Category Archives for security
SAML & Virtual User : OPSS Virtual User oracle.security.jps.assert.saml.identity
A well written post by Andre Correa on Fusion Middleware Security Blog says “One of the main strengths of SAML is the ability to communicate identity information across security domains that do not necessarily share the same user base. In other words, the authenticated user in one security domain does not necessarily exist in the […]
Read MoreFirewall timings management in access environment
Hi All, Today I would like to cover firewall timings management in access environment. Here, we have OAM 10g , two SSO servers(OID/OSSO 10g-10.1.4.3.0), oracle portal 11g, OBIZ, SOA, Seibel and etc. Integration details, Portal having own SSO server(OID/OSSO 10g-10.1.4.3.0) and portal application registered as a partner application in portal OSSO. Portal OSSO server is […]
Read More“oamDS”: ORA-28001: The Password Has Expired
Recently i come across an issue where R12 E-Business Users which was integrated with OAM 11g for SSO were not able to login.They were getting error message as shown below: From first look of redirection URL in browser, it appears that it was crossing the OAM authentication process and it was the application which is […]
Read MorePopup the system logged user name in login page textbox while accessing the sso application
In this post I like to cover how to get the system logged user name and how to display the user name in textbox(in login page) while accessing the application. Problem Description: The architecture has OAS 10.1.4.3, OAM 10.1.4.3, OID version is 10.1.4.3, and Active server. OID is using for SSO user’s store. Active server is using for […]
Read MoreHow to prevent users from cookie reply attacks, especially reading cookie contents from Java Script?
Today, I read a small note on OAM encrypted cookie and I thought to share it. Everyone is concerned about the security when they are accessing banking or any other secured applications though it is surrounded by Oracle Access Manager. Most often the problem arises with Cookie Reply attacks and it happens to be in […]
Read MoreIIS Web agent 4.8 Installation and Configuration for RSA Access Manager .
Environment: Windows 2003 Ent server with IIS server, RSA Access Manager 6.1 Website Setup on IIS: Setup web site ‘HelloWorld’ on port 80 using following instructions. 1. From the Start menu, and click Run. 2. In the Open box, type inetmgr, and click OK. 3. In IIS Manager, expand the local computer, right-click the Web […]
Read MoreBlog I follow : FusionSecurity from Oracle A-Team
I have 50+ blogs in my google reader which I follow so I have decided to share them. I am currently working on Oracle Identity & Access Management so first one in my list on Fusion Middleware Security is fusionSecurity.blogspot.com This blog covers some of most interesting problems and Architecture decisions around Fusion Middleware Security products like OES, OAM, […]
Read MoreThe webpage cannot be found : OAM WebGate issue
I had been hitting my head against the wall for 4 days troubleshooting a production system issue. There are 2 Oracle HTTP Servers in two different machines which are clustered and with a OAM WebGate installed on each of the servers. Suddenly, the OHS console was not accessible using server 1 hostname, however it was […]
Read MoreInstalling Oracle Identity Management (OIM & OAM) 11g R1 PS2 (11.1.1.3) : High Level Steps
Oracle on 21st July, released Identity Management 11gR1 for OAM, OIM, OAAM & OIN (new component introduced in 11gR1) . This post covers very high level steps to install and configure OIM & OAM 11g (detailed step by step instructions coming soon…) For those who are new to Oracle Identity Management, check this post here for list […]
Read More#OracleIdM 11g webinar : Is this for OAM (Oracle Access Manager) & OIM (Oracle Identity Manager) 11g ?
If you follow Mark Wilcox’s blog here you must have noticed OracleIdM 11g webinar on 21st July where Oracle is going to show rest of the 11g Identity Management (My guess is on Oracle Identity Manager (OIM) which currently on version 9.1.X and Oracle Access Manager (OAM) which is currently on version 10.1.4.3) To register for this webinar click here Just to give you brief overview of […]
Read More