Customizing SSL Support for the User and Role API

Developing with the User and Role API 25-35 where propertiesfile contains the provider class name and any configuration data for the provider. It also contains information about the tests to be run. You need to edit this file and update it with correct information before running the tests; the file contents are self-explanatory. One such file ffprovider.properties is available with the sample provider discussed in Section 25.10.7.1, About the Sample Provider . Results The test will produce the results on-screen. All providers that you develop must pass the Lookup tests, Role membership tests and Profile tests in the test suite. Full-featured providers must pass all the tests in the suite including CreateDrop tests. The log of test results will be output to the file results.out in current working directory.

25.10.7 Example: Implementing an Identity Provider

The distribution includes a sample identity provider that you can use to understand how custom providers are built. This section describes how to access the sample provider, and explains the steps needed to implement a custom provider. The steps rely on the sample for illustration. ■ About the Sample Provider ■ Overview of Implementation ■ Configure jps-config.xml to use the Sample Identity Provider ■ Configure Oracle WebLogic Server

25.10.7.1 About the Sample Provider

The sample provider is bundled in sampleprovider.zip. Unzip the file. It should generate the following structure: sampleprovider build.xml - ant build file ffprovider.properties - properties file required for testing jlib - provider jar file location out - location of generated class files samples - Folder for samples src - provider source code Run ant help for instructions on building and testing this provider. The provider relies on an ad-hoc identity repository for fetching identity information and has been tested with Oracle SOA Suite. It is not intended for production use without appropriate testing for your environment.

25.10.7.2 Overview of Implementation

The sample identity provider used in this example is a custom IdentityAuthentication provider that uses an RDBMS as the underlying store. It can be used as both an identity provider and an authentication provider.