I have worked on a OAM 11g requirement that needs to do authentication based on only username. There is a OOTB authentication scheme available in OAM 11g called LDAPNoPasswordValidationScheme. This authentication scheme uses the Authentication module LDAPNoPasswordAuthModule and that in turn points to Embedded Weblogic identity store by default.
I have to perform all this authentication using OAM 11g API. So I have created a dummy resource to test this. Pointed the LDAPNoPasswordAuthModule to OVD identity store as we are using OVD.
Used the below code snippet to test this and it worked fine.
ResourceRequest req = new ResourceRequest(“http”, “http://host:port/dummy”,”GET”);
Hashtable credentials = new Hashtable();
credentials.put(“userid”, “mahendra”);
session = new UserSession(req,credentials);
String sessionToken=session.getSessionToken();
The Resource http://host:port/dummy is protected using LDAPNoPasswordValidationScheme and thus session token is created with just username.





Good hands-on exercises (installation, patching, cloning), very experienced trainer worth every penny 
2 users commented in " Username based authentication using OAM 11g "
Follow-up comment rss or Leave a TrackbackWhy would you ever want to protect a resource with just a username!? I don’t get the requirement for something like this?
How would you protect a resource with say, a username and some secret attribute (not related to secret questions and answers) that is stored in LDAP that only the user knows the answer to? Would you use just form-based auth?
Steve,
There was a requirement to protect a less secured resource (not anonymous authentication). So here we just want to verify if the username already existing in LDAP.
-Mahendra
Leave A Reply