{"id":1647,"date":"2010-04-25T18:15:39","date_gmt":"2010-04-25T22:15:39","guid":{"rendered":"http:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/"},"modified":"2010-04-25T18:15:39","modified_gmt":"2010-04-25T22:15:39","slug":"introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/","title":{"rendered":"Introduction to Oracle Access manager : Identity and Access System – WebPass , Webgate, Policy Manager"},"content":{"rendered":"

This post covers overview of Oracle Access Manager<\/strong> (Oracle’s main Single Sign-On<\/strong> solution for Oracle Fusion Middleware 11g <\/a>) which is one of main component from Oracle’s Identity Management stack<\/a>\u00a0<\/p>\n

.<\/p>\n

1.<\/strong> O<\/strong>racle A<\/strong>ccess M<\/strong>anager (OAM)\u00a0mainly consists of two main systems<\/strong><\/p>\n

a) Identity System <\/strong>– to create\/manage users & groups, self registration and password management.\u00a0
\nb) Access System<\/strong> – to configure single\/multi domain SSO solution for Web and non-Web based applications, web pages and other resources. To configure access management (authentication and authorization) to various type of resources (applications – web or non-web based, web pages)<\/p>\n

2.<\/strong> It is possible to implement only Identity System<\/strong> or only Access System<\/strong>or both components of Access Manager.<\/p>\n

3.<\/strong> Using Access Manager’s Identity System <\/strong>you can –
\ni) <\/strong>Create, remove or manage identity information related to users or groups.
\nii)<\/strong> provide delegated administration and self service on identity (users\/groups\/resources)
\niii)<\/strong>use workflow engine to automate requests and approvals related to identity data
\niv)<\/strong>Password Management – Define multiple password policy, change passwords, lost password management…
\nv)<\/strong> configure auditing and reporting on identity events<\/p>\n

.<\/p>\n

A. Oracle Access Manager – Identity System<\/u><\/strong>\u00a0<\/p>\n

1.<\/strong> Oracle’s Access Manager Identity system mainly contains four applications<\/strong> to provide above functionality (mentioned in step 3 above)
\ni) User Manager <\/strong>– Application to add, remove or manage users.
\nii) Group Manager <\/strong>– Application to add, delete, manage groups (static, dynamic, nested). use this application to Add\/remove users from group or search members in group.
\niii) Organization Manager<\/strong>– to manage system rules, access privileges and workflows for entire Organizations.
\niv) Identity System Console<\/strong> – to create administrators and delegated administrator for identity system and setup identity system application including object classes and attributes.<\/p>\n

.<\/p>\n

\"oracle<\/a>
\n.<\/p>\n

2.<\/strong> Oracle Access Manager’s Identity System has two sub <\/strong>components
\ni) Identity Server<\/strong> – stand-alone server process that communicates with Directory Server (AD, OID, Sun Directory server..)
\nii) WebPass <\/strong>– is webserver plug-in that communicates between webserver (Apache, OHS, IIS..) and Identity Server.<\/p>\n

– <\/strong>Identity Server is to manage information about users, groups, and other objects stored in Directory Server.
\n– <\/strong>There can be one or more identity server in Access Manager solution.
\n– <\/strong>WebPass receives requests from users and forwards to identity server. After processing that request by identity server, WebPass receives reply from Identity Server and passes it to Webserver.
\n– <\/strong>WebPass can connect to one to more Identity Server
\n– <\/strong>Communication between WebPass and Identity Server is via Oracle’s proprietary protocol i.e. “Oracle Identity Protocol”<\/strong>
\n– <\/strong>Communication between Identity Server and\u00a0Directory\u00a0server is using LDAP<\/strong> (Light weight Directory Access Protocol)<\/p>\n

.<\/p>\n

B. Oracle Access Manager – Access System<\/u><\/strong><\/p>\n

.
\n\"Oracle<\/a>
\n.<\/p>\n

1. <\/strong>Consists of following four subcomponents<\/p>\n

i) Access Server<\/strong>– provides dynamic policy evaluation service for web-based and non-Web resources and applications. Access server receives request from webgate or custom AccessGate, Access Server then queries LDAP server for authentication , authorization and auditing rules.<\/p>\n

ii) WebGate <\/strong>– is a webserver plug-in that intercepts HTTP requests from users for web resource and forward them to access server for authentication and authorization.<\/p>\n

iii) Policy Manager<\/strong>– Administrators use policy manager to define resources to be protected by Access System. Policy Manager is implemented on WebServer with WebPass and Communicates with directory server (OID, AD or iPlanet) to write policy data. Policy Manager Communicates with Access Server (using Oracle Access Protocol) to update access server for any policy modification.
\n– Policy Manager contains following modules
\na) Authentication Module<\/strong>
\nb) Authorization Module
\nc) Auditing Module<\/strong>
\nd) Session Management Module<\/strong><\/p>\n

iv) Access System Console<\/strong> – is used to configure access server and has following tabs – System Configuration<\/strong>, System Management<\/strong> and Access System Configuration<\/strong><\/p>\n

i) System Configuration<\/strong> – To define
\na) Master and Delegated Access Administrator
\nb) Resource type, Policy domain, authentication and authorization schemes<\/p>\n

ii) System Management <\/strong>– to manage diagnostics, reports<\/p>\n

iii) Access System Configuration<\/strong> –
\na) To view, add, modify or delete Access Server, Access Gate or Access Server\u00a0cluster.
\nb) To view and modify authentication\/authorization parameters ….<\/p>\n

