Packaging Requirements Example Scenarios

Part II Part II Basic OPSS Administration This part describes basic OPSS administration features in the following chapters: ■ Chapter 5, Security Administration ■ Chapter 6, Deploying Secure Applications 5 Security Administration 5-1 5 Security Administration This chapter introduces the tools available to an administrator and the typical tasks to manage application security; it is divided into the following sections: ■ Choosing the Administration Tool According to Technology ■ Basic Security Administration Tasks ■ Typical Security Practices with Fusion Middleware Control ■ Typical Security Practices with the Administration Console ■ Typical Security Practices with Oracle Entitlements Server ■ Typical Security Practices with OPSS Scripts For advanced administrator tasks, see Appendix E, Administration with WLST Scripting and MBean Programming.

5.1 Choosing the Administration Tool According to Technology

The four basic tools available to a security administrator are Oracle Enterprise Manager Fusion Middleware Control, Oracle WebLogic Administration Console, Oracle Entitlements Server, and the Oracle WebLogic Scripting Tool WLST. For further details on these and other tools, see chapter 3, Getting Started Managing Oracle Fusion Middleware in Oracle Fusion Middleware Administrators Guide. The main criterion that determines the tool to use to administer application security is whether the application uses just container-managed security Java EE application or it includes Oracle ADF security Oracle ADF application. Oracle-specific applications, such as Oracle Application Development Framework Oracle ADF applications, Oracle Server-Oriented Architecture SOA applications, and Web Center applications, are deployed, secured, and maintained with Fusion Middleware Control and Oracle Entitlements Server. Other applications, such as those developed by third parties, Java SE, and Java EE applications, are typically deployed, secured, and administered with Oracle WebLogic Administration Console or with WLST. The recommended tool to develop Java applications is Oracle JDeveloper 11g. This tool helps the developer configure file-based identity, policy, and credential stores through specialized graphical editors. In particular, when developing Oracle ADF applications, the developer can run a wizard to configure security for web pages associated with Oracle ADF resources such as Oracle ADF task flows and page definitions, and define security artifacts using a specialized, visual editor for the file jazn-data.xml.