Security and Trust - Wallet Security and Trust - Provider Metadata

Configuring Oracle Identity Federation 5-69 it to validate the certificates needed to verify the signatures on incoming SAMLWS-Federation messages. Use this page to maintain the following objects in the certificate validation store: ■ Certificate Authority CA certificates ■ Certificate Revocation Lists CRLs Provide the following information: ■ Enable Certificate Validation - Check the box to enable the server to validate certificates. Click Apply to save the changes, or Revert to reset the field to its previous state. ■ Trusted Certificate Authorities - The table displays details of CAs trusted by Oracle Identity Federation. The CA fields are: ■ Subject - this is the CA certificate subject ■ Issuer - this is the certificate issuer ■ Serial Number - this is the certificate’s serial number ■ Valid From - this is the start time of the certificate validity period ■ Valid Until - this is the end time of the certificate validity period Select a CA and click Delete to remove it from the store. Click Add to add a new trusted CA to the store. ■ Certificate Revocation Lists - The CRL table shows a list of Certificate Revocation Lists CRLs known to Oracle Identity Federation. The CRL fields are: ■ Issuer - this is the CA that issued the CRL ■ Valid From - this is the start time of the CRL validity period ■ Valid Until - this is the end time of the CRL validity period Select a CRL and click Delete to remove it from the store. Click Add to add a new CRL to the store. 5-70 Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation

5.11 Configuring Federations

See Section 4.3, Managing Identity Federations .

5.12 Configuring Identities

See Section 4.4, Configuring Identities .

5.13 Managing Data Stores

This section explains how to configure and manage the different data stores used by Oracle Identity Federation: ■ Manage the User Data Store ■ Manage the Federation Data Store ■ Manage the Session Data Store and the Message Data Store ■ Manage the Configuration Data Store ■ Create the Oracle Identity Federation Schema Using RCU

5.13.1 Manage the User Data Store

This section explains how to configure user data stores for Oracle Identity Federation: ■ Configuring Oracle Identity Federation for RDBMS User Data Store ■ Configuring Oracle Identity Federation for an LDAP User Data Store ■ Configuring Oracle Virtual Directory as User Data Store ■ Configuring a Redundancy User Data Store ■ Configuring No User Data Store

5.13.1.1 Configuring Oracle Identity Federation for RDBMS User Data Store

In order for Oracle Identity Federation to use a database as the user data store, this database must have a table, referred to as the user table, that contains user information. The user table must have a column that contains the User ID with which the user will be identified in Oracle Identity Federation. The User ID must always be present and must be unique across all users. If Attribute Sharing or User Mapping with Attributes will be used, columns for these attributes must also be present in the user table. To configure Oracle Identity Federation to use an RDBMS user data store: 1. Create a JDBC Data Source 2. Modify Oracle Identity Federation Data Store Configuration Create a JDBC Data Source Follow these steps to create a JDBC data source: 1. Log in to the WebLogic Administration Console. See Also: Getting Started with Oracle WebLogic Server Administration Console in the Oracle Fusion Middleware Administrators Guide.