Running the OAM Configuration Tool

Integration With Oracle Identity Management 10-11 5. Policies to protect and unprotect application specific URLs. This section covers the following topics: ■ Section 10.2.3.1, Collecting the Information for the OAM Configuration Tool ■ Section 10.2.3.2, Running the OAM Configuration Tool ■ Section 10.2.3.3, Updating the REST Policies ■ Section 10.2.3.4, Verifying Successful Creation of the Policy Domain and AccessGate ■ Section 10.2.3.5, Updating the Host Identifier ■ Section 10.2.3.6, Updating the WebGate Profile ■ Section 10.2.3.7, Adding Additional Access Servers ■ Section 10.2.3.8, Configure Delegated Form Authentication

10.2.3.1 Collecting the Information for the OAM Configuration Tool

The following information should be collected or prepared prior to running the OAM Configuration tool:

1. Password:

Create a secure password. This will be used as the password for the WebGate installation created later.

2. LDAP Host:

Enter the host name of the Directory Server or Load Balancer address in the case of an HAEnterprise Deployment configuration.

3. LDAP Port:

Enter the port of the Directory Server.

4. LDAP USER DN:

Enter the DN of the LDAP admin user. This is a value such as cn=orcladmin.

5. LDAP password:

Enter the password of the LDAP admin user.

6. oam_aa_host:

Enter the host name of an Oracle Access Manager from the Access Server Configuration.

7. oam_aa_port:

Enter the port of the Oracle Access Manager from the Access Server Configuration.

10.2.3.2 Running the OAM Configuration Tool

The OAM Configuration Tool resides in the ORACLE_HOMEmodules oracle.oamprovider_11.1.1 directory ORACLE_HOME will depend on which machine you are running this. The tool can be run from any machine with the required installation files. In this case, we run it from SOAHOST1. The OAM Configuration Tool should be run as follows all on a single command line: MW_HOME jrockit_160_versionbinjava -jar oamcfgtool.jar mode=CREATE app_domain=WebCenter_EDG protected_uris=URI_LIST public_uris=PUBLIC_URI_LIST app_agent_password=Password_to_be_provisioned_for_App_Agent ldap_host=OID.MYCOMPANY.COM ldap_port=389 ldap_userdn=cn=orcladmin ldap_userpassword=Password_of_LDAP_Admin_User oam_aaa_host=OAMHOST1 oam_aaa_port=OAMPORT1 10-12 Oracle Fusion Middleware Enterprise Deployment Guide for Oracle WebCenter The URI_LIST and PUBLIC_URI_LIST variables in the above command depend on the topology: ■ WebCenter only: URI_ LIST=webcenteradfAuthentication,webcentercontent,integrationworklist app,workflowsdpmessagingsca-ui-worklistfacesadf.task-flow,workflowW ebCenterWorklistDetailfacesadf.task-flow,workflowsdpmessagingsca-ui-wor klist,soa-infra,rssrssservlet,owc_discussionloginwithRedirect.jspa,owc_ discussionslogindefault.jspa,owc_discussionslogin.jspa,owc_ discussionsadmin,restapiresourceIndex,restapispaces,restapidiscussi ons,restapitags,restapitaggeditems,restapiactivities,restapiactivity graph,restapifeedback,restapipeople,restapimessageBoards,restapi searchresults,activitygraph-engines,wcpsapi,pageletadmin,authenticateWi thApplicationServer,em,console,adfAuthentication PUBLIC_URI_LIST=webcenter,owc_ discussions,rss,workflow,restapicmis,cs, ■ WebCenter and SOA: URI_ LIST=webcenteradfAuthentication,webcentercontent,integrationworklist app,workflowsdpmessagingsca-ui-worklistfacesadf.task-flow,workflowW ebCenterWorklistDetailfacesadf.task-flow,workflowsdpmessagingsca-ui-wor klist,soa-infra,rssrssservlet,owc_discussions,loginwithRedirect.jspa,owc_ discussionslogindefault.jspa,owc_discussionslogin.jspa,owc_ discussions,admin,restapiresourceIndex,restapispaces,restapidiscuss ions,restapitags,restapitaggeditems,restapiactivities,restapiactivity graph,restapifeedback,restapipeople,restapimessageBoards,restapi searchresults,activitygraph-engines,wcpsapi,pageletadmin,authenticateWi thApplicationServer,em,console,DefaultToDoTaskFlow,b2b,sdpmessaging userprefs-ui,adfAuthentication PUBLIC_URI_LIST=webcenter,owc_ discussions,rss,workflow,restapicmis,cs, If your command ran successfully, you should see the following output: Processed input parameters Initialized Global Configuration Successfully completed the Create operation Operation Summary: Policy Domain: WebCenter_EDG Host Identifier: WebCenter_EDG Access Gate ID: WebCenter_EDG_AG

10.2.3.3 Updating the REST Policies