Configuring Oracle Identity Federation Behind a Web Proxy Server

3-28 Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation For details about configuring the Sun One proxy server for Oracle Identity Federation, see Guidelines for Modifying the obj.conf File in Oracle Fusion Middleware Using Web Server Plug-Ins with Oracle WebLogic Server.

3.2.6.4 Updating the Identity and Access Management servers

Users will now access Oracle Identity Federation through the Web server proxy, and the IAM servers like Oracle Access Manager also need to be updated so that they reference the proxy instead of the local Oracle Identity Federation machine. Go to any back end that references Oracle Identity Federation such as Oracle Access Manager or Oracle Single Sign-On, and update their configuration to use the hostnameport values of the Web proxy server instead of the local machine where Oracle Identity Federation is installed.

3.2.6.5 Oracle Directory Server Enterprise Edition Sample Configuration Files

The Web proxy server will need to forward the HTTP requests to the machine where Oracle Identity Federation is installed. This section provides samples of the obj.conf and magnus.conf configuration files. Sample obj.conf File Object name=default AuthTrans fn=match-browser browser=MSIE ssl-unclean-shutdown=true NameTrans fn=assign-name from= name=serverexample NameTrans fn=ntrans-j2ee name=j2ee NameTrans fn=pfx2dir from=mc-icons dir=homepfxSunOne6.1ns-icons name=es-internal NameTrans fn=document-root root=docroot PathCheck fn=unix-uri-clean PathCheck fn=check-acl acl=default PathCheck fn=find-pathinfo PathCheck fn=find-index index-names=index.html,home.html,index.jsp ObjectType fn=type-by-extension ObjectType fn=force-type type=textplain Service method=GET|HEAD type=magnus-internalimagemap fn=imagemap Service method=GET|HEAD type=magnus-internaldirectory fn=index-common Service method=GET|HEAD|POST type=~magnus-internal fn=send-file Service method=TRACE fn=service-trace Error fn=error-j2ee AddLog fn=flex-log name=access Object Object name=j2ee Service fn=service-j2ee method= Object Object name=cgi ObjectType fn=force-type type=magnus-internalcgi Service fn=send-cgi user=user group=group chroot=chroot dir=dir nice=nice Object Object name=es-internal See Also: Oracle Fusion Middleware Administrators Guide for Oracle Access Manager 10g for details about the Web-based user interface. Deploying Oracle Identity Federation 3-29 PathCheck fn=check-acl acl=es-internal Object Object name=send-compressed PathCheck fn=find-compressed Object Object name=compress-on-demand Output fn=insert-filter filter=http-compression Object Execute these instructions for any resource with the assigned name server.example.com Object name=serverexample Proxy the requested resource to the URL http:server.example.com:8080 Service fn=service-passthrough servers=http:unit1.mycorp.co.in:1234 Object Sample magnus.conf File The NetsiteRoot, ServerName, and ServerID directives are DEPRECATED. They will not be supported in future releases of the Web Server. NetsiteRoot homepfxSunOne6.1 ServerName calgary ServerID https-oif_idp_flagstaff RqThrottle 128 DNS off Security off PidLog homepfxSunOne6.1https-oif_idp_flagstafflogspid User pfx StackSize 131072 TempDir tmphttps-oif_idp_flagstaff-65cd125c Init fn=flex-init access=accesslog format.access=Ses-client.ip - Req-vars.auth-user [SYSDATE] \Req-reqpb.clf-request\ Req-srvhdrs.clf-status Req-srvhdrs.content-length Init fn=load-modules shlib=homepfxSunOne6.1binhttpsliblibj2eeplugin.so shlib_flags=global|now Init fn=load-modules shlib=homepfxSunOne6.1binhttpspassthroughpluginspassthrough libpassthrough.so

3.2.7 Using the Test SP Engine

Oracle Identity Federation provides a test SP engine for the purpose of Single Sign-On testing. The following sections describe how to use the test SP engine.: ■ Configure the Test SP Engine ■ Use the Test SP Engine for SP-Initiated SSO ■ Use the Test SP Engine with IdP-Initiated SSO ■ Test SP Engine Results