{"id":2320,"date":"2011-02-03T11:16:55","date_gmt":"2011-02-03T15:16:55","guid":{"rendered":"http:\/\/onlineappsdba.com\/index.php\/2011\/02\/03\/how-to-protect-jsf-application-using-oracle-access-manager\/"},"modified":"2011-02-03T11:18:32","modified_gmt":"2011-02-03T15:18:32","slug":"how-to-protect-jsf-application-using-oracle-access-manager","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2011\/02\/03\/how-to-protect-jsf-application-using-oracle-access-manager\/","title":{"rendered":"How to protect JSF application using Oracle Access Manager?"},"content":{"rendered":"<p>Many people are using JSF technology for developing the web applications. No doubt about that. What if you are asked to protect that JSF application using Oracle Access Manager? Is it certified? Yes &#8211; OAM is certified for JSF applications from 10.1.4.3 onwards. In our environment, OAM Access Server is 10.1.4.3 and WebGate is 10.1.4.2.<\/p>\n<p>So, that&#8217;s all basic.\u00a0 How about implementing it? In our case, there is no security mechanism employed in JSF application i.e., nothing in web.xml or other configuration files.<\/p>\n<p>The JSF application URL format is : http:\/\/host:port\/WebApp\/faces\/home.jsp<\/p>\n<p>We can protect the JSF application in OAM Policy domain by specifying the URL as \/WebApp\/faces\/home.jsp. What if you have 100 jsp pages in JSF application. Are you going specify all jsp\u00a0 pages explicitly in Policy domain. If not, what is the way&#8230;? All you need to do is to specify the URL \/WebApp\/faces\/.<\/p>\n<p>Please note that the following URL formats in OAM policy domain does not work.<\/p>\n<p>\/WebApp\/faces\/*.jsp<\/p>\n<p>\/WebApp\/faces\/*.*<\/p>\n<p>\/WebApp\/faces\/&#8230;\/*<\/p>\n<p>&#8230;&#8230;<\/p>\n<p>The related thread in Oracle Forums is <a href=\"http:\/\/forums.oracle.com\/forums\/thread.jspa?threadID=2163813&amp;tstart=0\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Many people are using JSF technology for developing the web applications. No doubt about that. What if you are asked [&hellip;]<\/p>\n","protected":false},"author":115,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[40],"tags":[318,29,465],"class_list":["post-2320","post","type-post","status-publish","format-standard","hentry","category-sso","tag-jsf","tag-oam","tag-sso"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.8 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How to protect JSF application using Oracle Access Manager? -<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/onlineappsdba.com\/index.php\/2011\/02\/03\/how-to-protect-jsf-application-using-oracle-access-manager\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to protect JSF application using Oracle Access Manager? -\" \/>\n<meta property=\"og:description\" content=\"Many people are using JSF technology for developing the web applications. No doubt about that. What if you are asked [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/onlineappsdba.com\/index.php\/2011\/02\/03\/how-to-protect-jsf-application-using-oracle-access-manager\/\" \/>\n<meta property=\"article:published_time\" content=\"2011-02-03T15:16:55+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2011-02-03T15:18:32+00:00\" \/>\n<meta name=\"author\" content=\"Masroof Ahmad\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Masroof Ahmad\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2011\/02\/03\/how-to-protect-jsf-application-using-oracle-access-manager\/\",\"url\":\"https:\/\/onlineappsdba.com\/index.php\/2011\/02\/03\/how-to-protect-jsf-application-using-oracle-access-manager\/\",\"name\":\"How to protect JSF application using Oracle Access Manager? -\",\"isPartOf\":{\"@id\":\"https:\/\/onlineappsdba.com\/#website\"},\"datePublished\":\"2011-02-03T15:16:55+00:00\",\"dateModified\":\"2011-02-03T15:18:32+00:00\",\"author\":{\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb\"},\"breadcrumb\":{\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2011\/02\/03\/how-to-protect-jsf-application-using-oracle-access-manager\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/onlineappsdba.com\/index.php\/2011\/02\/03\/how-to-protect-jsf-application-using-oracle-access-manager\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2011\/02\/03\/how-to-protect-jsf-application-using-oracle-access-manager\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/onlineappsdba.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to protect JSF application using Oracle Access Manager?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/onlineappsdba.com\/#website\",\"url\":\"https:\/\/onlineappsdba.com\/\",\"name\":\"\",\"description\":\"Oracle Implementation &amp; Training Experts\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/onlineappsdba.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb\",\"name\":\"Masroof Ahmad\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g\",\"caption\":\"Masroof Ahmad\"},\"url\":\"https:\/\/onlineappsdba.com\/index.php\/author\/masroof\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to protect JSF application using Oracle Access Manager? -","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/onlineappsdba.com\/index.php\/2011\/02\/03\/how-to-protect-jsf-application-using-oracle-access-manager\/","og_locale":"en_US","og_type":"article","og_title":"How to protect JSF application using Oracle Access Manager? -","og_description":"Many people are using JSF technology for developing the web applications. No doubt about that. What if you are asked [&hellip;]","og_url":"https:\/\/onlineappsdba.com\/index.php\/2011\/02\/03\/how-to-protect-jsf-application-using-oracle-access-manager\/","article_published_time":"2011-02-03T15:16:55+00:00","article_modified_time":"2011-02-03T15:18:32+00:00","author":"Masroof Ahmad","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Masroof Ahmad","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/onlineappsdba.com\/index.php\/2011\/02\/03\/how-to-protect-jsf-application-using-oracle-access-manager\/","url":"https:\/\/onlineappsdba.com\/index.php\/2011\/02\/03\/how-to-protect-jsf-application-using-oracle-access-manager\/","name":"How to protect JSF application using Oracle Access Manager? -","isPartOf":{"@id":"https:\/\/onlineappsdba.com\/#website"},"datePublished":"2011-02-03T15:16:55+00:00","dateModified":"2011-02-03T15:18:32+00:00","author":{"@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb"},"breadcrumb":{"@id":"https:\/\/onlineappsdba.com\/index.php\/2011\/02\/03\/how-to-protect-jsf-application-using-oracle-access-manager\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/onlineappsdba.com\/index.php\/2011\/02\/03\/how-to-protect-jsf-application-using-oracle-access-manager\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/onlineappsdba.com\/index.php\/2011\/02\/03\/how-to-protect-jsf-application-using-oracle-access-manager\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/onlineappsdba.com\/"},{"@type":"ListItem","position":2,"name":"How to protect JSF application using Oracle Access Manager?"}]},{"@type":"WebSite","@id":"https:\/\/onlineappsdba.com\/#website","url":"https:\/\/onlineappsdba.com\/","name":"","description":"Oracle Implementation &amp; Training Experts","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/onlineappsdba.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb","name":"Masroof Ahmad","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g","caption":"Masroof Ahmad"},"url":"https:\/\/onlineappsdba.com\/index.php\/author\/masroof\/"}]}},"_links":{"self":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts\/2320","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/users\/115"}],"replies":[{"embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/comments?post=2320"}],"version-history":[{"count":0,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts\/2320\/revisions"}],"wp:attachment":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/media?parent=2320"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/categories?post=2320"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/tags?post=2320"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}