Overview of Security Data Migration

8 Migrating Security Data 8-1 8 Migrating Security Data You can export security data from one security realm or security provider and import the data into another realm or provider. The following sections provide information about exporting and importing security data. ■ Section 8.1, Overview of Security Data Migration ■ Section 8.2, Migration Concepts ■ Section 8.3, Formats and Constraints Supported by WebLogic Security Providers ■ Section 8.4, Migrating Data with WLST

8.1 Overview of Security Data Migration

WebLogic security realms persist different kinds of security data — for example, users and groups for the WebLogic Authentication provider, security policies for the XACML Authorization provider, security roles for the XACML Role Mapping provider, and credential maps for the WebLogic Credential Mapping provider. When you configure a new security realm or a new security provider, you may prefer to use the security data from your existing realm or provider, rather than recreate all the users, groups, policies, roles, and credential maps. Several WebLogic security providers support security data migration. This means you can export security data from one security realm, and import it into a new security realm. You can migrate security data for each security provider individually, or migrate security data for all the WebLogic security providers at once that is, security data for an entire security realm. Note that you can only migrate security data from one provider to another if the providers use the same data format. See Section 8.3, Formats and Constraints Supported by WebLogic Security Providers. You migrate security data through the WebLogic Administration Console or by using the WebLogic Scripting Tool WLST. Migrating security data may be helpful when you: ■ Transition from development to production mode. ■ Copy production mode security configurations to security realms in new WebLogic domains. ■ Move data from one security realm to a new security realm in the same WebLogic domain, where one or more of the default WebLogic security providers will be replaced with new security providers. The remainder of this section describes security migration concepts, the formats and constraints supported by the WebLogic security providers, and steps for migrating security data with WLST. 8-2 Securing Oracle WebLogic Server To migrate security data with the WebLogic Administration Console, see the following topics in the Oracle WebLogic Server Administration Console Help: ■ Export data from security realms ■ Import data into security realms ■ Export data from a security provider ■ Import data into a security provider

8.2 Migration Concepts