{"id":6302,"date":"2013-10-08T19:31:17","date_gmt":"2013-10-08T23:31:17","guid":{"rendered":"http:\/\/onlineappsdba.com\/?p=6302"},"modified":"2016-05-04T10:52:13","modified_gmt":"2016-05-04T14:52:13","slug":"configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/","title":{"rendered":"Configure Oracle Entitlement Server Client &#8211; Security Module 11gR2 (11.1.2) for OSB 11g with JRF : Part IV"},"content":{"rendered":"<p>This is <strong>part IV<\/strong> of <strong>Oracle Entitlement Server &amp; Client (Security Module) 11gR2 installation and Configuration<\/strong>, In this post I am going to integrate <a href=\"https:\/\/onlineappsdba.com\/index.php\/2010\/07\/04\/oracle-service-bus-11g-osb-installation-overview-for-single-node-deployment\/\"><strong>Oracle Service Bus (OSB) 11g <\/strong><\/a>(11.1.1.6) with OES 11g R2 (11.1.2.1) using <strong>OES Client<\/strong> (<strong>Security Module) for OSB<\/strong>.<\/p>\n<p>For Part I <strong>Install OES Server<\/strong> click <a href=\"https:\/\/onlineappsdba.com\/index.php\/2013\/03\/25\/install-configure-oes-11gr2-oracle-entitlement-server-part-i\/\">here<\/a> , For Part II <strong>Configure OES Server<\/strong> click <a href=\"https:\/\/onlineappsdba.com\/index.php\/2013\/03\/29\/install-and-configure-oes-11gr2-11-1-2-part-ii\/\">here<\/a>, and for <strong>Part III Install OES client software<\/strong> click <a href=\"https:\/\/onlineappsdba.com\/index.php\/2013\/07\/03\/install-oracle-entitlement-server-oes-client-security-module-sm-11gr2-11-1-2-part-iii\/\">here<\/a><\/p>\n<p><span style=\"color: #ff0000;\"><strong>Note<\/strong>: When you are installing OES client software in part III of this series, <strong>Install OES client software<\/strong> in same <strong>Middleware Home<\/strong> as OSB . OSB and OES client must be in <strong>separate<\/strong> <strong>Oracle Home<\/strong> but under <strong>same Middleware Home<\/strong>.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><strong><span style=\"text-decoration: underline;\">Things \u00a0you must know before configuring OSB with OES<\/span><\/strong><\/p>\n<ul>\n<li>OSB 11g is installed on WebLogic with <strong>JRF<\/strong> (<strong>Java Required Files<\/strong>) i.e. <strong>oracle_common<\/strong> directory.<\/li>\n<li>OES SM can talk to OES Server for policy distribution in one of three modes i.e. <strong>CONTROLLED-PUSH<\/strong>, <strong>CONTROLLED-PULL<\/strong>, <strong>UNCONTROLLED-PULL<\/strong> . <span style=\"color: #ff0000;\">More on these three policy distribution mode later<\/span>.<\/li>\n<li>For OES SM with JRF only supported distribution mode is <strong>CONTROLLED-PULL<\/strong> or <strong>UNCONTROLLED-PULL<\/strong> . <span style=\"color: #ff0000;\">CONTROLLED-PUSH is <span style=\"text-decoration: underline;\"><strong>NOT<\/strong><\/span> supported for OESSM with JRF<\/span><\/li>\n<li>OESSM for OSB comes with JRF and hence only <strong>supported policy distribution<\/strong> mode with OESSM for OSB is CONTROLLED-PULL or UNCONTROLLED-PULL<\/li>\n<li>In PULL MODE (CONTROLLED or UNCONTROLLED), Security Module talks direct to OES database (Policy Store) hence Database Port from <strong>OESSM<\/strong> to<strong> OES Database<\/strong> must be open.<\/li>\n<li>Supported OSB version for integration with OES 11gR2 (as of Oct 2013) is OSB version <strong>11.1.1.6 only<\/strong>. \u00a0<a href=\"https:\/\/onlineappsdba.com\/index.php\/2013\/09\/30\/beware-oes-11gr2-security-module-for-osb-is-not-yet-certified-with-osb-11-1-1-7-as-of-oct-2013\/\">OSB version 11.1.1.7 is not yet (as of Oct 2013) certified with OES 11gR2.<\/a><\/li>\n<li>OES does not secure resources used for OSB configuration like \/sbconsole<\/li>\n<li>OSB Security Module Configuration is detailed at\u00a0<a href=\"http:\/\/docs.oracle.com\/cd\/E37115_01\/admin.1112\/e27153\/manage_sm_config.htm#CEGBBEHI\">here<\/a> and\u00a0<a href=\"http:\/\/docs.oracle.com\/cd\/E37115_01\/admin.1112\/e27153\/secur_resource.htm#CIAFBDCJ\">here<\/a><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><span style=\"text-decoration: underline;\"><strong>Pre-Requisites steps before integrating OSB with OES<\/strong><\/span><\/p>\n<p>Make sure following steps are configured before configuring OES Security Module for OSB with JRF<\/p>\n<p><strong>1.