9-4 Oracle Fusion Middleware Integration Guide for Oracle Access Manager
2.
Proceed to Configuring Oracle Access Manager for WNA
.
9.4 Configuring Oracle Access Manager for WNA
This section provides the following topics with steps you can follow:
■
Set Up the Kerberos Authentication Module in Oracle Access Manager
■
Set the Oracle Access Manager Authentication Scheme for Windows Native Authentication
■
Register Microsoft Active Directory as a User-Identity Data Store
9.4.1 Set Up the Kerberos Authentication Module in Oracle Access Manager
Before you can use WNA, you must define specific values for the Kerberos authentication module in the Oracle Access Manager policy configuration
oam-policy.xml file.
Users with valid Oracle Access Manager Administrator credentials can perform the following task to define specific values for the Kerberos authentication module in
Oracle Access Manager.
To set up the Kerberos Authentication Module
1. Locate the oam-config.xml file in the following path:
Middleware_Homeuser_ projectsdomainsIDMDomainconfigfmwconfigoam-config.xml
2. Make a backup copy of the oam-config.xml file and store it in another location
in case you need it later.
3. Edit the oam-config.xml file to define Kerberos module parameters and values.
Examples of these parameters include the keytab file containing pairs of Kerberos principals and encrypted keys, and the krb5.conf file which contains Kerberos
configuration information including the locations of KDCs. Note: The files are created at Kerberos installation and appear in the install directory. Edit the file as
follows:
authn-module name=Kerberos type=KERBEROS id=4 description=Kerberos Module
property value=u01apporacleinstallfmw11gMiddlewarewnahost_ name.keytab name=keytabfile
property value=HTTPhost_name.oracle.com name=principal property value=u01apporacleinstallfmw11gMiddlewarewnakrb5.conf
name=krbconfigfile authn-module
Here, host_name is the name of the Oracle Access Manager server host.
4. Save the file.
5. Proceed with
Set the Oracle Access Manager Authentication Scheme for Windows Native Authentication
.
Note: These instructions require hand-editing a configuration file.
You can also perform this task using the OAM Administration Console.
Configuring Oracle Access Manager to use Windows Native Authentication 9-5
9.4.2 Set the Oracle Access Manager Authentication Scheme for Windows Native Authentication
