Descriptions for Interceptors Samples

6-46 Oracle Fusion Middleware Developers Guide for Oracle Adaptive Access Manager

6.8.2 Flow for BigBank without UIO Proxy

The following is the flow of the BigBank application without the UIO Proxy for login and logout.

6.8.2.1 Login

The Login without UIO Proxy flow is shown below. Figure 6–3 Login Flow - Without UIO Proxy

6.8.2.2 Logout

The Logout without UIO Proxy flow is shown below. LogoutPageResponse Response Redirect client to BigBank logout page. Invoked by response from OAAM logout page. Phase1LogoffPageResponse Response Clear session when getting response from BigBank logout page. Used when Phase One enabled. Phase2LogoffPageResponse Response Clear session when getting response from BigBank logout page. Used when Phase Two enabled. Table 6–22 Cont. Sample Configuration Interceptors Interceptor ID Type Explanation Oracle Adaptive Access Manager Proxy 6-47 Figure 6–4 Logout - Without UIO Proxy

6.8.3 Flow for First-time User to Log In and Log Out of BigBank with UIO Proxy

This section provides details for the flows for first time users who log in to the BigBank application through the UIO Proxy. The regular flow, including the login phase, registration phaseskip registration phase, and logout phase, and the deviation flow block login are covered. Interceptors defined in Configure xml that are used in each step in the flow will be listed. Note: For the proxy, the only messages shown are ones whenthe interceptors match requestresponse. Normal messages that the proxy passes betweenthe client and Oracle Adaptive Access Managerapplication are skipped to simplify the scenario. The regular flow four phases consists of the login, registration, skip registration, and logout phases. Login phase: 6-48 Oracle Fusion Middleware Developers Guide for Oracle Adaptive Access Manager Figure 6–5 Flow for Getting Login Page 1. Client requests Login page for the application http:proxyhost:portbigbank. 2. The proxy intercepts the request, and sets the headers. Then, the proxy redirects the client to oaam_serverlogin.do. The request is intercepted by two interceptors: AddAppIdTobharosauioRequests-BigBank and Phase2RedirectBigBankLoginPageRequest. Note: AddAppIdTobharosauioRequests-BigBank sets the HTTP headers and variables. It will intercept any request for the OAAM Server and the proxy will try other interceptors to see if there are more matches after this interceptor. Phase2RedirectBigBankLoginPageRequest redirects the client from the BigBank Login page to oaam_serverlogin.do. 3. The client requests to get login.do at the OAAM Server http:proxyhost:portoaam_serverlogin.do. 4. OAAM Server redirects to Jump page to fingerprint the client device. 5. OAAM Server gets fingerprinting from the client browser. 6. OAAM Server responds after getting the fingerprint with the Login page.