Benefits of Using OPSS

Introduction to Oracle Platform Security Services 1-7 For complete details on how to develop and secure an Oracle ADF application, see chapter 29 in Oracle Fusion Middleware Fusion Developers Guide for Oracle Application Development Framework.

1.5.3 Scenario 3: Securing a Java SE Application

Most of the OPSS features that work in Java EE applications work in Java SE applications, but there are some differences, which are noted in this section. Configuration All OPSS-related configuration and data files are located under configuration directory in the domain home. For example, the configuration file for a Java SE environment is defined in the file jps-config-jse.xml by default installed in the following location: DOMAIN_HOMEconfigfmwconfigjps-config-jse.xml To specify a different location, use the following switch: -Doracle.security.jps.config=pathToConfigFile The syntax of this file is identical to that of the file jps-config.xml. This file is used by code running in WebLogic containers. For details, see Appendix A, OPSS Configuration File Reference. For details about security configuration for Java SE applications, see Section 22.2, Authentication for Java SE Applications, and Section 23.1, Configuring Policy and Credential Stores in Java SE Applications. Required JAR in Class Path To make OPSS services available to a Java SE application, ensure that the following JAR file is added to your class path, located in the modules area of the Oracle installation home: ORACLE_HOMEoracle_commonmodulesoracle.jps_11.1.1jps-manifest.jar Login Modules Java SE applications can use standard JAAS login modules. However, to use the same login module on WLS, implement a custom authentication provider that invokes the login module. The SSPI interfaces allow integrating custom authentication providers in WLS. The login module recommended for Java SE applications is the IdentityStore login module. For details, see section Authentication Providers in Oracle Fusion Middleware Developing Security Providers for Oracle WebLogic Server. 1-8 Oracle Fusion Middleware Application Security Guide