Exporting and importing of policies in OAM 11g

 

This post talks about the command used to export and importing of OAM 11g policies. OAM 11g provides this functionality through WLST scripting tool. This is the only possible approach to automatically export all policies from OAM 11g. The below steps are appropriate in linux env for exporting policies.

  1. Goto $ORACLE_HOME/common/bin.
  2. Run ./wlst.sh
  3. connect(‘weblogic’,’password’,’t3://weblogic_host:port’)
  4. exportPolicy(pathTempOAMPolicyFile,’/app/shared/home/tmweb/Oracle/Middleware_Dev2/oam_policies.xml’)

Refer the below screenshot for the output.

For importing policies into target OAM environment, follow the below steps:

  1. Goto $ORACLE_HOME/common/bin.
  2. Run ./wlst.sh
  3. connect(‘weblogic’,’password’,’t3://weblogic_host:port’)
  4. importPolicy(pathTempOAMPolicyFile,’/app/shared/home/tmweb/Oracle/Middleware_Dev2/oam_policies.xml’)

The exported policies xml file (oam_policies.xml in this case) contains the below data:

  1. Authentication schemes
  2. Host Identifiers
  3. Application domains: Resources, Authentication/Authorization policies etc.,

Once the policies are imported to target OAM server the application domains, authentication schemes, host identifiers will be created/updated. Please note that IAMSuiteAgent application domain will also gets imported into target OAM server and this does not harm the OAM setup.

The same policies file can be imported multiple times without any issues.

Hope this post helps.

About the Author Mahendra

I am engulfed in Oracle Identity & Access Management domain. I have expertise on providing the optimized solutions for user provisioning, web access management, Single Sign-On and federation capabilities etc., I am also well versed with complex integrations within Identity Management and other product domains. I have expertise on building demos and implementation experience on products Oracle Access Manager, Oracle Adaptive Access Manager, Oracle Entitlement Server, Oracle Virtual Directory, Oracle Internet Directory etc., Look @ my blog: http://talkidentity.blogspot.com

Leave a Comment:

23 comments
Add Your Reply