Introduction to Single Sign-on

30-6 Oracle Fusion Middleware Administrators Guide for Oracle WebCenter

30.2.3 Installing and Configuring OAM

This section describes how to install and configure either OAM 11g or OAM 10g, the recommended single sign-on solutions for WebCenter installations. This section includes the following subsections: ■ Section 30.2.3.1, Installing and Configuring OAM 11g ■ Section 30.2.3.2, Installing and Configuring OAM 10g

30.2.3.1 Installing and Configuring OAM 11g

This section describes how to install and configure OAM 11g, and includes the following subsections: ■ Section 30.2.3.1.1, Installing and Configuring OAM 11g ■ Section 30.2.3.1.2, Installing and Configuring the Oracle HTTP Server ■ Section 30.2.3.1.3, Installing the WebGate on the Web Tier ■ Section 30.2.3.1.4, Registering the WebGate Agent

30.2.3.1.1 Installing and Configuring OAM 11g

Install Oracle Access Manager OAM as described in Installing the Oracle Identity Management 11g Software in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management. Ideally, OAM and all the applications that participate in single sign-on should share the same identity store. By default, OAM uses the embedded LDAP identity store. To configure OAM to use an external identity store such as OID, see Section 28.1, Reassociating the Identity Store with an External LDAP Server. Continue by configuring Oracle Access Manager in a WebLogic administration domain as described in Configuring Oracle Access Manager OAM in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management.

30.2.3.1.2 Installing and Configuring the Oracle HTTP Server

4.c Configure the Worklist service for SSO 4.d Configure OAM for RSS feeds using external readers 4.e Configure the WLS Administration Console and Enterprise Manager for OAM 11g or OAM 10g 4.f Configure the Oracle Content Server for OAM 4.g Restrict access using connection filters 5. Test your OAM installation Note: Installing OAM should be performed only after youve installed Oracle WebCenter described in the Oracle Fusion Middleware Installation Guide for Oracle WebCenter and any other components required for your environment. You should also have configured and tested any required connections. Table 30–1 Cont. Configuring Single Sign-on for WebCenter Using OAM Actor Task Sub-task Notes Configuring Single Sign-on 30-7 If you don’t already have Oracle HTTP Server OHS installed, install OHS 11.1.1.4.0 as described in Section 30.2.5, Installing and Configuring the Oracle HTTP Server. If you do have an existing installation, you will need to apply a patch to bring it up to OHS 11.1.1.4.0 as described in Applying the Latest Oracle Fusion Middleware Patch Set in the Oracle Fusion Middleware Patching Guide. After installing or patching OHS, continue by installing the WebGate as described in Section 30.2.3.1.3, Installing the WebGate on the Web Tier.

30.2.3.1.3 Installing the WebGate on the Web Tier

This section describes how to install and configure the OHS WebGate. 1. For Linux and Solaris operating systems, download and install the third-party GCC libraries to the same location where OHS is installed as described in Installing Third-Party GCC Libraries Linux and Solaris Operating Systems Only in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management. 2. Install the WebGate as described in the section on Installing Oracle HTTP Server 11g WebGate for Oracle Access Manager in the Oracle Fusion Middleware Installation Guide for Oracle Identity Management. Use the same middleware home that was specified during OHS install. Note that during the installation you will need to point to the directory containing the GCC libraries downloaded in the previous step. 3. After installing Oracle HTTP Server 11g WebGate for Oracle Access Manager, move to the following directory under your Oracle Home for Webgate: For Unix operating systems: Webgate_HomewebgateohstoolsdeployWebGate For Windows operating systems: Webgate_Home\webgate\ohs\tools\deployWebGate 4. From the command line, run the following command to copy the required bits of agent from the Webgate_Home directory to the Webgate Instance location: For Unix operating systems: .deployWebgateInstance.sh -w Webgate_Instance_Directory -oh Webgate_Oracle_Home For Windows operating systems: deployWebgateInstance.bat -w Webgate_Instance_Directory -oh Webgate_Oracle_Home Where Webgate_Oracle_Home is the directory where you have installed Oracle HTTP Server WebGate and defined it as the Oracle Home for WebGate, as in the following example: MW_HOMEOracle_OAMWebGate1 Note: Ensure that your Oracle HTTP server is down while installing OHS WebGate, and restart it only after you register the WebGate agent as described in Section 30.2.3.1.4, Registering the WebGate Agent.