Configure Authentication Mechanisms - SAML 2.0

5-88 Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation The authentication mechanisms table displays these columns: ■ the name of the WS-Federation 1.1 authentication mechanism ■ the authentication engine currently associated with a mechanism To change the displayed data, use the View drop-down to select the desired fields. To add a new authentication mechanism, click Add. To delete an existing authentication mechanism, select the row for that mechanism and click Delete. You will be asked to confirm the deletion. Click Apply to save the changes, or Revert to reset the data to its previous state.

5.15 Configuring Authentication Engines

Use this page to configure: ■ HTTP headers that are to be used as attributes for a user session To configure these headers, click the Configure button next to HTTP Header Attributes. A dialog box appears where you can add headers and delete existing headers. ■ authentication engines for the Oracle Identity Federation server This page consists of tabs devoted to individual authentication engines. Updates on any tab are saved as you move to other tabs. When you are done, click Apply to save the changes, or Revert to reset the data to its previous state. ■ Authentication Engines - HTTP Header ■ Authentication Engines - Oracle Single Sign-On ■ Authentication Engines - Oracle Access Manager ■ Authentication Engines - LDAP Directory ■ Authentication Engines - Database Security ■ Authentication Engines - Database Table ■ Authentication Engines - Infocard ■ Authentication Engines - Federated SSO Proxy ■ Authentication Engines - JAAS ■ Authentication Engines - Custom Configuring Oracle Identity Federation 5-89

5.15.1 Authentication Engines - HTTP Header

The HTTP Header authentication engine authenticates a user based on the value of an HTTP header. The typical deployment for such an engine consists of: ■ Oracle Identity Federation server deployed in the domain ■ a web server such as Oracle HTTP Server fronting the WebLogic managed server where Oracle Identity Federation is running see Section 3.2.1, Deploying Oracle Identity Federation with Oracle HTTP Server for details on how to deploy and integrate Oracle HTTP Server if it is not yet installed. ■ a web agent integrated on the web server, protecting the HTTP header authentication engine URL https:oif-host:oif-portfeduserauthnhttp ■ a web agent policy for the HTTP header authentication engine URL that instructs the agent to set the users identity as an HTTP header variable ■ Oracle Identity Federation configured to retrieve the HTTP header variable from the HTTP request that contains the users identity Since the Web agent protects the HTTP header authentication engine URL, any requests processed by the Oracle Identity Federation server on this URL means that the user was authenticated by the Web Access Management system to which the Web agent belongs.

5.15.1.1 Configuring the HTTP Header Authentication Engine

The HTTP Header tab contains these fields: ■ Enable Authentication Engine - Check this box to enable the engine, and uncheck the box to disable the engine. If enabled, this engine appears on the list of available engines in the list-box associated with Default Authentication Engine. ■ User Unique ID Header - When Oracle Identity Federation uses the HTTP header engine as an authentication engine, a Web agent is integrated with Oracle HTTP ServerOracle Identity Federation and protects an Oracle Identity Federation URL. The policy domain for the Oracle Identity Federation URL is configured to provide the user identifier as an HTTP header. Use this field to specify the name of the HTTP header containing the user identifier provided by the Web agent. ■ Logout Enabled - Check this box to enable logouts with this engine. When enabling logouts, related fields include: – Logout URL - The is the URL where Oracle Identity Federation needs to redirect the user for the Web Access Management system logout. Updates you make on this tab are saved if you move to tabs for other authentication engines. When you are done, click Apply to save the changes, or Revert to reset the data to its previous state.