Alternative Procedure to Avoid Port Conflicts

18-16 Oracle Fusion Middleware Upgrade Guide for Oracle Identity Management 4. Save the oif.conf file. 5. Start the Oracle HTTP Server as shown below: INSTANCE_HOME binopmnctl startproc process-type=OHS

18.16.2 Configuring the Load Balancer

Oracle Identity Federation topologies deployed in high availability configurations are front-ended by an external load balancer, which provides load balancing of the HTTP requests between the various OIF instances. After upgrading the Oracle Identity Federation high availability environment, configure your load balancer to listen to the Oracle HTTP Server instances on IDMHOST1 and IDMHOST2. Refer to the documentation provided by the load balancer vendor to accomplish this task.

18.16.3 Set Oracle Identity Federation Configuration Properties

Follow the steps below to enable the Oracle Identity Federation instances on IDMHOST1 and IDMHOST2 to recognize the Load Balancer Virtual Hostname. Use Oracle Enterprise Manager Fusion Middleware Control to complete this task. 1. Log in to Fusion Middleware Control and locate the Oracle Identity Federation instance home page. 2. Modify the server properties as follows:

a. From the Oracle Identity Federation menu, select Administration, and then

Server Properties .

b. Change the Host field to reflect the virtual host name of the load balancer.

c. Change the Port and SSL Enabled, as well as the SOAP Port and SSL

Enabled options to reflect the ports used by the load balancer. d. Save the changes. 3. Modify the Identity Provider properties as follows:

a. From the Administration menu, select Identity Provider.

b. In the Provider ID field, enter the URL for the load balancer virtual host name and port. For example: http:load_balancer_host:port 4. Modify the Service Provider properties as follows:

a. From the Administration menu, select Service Provider.

b. In the Provider ID field, enter the URL for the load balancer virtual host name

and port. For example: http:load_balancer_host:port 5. Repeat Steps 2 through 4 for the subsequent Oracle Identity Federation instances in the high availability environment. Upgrading an Oracle Identity Federation High Availability Environment 18-17 6. Because the Oracle Identity Federation metadata will have changed, redistribute the metadata to any remote partners to notify them of the configuration changes you just made.

18.16.4 Additional High Availability Tasks Associated

In addition to this tasks listed in this section, be sure to review any additional tasks required to configure the Oracle Identity Federation 11g high availability environment. In particular, refer to these sections of the Oracle Fusion Middleware High Availability Guide: ■ Configuring Oracle HTTP Server for Oracle Directory Services Manager High Availability ■ Configure Oracle HTTP Server ■ Oracle Identity Federation Configuration

18.17 Task 17: Verify the Oracle Identity Federation High Availability Upgrade

Follow the steps below to validate the upgraded Oracle Identity Federation high availability upgrade: 1. Use a web browser to access the URLs shown below: http:LoadBalancerHost:LoadBalancerPortfedspmetadata http:LoadBalancerHost:LoadBalancerPortfedidpmetadata 2. Follow the instructions in the following sections of the Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation to import metadata from the SP into the IdP and the IDP metadata into the SP: ■ Obtain Server Metadata ■ Add Trusted Providers 3. Go to the following URL and do a Single Sign-On operation: http:Loadbalancer_SP_Host:Loadbalancer SP_portfedusertestspsso 4. During the upgrade, the single sign-on configurations from your 10g environment should have been migrated to the upgraded instances. As a result, you should be able to access those URLs, if the upgrade process completed successfully.