<\/strong> OES server software is installed &amp; configured<\/p>\n<p><strong>2.<\/strong> OSB Server software is installed<\/p>\n<p><strong>3.<\/strong> OES SM is installed in same Middleware Home as OSB (<span style=\"color: #ff0000;\">OSB ORACLE_HOME and OES SM ORACLE_HOME are in different directory but under same Middleware Home<\/span>)<\/p>\n<p><strong>4.<\/strong> OSB Domain configuration is optional (<span style=\"color: #ff0000;\">If OSB domain is NOT yet configured then you can configure OSB domain during OES integration<\/span>). In this example OSB domain already exists.<\/p>\n<p><strong>5.<\/strong> As discussed in my previous post <a href=\"https:\/\/onlineappsdba.com\/index.php\/2013\/07\/08\/configure-oes-client-software-security-module-things-you-must-know\/\">things you must know while configuring OES SM<\/a>\u00a0and mentioned earlier in this post you must decide on <strong>Security Policy<\/strong>\u00a0<strong>distribution mode<\/strong> (<strong>Controlled Pull<\/strong>, or <strong>Non Controlled Pull<\/strong>) I am going to use <strong>Controlled-Pull<\/strong><\/p>\n<p><strong>Note<\/strong>: <span style=\"color: #ff0000;\">Controlled-Push is <strong>NOT<\/strong> supported with <strong>WebLogic\/OSB SM with JRF<\/strong> and hence I am using <strong>controlled-pull<\/strong>.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"text-decoration: underline;\"><strong>OSB integration with OES\u00a0<\/strong><\/span><\/p>\n<p><strong>1.<\/strong> Update <strong>smconfig.wls.controlled.prp<\/strong> on OSB node \u00a0(<span style=\"color: #ff0000;\">In this step we are creating properties file that will be used later in this post to create an instance of Security Module for OSB on OSB host<\/span>)<br \/>\ncd\u00a0 $OSB_MIDDLEWARE_HOME\/oesclient\/oessm\/SMConfigTool (<span style=\"color: #ff0000;\">where oesclient directory is OES CLIENT ORACLE_HOME<\/span>)<\/p>\n<p>cp smconfig.wls.controlled.prp <strong>smconfig.wls.osb_controlled_pull.prp<\/strong><\/p>\n<p>Open file <strong>smconfig.wls.osb_controlled_pull.prp <\/strong>file and change<\/p>\n<p><span style=\"color: #ff0000;\">oracle.security.jps.runtime.pd.client.policyDistributionMode=<strong>controlled-pull<\/strong><\/span><br \/>\n<span style=\"color: #ff0000;\"> oracle.security.jps.runtime.pd.client.sm_name=<strong>OSBSM<\/strong><\/span><br \/>\n<span style=\"color: #ff0000;\">oracle.security.jps.policystore.type=<strong>DB<\/strong><\/span><br \/>\n<span style=\"color: #ff0000;\">jdbc.url=jdbc:oracle:thin:@<strong>[DBHOST]:[DBPORT]\/[SERVICE_NAME]<\/strong><\/span><br \/>\n<span style=\"color: #ff0000;\">jdbc.driver=oracle.jdbc.OracleDriver<\/span><br \/>\n<span style=\"color: #ff0000;\">datasource.jndi.name=jdbc\/APMDBDS<\/span><br \/>\n<span style=\"color: #ff0000;\">security.principal=<strong>OES_OPSS<\/strong><\/span><br \/>\n<span style=\"color: #ff0000;\">security.credential=Password1<\/span><br \/>\n<span style=\"color: #ff0000;\">bootstrap.security.principal.key=oes_sm_key<\/span><br \/>\n<span style=\"color: #ff0000;\">bootstrap.security.principal.map=oes_sm_map<\/span><br \/>\n<span style=\"color: #ff0000;\">oracle.security.jps.farm.name=<strong>cn=oes_domain<\/strong><\/span><br \/>\n<span style=\"color: #ff0000;\">oracle.security.jps.ldap.root.name=<strong>cn=jpsroot<\/strong><\/span><\/p>\n<p><span style=\"color: #000000;\">In controlled pull or uncontrolled pull you<strong> don&#8217;t<\/strong> define below two properties<\/span><br \/>\n<span style=\"color: #ff0000;\">oracle.security.jps.runtime.pd.client.RegistrationServerHost<\/span><br \/>\n<span style=\"color: #ff0000;\">oracle.security.jps.runtime.pd.client.RegistrationServerPort<\/span><\/p>\n<p>Note:<\/p>\n<p><strong>a) Controlled-Pul<\/strong>l here represents that Policies from OES Policy Store (Database) will be<strong> pulled by<\/strong> OES SM (Security Module) for OSB in controlled manner.