{"id":4731,"date":"2012-11-29T07:04:41","date_gmt":"2012-11-29T11:04:41","guid":{"rendered":"http:\/\/onlineappsdba.com\/?p=4731"},"modified":"2016-05-14T10:43:17","modified_gmt":"2016-05-14T14:43:17","slug":"how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/","title":{"rendered":"How to configure a single sign-on system that assigns different authentication levels to different partner applications with OAM"},"content":{"rendered":"<p>Hi All,<\/p>\n<p>After a one month gap I am writing blog and apologize for such a gap. Now I\u2019m come back with good post. In this post I would like to explains how to configure a single sign-on system that assigns different authentication levels to different partner applications with OAM.<\/p>\n<p>OracleAS Single Sign-On enables you to assign different authentication levels to the applications that it protects. You can then map these authentication levels to specific authentication plugins.<\/p>\n<p>Environment Details:<\/p>\n<p>Here, we have OAM 10g , two SSO servers(OID\/OSSO 10g-10.1.4.3.0) and oracle portal 11g.<\/p>\n<p>Integration details, Portal having own SSO server(OID\/OSSO 10g-10.1.4.3.0) and portal application registered as a partner application in portal OSSO. Portal OSSO server is integrated with OAM for centralized authentication because in our project more than 10 application integrated with OAM10g(10.1.4.3.0) for SSO.<\/p>\n<p>We are accessing all applications through Oracle Portal(11g) application by clicking links under portal workspace.<\/p>\n<p>Employees, customers and agents applications are deployed in oracle portal 11g. All application will serve once OAM authentication successfully done because portal osso url\u2019s are protected by OAM but our requirement is customer authentication alone bypass from OAM.<\/p>\n<p><strong>Solution<\/strong> is if application* would access the Portal site using a *different virtualhost*.<\/p>\n<p>Implementation steps and issues:<\/p>\n<ol>\n<li>Oracle SSO 10g could be configured to implement a different authentication module for Customers accessing the Portal using the different hostname. Instead of using the OAM integration authentication module, OSSO would be able to use the default OSSO login module for native OSSO authentication.<\/li>\n<li>Of course the Customer virtualhost would not be protected by OAM, so the webgate would allow all requests for pages using that virtualhost through without redirection for OAM login.<\/li>\n<\/ol>\n<p>Reference documentation for implementation of different OSSO authentication modules for different sites\/virtualhosts:<\/p>\n<p>Oracle Application Server Single Sign-On Administrator&#8217;s Guide 10g (10.1.4.0.1)<\/p>\n<p>6 Multilevel Authentication<\/p>\n<p><a href=\"http:\/\/docs.oracle.com\/cd\/B28196_01\/idmanage.1014\/b15988\/multilevel.htm\">http:\/\/docs.oracle.com\/cd\/B28196_01\/idmanage.1014\/b15988\/multilevel.htm<\/a><\/p>\n<ol>\n<li>Protect the portal application url\u2019s using form based authentication in OAM.<\/li>\n<\/ol>\n<p>\/portal\/pls\/portal\/PRT_PORTAL.wwsec_app_priv.login<\/p>\n<p>\/portal\/pls\/portal\/PRT_PORTAL.wwpob_smd.login<\/p>\n<p>2.\u00a0 \u00a0Protect the Portal osso url\u2019s using anonymous authentication in OAM.<\/p>\n<p>\/pls\/orasso\/orasso.wwsso_app_admin.ls_login<\/p>\n<p>\/sso\/auth<\/p>\n<p>Note: pass the header variables in both policy.<\/p>\n<p>3.\u00a0\u00a0\u00a0 Customer virtualhost would not be protected by OAM so no need to specify url\u2019s in OAM.<\/p>\n<p>4.\u00a0\u00a0\u00a0 Implement OSSO Multilevel Authentication in OSSO policy.properties e.g.<\/p>\n<p>empportal.domain\\:7777 = HighSecurity<\/p>\n<p>customerportal.domain\\:7777 = MediumSecurity<\/p>\n<p>HighSecurity_AuthPlugin = oblix.security.ssoplugin.SSOOblixAuth<\/p>\n<p>MediumSecurity_AuthPlugin = oracle.security.sso.server.auth.SSOServerAuth<\/p>\n<p>5.\u00a0\u00a0\u00a0 Restart osso server.<\/p>\n<p>So the flow for Employees and Agents would now be:<\/p>\n<p>a) User accesses Portal page <a href=\"http:\/\/empportal.domain:7777\/portal\/pls\/portal\">http:\/\/empportal.domain:7777\/portal\/pls\/portal<\/a> -&gt; the Portal public homepage is displayed.