Registering the Pagelet Producer for WebCenter Applications Using WLST

Managing the Oracle WebCenter Pagelet Producer 24-7 ■ Section 24.4.4.2, Basic Login and NTLM Login, describes how to configure a resource to log in automatically to a resource that prompts for authentication with basic or NTLM authentication. ■ Section 24.4.4.3, Authentication Sources, describes the static, user profile, and credential vault authentication field sources.

24.4.4.1 Form Login

This section describes how to configure autologin for a resource that prompts for authentication with an HTML form.

1. On the Autologin page for the resource, expand the Form Login section.

2. The login page can be identified by an URL or a regular expression. In the Login

Form Identification section, choose one of the following options: ■ If the login form is located at a static URL, select URL and type the URL into the box. You can choose to Automatically Detect Form Fields on the page or enter them manually as described in step 5 below. ■ If the login form is dynamic, select RegEx and type the regular expression pattern into the box.

3. Set the login form action. In the Form Submit Location section, choose one of the

following options: ■ If the login form action is a static URL, select URL and type the URL into the box. Choose the action for the form submission: POST or GET. ■ If the login form is dynamic, select RegEx and type the regular expression pattern into the box.

4. To map fields from the form to authentication field sources, either click

Automatically Detect Form Fields or enter them manually using the process below:

a. Click Create to add a new row to the Form Fields list.

b. Type the name of the HTML form input in the Field Name box.

c. For details on how to configure the Source and Value properties, see

Section 24.4.4.3, Authentication Sources.

d. To delete field mappings, click Delete.

5. The logout page and login error pages can also be identified by an URL or a

regular expression. In the Logout Page Identification and Login Error Page Identification sections, choose one of the following options: ■ If the page is located at a static URL, select URL and type the URL into the box. ■ If the page is dynamic, select RegEx and type the regular expression pattern into the box. Note: After defining the HTML form, make sure that sensitive fields are stored securely using the Credential Vault option. 24-8 Oracle Fusion Middleware Administrators Guide for Oracle WebCenter

24.4.4.2 Basic Login and NTLM Login

This section describes how to configure autologin for a resource that prompts for authentication with basic or NTLM authentication.

1. On the Autologin page for the resource, expand the Basic Login or NTLM Login

section.

2. In the Username and Password sections, choose the appropriate authentication

source and enter a value as necessary. For details on how to configure these properties, see the next section, Section 24.4.4.3, Authentication Sources .

24.4.4.3 Authentication Sources

Authentication sources define the source for login fields. The following table describes each of the authentication field source values:

24.4.5 Headers

Some header elements should be blocked from being passed to back-end applications. For example, when using delegated third-party SSO authentication, the SSO system might insert some headers that need not be passed to the back-end applications. When passed, these headers might interfere with the back-end application functionality. The Headers page allows you to choose Request and Response headers that should be dropped from the HTTP that is provided by the Pagelet Producer. To add a header to the list, click Create and enter the header name in the field provided. The Content-Length header is always implicitly dropped, because manipulating content during the proxying operation renders the content length invalid in almost all cases.

24.4.6 Pagelets

The Pagelets section lists the pagelets associated with the resource. Note: Basic authentication transmits passwords as plain text, and therefore, it must not be used in production systems. Further, it is strongly recommended that the underlying transport is HTTPS. Table 24–2 Pagelet Producer Authentication Field Sources Field Description Static Use the static source when the authentication field is the same for all users accessing the resource. Type the static value in the field provided. Profile The Profile source uses properties from the users Oracle WebCenter profile to supply credential data for authentication. Vault he Vault source prompts the user for credentials the first time the resource is accessed. The supplied credentials are stored in the credential vault, and each subsequent access to that resource is authenticated with the stored credentials. In the second field, enter the name of the credential vault to use, or leave the entry as default to use the server vault. Shared Vault The same as the Vault option, except Vault stores one value per key per user, while Shared Vault stores one value per key for all users