OAM Components and Topology

Configuring Single Sign-on 30-7 If you don’t already have Oracle HTTP Server OHS installed, install OHS 11.1.1.4.0 as described in Section 30.2.5, Installing and Configuring the Oracle HTTP Server. If you do have an existing installation, you will need to apply a patch to bring it up to OHS 11.1.1.4.0 as described in Applying the Latest Oracle Fusion Middleware Patch Set in the Oracle Fusion Middleware Patching Guide. After installing or patching OHS, continue by installing the WebGate as described in Section 30.2.3.1.3, Installing the WebGate on the Web Tier.

30.2.3.1.3 Installing the WebGate on the Web Tier

This section describes how to install and configure the OHS WebGate. 1. For Linux and Solaris operating systems, download and install the third-party GCC libraries to the same location where OHS is installed as described in Installing Third-Party GCC Libraries Linux and Solaris Operating Systems Only in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management. 2. Install the WebGate as described in the section on Installing Oracle HTTP Server 11g WebGate for Oracle Access Manager in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management. Use the same middleware home that was specified during OHS install. Note that during the installation you will need to point to the directory containing the GCC libraries downloaded in the previous step. 3. After installing Oracle HTTP Server 11g WebGate for Oracle Access Manager, move to the following directory under your Oracle Home for Webgate: For Unix operating systems: Webgate_HomewebgateohstoolsdeployWebGate For Windows operating systems: Webgate_Home\webgate\ohs\tools\deployWebGate 4. From the command line, run the following command to copy the required bits of agent from the Webgate_Home directory to the Webgate Instance location: For Unix operating systems: .deployWebgateInstance.sh -w Webgate_Instance_Directory -oh Webgate_Oracle_Home For Windows operating systems: deployWebgateInstance.bat -w Webgate_Instance_Directory -oh Webgate_Oracle_Home Where Webgate_Oracle_Home is the directory where you have installed Oracle HTTP Server WebGate and defined it as the Oracle Home for WebGate, as in the following example: MW_HOMEOracle_OAMWebGate1 Note: Ensure that your Oracle HTTP server is down while installing OHS WebGate, and restart it only after you register the WebGate agent as described in Section 30.2.3.1.4, Registering the WebGate Agent. 30-8 Oracle Fusion Middleware Administrators Guide for Oracle WebCenter The Webgate_Instance_Directory is the location of the Webgate Instance Home which should be the same as the Instance Home of Oracle HTTP Server, as in the following example: MW_HOMEOracle_WT1instancesinstance1configOHSohs1 Note that an Instance Home for Oracle HTTP Server is created after you configure the Oracle HTTP Server. This configuration should be performed after installing or patching to Oracle HTTP Server 11.1.1.4.0. 5. Run the following command to ensure that the LD_LIBRARY_PATH variable contains Oracle_Home_for_Oracle_HTTP_Serverlib: For Unix operating systems depending on the shell: export LD_LIBRARY_PATH=LD_LIBRARY_PATH:Oracle_Home_for_Oracle_HTTP_Serverlib For Windows operating systems: Add the Webgate_Installation_Directory\webgate\ohs\lib and Oracle_Home_for_Oracle_HTTP_Server \bin locations to the PATH environment variable. Add a semicolon ; followed by this path at the end of the entry for the PATH environment variable. 6. From your current working directory, move up one level: For Unix operating systems, move to: Webgate_Home webgateohstoolssetupInstallTools For Windows operating systems, move to: Webgate_Home \webgate\ohs\tools\EditHttpConf 7. From the command line, run the following command to copy the apache_webgate.template from the Webgate_Home directory to the WebGate Instance location renaming it to webgate.conf and update the httpd.conf file to add one line to include the name of webgate.conf file: For Unix operating systems: .EditHttpConf -w Webgate_Instance_Directory [-oh Webgate_Oracle_Home] [-o output_file ] For Windows operating systems: EditHttpConf.exe -w Webgate_Instance_Directory [-oh Webgate_Oracle_Home] [-o output_file] Where Webgate_Oracle_Home is the directory where you have installed Oracle HTTP Server WebGate and defined it as the Oracle Home for WebGate, as in the following example: MW_HOMEOracle_OAMWebGate1 Note: The -oh WebGate_Oracle_Home and -o output_file parameters are optional. Configuring Single Sign-on 30-9 The Webgate_Instance_Directory is the location of the Web Gate instance home which should be the same as the instance home of OHS, as in the following example: MW_HOMEOracle_WT1instancesinstance1configOHSohs1

30.2.3.1.4 Registering the WebGate Agent

After installing the WebGate on the Web Tier, you also need to register the WebGate agent. For more detailed information about registering the WebGate agent, see Getting Started with a New Oracle HTTP Server 11g Webgate Agent for Oracle Access Manager in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management. Follow the steps below to register the WebGate agent on the machine where OAM is installed: 1. Register the new Web Gate agent using the oamreg tool in inband mode. a. Change directories to RREG_Homeinput. b. Create a file named WebCenterOAM11gRequest.xml to use as an input parameter file to the oamreg tool. An example is shown below: ?xml version=1.0 encoding=UTF-8? -- Copyright c 2009, 2010, Oracle andor its affiliates. All rights reserved. NAME: OAM11GRequest_short.xml - Template for OAM 11G Agent Registration Request file Shorter version - Only mandatory values - Default values will be used for all other fields DESCRIPTION: Modify with specific values and pass file as input to the tool. -- OAM11GRegRequest serverAddresshttp:oamhost:oamadminserverportserverAddress hostIdentifierwebtierhost_webcenterhostIdentifier agentNamewebtierhost_webcenteragentName logOutUrls urloamssologout.htmlurl logOutUrls protectedResourcesList resourcewebcenteradfAuthenticationresource resourcewebcentercontentresource resourcewebcentercontent...resource resourceintegrationworklistappresource resourceintegrationworklistapp...resource resourceworkflowsdpmessagingsca-ui-worklistfacesadf.task-flowresour ce Note: Replace the contents within oamhost:oamadminserverport with the OAM host and administration server port, and webtierhost with your Web Tier host and port.