Navigate to Administration, then Service Provider Integration Modules, then

3-8 Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation 1. Copy the keystore file previously generated to the ORACLE_HOMEssoconf location and save it as a keystore. 2. Open ORACLE_HOMEssoconfpolicy.properties. 3. Uncomment SASSOAuthnUrl, SASSOLogoutUrl, SASSOAuthLevel and MediumHighSecurity_AuthPlugin. 4. Set the Oracle Identity Federation hostnameport information for: SASSOAuthnUrl= http\:oif-hostname\:oif-portfedusersposso 5. Set the Oracle Identity Federation hostnameport information for: SASSOLogoutUrl = http\:oif-hostname\:oif-portfeduserspsloosso 6. Set the authentication level for the Oracle Identity Federation plugin: SASSOAuthLevel = MediumHighSecurity 7. Set the MediumHighSecurity_AuthPlugin, which will define the Oracle Identity Federation plug-in: MediumHighSecurity_AuthPlugin = oracle.security.sso.server.auth.SASSOAuth 8. Save the changes and exit. 9. Restart the OC4J_SECURITY instance. To configure a partner to use Oracle Identity Federation as the authentication plug-in: 1. Open ORACLE_HOMEssoconfpolicy.properties. 2. Add the partner application to be protected by the authentication level mapped to the Oracle Identity Federation plug-in. For example: content.example.com\:8888 = MediumHighSecurity 3. Save the changes and exit. 4. Restart the OC4J_SECURITY instance.

3.2.2.6 Testing Federated Single Sign-On

Take these steps to test your federated single sign-on setup: 1. Use a web browser to access a protected resource. When prompted by the identity provider, log in using credentials in the IdP’s domain. When prompted by the service provider, log in using credentials in the SP’s domain. You should now be redirected to the protected resource. For details about protecting partner applications and resources see Oracle Application Server Single Sign-On Administrators Guide. 2. Log out, and then try to access the protected resource again. You should be prompted for login only by the identity provider.

3.2.3 Deploying Oracle Identity Federation with Oracle Access Manager 10g

This section describes the steps needed to install and deploy Oracle Identity Federation so that it is integrated with Oracle Access Manager 10g. Integration enables Oracle Identity Federation to interact with Oracle Access Manager to create an authenticated user session. The steps illustrate a deployment scenario consisting of two nodes. The section is broken out into separate instructions for the different component installation and deployment tasks: