{"id":2558,"date":"2011-07-11T08:09:27","date_gmt":"2011-07-11T12:09:27","guid":{"rendered":"http:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/"},"modified":"2011-07-11T08:09:27","modified_gmt":"2011-07-11T12:09:27","slug":"oid-11g-integration-with-oam-11115-for-identity-store","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/","title":{"rendered":"OID 11g Integration with OAM (11.1.1.5) for Identity Store"},"content":{"rendered":"

In this post we will cover OAM 11.1.1.5 integration with OID as identity store. If you are on OAM 11.1.1.3 , please refer HERE<\/a> for integration with OID.<\/p>\n

Identity store<\/strong> refers to store containing enterprise users & group. Weblogic comes with an embedded ldap which is used\u00a0 as identity store by fusion middleware components by default. You can configure external ldap servers like- OID, AD, Novell etc to be used as identity stores.<\/p>\n

Things Good to know:- <\/strong><\/u><\/p>\n

1)\u00a0 Till 11.1.1.3 , OAM\u00a0 use to support only only 1 Identity Store at a time i.e though you can register multiple external ldap’s as identity stores but only one will be used as primary identity store & OAM will refer that identity store only.<\/p>\n

2) OAM 11.1.1.5 can support multiple identity stores at same time.Out of these multiple identity stores, one is store is marked and used as “System Store” and either same or any other identity store will be marked as “default store”<\/p>\n

System Store<\/strong>– Represents the identity store which will have groups or users that will act as “Administrators” to OAM i.e only members of this identity store group\/user can perform admin functions via oamconsole.<\/p>\n

Default Store<\/strong>– This will be the identity store that will be used at time of patching for migration purpose or\u00a0 by Oracle security token service. More on OAM Security Token service coming soon….<\/p>\n

3) You can mark any single identity store as both- system & default store. OR you can choose 2 different identity stores for this purpose. But there can be ONLY 1 system store & 1 default store.<\/p>\n

For instance, lets say we have 5 identity stores registered with OAM (11.1.1.5) namely- OID1, OID2, AD1, AD2 and Novell1. Now we can pickup any of them ,like OID 2 to be our system store & AD1 to be default store. OR i can choose AD 2 to be both. Its not possible to have AD1 & OID 1 both as system stores.<\/p>\n

By default- Embedded ldap is used as\u00a0 the system as well as default store.<\/p>\n

4)\u00a0 In OAM 11.1.1.5 , the original IDMDomainAgent<\/strong> is not availble & remains as artifact. In place of it, IAMSuiteAgent<\/strong> is installed & pre-configured to povide signle sign on to\u00a0 IDM administration console.<\/p>\n

Steps to Integrate OID 11g with OAM 11.1.1.5 <\/strong><\/u><\/p>\n

1.<\/strong> Create a groups \u201cAdministrators<\/strong>\u201d in OID<\/strong>under dc=[your_domain], cn=groups using ODSM<\/strong><\/p>\n

2.<\/strong> Create a user oamadmin <\/strong>in OID under dc=[your_domain] , cn=users\u00a0 (This user will then be used to connect to login to weblogic console<\/font>) – Ensure that attribute userPassword<\/strong> is set for this user.<\/p>\n

3.<\/strong> Add user oidadmin<\/strong> in OID to group \u201cAdministrators<\/strong>\u201c. Use ODSM to create user\/group in OID 11g. More on ODSM<\/strong> here<\/a><\/p>\n

4. <\/strong>.Login to OAMconsole (http:\/\/hostname:adminport\/oamconsole. Navigate to System Configuration tab –>Data Sources –> select User Identity Stores –> Click create from Actions\u00a0 drop down on top.<\/strong><\/p>\n

<\/a><\/p>\n

2)\u00a0 Create: User Identity store applet opens. Entervales as:-<\/p>\n

Store Name<\/strong>– Name of Identity store (Tip:- Keep it something which can make you easy recall the ldap type\/hostname it )<\/p>\n

Store Type<\/strong>– select which type of LDAP is it. Options are- Embedded ldap,OID, AD,Novell , Iplanet & OVD.<\/p>\n

Location<\/strong>– hostname and port of External ldpa in format- hotsname:port<\/p>\n

Bind DN<\/strong> – OID’s Administrator account DN. like cn=orcladmin<\/p>\n

UserName Attribute<\/strong>– Attribute which will be used for login<\/p>\n

User & Group Search Base<\/strong>– Complete DN of OID Domain under which the users\/groups will be searched<\/p>\n

GroupName Attribute<\/strong>– default is cn<\/p>\n

Test Connection , save & then close it.<\/p>\n

<\/a><\/p>\n

3) This new identity store will now be availble under datastources. Again open it from datasources. You will see 2 options of either setting this store as “System store<\/strong>” or “Default Store<\/strong>“.<\/p>\n

Check the system store box, it will prompt you to add group\/user of this identity store which you want to act as administrator to oam.<\/p>\n

Add “Administrators<\/strong>” group that we created in OID.<\/p>\n

<\/a><\/p>\n

Click apply button,it will pop up with message as ” Manually Change Identity Store Settings at OPSS Level and configure the IDMDOmainAgent<\/font>“, click OK<\/p>\n

It will then prompt to ” Validate this Identity store against a user of that group in order to set this as “System Store”<\/font> “. Enter name & password of user -e.g\u00a0 oamadmin\u00a0 that we created under OID .<\/p>\n

Once validated it will show “Successfully Set as System Store<\/font>”<\/p>\n

4) OAM uses OAMAdminConsole Autehntication Scehme for “System Store” which in turn calls the “LDAP Module”. This\u00a0 Ldap modules have an “identity store” value which will be used as “system store”. Change this value to newly configured “system store”<\/p>\n

Under System Configuration tab–> Authentication modules–> LDAP Authentication Module–> LDAP –>change indentity store to New System store value–>Save<\/p>\n

<\/a><\/p>\n

5)\u00a0 Logout from OAMConsole & now login as any user member of SystemStore. If you able to login successfully , configuration with OID done.<\/p>\n

Reference Documentation:-<\/p>\n

Oracle\u00ae Fusion Middleware Administrator’s Guide for Oracle Access Manager with Oracle Security Token Service
\n11g Release 1 (11.1.1)\u00a0<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

In this post we will cover OAM 11.1.1.5 integration with OID as identity store. If you are on OAM 11.1.1.3 […]<\/p>\n","protected":false},"author":115,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2558","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\nOID 11g Integration with OAM (11.1.1.5) for Identity Store -<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"OID 11g Integration with OAM (11.1.1.5) for Identity Store -\" \/>\n<meta property=\"og:description\" content=\"In this post we will cover OAM 11.1.1.5 integration with OID as identity store. If you are on OAM 11.1.1.3 […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/\" \/>\n<meta property=\"article:published_time\" content=\"2011-07-11T12:09:27+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2011\/06\/oam01.png\" \/>\n<meta name=\"author\" content=\"Masroof Ahmad\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Masroof Ahmad\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/\",\"url\":\"https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/\",\"name\":\"OID 11g Integration with OAM (11.1.1.5) for Identity Store -\",\"isPartOf\":{\"@id\":\"https:\/\/onlineappsdba.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/#primaryimage\"},\"thumbnailUrl\":\"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2011\/06\/oam01.png\",\"datePublished\":\"2011-07-11T12:09:27+00:00\",\"author\":{\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb\"},\"breadcrumb\":{\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/#primaryimage\",\"url\":\"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2011\/06\/oam01.png\",\"contentUrl\":\"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2011\/06\/oam01.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/onlineappsdba.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"OID 11g Integration with OAM (11.1.1.5) for Identity Store\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/onlineappsdba.com\/#website\",\"url\":\"https:\/\/onlineappsdba.com\/\",\"name\":\"\",\"description\":\"Oracle Implementation & Training Experts\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/onlineappsdba.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb\",\"name\":\"Masroof Ahmad\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g\",\"caption\":\"Masroof Ahmad\"},\"url\":\"https:\/\/onlineappsdba.com\/index.php\/author\/masroof\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"OID 11g Integration with OAM (11.1.1.5) for Identity Store -","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/","og_locale":"en_US","og_type":"article","og_title":"OID 11g Integration with OAM (11.1.1.5) for Identity Store -","og_description":"In this post we will cover OAM 11.1.1.5 integration with OID as identity store. If you are on OAM 11.1.1.3 […]","og_url":"https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/","article_published_time":"2011-07-11T12:09:27+00:00","og_image":[{"url":"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2011\/06\/oam01.png","type":"","width":"","height":""}],"author":"Masroof Ahmad","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Masroof Ahmad","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/","url":"https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/","name":"OID 11g Integration with OAM (11.1.1.5) for Identity Store -","isPartOf":{"@id":"https:\/\/onlineappsdba.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/#primaryimage"},"image":{"@id":"https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/#primaryimage"},"thumbnailUrl":"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2011\/06\/oam01.png","datePublished":"2011-07-11T12:09:27+00:00","author":{"@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb"},"breadcrumb":{"@id":"https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/#primaryimage","url":"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2011\/06\/oam01.png","contentUrl":"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2011\/06\/oam01.png"},{"@type":"BreadcrumbList","@id":"https:\/\/onlineappsdba.com\/index.php\/2011\/07\/11\/oid-11g-integration-with-oam-11115-for-identity-store\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/onlineappsdba.com\/"},{"@type":"ListItem","position":2,"name":"OID 11g Integration with OAM (11.1.1.5) for Identity Store"}]},{"@type":"WebSite","@id":"https:\/\/onlineappsdba.com\/#website","url":"https:\/\/onlineappsdba.com\/","name":"","description":"Oracle Implementation & Training Experts","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/onlineappsdba.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb","name":"Masroof Ahmad","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g","caption":"Masroof Ahmad"},"url":"https:\/\/onlineappsdba.com\/index.php\/author\/masroof\/"}]}},"_links":{"self":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts\/2558","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/users\/115"}],"replies":[{"embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/comments?post=2558"}],"version-history":[{"count":0,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts\/2558\/revisions"}],"wp:attachment":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/media?parent=2558"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/categories?post=2558"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/tags?post=2558"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}