{"id":2124,"date":"2010-09-23T16:03:15","date_gmt":"2010-09-23T20:03:15","guid":{"rendered":"http:\/\/onlineappsdba.com\/index.php\/2010\/09\/23\/session-management-in-oam-11g-sme-idle-timeout-session-lifetime\/"},"modified":"2017-12-19T10:19:40","modified_gmt":"2017-12-19T14:19:40","slug":"session-management-in-oam-11g-sme-idle-timeout-session-lifetime","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2010\/09\/23\/session-management-in-oam-11g-sme-idle-timeout-session-lifetime\/","title":{"rendered":"Session Management in Oracle Access Manager"},"content":{"rendered":"

<\/a><\/p>\n

This post covers key points related to Session Manager in Oracle Access Manager (OAM) 11g. For step by step installation of OAM 11g click here<\/a><\/p>\n

OAM<\/strong> – Oracle Access Manager (Web Access Management and Web SSO solution from Oracle)
\nSME<\/strong> – Session Management Engine (component of OAM)<\/p>\n

.<\/p>\n

Key Points for Session Management in OAM 11g<\/u><\/strong><\/p>\n

1.<\/strong> OAM\u00a010g was stateless application<\/strong>\u00a0where as in OAM 11g, user session is stateful (For list of difference between OAM 10g & 11g\u00a0<\/span>click here<\/span><\/a>\u00a0).<\/p>\n

2. <\/strong>In OAM 11g User Session Data is stateful and stored at following places
\na)<\/strong> Local In-Memory Cache <\/strong>of each Managed Server on which OAM is running (oam_server1 on port 14100)
\nb)<\/strong> Distributed In-Memory Cache<\/strong> shared by all Managed Server on which OAM is running (For OAM 11g deployment in Cluster) using Coherence<\/strong>
\nc)<\/strong> Optionally in Database<\/strong> (under schema [prefix]_OAM<\/strong> created using RCU<\/strong>). To know more about RCU here<\/a><\/p>\n

3<\/strong>. During install time (while running config.sh <\/strong>to create WebLogic domain), you select “Oracle Access Manager with Database Policy Store<\/strong>” which configures Policy Store and Session Store to database.<\/p>\n

<\/a><\/p>\n

4.<\/strong> In OAM 11g (by default) Policy Data & User session data <\/strong>is stored in single database (details under $DOMAIN_HOME\/config\/jdbc\/oam-db-jdbc.xml<\/strong>) under one schema however\u00a0it is possible\u00a0to configure OAM Policy Data<\/strong> in to one database and user session data<\/strong> in another database.<\/p>\n

5.<\/strong> To configure User Session Data to different database check steps here<\/a>
\nThis is done\u00a0by editing\u00a0datasource jdbc\/oamds<\/strong> under SmeDb <\/strong>in $DOMAIN_HOME\/config\/fmwconfig\/oam-config.xml<\/strong><\/p>\n

<\/a><\/p>\n


\n6. <\/strong>Default User Session Datastore used by OAM is using oamDS <\/strong>JDBC datastore<\/p>\n

<\/a><\/p>\n

<\/a><\/p>\n

.
\n7.<\/strong> There are three settings which determines User Session Lifecycle\u00a0 – Session Lifetime<\/strong>, Idle Timeout<\/strong>, Maximum Number of Sessions per User<\/strong><\/p>\n

These settings can be configured via http:\/\/serverName:port\/oamconsole<\/strong> (Where Port is Admin Server Port – default 7001) -> System Configuration -> Server Instances -> Session<\/p>\n

a) Session Lifetime<\/strong> : 480 minutes – User Session will expire after this period (even active user session)
\nb) Idle Timeout<\/strong> : 15 minutes – User Session will expire for any idle session for 15 minutes
\nc) Maximum Number of Sessions per User<\/strong> : 8\u00a0 # User can have multiple session in OAM 11g<\/p>\n

.<\/p>\n

<\/a><\/p>\n

.<\/p>\n

8. <\/strong>Administrator can Manage Active User Sessions<\/strong> (Find & Delete) from OAM Console\u00a0 http:\/\/serverName:port\/oamconsole<\/strong> (Where Port is Admin Server Port – default 7001) -> System Configuration -> System Utilitiess -> Session Management<\/p>\n

<\/a><\/p>\n

.\u00a0<\/strong><\/p>\n

9.<\/strong> User session is stored in database (if configured) under tables : OAM_SESSION<\/strong>, OAM_SESSION_ATTRIBUTE<\/strong><\/p>\n

If you are looking for commonly asked interview questions for Oracle Access Manager then just click below and get that in your inbox.<\/p>\n