{"id":1813,"date":"2010-06-01T12:02:48","date_gmt":"2010-06-01T16:02:48","guid":{"rendered":"http:\/\/onlineappsdba.com\/index.php\/2010\/06\/01\/oracle-identity-management-products-oid-ovd-oam-oim-orm-owsm-oif-esso-oes-oaam\/"},"modified":"2017-12-08T07:57:15","modified_gmt":"2017-12-08T11:57:15","slug":"oracle-identity-management-products-oid-ovd-oam-oim-orm-owsm-oif-esso-oes-oaam","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2010\/06\/01\/oracle-identity-management-products-oid-ovd-oam-oim-orm-owsm-oif-esso-oes-oaam\/","title":{"rendered":"Oracle Identity Management Products – OID, OVD, OAM, OIM, ORM, OWSM, OIF, eSSO, OES, OAAM"},"content":{"rendered":"

Oracle Identity Management<\/a>\u00a0 is Fusion Middleware<\/strong> Component which covers following Identity<\/strong> & Access Management<\/strong> software including Directory Server<\/strong>.<\/p>\n

1. Oracle Access Manager (OAM)<\/strong> : Identity and Access Management product acquired from Oblix <\/strong>(Oblix COREid Access & Identity)\u00a0more here here<\/a>\u00a0<\/strong><\/p>\n

2. Oracle Identity Manager (OIM)<\/strong>\u00a0: User Provisioning<\/strong> product acquired from Thor<\/strong> more here<\/a><\/p>\n

3. Oracle Role Manager (ORM)\u00a0<\/strong>: Enterprise role management<\/strong> product acquired from Bridgestream<\/strong> more here<\/a><\/p>\n

4.<\/strong> Oracle Web Services Manager (OWSM)<\/strong> : product to protect Web Services acquired from Oblix<\/strong>(Oblix COREsv) more here<\/a><\/p>\n

5. Oracle Identity Federation (OIF)<\/strong>: Broswer based cross domain SSO solution , combination of product acquired from Oblix<\/strong>(SHAREid) and Phaos<\/strong><\/p>\n

6. Oracle Enterprise Single Sign-On (eSSO)<\/strong> : Unified authentication and Single Sign-On to thin- and thick-client applications with no modification to existing applications. More here<\/a><\/p>\n

7. Oracle Entitlements Server (OES)<\/strong> :\u00a0\u00a0fine-grained authorization software acquired from BEA<\/strong>(Aqualogic Entitlement Server). More here<\/a><\/p>\n

8. Oracle Adaptive Access Manager (OAAM)<\/strong>: real-time fraud prevention and multi-factor authentication acquired from Bharosa<\/strong> . More here here<\/a>\u00a0and here<\/a><\/p>\n

9. Oracle Platform Security Services (OPSS)<\/strong>: Security Framework for Java applications and part of Oracle Fusion Middleware 11g. OPSS is self-contained, portable framework that runs on Oracle WebLogic Server.<\/p>\n

10. Identity Governance Framework (IGF) <\/strong>: software to control how identity-related information is used, stored and propagated between applications.<\/p>\n

11. Oracle Information Rights Management (IRM)<\/strong> : secures and tracks sensitive digital information everywhere it is stored and used, More here<\/a><\/p>\n

12. Oracle Identity Analytics (OIA)<\/strong> : Identity Intelligence product acquired from Sun<\/strong> (Sun Role Manager) more here<\/a><\/p>\n

13. Oracle Single Sign-On (OSSO)<\/strong> : In-house developed web single sign-on product, required by Oracle 10g\/11g Portal. Oracle Access Manager’s (OAM) single sign-on solution is recommended web single sign-on product.<\/span><\/p>\n

Directory Services
\n<\/u>.
\n<\/u>14. Oracle Internet Directory (OID)<\/strong> : LDAP compliant directory server more here<\/a>\u00a0 and here<\/a><\/p>\n

15. Oracle Virtual Directory (OVD)<\/strong>: provides a single standard interface to access identity data from multiple directory servers like OID, iPlanet, Active Directory or\u00a0Databases (Relational databases)<\/p>\n

.<\/p>\n

.<\/p>\n

Access Management Software<\/u><\/strong><\/p>\n

1. Oracle Access Manager (OAM)
\n2. Oracle Entitlement Server (OES)
\n3. Oracle Adaptive Access Manager (OAAM)
\n4. Oracle Information Rights Management (IRM)
\n5. Oracle identity Federation (OIF)
\n6. Oracle Single Sign-On (OSSO)<\/p>\n

.
\nIdentity & Access Management Software
\n<\/u><\/strong>1. Oracle Access Manager (OAM)
\n2. Oracle Entitlement Server (OES)
\n3. Oracle\u00a0Identity Manager (OIM)
\n4. Oracle Internet Directory\u00a0(OID)
\n5. Oracle\u00a0Virtual Directory\u00a0(OVD)<\/p>\n

.<\/p>\n

Acronyms related to Identity Management components<\/u><\/strong><\/p>\n

OIM – Oracle Identity Manager
\nORM – Oracle Role Manager
\nOAM – Oracle Access Manager
\nOWSM – Oracle Web Services Manager
\nOIF – Oracle Identity Federation
\neSSO – enterprise Single Sign-On
\nOES – Oracle Entitlement Server
\nOAAM – Oracle Adaptive Access Manager
\nODS – Oracle Directory Services
\nOPSS – Oracle Platform Security Services
\nIGF – Identity Governance Framework
\nIRM – Information Rights Management
\nGRC – Governance Rick and Compliance platform
\nOID – Oracle Internet Directory
\nOVD – Oracle Virtual Directory
\nXACML – Extensible Access Control Markup Language
\nAAPML – Attribute Authority Policy Markup Language
\nSOAP – Simple Object Access Protocol
\nWSDL – Web Services Description Language
\nCARML – Client Attribute Markup Language
\nCSF – Credential Store Framework
\nOSDT – Oracle Security Developer Tools
\nJPS – Java Platform Security
\nSSPI – Security Services Provider Interface
\nJAZN – Java AuthoriZatioN
\nRBAC – Role Based Access Control
\nJACC – Java Authorization Contract for Containers
\nJAAS – Java Authentication and Authorization Service
\nOPSS – Oracle Platform Security Services
\nEUS – Enterprise User Security
\nDIP – Directory Integration Platform
\nLDAP – Lightweight Directory Access Protocol
\nSAML – Security Assertion Markup Language
\nASA – Adaptive Strong Authentication
\nARM – Adaptive Risk Management
\nSPML – Service Provisioning Markup Language
\nPSO – Provisioning Services Object.<\/p>\n

OAM FREE Interview Questions:\u00a0<\/strong><\/p>\n

Q: Describe the Architecture of OAM 11g?<\/strong>
\nA:<\/strong> The Oracle Access Manager resides on the Oracle WebLogic Administration Server (known as AdminServer). WebLogic Managed Servers hosting OAM runtime instances are known as OAM Servers. OAM 11g is a J2EE application.<\/p>\n

Following Components are involved in OAM
\n1. Webgate
\n2. OAM Server
\n3. OAM Console
\nOracle Access Manager (OAM) provides centralized, policy-driven services for authentication, single sign-on (SSO), and identity assertion.<\/p>\n

Q: What is WebGate Agent?<\/strong>
\nA:<\/strong> OAM agent, also known as WebGate is a pre-packaged web server plugin which communicates with OAM server. There are two versions of OAM Agents, namely 11g WebGates and 10g WebGates.<\/p>\n

Q: What is SSO?<\/strong>
\nA:<\/strong> SSO (Single Sign On), provides the ability to login to one application once, and log into same\/other applications linked to same OAM without prompting for the password.<\/p>\n

Q: What is the difference between authentication and authorization in OAM?<\/strong>
\nA:<\/strong> Authentication is to check if users identity by obtaining some credentials and it will always be followed by Authorization process. Authorization is to allow\/disallow authenticated user to access application\/pages they have access to.<\/p>\n

Q: What is authorization module in OAM?
\nA:\u00a0<\/strong>An authorization policy\/module is to specify the conditions under which a subject or identity has access to a particular resource.<\/p>\n

Q: How many types of resources are available in OAM and what is the use of Resources?<\/strong>
\nA:<\/strong>
\n1. Protected Resource — URL’s protected by OAM
\n2. Public Resource — URL’s not protected by OAM (Public)<\/p>\n

Q: What is the use of anonymous scheme in OAM?<\/strong>
\nA:<\/strong> Unprotected resources must be included in an authentication policy that uses an authentication scheme with a protection level of 0. Most often this will be the anonymous authentication scheme.<\/p>\n

Q: What is the major difference between OAM 10g and OAM 11g?<\/strong>
\nA:<\/strong>
\n1. Architecture Components
\n11g: Agents: Webgate, Access Client, mod_osso, and IAMSuiteAgent, OAM Server, Oracle Access Manager Console (installed on WebLogic Administration Server)
\n10g: Resource Webgate (RWG), Authentication Webgate (AWG), AccessGate, Access Server, Policy Manager
\n2. OAM 11g uses, Host-based authentication cookie whereas 10g users Domain- based Cookie.
\n3. Cryptographic keys is one per agent in OAM 11g, One global shared secret key for all Webgates in OAM 10g<\/p>\n

Q: What is the use of Host Identifier?<\/strong>
\nA:<\/strong> Policies protect resources on computer hosts. Within Oracle Access Manager, the computer host is specified independently using a host identifier.<\/p>\n

Q: What is persistent session management is OAM?<\/strong>
\nA:<\/strong> The session is created in the distributed in-memory cache. A copy is available in the local in-memory cache on the computer hosting the resource. If session persistence to the database is enabled, the session is also written to the database.<\/p>\n

Q: Explain the process of protecting web application using OAM and SSO login flow?<\/strong>
\nA:<\/strong>
\n1. Register the Webgate Agent
\n2. Copy Generated Files and Artifacts to the Webgate Instance Location<\/p>\n

Q: What are Header Variables and how it is useful?<\/strong>
\nA:<\/strong> Depending on the actions (responses in Access Manager) specified for authentication success and authentication failure, the user may be redirected to a specific URL, or user information might be passed on to other applications through a header variable or a cookie value.<\/p>\n

Q: What is the difference between Access Gate and Web Gate?<\/strong>
\nA:<\/strong>
\n1. A WebGate is a web-server plug-in for Oracle Access Manager (OAM) that intercepts HTTP requests and forwards them to the Access Server for authentication and authorization.
\n2. AccessGate is custom access client developed using AccessSDK to protect non web-based applications protected by OAM 11g<\/p>\n

Q: What is authentication Policy in OAM?<\/strong>
\nA:<\/strong> authentication policies are used to protect specific resources. The authentication policy provides the sole authentication method for resources governed by the policy.Each authentication policy defines the type of verification that must be\u00a0performed to provide a sufficient level of trust for Access Manager to grant access to the user making the request.<\/p>\n

Q: Explain the high-level steps for Integrating E-Biz R12.2 with OAM 11gR2?<\/strong>
\nA:<\/strong>
\n1. Install Database for OAM\/OID
\n2. Run RCU
\n3. Install Weblogic, IDAM, OID and OHS
\n4. Create Domain for OAM and OID
\n5. Upgrade OPSS
\n6. Create DIP to integrate AD to OID
\n7. Apply EBS 12.2 patches for OAM
\n6. Install and Configure Access Gate on 12.2
\n7. Integrate EBS to OID<\/p>\n

Q: What is the difference between SSO and ESSO?<\/strong>
\nA:<\/strong> SSO is to enable Single Sign-On on Oracle Products and ESSO is to enable Single Sign-On on both oracle and non-oracle products including Desktop, Windows password reset etc.<\/p>\n

Q: What are different types of Identity Store?<\/strong>
\nA:<\/strong>
\n1. System Identity Store — Used to authenticate System users like Weblogic
\n2. Default Identity Store — Used as default authentication for other users\/applications<\/p>\n

Q: What is the use of Reverse Proxy?<\/strong>
\nA:<\/strong> A proxy server is a go-between or intermediary server that forwards requests for content from multiple clients to different servers across the Internet. Typically a reverse proxy is used to hide application server from end-users and\/or for URL masking.<\/p>\n

Q: Name some new features of OAM11gR2?<\/strong>
\nA:<\/strong> Dynamic Authentication — Dynamic authentication is the ability to define what authentication scheme should be presented to a user base on some condition.
\nPersistent Login (Remember Me) — Persistent Login is the ability to let users log in without credentials after the first-time login.
\nPolicy Evaluation Ordering — The out-of-the -box algorithm is based on the “best match” algorithm for evaluating policies.
\nDelegated Administration — The ability to select users who can administer their own application domains.
\nUnified Administration Console — The console screen has a new look; a new single ‘Launch Pad’ screen with services that are enabled based on user roles.
\nSession Management — Ability to set idle session timeout’s at the application domain level<\/p>\n

If you are looking for commonly asked interview questions for Oracle Access Manager then just click below and get that in your inbox.<\/p>\n