Connecting Web Service Clients to Oracle Virtual Directory

19-2 Oracle Fusion Middleware Administrators Guide for Oracle Virtual Directory To create an LDAP Adapter for Oracle Access Manager, perform the following steps:

a. Click the Create OAM LDAP Adapter button. The Preparing OVD for OAM -

Create LDAP Adapter dialog box appears. b. Enter a unique name for the LDAP Adapter in the Adapter Name field. Select the appropriate template for the LDAP Adapter by choosing an option from the Adapter Template list. Choose Default if you are not integrating with Microsoft Active Directory or Oracle Directory Server Enterprise Edition formerly Sun Java System Directory Server. Refer to Understanding Adapter Templates on page 2-28 for more information. Click Next. The Connection screen of the Preparing OVD for OAM - Create LDAP Adapter dialog box appears. c. Perform steps 5–16 in Creating LDAP Adapters on page 12-3 to configure the LDAP Adapter for OAM.

d. Review the summary of settings and click Finish to create the LDAP Adapter

for OAM. The new LDAP Adapter for OAM appears in the list of adapters on the Setup for Oracle Access Manager screen. To create a Database Adapter for Oracle Access Manager, perform the following steps:

a. Click the Create OAM Database Adapter button. The Preparing OVD for

OAM - Create Database Adapter dialog box appears. b. Enter a unique name for the Database Adapter in the Adapter Name field. Select the appropriate template for the Database Adapter by choosing an option from the Adapter Template list. Refer to Understanding Adapter Templates on page 2-28 for more information. Click Next. The Connection screen of the Preparing OVD for OAM - Create Database Adapter dialog box appears. c. Perform steps 5–10 in Creating Database Adapters on page 12-15 to configure the Database Adapter for OAM.

d. Review the summary of settings and click Finish to create the Database

Adapter for OAM. The new Database Adapter for OAM appears in the list of adapters on the Setup for Oracle Access Manager screen. To create a Custom Adapter for Oracle Access Manager, perform the following steps:

a. Click the Create OAM Custom Adapter button. The Preparing OVD for OAM

- Create Custom Adapter dialog box appears. b. Enter a unique name for the Custom Adapter in the Adapter Name field. c. Enter a valid base DN in the Adapter SuffixNamespace field.

d. Click Next on the Preparing OVD for OAM - Create Custom Adapter dialog

box. The Configure plug-in screen appears. e. Enter a name for the Plug-in in the Name field.

f. Enter the Plug-in class name in the Class field, or click Browse, then select the

plug-in from the Plug-In Selection box, and then click OK. g. Add parameters and values to the Plug-in by clicking the Create button in the Parameters table, selecting a parameter from the Name list, and entering a value for the parameter in the Value field. Configuring Oracle Virtual Directory for Integrated Directory Solutions 19-3

h. Click the Next on the Configure plug-in screen.

i. Review the summary of settings and click Finish to create the Custom

Adapter for OAM. The new Custom Adapter for OAM appears in the list of adapters on the Setup for Oracle Access Manager screen. 7. Configure the adapter for the data repository that Oracle Access Manager uses by selecting Adapter from the Oracle Directory Services Manager task selection bar and then clicking the name of the adapter to configure in the Adapter tree.

19.1.1 Modifying Oracle Access Manager Adapter Settings

To modify settings for an Oracle Access Manager integration adapter:

1. Click the name of the adapter you want to modify on the Setup for Oracle Access

Manager page. The adapter’s settings appear at the bottom of the page.

2. Modify the appropriate adapter settings. Refer to

Chapter 12, Creating and Configuring Oracle Virtual Directory Adapters for more information on adapter settings.

3. Click Apply at the bottom of the adapter settings screen to apply the changes.

19.2 Integrating with Oracle’s Enterprise User Security

Integrating Oracle Virtual Directory and Enterprise User Security enhances and simplifies your authentication and authorization capabilities by allowing you to leverage user identities stored in an external LDAP repository without any additional synchronization. This topic describes how to integrate Oracle Virtual Directory with Oracle’s Enterprise User Security and contains the following sections: ■ Preparing Oracle Virtual Directory for the Enterprise User Security Integration ■ Integrating Oracle Virtual Directory with External Directories ■ Configuring Access Control Lists for the Enterprise User Security Integration ■ Configuring Oracle Virtual Directory to Support Multiple Enterprise User Security Domains ■ Enabling User Account Lockout ■ Integration Limitations

19.2.1 Preparing Oracle Virtual Directory for the Enterprise User Security Integration

Regardless of which external directory you are storing your user identities in, you must perform the steps in this section first. After you complete the steps in this section, proceed with the integration by referring to Integrating Oracle Virtual Directory with External Directories . See Also: The following sections for more information on configuring each type of adapter: ■ Configuring LDAP Adapters on page 12-7 ■ Configuring Database Adapters on page 12-20 ■ Configuring Custom Adapters on page 18-2 19-4 Oracle Fusion Middleware Administrators Guide for Oracle Virtual Directory Perform the following steps to prepare Oracle Virtual Directory for integration with with Enterprise User Security: 1. Create a back-up copy of the ORACLE_HOMEovdeus directory. All the configuration files required for the Enterprise User Security integration are in the eus directory. Making a back-up copy of the eus directory enables you to edit the template-like files in the original eus directory based on your environment, and still keep copies of the original files. 2. If one does not already exist, create an LDAP listener that is secured with SSL No Authentication Mode by referring to Chapter 11, Creating and Managing Oracle Virtual Directory Listeners. 3. Create and add the subschemasubentry and Dynamic Groups plug-ins as global server plug-ins. Refer to Managing Global Server Plug-ins on page 13-4 for steps on creating server plug-ins.

19.2.2 Integrating Oracle Virtual Directory with External Directories

This section contains instructions for integrating Oracle Virtual Directory with Enterprise User Security for use with specific external directories. Perform the steps in the appropriate section that are specific to the external directory in which you are storing your user identities. This sections contains the following sections: ■ User Identities in Microsoft Active Directory ■ User Identities in Microsoft Active Directory and Metadata in Oracle Internet Directory ■ User Identities in Oracle Directory Server Enterprise Edition ■ User Identities in Novell eDirectory ■ User Identities in Oracle Internet Directory

19.2.2.1 User Identities in Microsoft Active Directory

Perform the following procedures to integrate Oracle Virtual Directory with Enterprise User Security for user identities stored in Active Directory: ■ Configuring Active Directory for the Integration ■ Configuring Oracle Virtual Directory for the Integration

19.2.2.1.1 Configuring Active Directory for the Integration Perform the following steps to

configure Active Directory for the integration: Important: The steps for integrating Oracle Virtual Directory with Enterprise User Security from this point forward differ depending on which external directory you are storing your user identities in. Continue the integration with Enterprise User Security by referring to Integrating Oracle Virtual Directory with External Directories . Note: If you are using Kerberos authentication in the integration, do not perform steps 3 and 4 in the following procedure.