<\/p>\n<p>b) User clicks on the Portal Login link in the homepage -&gt; request for <a href=\"http:\/\/empportal.domain:7777\/portal\/pls\/portal\/PRT_PORTAL.wwsec_app_priv.login\">http:\/\/empportal.domain:7777\/portal\/pls\/portal\/PRT_PORTAL.wwsec_app_priv.login<\/a> is issued<\/p>\n<p>c) WebGate on Portal OHS finds that <a href=\"http:\/\/empportal.domain:7777\/portal\/pls\/portal\/PRT_PORTAL.wwsec_app_priv.login\">http:\/\/empportal.domain:7777\/portal\/pls\/portal\/PRT_PORTAL.wwsec_app_priv.login<\/a> is protected -&gt; user redirected to OAM login page<\/p>\n<p>d) User submits valid credentials -&gt; WebGate sets the ObSSOCookie for domain .eng.co.in and redirects back to <a href=\"http:\/\/empportal.domain:7777\/portal\/pls\/portal\/PRT_PORTAL.wwsec_app_priv.login\">http:\/\/empportal.domain:7777\/portal\/pls\/portal\/PRT_PORTAL.wwsec_app_priv.login<\/a><\/p>\n<p>e) Portal receives the \/portal\/pls\/portal\/PRT_PORTAL.wwsec_app_priv.login request and checks for authenticated Portal session -&gt; none exists so Portal redirects user to <a href=\"http:\/\/sso.nic.co.in:7778\/pls\/orasso\/orasso.wwsso_app_admin.ls_login?site2pstoretoken\">http:\/\/sso.eng.co.in:7778\/pls\/orasso\/orasso.wwsso_app_admin.ls_login?site2pstoretoken<\/a>=&#8230;.\u00a0 for OSSO login<\/p>\n<p>f) WebGate on OSSO OHS finds that <a href=\"http:\/\/sso.nic.co.in:7778\/pls\/orasso\/orasso.wwsso_app_admin.ls_login\">http:\/\/sso.eng.co.in:7778\/pls\/orasso\/orasso.wwsso_app_admin.ls_login<\/a> is protected by an anonymous policy so does not perform authentication because the existing ObSSOCookie has a higher authentication level than the anonymous authentication scheme. WebGate only performs authorization and sets the HTTP Header for OSSO-OAM integration on authorization success, to the user id obtained from the ObSSOCookie\/OAM session token (not OblixAnonymous).<\/p>\n<p>g) OSSO receives the <a href=\"http:\/\/sso.nic.co.in:7778\/pls\/orasso\/orasso.wwsso_app_admin.ls_login\">http:\/\/sso.eng.co.in:7778\/pls\/orasso\/orasso.wwsso_app_admin.ls_login<\/a> request and checks which partner application invoked the login request &#8211; it is found to be empportal.domain:7777 so the HighSecurity login module (SSOOblixAuth) is executed, which reads the HTTP Header for OAM-authenticated user identity and completes creation of the OSSO session.<\/p>\n<p>h) OSSO redirects back to the Portal partner application login success URL at <a href=\"http:\/\/empportal.domain:7777\/pls\/portal\/PRT_portal.wwsec_app_priv.process_signon\">http:\/\/empportal.domain:7777\/pls\/portal\/PRT_portal.wwsec_app_priv.process_signon<\/a><\/p>\n<p>i) Portal processes OSSO login success and creates the Portal session cookie.<\/p>\n<p>j) Portal redirects back to the default homepage for the authenticated user at at <a href=\"http:\/\/empportal.domain:7777\/portal\/pls\/portal\">http:\/\/empportal.domain:7777\/portal\/pls\/portal<\/a><\/p>\n<p>The flow for Customers would be:<\/p>\n<p>a) User accesses Portal page <a href=\"http:\/\/customerportal.domain:7777\/portal\/pls\/portal\">http:\/\/customerportal.domain:7777\/portal\/pls\/portal<\/a> -&gt; the Portal public homepage is displayed.<\/p>\n<p>b) User clicks on the Portal Login link in the homepage -&gt; request for <a href=\"http:\/\/customerportal.domain:7777\/portal\/pls\/portal\/PORTAL.wwsec_app_priv.login\">http:\/\/customerportal.domain:7777\/portal\/pls\/portal\/PORTAL.wwsec_app_priv.login<\/a> is issued<\/p>\n<p>c) WebGate on Portal OHS finds that <a href=\"http:\/\/customerportal.domain:7777\/portal\/pls\/portal\/PORTAL.wwsec_app_priv.login\">http:\/\/customerportal.domain:7777\/portal\/pls\/portal\/PORTAL.wwsec_app_priv.login<\/a> is NOT protected so allows the request through uninterrupted. No ObSSOCookie is set.<\/p>\n<p>d) Portal receives the \/portal\/pls\/portal\/PORTAL.wwsec_app_priv.login request and checks for authenticated Portal session -&gt; none exists so Portal redirects user to <a href=\"http:\/\/sso.nic.co.in:7778\/pls\/orasso\/orasso.wwsso_app_admin.ls_login?site2pstoretoken=.....for\">http:\/\/sso.eng.co.in:7778\/pls\/orasso\/orasso.wwsso_app_admin.ls_login?site2pstoretoken=&#8230;..for<\/a> OSSO login<\/p>\n<p>e) WebGate on OSSO OHS finds that <a href=\"http:\/\/sso.nic.co.in:7778\/pls\/orasso\/orasso.wwsso_app_admin.ls_login\">http:\/\/sso.eng.co.in:7778\/pls\/orasso\/orasso.wwsso_app_admin.ls_login<\/a>\u00a0is protected by an anonymous policy so sets an OblixAnonymous ObSSOCookie in the session without prompting for OAM login. WebGate only performs authorization and sets the HTTP Header for OSSO-OAM integration on authorization success with value OblixAnonymous.<\/p>\n<p>f) OSSO receives the <a href=\"http:\/\/sso.nic.co.in:7778\/pls\/orasso\/orasso.wwsso_app_admin.ls_login\">http:\/\/sso.eng.co.in:7778\/pls\/orasso\/orasso.wwsso_app_admin.ls_login<\/a> request and checks which partner application invoked the login request &#8211; it is found to be customerportal.domain:7777 so the MediumSecurity login module (SSOServerAuth) is executed.<\/p>\n<p>g) OSSO does not read the OSSO-OAM integration HTTP header because it is not relevant for the SSOServerAuth module. It checks for an existing SSO_ID cookie and finding none redirects the user to the default OSSO login page for login.<\/p>\n<p>h) User submits valid credentials to OSSO.<\/p>\n<p>i) OSSO processes the native authentication request and sets the OSSO SSO_ID cookie in the session.<\/p>\n<p>j) OSSO redirects back to the Portal partner application login success URL at <a href=\"http:\/\/customerportal.domain:7777\/pls\/portal\/portal.wwsec_app_priv.process_signon\">http:\/\/customerportal.domain:7777\/pls\/portal\/portal.wwsec_app_priv.process_signon<\/a><\/p>\n<p>k) Portal processes OSSO login success and creates the Portal session cookie.<\/p>\n<p>l) Portal redirects back to the default homepage for the authenticated user at <a href=\"http:\/\/customerportal.domain:7777\/portal\/pls\/portal\">http:\/\/customerportal.domain:7777\/portal\/pls\/portal<\/a><\/p>\n<p>If you want to learn more in Oracle Access manager then register for our free Minicourse by clicking on below image.<\/p>\n<p><a href=\"https:\/\/k21technologies.leadpages.co\/leadbox\/1429babf3f72a2%3A174d8c592346dc\/5634165009547264\/\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-11092\" src=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1.png\" alt=\"OAM FREE Mini Course by Oracle ACE Atul Kumar\" width=\"1202\" height=\"198\" srcset=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1.png 1202w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1-150x25.png 150w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1-300x49.png 300w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1-1024x169.png 1024w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1-80x13.png 80w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1-220x36.png 220w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1-250x41.png 250w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1-280x46.png 280w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1-510x84.png 510w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1-750x124.png 750w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1-975x161.png 975w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1-1190x196.png 1190w\" sizes=\"auto, (max-width: 1202px) 100vw, 1202px\" \/><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hi All, After a one month gap I am writing blog and apologize for such a gap. Now I\u2019m come [&hellip;]<\/p>\n","protected":false},"author":115,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[442,443],"tags":[],"class_list":["post-4731","post","type-post","status-publish","format-standard","hentry","category-oracle-access-manager","category-troubleshooting-oracle-access-manager"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.8 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How to configure a single sign-on system that assigns different authentication levels to different partner applications with OAM -<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to configure a single sign-on system that assigns different authentication levels to different partner applications with OAM -\" \/>\n<meta property=\"og:description\" content=\"Hi All, After a one month gap I am writing blog and apologize for such a gap. Now I\u2019m come [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/\" \/>\n<meta property=\"article:published_time\" content=\"2012-11-29T11:04:41+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2016-05-14T14:43:17+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1.png\" \/>\n<meta name=\"author\" content=\"Masroof Ahmad\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Masroof Ahmad\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/\",\"url\":\"https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/\",\"name\":\"How to configure a single sign-on system that assigns different authentication levels to different partner applications with OAM -\",\"isPartOf\":{\"@id\":\"https:\/\/onlineappsdba.