Oracle Adaptive Access Manager 10g R3 – Released, New Features

Oracle on 20th Oct. released new version (10g R3 /10.1.4.5) of Oracle Adaptive Access Manager  (Why OAAM version 10.1.4.5 is called as OAAM 10g R3 ?)

A. Oracle Adaptive Access Manager (OAAM) is product for web access real-time fraud detection and multifactor online authentication.

Main Functionality of OAAM is to protect against
Phishing
Pharming
Trojans
key logging
Proxy Attacks
– Insider Threat

B. OAAM includes two core components, Adaptive Strong Authenticator and Adaptive Risk Manager.

C. Adaptive Risk Manager works in two modes, Online (Configure and monitor system in real time) and Offline (Analyze and evaluates existing transaction)

.

Here is list of some of new features introduced in Oracle Adaptive Access Manager 10g R3 (10.1.4.5)

1. Auto Learning – This is new feature in Adaptive Risk Manager component of Oracle Adaptive Access Manager (other component is Adaptive Strong Authenticator).
                          Administrators first define parameters to collect behaviour pattern of user like at what time, from which place, what data, what kind of operation.. user usually does on system. Adaptive Risk Manager then automatically record user behaviour over time so that gathered data can be used to evaluate risk.

2. Device Registration – Using this feature, users can flag device they are using (computer, mobile, PDA..) as safe device and then configure additional rule to challenges (secret question) user if they are not coming from one of registered device. This feature is turned off by default which administrator can enable from admin screens.

3. Rule Template Editor – Allows users to create and edit rule templates without having to go to the XML. User with no XML knowledge can write rules

4. Enumeration Editor Enumeration and their elements and properties can be edited . New enumerations can also be added to customize adaptive access manager.

5. New Languages for Globalization – New languages added for globalization support
Installation of Oracle Adaptive Access Manager on Linux using Weblogic Server (Application Server) and Oracle Database (Repository) coming soon …

About the Author Atul Kumar

Oracle ACE, Author, Speaker and Founder of K21 Technologies & K21 Academy : Oracle Gold Partner specialising in Design, Implement, and Trainings.

follow me on:

Leave a Comment:

6 comments
vj says December 3, 2008

We are trying to integrate OAAM with citrix.Do you have any idea about it, Is it feasible.Are there any docs available on it?

Thanks

Reply
Atul Kumar says December 3, 2008

VJ as OAAM comes with two subcomponents strong authenticator and adaptive risk manager (online or offline) how you are planning to implement.

There is no straight doc with citrix but implementation is not difficult either.

Check with architect about design solution and then implement accordignly.

Reply
vj says December 4, 2008

Hi Atul,
We are implementing offline first for adaptive risk manager and we are working on POC.But we are not getting any idea or documentation on it.I am the one who need to architect and implement.Do u have any idea abt how the flow will be for OAAM and citrix??

Reply
Hildebrando says August 14, 2009

Hi Atul.

I’m trying to integrate one application with OAAM.
But i’m really confused about the UIO instalation option.

The SA have a communication with the database of my application?
How can I pass the data of my app to SA authentication?

I have a dummy password in the bharosa_client.properties, but when i remove this dummy password, i’m unable to access the SA.
Where the OAAM request the userName and password for authentication?

How can i configure, in production enviroment, the images and phases for KeyPad, pinPad, questionPad, etc…

thanks

Reply
anubhuti says September 30, 2009

Hi Atul,

We are currently doing a study of OAAM features from deployment point of view? Can you please tell if there are any services or features of OAAM specifically aimed at mobile devices? If yes, what are they? Also if there are any features that can be integrated with mobile devices.

thanks
Anubhuti

Reply
ktull says July 7, 2010

Can you provide any documentation on setting up Citrix and OAM. Oracle support wasn’t able to help. We even have an Oracle OAM person that helped us implement it to the rest of the environment but him nor his colleges have set it up with Citrix. Can you give us some detail or direction on this comment? I would really appreciate it.

“There is no straight doc with citrix but implementation is not difficult either.”

Reply
Add Your Reply