{"id":2443,"date":"2011-05-26T10:16:37","date_gmt":"2011-05-26T14:16:37","guid":{"rendered":"http:\/\/onlineappsdba.com\/index.php\/2011\/05\/26\/how-to-edit-create-delete-modify-identity-store-of-oam-11g-from-command-line-wlst-displayuseridentitystoreconfig-edituseridentitystoreconfig-createuseridentitystoreconfig-deleteuseridentit\/"},"modified":"2011-05-26T10:18:29","modified_gmt":"2011-05-26T14:18:29","slug":"how-to-edit-create-delete-modify-identity-store-of-oam-11g-from-command-line-wlst-displayuseridentitystoreconfig-edituseridentitystoreconfig-createuseridentitystoreconfig-deleteuseridentit","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2011\/05\/26\/how-to-edit-create-delete-modify-identity-store-of-oam-11g-from-command-line-wlst-displayuseridentitystoreconfig-edituseridentitystoreconfig-createuseridentitystoreconfig-deleteuseridentit\/","title":{"rendered":"How to Edit (create, delete, modify) Identity Store of OAM 11g from command line (WLST) – editUserIdentityStoreConfig"},"content":{"rendered":"

<\/a><\/p>\n

In today’s post I am going to\u00a0show command line tool\u00a0WLST (Weblogic Scripting Tool)\u00a0to manage configuration of Oracle Access Manager 11g .\u00a0
\n___
\nOAM administrator and user identities are stored within an LDAP server for use during authentication and authorization. By default OAM 11g uses weblogic’s embedded LDAP server as its Identity Store.
\n<\/font>___<\/p>\n

In my\u00a0earlier post here<\/a>\u00a0I\u00a0explained\u00a0How to create Identity Store for OAM 11g pointing to enterprise LDAP server like OID or Active Directory using OAM Console (Graphical User Interface to manage configuration). In\u00a0below example, I will\u00a0explain how to change default identity store<\/strong> of OAM 11g back to Identity Store\u00a0“UserIdentityStore1<\/strong>” using WebLogic Scripting Commands for OAM 11g.<\/p>\n

1.<\/strong> Set Environment variable
\n$DOMAIN_HOME\/bin\/setDomainEnv.sh
\n<\/font>
\n2.<\/strong> Start WLST
\n$ORACLE_HOME\/common\/bin\/wlst.sh<\/font><\/p>\n

Now you should get prompt like
\nwls:\/offline><\/strong><\/p>\n

3.<\/strong>Connect to WebLogic Admin Server
\nconnect([username, password], [url], [adminServerName])
\nLike
\nWLST>connect(‘weblogic’, ‘welcome1’, ‘t3:\/\/myadmin:7001’)<\/font><\/p>\n

Now you should be\u00a0 conencted and get prompt like wls:\/base_domain\/serverConfig><\/strong><\/p>\n

4. To take help on any command<\/strong>
\nhelp(‘command_name’)\u00a0 like<\/p>\n

help(‘displayUserIdentityStoreConfig’)
\n<\/font>or
\nhelp(‘oam’)<\/font><\/p>\n

5. To check current identity store
\n<\/strong>displayUserIdentityStore(name=”ID_store”, domainHome=”domainHome1″)<\/p>\n

example
\ndisplayUserIdentityStore(name=”UserIdentityStore1″, domainHome=”\/oracle\/apsp\/OAM\/user_projects\/domains\/base_domain”)<\/font><\/p>\n

You should see output like
\n________________
\nName : UserIdentityStore1, Type : LDAP, LDAP_URL : ldap:\/\/ldap-host:7001<\/a>, SECURITY_PRINCIPAL : cn=Admin, SECURITY_CREDENTIAL : {AES}F8E3A9FAD9D662F753D842979423ED3D, USER_SEARCH_BASE : ou=people,ou=myrealm,dc=base_domain, GROUP_SEARCH_BASE : ou=groups,ou=myrealm,dc=base_domain, USER_NAME_ATTRIBUTE : uid, LDAP_PROVIDER : EMBEDDED_LDAP, UserIdentityProviderType : OracleUserRoleAPI, Role Security Admin : Administrators, Role System Monitor : Monitors, Role Application Administrator : Operators, Role System Manager : Deployers,
\n_______________<\/p>\n

5. To\u00a0 set UserIdentityStore1\u00a0as primary identity store<\/strong><\/p>\n

editUserIdentityStore(name=”UserIdentityStore1″, isPrimary=”true”)<\/font><\/p>\n

.<\/font><\/p>\n

References<\/u><\/strong><\/p>\n