Click Sav Oracle Fusion Middleware Online Documentation Library

Additional Server Configuration 6-19

6.10.2 Configuring the CDC Profile as an Identity Provider

If Oracle Identity Federation is acting as an IdP, follow these steps to configure the CDC profile:

1. Log in to Oracle Enterprise Manager and navigate to the Oracle Identity

Federation instance.

2. Navigate to Administration, then Identity Provider.

3. In the Common tab, check Enable Common Domain and enter the following

properties: ■ Common Domain URL: The Oracle Identity Federation intro URL in the Common Domain where Oracle Identity Federation is listening: https:hostname_in_common_domain:sslportfedidpintro For example: https:mycorp.commondomain.com:4443fedidpintro ■ Name: The domain in which the cookie is written, for example,.commondomain.com. ■ Cookie Lifetime day: The lifetime in days of the cookie

6.10.3 Configuring the CDC Profile as a Service Provider

If Oracle Identity Federation is acting as a service provider, follow these steps to configure the CDC profile: 1. Log in to Fusion Middleware Control and navigate to the Oracle Identity Federation instance.

2. Navigate to Administration, then Service Provider.

3. In the Common tab, check Enable Common Domain Cookie Service, and enter

the following property: ■ Service URL - The Oracle Identity Federation introsso URL in the Common Domain where Oracle Identity Federation is listening: https:hostname_in_common_domain:sslportfedspintrosso For example: See Also: Section 5.3, Configuring Identity Providers - Common Properties Note: This URL must use HTTPS and the SSL port that you configured earlier. Note: The name of the domain must always start with a leading period .. See Also: Section 5.5, Configuring Service Providers 6-20 Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation https:mycorp.commondomain.com:4443fedspintrosso

6.10.4 Configuring Oracle Identity Federation to Display List of Trusted Providers in CDC

Follow these steps to configure Oracle Identity Federation to prompt the user with the list of trusted IdPs in the common domain cookie when an SSO flow is initiated without the provider ID of the target IdP 1. Configure the CDC profile as described in Section 6.10.3, Configuring the CDC Profile as a Service Provider 2. Use the Oracle Identity Federation WLST commands or MBeans to set the commondomainidpdiscenabled property in Config spglobal to true. Using the WLST Commands Use the command: setConfigPropertyspglobal, commondomainidpdiscenabled, true, BOOLEAN See Chapter 9, Oracle Identity Federation Command-Line Tools for more information. Using MBeans In the ConfigMXBean named spglobal, invoke the putProperty operation with the following arguments: ■ Name: commondomainidpdiscenabled ■ Value: true ■ Type: BOOLEAN See Appendix A, Oracle Identity Federation MBeans for more information.

6.11 Configuring the Identity Provider Discovery Service

Identity provider discovery is a service that selects an identity provider possibly through interaction with the user to use during SSO. While Oracle Identity Federation does not provide an identity provider discovery service, it provides support for using such a service to select an IdP, if one is not passed in the authentication request to the SP during SP-initiated SSO. For more information refer to the specifications at: http:docs.oasis-open.orgsecuritysamlPost2.0sstc-saml-idp-d iscovery-cs-01.pdf If acting as a service provider, Oracle Identity Federation can be configured so that if an SSO operation is initiated without the provider ID of the target IdP, the user is redirected to a custom page to select the identity provider with which to perform SSO. After the user selects an identity provider, the custom page resubmits the SSO request with the chosen IdP to Oracle Identity Federation. Follow these steps to configure IdP discovery: Note: This URL must use HTTPS and the SSL port you configured earlier.