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/#primaryimage\"},\"thumbnailUrl\":\"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1.png\",\"datePublished\":\"2012-11-29T11:04:41+00:00\",\"dateModified\":\"2016-05-14T14:43:17+00:00\",\"author\":{\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb\"},\"breadcrumb\":{\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/#primaryimage\",\"url\":\"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1.png\",\"contentUrl\":\"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/onlineappsdba.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to configure a single sign-on system that assigns different authentication levels to different partner applications with OAM\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/onlineappsdba.com\/#website\",\"url\":\"https:\/\/onlineappsdba.com\/\",\"name\":\"\",\"description\":\"Oracle Implementation &amp; Training Experts\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/onlineappsdba.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb\",\"name\":\"Masroof Ahmad\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g\",\"caption\":\"Masroof Ahmad\"},\"url\":\"https:\/\/onlineappsdba.com\/index.php\/author\/masroof\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to configure a single sign-on system that assigns different authentication levels to different partner applications with OAM -","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/","og_locale":"en_US","og_type":"article","og_title":"How to configure a single sign-on system that assigns different authentication levels to different partner applications with OAM -","og_description":"Hi All, After a one month gap I am writing blog and apologize for such a gap. Now I\u2019m come [&hellip;]","og_url":"https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/","article_published_time":"2012-11-29T11:04:41+00:00","article_modified_time":"2016-05-14T14:43:17+00:00","og_image":[{"url":"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1.png","type":"","width":"","height":""}],"author":"Masroof Ahmad","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Masroof Ahmad","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/","url":"https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/","name":"How to configure a single sign-on system that assigns different authentication levels to different partner applications with OAM -","isPartOf":{"@id":"https:\/\/onlineappsdba.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/#primaryimage"},"image":{"@id":"https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/#primaryimage"},"thumbnailUrl":"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1.png","datePublished":"2012-11-29T11:04:41+00:00","dateModified":"2016-05-14T14:43:17+00:00","author":{"@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb"},"breadcrumb":{"@id":"https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/#primaryimage","url":"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1.png","contentUrl":"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2010\/08\/OAM_img1.png"},{"@type":"BreadcrumbList","@id":"https:\/\/onlineappsdba.com\/index.php\/2012\/11\/29\/how-to-configure-a-single-sign-on-system-that-assigns-different-authentication-levels-to-different-partner-applications-with-oam\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/onlineappsdba.com\/"},{"@type":"ListItem","position":2,"name":"How to configure a single sign-on system that assigns different authentication levels to different partner applications with OAM"}]},{"@type":"WebSite","@id":"https:\/\/onlineappsdba.com\/#website","url":"https:\/\/onlineappsdba.com\/","name":"","description":"Oracle Implementation &amp; Training Experts","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/onlineappsdba.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb","name":"Masroof Ahmad","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g","caption":"Masroof Ahmad"},"url":"https:\/\/onlineappsdba.com\/index.php\/author\/masroof\/"}]}},"_links":{"self":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts\/4731","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/users\/115"}],"replies":[{"embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/comments?post=4731"}],"version-history":[{"count":0,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts\/4731\/revisions"}],"wp:attachment":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/media?parent=4731"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/categories?post=4731"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/tags?post=4731"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}