Oracle Access Manager 12c useful docs

OAM 12c installation & configuration instructions

IAM infrastructure(weblogic) installation:

http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/identity%20management%2012c/oam%2012c%20(12.2.1.3)/getting_started_series/3-installoam/index-template.html

OAM 12c configuration steps:

http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/identity%20management%2012c/oam%2012c%20(12.2.1.3)/getting_started_series/4-configoam/index-template.html

Configure OUD as directory server for OAM 12c:

http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/identity%20management%2012c/oam%2012c%20(12.2.1.3)/getting_started_series/5-configureoud/index-template.html

Install & Configure OHS 12c:

http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/identity%20management%2012c/oam%2012c%20(12.2.1.3)/getting_started_series/6-configureohs/index-template.html

Configure OHS 12c OAM webgate:

http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/identity%20management%2012c/oam%2012c%20(12.2.1.3)/getting_started_series/7-configurewebgate/index-template.html

Protect application deployed in Weblogic using OAM 12c:

http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/identity%20management%2012c/oam%2012c%20(12.2.1.3)/getting_started_series/8-protectwebapps/index-template.html

Thanks
Siva Pokuri.

Oracle Unified Directory 12c (12.2.1.3.0) standalone installation & configuration

Oracle Unified Directory 12c installation & configuration

Download link: http://www.oracle.com/technetwork/middleware/id-mgmt/oid-11gr2-2104316.html

Reference links:

https://docs.oracle.com/middleware/12213/oud/OUDIG/installing-oracle-unified-directory-software.htm#OUDIG186

https://docs.oracle.com/middleware/12213/oud/OUDIG/setting-oracle-unified-directory-directory-server.htm#GUID-D6FA4749-9D66-4890-B9E4-F81E9DE948C6

OUD (Oracle Unified Directory) 12c PS3 (12.2.1.3.0) is released!

Oracle Unified Directory 12cPS3 (12.2.1.3.0) is released!

Download link: http://www.oracle.com/technetwork/middleware/id-mgmt/downloads/oid-11gr2-2104316.html

Oracle Note on OUD 12c installation and configuration:

OUD 12c: How to Download and Install OUD 12c in Standalone Mode (with No Domain Configuration) (Doc ID 2298379.1)

Fix: OAAM 11g R2 PS3 issue to generate OMA offline secret key

Issue:

Unable to generate OMA offline secret key when using OUD as OAM user store(there is no issue when tested with weblogic embedded LDAP).

Error from log file:

<Jul 12, 2016 11:30:49 AM EDT> <Warning> <oracle.ods.virtualization.engine.backend.jndi.OUD> <LIBOVD-40066> <Remote Server Failure:pokuri.demo.com:1389.

javax.naming.NamingException: [LDAP: error code 123 - You do not have sufficient privileges to use the proxied authorization control]; remaining name 'cn=users,dc=demo,dc=com'

at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3169)

at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:3013)

at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2820)

at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1829)

Solution:

Uncheck "Proxy Authentication" option in "OAuth User Profile Service Configuration"(Proxy Authentication is enabled by default) then click on Apply.

Extend OAM 11g Password Policy Schema into OUD and Test Force Change password scenario

Steps:

1. Login into OUD Server
2. Navigate to /home/oracle/Oracle/Middleware_OUD/asinst_1/OUD/bin
3. Execute below command

./ldapmodify -h pokuri.demo.com -D "cn=Directory Manager" -w Abcd1234 -p 10389 -f /opt/oracle/Oracle/Middleware_OAM/Oracle_IDM1/oam/server/pswdservice/ldif/OUD_PWDPersonSchema.ldif –v

Note:

- OAM & OUD installed in same machine.

- “OUD_PWDPersonSchema.ldif” is the schema file which will come by default with OAM product

Success Message:

4. Login to ODSM console and validate extended schema.

5. Add “oblixorgperson” & “oblixPersonPwdPolicy” object classes to user entry

6. Login to OAM console and click on “Authentication Modules”

7. Search and click on “Password Policy Validation Module”

8. Update Steps as shown below and click on “Apply”

User Identification Step  

   KEY_IDENTITY_STORE_REF - OUD

   KEY_SEARCH_BASE_URL - ou=People,dc=demo,dc=com

User Authentication step

   KEY_IDENTITY_STORE_REF - OUD

   KEY_PROP_AUTHN_EXCEPTION - true

User Password status Step

   PLUGIN_EXECUTION_MODE - PSWDONLY

   KEY_IDENTITY_STORE_REF - OUD

   URL_ACTION - REDIRECT_POST

   NEW_USERPSWD_BEHAVIOR - FORCECHANGEPASSWORD

   POLICY_SCHEMA - OAM10G

   CHALLENGES_SUPPORTED – FALSE

   DISABLED_STATUS_SUPPORT - TRUE

     9. Now add “PasswordPolicyValidationSchema” in Application Domain

     10. Restart OAM Service

Testing

1. Add “obpasswordchangeflag” and add value as “true” which will force the user to change password as soon as user tries to access the OAM protected resource.

2. Access Protected Resource http://pokuri.demo.com:7777/ and enter user credentials

3. Enter current and new passwords

4. Password Reset Success Screen and click on “Continue” to land in application welcome page

5. Now check LDAP attribute for change password flag. It will be updated to “false”

Hope this helps some one out there!!

-- Siva Pokuri.