What You Should Know About REST Services

Part V Part V Advanced Systems Administration for Oracle WebCenter Part V contains the following chapters: ■ Chapter 27, Managing WebCenter Portal Application Security ■ Chapter 28, Configuring the Identity Store ■ Chapter 29, Configuring the Policy and Credential Store ■ Chapter 30, Configuring Single Sign-on ■ Chapter 31, Configuring SSL ■ Chapter 32, Configuring WS-Security ■ Chapter 33, Configuring Security for Portlet Producers ■ Chapter 34, Using WebCenter Portal Administration Console ■ Chapter 35, Managing a Multilanguage Portal ■ Chapter 36, Monitoring Oracle WebCenter Performance ■ Chapter 37, Managing Export, Import, Backup, and Recovery of WebCenter 27 Managing WebCenter Portal Application Security 27-1 27 Managing WebCenter Portal Application Security This chapter provides an introduction to securing WebCenter Portal applications, and describes the security configuration that is in place when WebCenter Portal applications and WebCenter Spaces are initially deployed. This chapter also includes a troubleshooting section that provides solutions for common security-related configuration issues. This chapter includes the following sections: ■ Section 27.1, Introduction to WebCenter Application Security ■ Section 27.2, Default Security Configuration ■ Section 27.3, Troubleshooting Security Configuration Issues For information about specific aspects of configuring security for WebCenter Portal applications, see: ■ Chapter 28, Configuring the Identity Store ■ Chapter 29, Configuring the Policy and Credential Store ■ Chapter 30, Configuring Single Sign-on ■ Chapter 31, Configuring SSL ■ Chapter 32, Configuring WS-Security ■ Chapter 33, Configuring Security for Portlet Producers ■ Chapter 34, Using WebCenter Portal Administration Console Audience The content of this chapter is intended for Fusion Middleware administrators users granted the Admin role through the Oracle WebLogic Server Administration Console. Users with the Monitor or Operator roles can view security information but cannot make changes. See also, Section 1.8, Understanding Administrative Operations, Roles, and Tools.

27.1 Introduction to WebCenter Application Security

The recommended security model for Oracle WebCenter is based on Oracle ADF Security, which implements the Java Authentication and Authorization Service JAAS model. For more information about Oracle ADF Security, see the Oracle Fusion Middleware Fusion Developers Guide for Oracle Application Development Framework.