Service Architecture Introduction to the Identity Store Service

7-6 Oracle Fusion Middleware Application Security Guide

7.3.2.5 Restarting Servers

After configuring for multi-LDAP query, restart Weblogic servers admin and managed servers.

7.3.2.6 Examples of the Configuration File

Example 7–1 shows a sample jps-config.xml file configured for single-LDAP queries in the Oracle WebLogic Server environment: Example 7–1 Single-LDAP Configuration in Oracle WebLogic Server -- JPS WLS LDAP Identity Store Service Instance -- serviceInstance name=idstore.ldap provider=idstore.ldap.provider property name=idstore.config.provider value=oracle.security.jps.wls.internal.idstore. WlsLdapIdStoreConfigProvider property name=CONNECTION_POOL_CLASS value=oracle.security.idm.providers.stdldap.JNDIPool serviceInstance Example 7–2 shows a sample jps-config.xml file configured for multi-LDAP queries in the Oracle WebLogic Server environment: Example 7–2 Multi-LDAP Configuration in Oracle WebLogic Server jpsConfig xmlns=http:xmlns.oracle.comoracleasschema11jps-config-11_1.xsd xmlns:xsi=http:www.w3.org2001XMLSchema-instance xsi:schemaLocation=http:xmlns.oracle.comoracleasschema11jps-config-11_ 1.xsd schema-major-version=11 schema-minor-version=1 serviceProviders serviceProvider type=IDENTITY_STORE name=idstore.ldap.provider class=oracle.security.jps.internal.idstore.ldap.LdapIdentityStoreProvider descriptionLDAP-based IdentityStore Providerdescription serviceProvider serviceProviders serviceInstances -- IDstore instance connecting to multiple ldap -- serviceInstance name=idstore.virtualize provider=idstore.ldap.provider -- following property indicates using WLS ldap Authenticators -- property name=idstore.config.provider value=oracle.security.jps.wls.internal.idstore.WlsLdapIdStoreConfigProvider -- following property enables virtualization i.e., support for multiple stores -- property name=virtualize value=true -- Front end ldap properties if not supplied, will use default values -- extendedProperty nameuser.create.basesname values valuecn=users_front,dc=us,dc=oracle,dc=comvalue values extendedProperty Configuring the Identity Store Service 7-7 extendedProperty namegroup.create.basesname values valuecn=groups_front,dc=us,dc=oracle,dc=comvalue values extendedProperty serviceInstance serviceInstances jpsContexts default=default -- the identity store uses multiple ldaps -- jpsContext name=default -- use multiple ldap -- serviceInstanceRef ref=idstore.virtualize -- .....other services -- jpsContext jpsContexts jpsConfig Note that: ■ the virtualize property of the service instance is set to true, enabling multi-LDAP queries ■ the extendedProperty element enables you to set front-end parameters if desired to override default values For more information, see Front-End Parameters in Section 7.3.1, What is Configured? .

7.3.3 Configuring Split Profiles

Identity Virtualization supports a split profile, where an application makes use of attributes for a single identity that are stored on two different sources. This feature requires additional configuration beyond that described in this chapter. For details, see Appendix K, Adapter Configuration for Identity Virtualization .

7.3.4 Configuration in Other Application Servers

Topics in this section include: ■ Configuring the Service for Single LDAP ■ Configuring the Service for Multiple LDAP

7.3.4.1 Configuring the Service for Single LDAP

See the example in Section 22.2.2, Configuring an LDAP Identity Store in Java SE Applications, for details.

7.3.4.2 Configuring the Service for Multiple LDAP

To configure the identity store service to handle multiple LDAPs in third-party application servers: 1. Modify the jps-config.xml file to configure service instances for each supported LDAP directory 2. Restart the application server to make the changes effective.