Comments for Hands On Identity

Comment on claims-based authorizations conversation by Brad Tumy

Brad Tumy — Mon, 09 Jan 2012 13:17:33 +0000

Mahendra -

Can you provide some additional details about the custom token? Where is it coming from, what is it’s format? Any additional information that you can provide would help me formulate an answer for you.

Thanks,
Brad

Comment on claims-based authorizations conversation by Mahendra

Mahendra — Mon, 09 Jan 2012 12:34:58 +0000

Hi Brad,

This is Mahendra. I have the following requirement :

Authenticate a resource based on custom token if it is null or not. There is no need to map the token with an user record.
Environment is all 11g.

What is the best way to implement it? Is it possible to do it with just OAM 11g alone? Or does it require Oracle STS too? Please provide your inputs.

Also would you be able to provide a sample custom token format? Thanks in advance for your help.

Regards
Mahendra.

Comment on #OpenSSO #Fedlet Integration with #Oracle #Identity #Federation 11g by Brad Tumy

Brad Tumy — Thu, 29 Dec 2011 00:05:35 +0000

Mitra,

Check to make sure that the URL on the initiate page and the URL on the return URL is the same. I have noticed that if the hostname changed that you can get a 404. Also, I noticed if the name that the war is deployed as doesnt match what is expected that you can get a 404 as well.

Let me know if you need additional assistance.

Brad

Comment on #OpenSSO #Fedlet Integration with #Oracle #Identity #Federation 11g by mitra

mitra — Wed, 28 Dec 2011 23:37:49 +0000

I am getting a http error 404 (no such resource) AFTER a saml assertion is generated.

OIF 11.1.1.5 on linux hosted on weblogic 10.3.5
Fedlet 11.1.1.3 on windows on weblogic 10.3.5

I generated the fedletsample.war and deployed on the weblogic windows. I can go to fedletsample/index.jsp and then click on idp generated sso. I get OIF login prompt, provide credentials- but when the response is POST ed to the fedlet:7001/samplefedlet/fedletapplication, then it gets error 404.

Any clue?

Comment on A Challenging Access Policy #Oracle #OAM #IdM by Sajeesh Bhaskar

Sajeesh Bhaskar — Wed, 07 Dec 2011 13:37:26 +0000

Check 16.8.18 About Protected_JSessionId_Policy on http://www.orastudy.com/oradoc/selfstu/fusion/core.1111/e10043/osso_c_oam10g.htm

It is working for me.

Comment on Troubleshooting a Forms Based AuthN Scheme #Oracle #IdM #OAM by Brad Tumy

Brad Tumy — Sat, 19 Nov 2011 18:46:27 +0000

How will it breach the identity of the user? You have to know the values of both the username and password.

Comment on Troubleshooting a Forms Based AuthN Scheme #Oracle #IdM #OAM by Ashrock Mohammed

Ashrock Mohammed — Sat, 19 Nov 2011 18:28:07 +0000

Is there a way to hide this ?

This will breach the identity of the user.

Comment on Recover Weblogic server admin password (on Linux) by VJ

VJ — Fri, 04 Nov 2011 18:56:55 +0000

Thank you, this saved my day !

Comment on Exception java.lang.UnsatisfiedLinkError: libawt.so libXp.so.6: cannot open shared object file: No such file or directory by MP

MP — Fri, 04 Nov 2011 10:14:30 +0000

Hi,

Thanks for above solution.

I installed libXp rpm packages and its worked fine.

Comment on Upgrade #Oracle #OIF to 11.1.1.3 #IDM #Identity by Barry Ghotra

Barry Ghotra — Fri, 21 Oct 2011 04:49:36 +0000

HI Brad, this is Barry Ghotra again! I finally got my OVD/OID upgraded to 11.1.1.5. Some points to share:
a) the ORACLE_HOME/bin/ua seems to work only if you had a prior 10g installation.
b) I simply did the WLS upgrade to 10.3.5 , the upgraded the OID/OVD SOFTWARE to 11.1.1.5 and then ran the PATCH SET ASSISTANT to upgrade the schema.
c) Everything got upgraded and the versions indeed showed 11.1.1.5 in schema_version_registry as well as ODSM console. But EM still showed 11.1.1.2. I saw a note about registering the components using opmnctl in another blog:
/opmnctl updatecomponentregistration -componentName oid1 -Sport 3131 -Port 3060 , but that did not do anything. It’s also mentioned in the PATCHING guide.

Opened a SR with Oracle and they are saying it’s by design…go figure!!!