<\/p>\n<p><strong>b) OSBSM<\/strong> is name of security module instance<\/p>\n<p><strong>c) DB<\/strong> means OES policies are stored in a database<\/p>\n<p><strong>d)<\/strong>\u00a0<strong>[DBHOST]:[DBPORT]\/[SERVICE_NAME] <\/strong>is database details of OES Policy Store Database<\/p>\n<p><strong>e)<\/strong>\u00a0<strong>OES_OPSS <\/strong>is the name of OES Policy Store schema name in OES Database<\/p>\n<p><strong>f) welcome1<\/strong> is password of OES_OPSS schema<\/p>\n<p><strong>g)<\/strong>\u00a0<strong>cn=oes_domain <\/strong>is domain name of OES server (note that this name is WebLogic Domain name where OES is deployed)<\/p>\n<p><strong>h)\u00a0cn=jpsroot <\/strong>is location of Policy Store of OES domain<br \/>\n<strong>2.<\/strong> Run configuration tool<br \/>\n$OES_CLIENT_HOME\/oessm\/bin\/config.sh -onJRF -smType wls -prpFileName $OES_CLIENT_HOME\/oessm\/SMConfigTool\/<strong>smconfig.wls.osb_controlled_pull.prp<\/strong> \u2013serverLocation &lt;LocationofWebLogicServerHomeOfOSB&gt;<\/p>\n<p><span style=\"color: #ff0000;\">export JAVA_HOME=\/oracle\/apps\/atul\/mw\/jdk6<\/span><\/p>\n<p><span style=\"color: #ff0000;\">cd \/oracle\/apps\/atul\/mw1035\/oesclient\/oessm\/bin\u00a0<\/span><\/p>\n<p><span style=\"color: #ff0000;\">.\/config.sh -onJRF \u2013smConfigId SMFORWC3 -prpFileName \/oracle\/apps\/atul\/mw1035\/oesclient\/oessm\/ SMConfigTool\/ smconfig.wls.controlled_pull.prp \u2013serverLocation \/oracle\/apps\/atul\/mw1035\/wlserver_10.3<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><strong>Note:<\/strong> Above command will do two things<\/p>\n<p><strong>a)<\/strong> Create Security Module instance directory under $OES_CLIENT_HOME\/oes_sm_instances\/[SMConfigID] i.e. $OES_CLIENT_HOME\/oes_sm_instances\/OSBSM<br \/>\n<strong>b)<\/strong> Starts installer to create\/extend domain to include OESSM (as shown below)<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/08\/oesclient_1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-5939\" title=\"oesclient_1\" src=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/08\/oesclient_1.png\" alt=\"\" width=\"362\" height=\"235\" srcset=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/08\/oesclient_1.png 362w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/08\/oesclient_1-300x194.png 300w\" sizes=\"auto, (max-width: 362px) 100vw, 362px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #ff0000;\"><strong>Note:<\/strong><\/span> If there is no OSB WebLogic Domain then select &#8220;<strong>Create a New WebLogic Domain<\/strong>&#8220;, if OSB domain already exists then select &#8220;<strong>Extend an existing WebLogic Domain<\/strong>&#8221;<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/09\/oessm_domain.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6337\" title=\"oessm_domain\" src=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/09\/oessm_domain.png\" alt=\"\" width=\"317\" height=\"303\" srcset=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/09\/oessm_domain.png 317w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/09\/oessm_domain-300x286.png 300w\" sizes=\"auto, (max-width: 317px) 100vw, 317px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #ff0000;\"><strong>Note:<\/strong><\/span> Select the OSB domain (only if you are extending OSB domain to include OESSM). If you are creating new OSB Domain, then enter location of OSB Domain.<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/09\/OSSM_domain_template.