.<\/p>\n

– <\/strong>There can be one or more\u00a0Access server<\/strong> in Access Manager solution.
\n– WebGate <\/strong>receives requests from users and forwards to\u00a0Access server;<\/strong>After processing that request by\u00a0Access Server, WebGate receives reply from\u00a0Access Server<\/strong>and passes it to Webserver.
\n– WebGate<\/strong> can connect to one\u00a0or more\u00a0Access Server
\n– <\/strong>Communication between WebGate<\/strong> and\u00a0Access Server<\/strong> is via Oracle’s proprietary protocol i.e. “Oracle\u00a0Access Protocol”<\/strong>
\n– <\/strong>Communication between Access\u00a0Server<\/strong> and\u00a0Directory\u00a0Server<\/strong> is using LDAP<\/strong> (Light weight Directory Access Protocol)<\/p>\n","protected":false},"excerpt":{"rendered":"

This post covers overview of Oracle Access Manager (Oracle’s main Single Sign-On solution for Oracle Fusion Middleware 11g ) which […]<\/p>\n","protected":false},"author":115,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[1],"tags":[],"class_list":["post-1647","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\nIntroduction to Oracle Access manager : Identity and Access System - WebPass , Webgate, Policy Manager -<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Introduction to Oracle Access manager : Identity and Access System - WebPass , Webgate, Policy Manager -\" \/>\n<meta property=\"og:description\" content=\"This post covers overview of Oracle Access Manager (Oracle’s main Single Sign-On solution for Oracle Fusion Middleware 11g ) which […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/\" \/>\n<meta property=\"article:published_time\" content=\"2010-04-25T22:15:39+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/04\/oam_1.jpg\" \/>\n<meta name=\"author\" content=\"Masroof Ahmad\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Masroof Ahmad\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/\",\"url\":\"https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/\",\"name\":\"Introduction to Oracle Access manager : Identity and Access System - WebPass , Webgate, Policy Manager -\",\"isPartOf\":{\"@id\":\"https:\/\/onlineappsdba.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/#primaryimage\"},\"thumbnailUrl\":\"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/04\/oam_1.jpg\",\"datePublished\":\"2010-04-25T22:15:39+00:00\",\"author\":{\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb\"},\"breadcrumb\":{\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/#primaryimage\",\"url\":\"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/04\/oam_1.jpg\",\"contentUrl\":\"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/04\/oam_1.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/onlineappsdba.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Introduction to Oracle Access manager : Identity and Access System – WebPass , Webgate, Policy Manager\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/onlineappsdba.com\/#website\",\"url\":\"https:\/\/onlineappsdba.com\/\",\"name\":\"\",\"description\":\"Oracle Implementation & Training Experts\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/onlineappsdba.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb\",\"name\":\"Masroof Ahmad\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g\",\"caption\":\"Masroof Ahmad\"},\"url\":\"https:\/\/onlineappsdba.com\/index.php\/author\/masroof\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Introduction to Oracle Access manager : Identity and Access System - WebPass , Webgate, Policy Manager -","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/","og_locale":"en_US","og_type":"article","og_title":"Introduction to Oracle Access manager : Identity and Access System - WebPass , Webgate, Policy Manager -","og_description":"This post covers overview of Oracle Access Manager (Oracle’s main Single Sign-On solution for Oracle Fusion Middleware 11g ) which […]","og_url":"https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/","article_published_time":"2010-04-25T22:15:39+00:00","og_image":[{"url":"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/04\/oam_1.jpg","type":"","width":"","height":""}],"author":"Masroof Ahmad","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Masroof Ahmad","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/","url":"https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/","name":"Introduction to Oracle Access manager : Identity and Access System - WebPass , Webgate, Policy Manager -","isPartOf":{"@id":"https:\/\/onlineappsdba.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/#primaryimage"},"image":{"@id":"https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/#primaryimage"},"thumbnailUrl":"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/04\/oam_1.jpg","datePublished":"2010-04-25T22:15:39+00:00","author":{"@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb"},"breadcrumb":{"@id":"https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/#primaryimage","url":"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/04\/oam_1.jpg","contentUrl":"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/04\/oam_1.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/onlineappsdba.com\/index.php\/2010\/04\/25\/introduction-to-oracle-access-manager-identity-and-access-system-webpass-webgate-policy-manager\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/onlineappsdba.com\/"},{"@type":"ListItem","position":2,"name":"Introduction to Oracle Access manager : Identity and Access System – WebPass , Webgate, Policy Manager"}]},{"@type":"WebSite","@id":"https:\/\/onlineappsdba.com\/#website","url":"https:\/\/onlineappsdba.com\/","name":"","description":"Oracle Implementation & Training Experts","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/onlineappsdba.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb","name":"Masroof Ahmad","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g","caption":"Masroof Ahmad"},"url":"https:\/\/onlineappsdba.com\/index.php\/author\/masroof\/"}]}},"_links":{"self":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts\/1647","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/users\/115"}],"replies":[{"embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/comments?post=1647"}],"version-history":[{"count":0,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts\/1647\/revisions"}],"wp:attachment":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/media?parent=1647"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/categories?post=1647"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/tags?post=1647"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}