I have observed a problem while using Form Based authentication for a resource protected by Oracle Access Manager. We have set Actions in Authentication Rule in the Policy Domain which are found to be not set in http headers. In addition, the authentication actions are getting executed if we use Basic Over LDAP instead of […]
Read MorePlease refer the post for more details why do we need to fetch the userid attribute value from a Cookie instead of Header Variable. Most of the integrations that we do with Oracle Access Manager expect user id to be passed to the target application to identify the user authenticated. The below code can be […]
Read MoreHi all, This post will cover an important caveat of Oracle Access Manager with Form Based authentication when there are multiple web servers in your architecture resulting into multiple redirections. Lets say the architecture has components WebServer1, WebServer2, WebServer3 and Oracle Access Manager. Lets assume WebServer1 is used as reverse proxy server, WebServer2 is where […]
Read MoreHi all, Today, I have faced a common error where WebGate installed on OHS 11g is not intercepting the HTTP requests and thought its worth sharing. So, I would like to write the root cause of our issue and other points for troubleshooting. The background of this is there is a custom portal application deployed […]
Read MoreHi all, We were installing the OHS WebGate and it failed at step while configuring the WebGate connecting to Access Server. We are able to telnet the access server port from webgate machine and it works fine. The oblog.log of WebGate shows the below error. The AccessGate is unable to contact any Access Servers.” raw_code^301 […]
Read MoreHi all, Today I have implemented Lost Password Management using Oracle Access Manager 10.1.4.3. The infrastructure I have is OAM 10.1.4.3, Sun DS 5.2 as User store and Policy Store. There is a web application deployed in OHS 11g protected with Form based authentication. When we install OHS 11g webgate, a folder /oamsso gets created […]
Read MoreHi all, I was trying to protect a web application using OAM form based authentication. When I access the protected resource, I was shown the login page and upon entering the correct login details, it displays the page as shown below. The error is : Oracle Access Manager Operation Error The credentials (userid=alex.nash Resource=/dummy.cgi RequesterIP=192.168.5.235 […]
Read MoreHi all, In my previous you would have seen the configuration for Form based authentication using Oracle Access Manager when application and login page resides in same server. What if the login page resides in Central location ? This is generally the recommended approach in real time scenarios because there might be several applications where […]
Read MoreHi all, Though form based authentication is OOTB configuration in Oracle Access Manager, we fumble sometimes with the form authentication scheme and its parameters, login page, action URL etc., So, I would like to bring those gotchas or keypoints to remember while configuring Form based authentication. There are two usecases here: 1. Assume both web […]
Read MoreError : Access Server you specified ins currently down. Pleas check your Access Server. Solution: This might happens if there is time difference between machines installed with policy manager/webpass/identity server and AccessServer. Oracle docs say the difference must be less than 75 secs. So be cautious when you are installing OAM components, the machines should […]
Read More