Sunday, May 31, 2015

Oracle Forms 11g with OAM 11g SSO Implementation

http://pitss.com/us/2012/10/08/integrating-forms-with-webgate-11g/ In Oracle Access Manager 11g and Oracle Forms 11gR2, you may either use WebGate or mod_osso for single sign-on with your forms application. In order to configure Forms with WebGate, you will need to: Open formsweb.cfg either through Enterprise Manager FMW Control (Forms –> Web Configuration) or going to the file in %DOMAIN_HOME%configfmwconfigserversWLS_FORMSapplicationsformsapp_11.1.2configformsweb.cfg Go to the section of your application If editing formsweb.cfg manually, add the parameter “ssoMode=webgate”. If editing from Enterprise Manager, go to the sso section from the drop-down menu and type in “webgate” in the ssoMode parameter. Save or apply all changes. Log into the OAM Administration Console. Under Policy Configuration, go to Authentication Schemes –> LDAPScheme. Double-click on LDAPScheme In the box next to “Challenge Parameters”, type in “ssoCookie=disablehttponly” Click Apply In your Resources for the 11g WebGate under “Application Domains” (still in Policy Configuration), click “Search” to pull up all resources. Change the Authentication Policy and Authorization Policy for both / and /…/* to “Public Resource Policy”. Click the Create button on top of the current results. Enter in the following: Type: HTTP Host Identifier: Your WebGate Host Identifier. NOTE: It should NOT be IAMSuiteAgent Resource URL: /forms/frmservlet?*oamMode=true* Protection Level: Protected Authentication Policy: Protected Resource Policy Authorization Policy: Protected Resource Policy Click Apply Click Apply in this page as well. Recopy the ObAccessClient.xml and cwallet.sso files to %OAM_MIDDLEWARE_HOME%ohs_homeinstancesohs_webgate11gconfigOHSohs1webgateconfig from the %OAM_DOMAIN_HOME%outputOAM11g_WebGate directory. Open up %OAM_MIDDLEWARE_HOME%ohs_homeinstancesohs_webgate11gconfigOHSohs1mod_wl_ohs.conf in a text editor (NOTE: Please make a backup of this file before making any modifications to it.). Add the following at the end of the file: SetHandler weblogic-handler WebLogicHost server.domain WebLogicPort 9001 SetHandler weblogic-handler WebLogicHost server.domain WebLogicPort 9002 Save and close the file. Restart your OHS WebGate instance. Reference: See Oracle Support note 1441904.1 for more information.

No comments:

Post a Comment