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6338\" title=\"OSSM_domain_template\" src=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/09\/OSSM_domain_template.png\" alt=\"\" width=\"450\" height=\"388\" srcset=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/09\/OSSM_domain_template.png 450w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/09\/OSSM_domain_template-300x258.png 300w\" sizes=\"auto, (max-width: 450px) 100vw, 450px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #ff0000;\"><strong>Note:<\/strong><\/span> Select Template &#8220;<strong>Oracle Entitlement Server Security Module on Service Bus<\/strong>&#8221; . If you are creating new WebLogic Domain then apart from\u00a0&#8220;<strong>Oracle Entitlement Server Security Module on Service Bus<\/strong>&#8221; \u00a0select OSB related templates.<\/p>\n<p><span style=\"color: #ff0000;\">In this example you can see that Oracle Service Bus is already selected and Greyed out.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p>Follow steps to complete domain extension .<\/p>\n<p>&nbsp;<\/p>\n<p><strong>3.<\/strong> Update<strong> jps-config.xml<\/strong> from OSB domain for &#8220;<strong>OES Security Module for OSB<\/strong>&#8221; by using <strong>OESSMCONFIG<\/strong> tool<\/p>\n<p><span style=\"color: #ff0000;\">cd $OESCLIENT_ORACLE_HOME\/oes_sm_instances\/[OESSM_NAME]\/bin\/\u00a0<\/span>(where OESSM_NAME in my case is OSBSM )<\/p>\n<p><span style=\"color: #ff0000;\">.\/oessmconfig.sh \u00a0-jpsconfig [OSB_DOMAIN]\/config\/fmwconfig\/jps-config.xml<\/span> \u00a0(jps-config.xml must be from OSB DOMAIN\/config\/fmwconfig where you wish to configure OES Security Module )<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/09\/OESSM_CONfig_SM.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6342\" title=\"OESSM_CONfig_SM\" src=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/09\/OESSM_CONfig_SM.png\" alt=\"\" width=\"450\" height=\"484\" srcset=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/09\/OESSM_CONfig_SM.png 450w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/09\/OESSM_CONfig_SM-278x300.png 278w\" sizes=\"auto, (max-width: 450px) 100vw, 450px\" \/><\/a><\/p>\n<p>Change<\/p>\n<p><strong>a)<\/strong> Policy Distribution Mode to &#8220;<strong>Controlled-Pull<\/strong>&#8221;<\/p>\n<p><strong>b)<\/strong> Policy Store to &#8220;Database Configuration through URL\u00a0<strong>jdbc.url=jdbc:oracle:thin:@[DBHOST]:[DBPORT]\/[SERVICE_NAME]\u00a0<\/strong>is database details of OES Policy Store Database<\/p>\n<p><strong>OES_OPSS\u00a0<\/strong>is the name of OES Policy Store schema name in OES Database<\/p>\n<p><strong>welcome1<\/strong>\u00a0is password of OES_OPSS schema<\/p>\n<p><strong>c)<\/strong>\u00a0<strong>cn=oes_domain\u00a0<\/strong>is domain name of <strong>OES server<\/strong> (<span style=\"color: #ff0000;\">note that this name is WebLogic Domain name where OES is deployed<\/span>)<\/p>\n<p><strong>d)\u00a0cn=jpsroot\u00a0<\/strong>is location of Policy Store of <strong>OES domain<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p><strong>4.<\/strong> Create <strong>Application<\/strong> &amp; Register <strong>Security Module<\/strong> in OES \u00a0(http:\/\/OESHost:adminPort\/apm )<\/p>\n<p><strong>4.1 Create Application in OES<\/strong><\/p>\n<p>APM : <strong>Authorization Management<\/strong> -&gt; <strong>Applications<\/strong> -&gt; <strong>New<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/09\/oes_app_1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6341\" title=\"oes_app_1\" src=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/09\/oes_app_1.png\" alt=\"\" width=\"450\" height=\"241\" srcset=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/09\/oes_app_1.png 450w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/09\/oes_app_1-300x160.png 300w\" sizes=\"auto, (max-width: 450px) 100vw, 450px\" \/><\/a><\/p>\n<p><a href=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/09\/oes_app_2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6340\" title=\"oes_app_2\" src=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/09\/oes_app_2.png\" alt=\"\" width=\"450\" height=\"361\" srcset=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/09\/oes_app_2.png 