Configuring the Identity Store Provider

Configuring the Identity Store Service 7-7 extendedProperty namegroup.create.basesname values valuecn=groups_front,dc=us,dc=oracle,dc=comvalue values extendedProperty serviceInstance serviceInstances jpsContexts default=default -- the identity store uses multiple ldaps -- jpsContext name=default -- use multiple ldap -- serviceInstanceRef ref=idstore.virtualize -- .....other services -- jpsContext jpsContexts jpsConfig Note that: ■ the virtualize property of the service instance is set to true, enabling multi-LDAP queries ■ the extendedProperty element enables you to set front-end parameters if desired to override default values For more information, see Front-End Parameters in Section 7.3.1, What is Configured? .

7.3.3 Configuring Split Profiles

Identity Virtualization supports a split profile, where an application makes use of attributes for a single identity that are stored on two different sources. This feature requires additional configuration beyond that described in this chapter. For details, see Appendix K, Adapter Configuration for Identity Virtualization .

7.3.4 Configuration in Other Application Servers

Topics in this section include: ■ Configuring the Service for Single LDAP ■ Configuring the Service for Multiple LDAP

7.3.4.1 Configuring the Service for Single LDAP

See the example in Section 22.2.2, Configuring an LDAP Identity Store in Java SE Applications, for details.

7.3.4.2 Configuring the Service for Multiple LDAP

To configure the identity store service to handle multiple LDAPs in third-party application servers: 1. Modify the jps-config.xml file to configure service instances for each supported LDAP directory 2. Restart the application server to make the changes effective. 7-8 Oracle Fusion Middleware Application Security Guide Example 7–3 shows a sample jps-config.xml file configured to run multi-LDAP queries for third-party application servers: Example 7–3 Multi-LDAP Configuration in Third-Party Application Servers jpsConfig xmlns=http:xmlns.oracle.comoracleasschema11jps-config-11_1.xsd xmlns:xsi=http:www.w3.org2001XMLSchema-instance xsi:schemaLocation=http:xmlns.oracle.comoracleasschema11jps-config-11_ 1.xsd schema-major-version=11 schema-minor-version=1 serviceProviders serviceProvider type=IDENTITY_STORE name=idstore.ldap.provider class=oracle.security.jps.internal.idstore.ldap.LdapIdentityStoreProvider descriptionLDAP-based IdentityStore Providerdescription serviceProvider serviceProviders serviceInstances -- instance idstore.oid to represent an ldap server oid -- serviceInstance name=idstore.oid provider=idstore.ldap.provider property name=subscriber.name value=dc=us,dc=oracle,dc=com property name=idstore.type value=OID property name=security.principal.key value=oid.ldap.credentials property name=security.principal.alias value=JPS property name=ldap.url value=ldap:oid1.us.oracle.com:389,ldap:oid2.us.oracle.com:389 extendedProperty nameuser.search.basesname values valuecn=users,dc=us,dc=oracle,dc=comvalue values extendedProperty extendedProperty namegroup.search.basesname values valuecn=groups,dc=us,dc=oracle,dc=comvalue values extendedProperty extendedProperty nameusername.attrname values valueuidvalue values extendedProperty extendedProperty namegroupname.attrname values valuecnvalue values extendedProperty serviceInstance -- instance idstore.ad to represent an ldap server ad -- serviceInstance name=idstore.ad provider=idstore.ldap.provider property name=subscriber.name value=dc=us,dc=oracle,dc=com property name=idstore.type value=ACTIVE_DIRECTORY property name=security.principal.key value=msad.ldap.credentials property name=security.principal.alias value=JPS