In Keystores, select an option that includes Custom Identity and the Trust

8-6 Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation See Appendix A, Oracle Identity Federation MBeans for details.

8.1.2.3.2 Entering keystore passwords in the credential store

You will need to store the identity and trust keystore passwords in the credential store. The keys for these passwords in the credential store are: ■ clientsslkeystorepwd – the password of the Identity Keystore ■ clientssltruststorepwd – the password of the Trust Keystore Following is an example of how to use WLST commands to create and update these passwords in the credential store. This example assumes that Oracle Identity Federation is deployed with application name OIF; the password of both the Identity and Trust keystore is denoted as mypassword. Create the keystore credentials: createCredmap=OIF, key=clientsslkeystorepwd, user=UniqueUserNameCredential, password=mypassword, desc=identity keystore pwd createCredmap=OIF, key=clientssltruststorepwd, user=UniqueUserNameCredential, password=mypassword, desc=trust keystore pwd Update the keystore credentials: updateCredmap=OIF, key=clientsslkeystorepwd, user=UniqueUserNameCredential, password=mypassword, desc=identity keystore pwd updateCredmap=OIF, key=clientssltruststorepwd, user=UniqueUserNameCredential, password=mypassword, desc=trust keystore pwd See Section 4.5, Managing Credentials for Oracle Identity Federation for details.

8.1.2.4 Connecting to an LDAP Server over SSL

When Oracle Identity Federation needs to connect to an LDAP server using SSL, you first need to add the LDAPs CA certificate to the trust keystore in the Oracle WebLogic Server Administration Console; this information is provided on the ServerKeystores configuration screen for the managed server where Oracle Identity Federation is running. You must also enter the trust keystore password in Oracle Identity Federation configuration See Section 8.1.2.1, Configuring Oracle WebLogic Server and Section 8.1.2.2, Configuring Keystore Passwords in Oracle Identity Federation . clientsslkeystoreloc usrlocalsslkeyst ore STRING clientsslkeystoretype JKS STRING clientssltruststoreloc usrlocalsslkeyst ore STRING clientssltruststoretyp e JKS STRING Property Name Property Value Property Type