deleteCred Managing Credentials with OPSS Scripts

Introduction to Oracle Fusion Middleware Audit Framework 11-3 ■ Java EE applications - The objective is to provide a framework for Java EE applications, starting with Oracles own components. Java EE applications will be able to create application-specific audit events. In 11g Release 1 11.1.1, the audit framework is only available for Oracles own applications. ■ System Components - For system components in the middleware that are managed by Oracle Process Manager and Notification Server, the audit framework also provides an end-to-end structure similar to that for Java components.

11.2 Overview of Audit Features

Key features of the Oracle Fusion Middleware Audit Framework include: ■ A uniform system for administering audits across a range of Java components, system components, and applications ■ Extensive support for Java component auditing, which includes: – support for Oracle Platform Security Services auditing for non-audit-aware applications – the ability to search for audit data at any application level ■ Capturing authentication historyfailures, authorization history, user management, and other common transaction data ■ Flexible audit policies – pre-seeded audit policies, capturing customers’ most common audit events, are available for ease of configuration – tree-like policy structure simplifies policy setup ■ Prebuilt compliance reporting features – Oracle Fusion Middleware Audit Framework provides out-of-the-box analytical reporting capabilities within Oracle BI Publisher; data can be analyzed on multiple dimensions Execution Context ID ECID, user ID, and so on across multiple components. These reports can also be customized according to your preferences. – Reports are based on centralized audit data. – Customers can customize the reports or write their own based on the published audit schema. See Chapter 13, Using Audit Analysis and Reporting for details. ■ Audit record storage Data store database and files bus-stop are available. Maintaining a common location for all audit records simplifies maintenance. Using a data store lets you generate reports with Oracle Business Intelligence Publisher. ■ Common audit record format Highlights of the audit trail include: – baseline attributes like outcome status, event date-time, user, and so on See Also: Understanding Key Oracle Fusion Middleware Concepts in the Oracle Fusion Middleware Administrators Guide. 11-4 Oracle Fusion Middleware Application Security Guide – event-specific attributes like authentication method, source IP address, target user, resource, and so on – contextual attributes like the execution context ID ECID, session ID, and others ■ Common mechanism for audit policy configuration Oracle Fusion Middleware Audit Framework offers a unified method for configuring audit policies in the domain. ■ Leverages the Oracle Fusion Middleware 11g infrastructure – is usable across Oracle Fusion Middleware 11g components and services such as Oracle Web Services Manager, Oracle Internet Directory, Oracle Virtual Directory, and Oracle Directory Integration and Provisioning – integrates with Oracle Enterprise Manager Fusion Middleware Control for UI-based configuration and management – integrates with wlst for command-line, script-based configuration – integrates with Oracle Platform Security Services to provide multiple benefits

11.3 Oracle Fusion Middleware Audit Framework Concepts

This section introduces basic concepts of the Oracle Fusion Middleware Audit Framework: ■ Audit Architecture ■ Key Technical Concepts ■ Audit Record Storage ■ Analytics

11.3.1 Audit Architecture

The Oracle Fusion Middleware Audit Framework consists of the following key components: ■ Audit APIs These are APIs provided by the audit framework for any audit-aware components integrating with the Oracle Fusion Middleware Audit Framework. During runtime, applications may call these APIs where appropriate to audit the necessary information about a particular event happening in the application code. The interface allows applications to specify event details such as username and other attributes needed to provide the context of the event being audited. ■ Audit Events and Configuration The Oracle Fusion Middleware Audit Framework provides a set of generic events for convenient mapping to application audit events. Some of these include common events such as authentication. The framework also allows applications to define application-specific events. These event definitions and configurations are implemented as part of the audit service in Oracle Platform Security Services. Configurations can be updated through Enterprise Manager UI and WLST command-line tool ■ The Audit Bus-stop