450w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/09\/oes_app_2-300x240.png 300w\" sizes=\"auto, (max-width: 450px) 100vw, 450px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><strong>4.2<\/strong> <strong>Create Security Module in OES<\/strong><\/p>\n<p>APM : <strong>System Configuration<\/strong> -&gt;<strong> Security Modules<\/strong> -&gt; <strong>New<\/strong><br \/>\nEnter Display Name<br \/>\nName<br \/>\nDescription<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/08\/oessm_1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-5943\" title=\"oessm_1\" src=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/08\/oessm_1.png\" alt=\"\" width=\"459\" height=\"212\" srcset=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/08\/oessm_1.png 459w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/08\/oessm_1-300x138.png 300w\" sizes=\"auto, (max-width: 459px) 100vw, 459px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/osmsm_config.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6421\" title=\"osmsm_config\" src=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/osmsm_config.png\" alt=\"\" width=\"450\" height=\"295\" srcset=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/osmsm_config.png 450w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/osmsm_config-300x196.png 300w\" sizes=\"auto, (max-width: 450px) 100vw, 450px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><strong>4.3\u00a0Bind\u00a0Security Module to Application in OES<\/strong><\/p>\n<p>APM :\u00a0<strong>System Configuration<\/strong>\u00a0-&gt;<strong>\u00a0Security Modules<\/strong>\u00a0-&gt; <strong>OSBSM -&gt; Add\u00a0<\/strong><\/p>\n<p><a href=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/oessm_config_2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6422\" title=\"oessm_config_2\" src=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/oessm_config_2.png\" alt=\"\" width=\"450\" height=\"297\" srcset=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/oessm_config_2.png 450w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/oessm_config_2-300x198.png 300w\" sizes=\"auto, (max-width: 450px) 100vw, 450px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><strong>5.<\/strong>\u00a0 In OSB Domain, <strong>OES Proxy Provider<\/strong> must be enabled to secure and protect OSB runtime so next step is to configure <strong>OES Proxy Authorization Provider<\/strong><\/p>\n<p><strong>OSB WebLogic Domain<\/strong> : <strong>Security Realm<\/strong> -&gt; <strong>myrealm<\/strong> -&gt; <strong>Providers<\/strong> -&gt; <strong>Authorization<\/strong> -&gt; <strong>New<\/strong><\/p>\n<p><a href=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/osb_authorization_provider.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6381\" title=\"osb_authorization_provider\" src=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/osb_authorization_provider.png\" alt=\"\" width=\"450\" height=\"256\" srcset=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/osb_authorization_provider.png 450w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/osb_authorization_provider-300x170.png 300w\" sizes=\"auto, (max-width: 450px) 100vw, 450px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/osb_authorization_2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6380\" title=\"osb_authorization_2\" src=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/osb_authorization_2.png\" alt=\"\" width=\"332\" height=\"366\" srcset=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/osb_authorization_2.png 332w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/osb_authorization_2-272x300.png 272w\" sizes=\"auto, (max-width: 332px) 100vw, 332px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><strong>5.1<\/strong> Re-order the <strong>Authorization Provider<\/strong> so that <strong>OES Authorization Proxy<\/strong> is first provider<\/p>\n<p><a href=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/oes_authorization_3.