Certificate Path Validation Oracle Fusion Middleware Online Documentation Library

6-50 Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation ■ ocsp.responderCertSubjectName is set to the subject name of the OCSP servers certificate If the CDP functionality is enabled, the com.sun.security.enableCRLDP Java system property is set to true. See Also: The Java PKI Programmers Guide for more detail on these system properties: http:java.sun.comjavase6docstechnotesguidess ecuritycertpathCertPathProgGuide.htmlAppC Note: For the OCSP and CDP features to be enabled, it is important to set the default CertPathValidation module to the Sun implementation true by default in a standard installation. 7 Diagnostics and Auditing 7-1 7 Diagnostics and Auditing This chapter describes monitoring and logging features in Oracle Enterprise Manager Fusion Middleware Control for Oracle Identity Federation. It contains these sections: ■ Monitoring ■ Availability ■ Logging ■ Auditing

7.1 Monitoring

This section describes how to monitor your Oracle Identity Federation server. ■ Oracle Identity Federation Home Page ■ Performance Summary

7.1.1 Oracle Identity Federation Home Page

This is the home page for your Oracle Identity Federation server instance. This page summarizes statistics about the server instance. For details about the metrics shown here, see Section 7.1.2, Performance Summary . Note: Liberty 1.x support is deprecated. 7-2 Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation

7.1.2 Performance Summary

Oracle Identity Federation provides a number of built-in metrics to enable application developers, system administrators, and others to measure application-specific performance information. Metrics for system, state, and phase events are available in these functional areas: ■ Protocol Profiles ■ Enterprise Data Tier Connectivity ■ Security Protocol Messages ■ Data Model JVT DiscoveryProviders This section contains these topics: ■ About Sensor Weights ■ Event Metrics ■ State Events ■ Phase Events

7.1.2.1 About Sensor Weights

The DMS sensor weight is a setting on the managed server on which Oracle Identity Federation is running; the sensor weight determines which metrics you see: ■ all - all sensors are activated. ■ normal or no weight value set - all the sensors at the normal level are activated ■ heavy - all the sensors at the default level and at the heavy level are activated ■ None - none of the sensors is activated. Given the cost of running expensive instrumentation, setting the sensor weight to conditionally activate only the necessary sensors lets you efficiently collect relevant metric data about the server. Set the Sensor Weight If you start Oracle WebLogic Server using the administration console, set the -Doracle.dms.sensors=level property in the serversserverNameserver startarguments section of the server, where level is one of the sensor levels described above. If you start Oracle WebLogic Server through a script, set the -Doracle.dms.sensors=level property in the domain_ home binstartManagedWebLogic.sh script.

7.1.2.2 Event Metrics

This section contains these topics: ■ Protocol Profiles ■ Security Processing Note: In the table, the Label and Description refers to the short label attached to the metric in Fusion Middleware Control, followed by a description of the metric. Diagnostics and Auditing 7-3

7.1.2.2.1 Protocol Profiles

Table 7–1 shows the protocol profile metrics: Table 7–1 Protocol Profile Events Name Label, Description Weight Requests HTTP and SOAP Requests Total number of requests received. This is the addition of the RequestsHTTP and RequestsSOAP request messages. normal RequestsHTTPRedirect HTTP Requests using Redirect Binding Total number of requests sent or received using HTTP Redirect binding. normal RequestsHTTPPOST HTTP Requests using POST Binding Total number of requests sent or received using HTTP-POST binding. normal RequestsHTTPPOSTSimpleSign HTTP Requests using POST Simple Sign Binding Total number of requests sent or received using HTTP-POST Simple Sign binding. normal RequestsSOAP SOAP Requests Total number of requests sent or received using the SOAP binding. normal WellFormedRequests Received XML Requests successfully parsed Total number of well-formed requests received, that is, those that resulted in no XML translation errors. normal BadlyFormedRequests Received XML Requests with parsing failures Total number of badly formed requests, that is, those that resulted in XML translation errors. normal SignedRequests Requests signed Total number of requests sent or received with message level signatures. normal EncryptedRequests Requests encrypted Total number of requests sent or received with message level encryption. normal SignedAndEncryptedRequests Requests both signed and encrypted Total number of requests sent or received with message level signatures and encryption. normal Responses HTTP or SOAP Responses Total number of responses sent or received. This is the sum of the ResponsesHTTP and ResponsesSOAP response messages. normal ResponsesHTTPRedirect HTTP Responses using Redirect Binding Total number of responses sent or received using HTTP Redirect binding. normal ResponsesHTTPPOST HTTP Responses using POST Binding Total number of responses sent or received using HTTP-POST binding. normal ResponsesHTTPPOSTSimpleSign HTTP Responses using POST Simple Sign Binding Total number of responses sent or received using HTTP-POST Simple Sign binding. normal