All posts by Mahendra
Fetch userid from custom cookie from HTTP session: Oracle Access Manager
Please refer the post for more details why do we need to fetch the userid attribute value from a Cookie instead of Header Variable. Most of the integrations that we do with Oracle Access Manager expect user id to be passed to the target application to identify the user authenticated. The below code can be […]
Read MoreHeader variables not set in IE browser: Oracle Access Manager
Hi all, This post will cover an important caveat of Oracle Access Manager with Form Based authentication when there are multiple web servers in your architecture resulting into multiple redirections. Lets say the architecture has components WebServer1, WebServer2, WebServer3 and Oracle Access Manager. Lets assume WebServer1 is used as reverse proxy server, WebServer2 is where […]
Read MoreOAM WebGate not intercepting requests: Troubleshooting Tips
Hi all, Today, I have faced a common error where WebGate installed on OHS 11g is not intercepting the HTTP requests and thought its worth sharing. So, I would like to write the root cause of our issue and other points for troubleshooting. The background of this is there is a custom portal application deployed […]
Read More“Failure to connect to Access Server” while installing a WebGate.
Hi all, We were installing the OHS WebGate and it failed at step while configuring the WebGate connecting to Access Server. We are able to telnet the access server port from webgate machine and it works fine. The oblog.log of WebGate shows the below error. The AccessGate is unable to contact any Access Servers.” raw_code^301 […]
Read MoreDAE.LOGON_DENIED error while logging into OIM Client
Today I have faced an issue while logging into to OIM Client and thought worth sharing it. The OIM Server is installed in Oracle Application Server a remotely. Now, I have installed Client specifying the Application Server as OAS and it took RMI port automatically. While logging into OIM Client, it threw me the below […]
Read MoreForgot password management using Oracle Access Manager
Hi all, Today I have implemented Lost Password Management using Oracle Access Manager 10.1.4.3. The infrastructure I have is OAM 10.1.4.3, Sun DS 5.2 as User store and Policy Store. There is a web application deployed in OHS 11g protected with Form based authentication. When we install OHS 11g webgate, a folder /oamsso gets created […]
Read MoreOracle Access Manager Operation Error: Form based authentication
Hi all, I was trying to protect a web application using OAM form based authentication. When I access the protected resource, I was shown the login page and upon entering the correct login details, it displays the page as shown below. The error is : Oracle Access Manager Operation Error The credentials (userid=alex.nash Resource=/dummy.cgi RequesterIP=192.168.5.235 […]
Read MoreForm based authentication using Oracle Access Manager when login page resides in Central location
Hi all, In my previous you would have seen the configuration for Form based authentication using Oracle Access Manager when application and login page resides in same server. What if the login page resides in Central location ? This is generally the recommended approach in real time scenarios because there might be several applications where […]
Read MoreForm based authentication using Oracle Access Manager
Hi all, Though form based authentication is OOTB configuration in Oracle Access Manager, we fumble sometimes with the form authentication scheme and its parameters, login page, action URL etc., So, I would like to bring those gotchas or keypoints to remember while configuring Form based authentication. There are two usecases here: 1. Assume both web […]
Read MoreProtecting applications deployed in Tomcat webserver using Oracle Access Manager
Hi all, This post will bring out some of the solution proposal aspects and how to protect applications deployed in Tomcat webserver using Oracle Access Manager. This can be application to applications deployed in any webserver which Oracle does not provide Webgate out of the box. The scenario is that there are web applications deployed […]
Read More