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6379\" title=\"oes_authorization_3\" src=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/oes_authorization_3.png\" alt=\"\" width=\"378\" height=\"425\" srcset=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/oes_authorization_3.png 378w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/oes_authorization_3-266x300.png 266w\" sizes=\"auto, (max-width: 378px) 100vw, 378px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><strong>5.2<\/strong> Restart <strong>WebLogic Admin<\/strong> &amp; <strong>Managed Server<\/strong> of OSB<\/p>\n<p>&nbsp;<\/p>\n<p><strong>6.<\/strong> Distribute <strong>Application Policy<\/strong> to Security Module (SM) for <strong>OSB<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/Policy_Distribution_OSB.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-6388\" title=\"Policy_Distribution_OSB\" src=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/Policy_Distribution_OSB.png\" alt=\"\" width=\"450\" height=\"282\" srcset=\"https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/Policy_Distribution_OSB.png 450w, https:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/10\/Policy_Distribution_OSB-300x188.png 300w\" sizes=\"auto, (max-width: 450px) 100vw, 450px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #ff0000;\"><strong>More on Policy Modelling for OSB Resources in OES Server in upcoming posts\u00a0<\/strong><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>This is part IV of Oracle Entitlement Server &amp; Client (Security Module) 11gR2 installation and Configuration, In this post I [&hellip;]<\/p>\n","protected":false},"author":115,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[277],"tags":[],"class_list":["post-6302","post","type-post","status-publish","format-standard","hentry","category-osb"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.8 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Configure Oracle Entitlement Server Client - Security Module 11gR2 (11.1.2) for OSB 11g with JRF : Part IV -<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Configure Oracle Entitlement Server Client - Security Module 11gR2 (11.1.2) for OSB 11g with JRF : Part IV -\" \/>\n<meta property=\"og:description\" content=\"This is part IV of Oracle Entitlement Server &amp; Client (Security Module) 11gR2 installation and Configuration, In this post I [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/\" \/>\n<meta property=\"article:published_time\" content=\"2013-10-08T23:31:17+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2016-05-04T14:52:13+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/08\/oesclient_1.png\" \/>\n<meta name=\"author\" content=\"Masroof Ahmad\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Masroof Ahmad\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/\",\"url\":\"https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/\",\"name\":\"Configure Oracle Entitlement Server Client - Security Module 11gR2 (11.1.2) for OSB 11g with JRF : Part IV -\",\"isPartOf\":{\"@id\":\"https:\/\/onlineappsdba.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/#primaryimage\"},\"thumbnailUrl\":\"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/08\/oesclient_1.png\",\"datePublished\":\"2013-10-08T23:31:17+00:00\",\"dateModified\":\"2016-05-04T14:52:13+00:00\",\"author\":{\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb\"},\"breadcrumb\":{\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/#primaryimage\",\"url\":\"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/08\/oesclient_1.png\",\"contentUrl\":\"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/08\/oesclient_1.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/onlineappsdba.