Click OK. Using an RDBMS Configuration Data Store

5-84 Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation ■ Mapping from Protocol-specific Methods to Local Mechanisms To Authentication Engines ■ Mapping Local Authentication Mechanisms to Identity Providers

5.14.1.1 Setting the Default Authentication Mechanism

If a service provider does not specify an authentication method in its request, the Oracle Identity Federation IdP uses the default authentication mechanism in the cases described earlier. Follow these steps to set the default authentication mechanism:

1. Log in to Fusion Middleware Control and navigate to the Oracle Identity

Federation instance.

2. Navigate to Administration, then Authentication Mechanisms.

3. Select the default authentication mechanism and click Apply.

5.14.1.2 Mapping from Protocol-specific Methods to Local Mechanisms To Authentication Engines

As mentioned earlier, Oracle Identity Federation provides the ability to map: ■ protocol specific authentication methods to local authentication mechanisms, and ■ local authentication mechanisms to authentication engines Thus, different authentication engines can be used depending on the authentication method specified by the service provider in its request. For example, you can define the following mappings for the SAML 2.0 protocol: urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos - oracle:fed:authentication:kerberos oracle:fed:authentication: kerberos - Custom Kerberos Authentication Engine and: urn:oasis:names:tc:SAML:2.0:ac:classes:Password - oracle:fed:authentication:password oracle:fed:authentication:password - Oracle Single Sign-On If a SAML 2.0 SP requests that the user be authenticated with mechanism urn:oasis:names:tc:SAML:2.0:ac:classes:Kerberos, Oracle Identity Federation uses the custom authentication engine created to authenticate the user through Kerberos. But if the SP requests the urn:oasis:names:tc:SAML:2.0:ac:classes:Password mechanism, the user is authenticated with the Oracle Single Sign-On engine. To configure: ■ the local authentication mechanism to authentication engine mappings and ■ protocol-specific authentication method to local authentication mechanism mappings follow these steps: See Also: Section 5.14.1, About Authentication Mechanisms