with Oracle Access Manager in a high availability topology: 1. In addition to deploying Oracle Identity Federation in high availability mode, Oracle Access Manager should also be deployed in high availability mode. 2. The Oracle Access Server SDK must be installed on every Oracle Identity Federation server in the cluster. Oracle Identity Federation must be configured to reference the directory where the SDK is installed. If the SDK is installed in the Domain Home directory, then you can reference the SDK folder using a relative path from the Domain Home folder. If the SDK is installed elsewhere, Oracle Identity Federation will need to reference the SDK folder using an absolute path. When Oracle Identity Federation is used in a high availability environment, it is recommended that the Access Server SDK be installed under the Domain Home folder, using the same directory name on all the computers where Oracle Identity Federation is installed. This is a requirement for Oracle Identity Federation high Note: You must perform these manual steps after updating your environment with every patch set, otherwise the session replication changes are lost. Configuring High Availability for Identity Management Components 8-243 availability integration with Oracle Access Manager because all the Oracle Identity Federation instances will share the same configuration, specifically the directory where the Access Server SDK is installed. Using a relative path allows the Oracle Identity Federation instances to share the same configuration. 3. Follow the instructions for integrating Oracle Access Manager as an SP integration module in the Integrate Oracle Access Manager as an SP Integration Module section in Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation to integrate Oracle Access Manager with the SDK instance on each Oracle Identity Federation server. 4. Copy over the required files to the domain library and update the WebLogic Server startup script for each Oracle Identity Federation server to add the SDK jar file to the classpath and to set the LD_LIBRARY_PATH And LD_ASSUME_ KERNEL environment variables, if required. See the Update the Oracle WebLogic Server Environment section in Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation for more information.

8.13.2.3 Oracle Identity Federation Prerequisites