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Configure Oracle Entitlement Server Client &#8211; Security Module 11gR2 (11.1.2) for OSB 11g with JRF : Part IV\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/onlineappsdba.com\/#website\",\"url\":\"https:\/\/onlineappsdba.com\/\",\"name\":\"\",\"description\":\"Oracle Implementation &amp; Training Experts\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/onlineappsdba.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb\",\"name\":\"Masroof Ahmad\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g\",\"caption\":\"Masroof Ahmad\"},\"url\":\"https:\/\/onlineappsdba.com\/index.php\/author\/masroof\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Configure Oracle Entitlement Server Client - Security Module 11gR2 (11.1.2) for OSB 11g with JRF : Part IV -","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/","og_locale":"en_US","og_type":"article","og_title":"Configure Oracle Entitlement Server Client - Security Module 11gR2 (11.1.2) for OSB 11g with JRF : Part IV -","og_description":"This is part IV of Oracle Entitlement Server &amp; Client (Security Module) 11gR2 installation and Configuration, In this post I [&hellip;]","og_url":"https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/","article_published_time":"2013-10-08T23:31:17+00:00","article_modified_time":"2016-05-04T14:52:13+00:00","og_image":[{"url":"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/08\/oesclient_1.png","type":"","width":"","height":""}],"author":"Masroof Ahmad","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Masroof Ahmad","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/","url":"https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/","name":"Configure Oracle Entitlement Server Client - Security Module 11gR2 (11.1.2) for OSB 11g with JRF : Part IV -","isPartOf":{"@id":"https:\/\/onlineappsdba.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/#primaryimage"},"image":{"@id":"https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/#primaryimage"},"thumbnailUrl":"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/08\/oesclient_1.png","datePublished":"2013-10-08T23:31:17+00:00","dateModified":"2016-05-04T14:52:13+00:00","author":{"@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb"},"breadcrumb":{"@id":"https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/#primaryimage","url":"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/08\/oesclient_1.png","contentUrl":"http:\/\/onlineappsdba.com\/wp-content\/uploads\/2013\/08\/oesclient_1.png"},{"@type":"BreadcrumbList","@id":"https:\/\/onlineappsdba.com\/index.php\/2013\/10\/08\/configure-oracle-entitlement-server-client-security-module-11gr2-11-1-2-for-osb-11g-with-jrf-part-iv\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/onlineappsdba.com\/"},{"@type":"ListItem","position":2,"name":"Configure Oracle Entitlement Server Client &#8211; Security Module 11gR2 (11.1.2) for OSB 11g with JRF : Part IV"}]},{"@type":"WebSite","@id":"https:\/\/onlineappsdba.com\/#website","url":"https:\/\/onlineappsdba.com\/","name":"","description":"Oracle Implementation &amp; Training Experts","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/onlineappsdba.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb","name":"Masroof Ahmad","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g","caption":"Masroof Ahmad"},"url":"https:\/\/onlineappsdba.com\/index.php\/author\/masroof\/"}]}},"_links":{"self":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts\/6302","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/users\/115"}],"replies":[{"embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/comments?post=6302"}],"version-history":[{"count":0,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts\/6302\/revisions"}],"wp:attachment":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/media?parent=6302"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/categories?post=6302"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/tags?post=6302"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}