Authentication Provider Files Installing the Authentication Provider with Oracle Access Manager 11g

15-14 Oracle Fusion Middleware Application Security Guide When you use the Oracle Access Manager Identity Asserter, all web.xml files in the application EAR file must specify CLIENT-CERT in the element auth-method for the appropriate realm. You can add comma separated values here when you want applications accessed directly over the WebLogic Server host:port to be authenticated by the container. For instance: auth-methodCLIENT-CERT,FORMauth-method. The auth-method can use BASIC, FORM, or CLIENT-CERT values. While these look like similar values in Oracle Access Manager, the auth-method specified in web.xml files are used by Oracle WebLogic Server not Oracle Access Manager. To specify authentication in web.xml for the Identity Asserter 1. Locate the web.xml file in the application EAR file: my_app WEB-INFweb.xml 2. Locate the auth-method in login-config and enter CLIENT-CERT. login-config auth-methodCLIENT-CERTauth-method login-config 3. Save the file. 4. Redeploy and restart the application. 5. Repeat for each web.xml file in the application EAR file. 6. Proceed to Confirming mod_weblogic for Oracle Access Manager Identity Asserter .

15.2.3.1.2 Confirming mod_weblogic for Oracle Access Manager Identity Asserter Oracle

Oracle HTTP Server includes the mod_weblogic plug-in module mod_wl_ohs.so in 11g which is already enabled. You can perform the following procedure to confirm this or skip this procedure. With Oracle HTTP Server 11g, the mod_weblogic configuration is present in mod_wl_ ohs.conf by default, and the path of this file is included in httpd.conf. If the mod_ weblogic configuration is not present then you must edit httpd.conf. To configure mod_weblogic for the Oracle Access Manager Identity Asserter 1. Locate httpd.conf. For example: ORACLE_INSTANCEconfigOHSohs_namehttpd.conf 2. Confirm that the following statement is in the file with appropriate values for your deployment add or uncomment this, if needed: IfModule mod_weblogic.c WebLogicHost myHost.myDomain.com WebLogicPort myWlsPortNumber IfModule Location http:request-uri-pattern SetHandler weblogic-handler Location See Also: Oracle Fusion Middleware Deploying Applications to Oracle WebLogic Server Configuring Single Sign-On with Oracle Access Manager 11g 15-15