Contents

List of Examples

List of Figures

List of Tables

Title and Copyright Information

Preface

• Intended Audience
• Documentation Accessibility
• Related Documents
• Conventions

1 What is an Enterprise Deployment?

• 1.1 Description
• 1.2 Benefits
  • 1.2.1 Built-in Security
  • 1.2.2 High Availability
• 1.3 In This Guide
• 1.4 How to Use This Guide
• 1.5 Hardware Requirements
• 1.6 Variants
  • 1.6.1 Multi master Replication with Oracle Internet Directory
  • 1.6.2 OracleAS Cold Failover Cluster (Identity Management)
  • 1.6.3 Forward and Reverse Proxies for Oracle HTTP Server

2 Configuring the Data Tier

• 2.1 Installing the Oracle Application Server Metadata Repository for the Security Infrastructure
  • 2.1.1 Configuring the Time out Value in the sqlnet.ora File
• 2.2 Configuring Fast Connection Failover for the RAC Database on INFRADBHOST1 and INFRADBHOST2
• 2.3 Installing the Oracle Internet Directory Instances in the Data Tier
  • 2.3.1 Installing the First Oracle Internet Directory Instance
  • 2.3.2 Installing the Second Oracle Internet Directory Instance
• 2.4 Configuring the Virtual Server to Use the Load Balancing Router
• 2.5 Testing the Oracle Internet Directory Instances
• 2.6 Installing the ORABPEL, ORAESB and ORAWSM Schemas

3 Installing and Configuring the mySOACompany Web and Application Tiers

• 3.1 Installing and Configuring the Web and Application Tiers
  • 3.1.1 Installing the Oracle HTTP Servers on WEBHOST1 and WEBHOST2
  • 3.1.2 Renaming Apache 2.0 Web Server Instances
  • 3.1.3 Configuring the Cluster Gateway
  • 3.1.4 Configuring the Firewall to Prevent Access to Application Server Control Console
  • 3.1.5 Installing the Application Server Instances on APPHOST1 and APPHOST2
  • 3.1.6 Disabling Application Server Control Console on APPHOST2-4 (Optional)
  • 3.1.7 Listing Occupied Ports
  • 3.1.8 Creating OC4J Instances on APPHOST1 and APPHOST2
  • 3.1.9 Configuring the Oracle HTTP Server with the Load Balancing Router
  • 3.1.10 Configuring the esbd.myco.com URL for Internal Use
  • 3.1.11 Installing the Oracle BPEL Process Manager Instances on APPHOST1 and APPHOST2 from the Oracle BPEL Process Manager (10.1.3.1.0) CD
  • 3.1.12 Configuring the Cluster of BPEL Instances
    • 3.1.12.1 Necessary Steps for Cluster-based BPEL Deployments
  • 3.1.13 Installing the ESB Runtime Instances on APPHOST1 and APPHOST2 from the Oracle Enterprise Bus (10.1.3.1.0) CD
  • 3.1.14 Resolving Out-of-Memory Errors in the BPEL Runtime Console
  • 3.1.15 Installing the ESB Repository Instance on APPHOST1 and APPHOST2
  • 3.1.16 Configuring Service Failover for the OC4J_ESBDT Instances
  • 3.1.17 Configuring ESB for Singleton Adapters
  • 3.1.18 Configuring the Cluster of ESB Runtime Instances on APPHOST1 and APPHOST2
  • 3.1.19 Updating the ESB Metadata
  • 3.1.20 Configuring the Slide Repository to use the Database as the Repository
  • 3.1.21 Configuring JNDIs for the Topic and Topic Connection Factory
  • 3.1.22 Installing the OWSM Instances on APPHOST1 and APPHOST2 from the Oracle Web Services Manager (10.1.3.1.0) CD
  • 3.1.23 Disabling Applications on APPHOST1 and APPHOST2
  • 3.1.24 Configuring the OWSM Cluster
  • 3.1.25 Configuring the Firewall for the Application Tier
  • 3.1.26 Deploying J2EE Applications
  • 3.1.27 Configuring Static Discovery to Eliminate Multicast Traffic
• 3.2 Configuring Fast Connection Failover for the RAC Database on APPHOST1 and APPHOST2
• 3.3 Managing Oracle Application Server Component Connections
• 3.4 Configuring Network Communication
• 3.5 Configuring Application Authentication and Authorization
  • 3.5.1 Configuring the Cluster of BPEL Instances on APPHOST1 and APPHOST2 to use Oracle Internet Directory
  • 3.5.2 Configuring Java SSO
  • 3.5.3 Disabling the Worklist Application

4 Installing and Configuring Oracle Access Manager

• 4.1 Understanding Oracle Access Manager Components
• 4.2 The mySOACompany Oracle Access Manager Authentication and Authorization Process
• 4.3 Preparing to Install Oracle Access Manager Components
• 4.4 Installing the First Identity Server on IDMHOST1
• 4.5 Installing WebPass on WEBHOST1
• 4.6 Configuring the First Identity Server
• 4.7 Installing the Second Identity Server on IDMHOST2
• 4.8 Installing WebPass on WEBHOST2
• 4.9 Configuring the Second Identity Server
• 4.10 Installing the Access System
  • 4.10.1 Installing the Web Server for the Policy Manager
  • 4.10.2 Installing WebPass for the Policy Manager
  • 4.10.3 Installing the Policy Manager on ADMINHOST
  • 4.10.4 Configuring the Policy Manager
  • 4.10.5 Installing the Access Server on IDMHOST1 and IDMHOST2
  • 4.10.6 Installing the WebGate
• 4.11 Configuring the Access Server with the Load Balancing Router
• 4.12 Installing the Access Server SDK
  • 4.12.1 Installing the Access SDK on APPHOST1 and APPHOST2 (Windows)
  • 4.12.2 Installing the Access SDK on APPHOST1 and APPHOST2 (Solaris and Linux)
  • 4.12.3 Configuring the AccessGate on APPHOST1 and APPHOST2
• 4.13 Configuring Oracle Access Manager Single Sign-On for OC4J Applications
  • 4.13.1 Configuring Access to SOA Components
  • 4.13.2 Configuring the Login Protected by Oracle Access Manager
  • 4.13.3 Configuring the Logout
• 4.14 Configuring the Second Identity Server as a Failover Server
  • 4.14.1 Configuring Failover Between the Secondary Identity Server on IDMHOST2 and the WebPass
• 4.15 Configuring the Second Access Server as a Failover Server
  • 4.15.1 Configuring Failover Between the Access Server and WebGate
• 4.16 Mitigating Identity Server Product Installation Failures on Linux
• 4.17 Configuring Directory Server Failover
  • 4.17.1 Configuring Directory Failover for User Data
  • 4.17.2 Configuring Directory Failover for Oracle and Policy Data
    • 4.17.2.1 Configuring Identity Server Failover for Oracle Data
• 4.18 Configuring Access Server Directory Failover for Oracle and Policy Data
  • 4.18.1 Adding a Failover Directory Server Using the ConfigureAAAServer Tool
• 4.19 Configuring Policy Manager Failover
• 4.20 Creating Failover LDAP Directory Server Profiles for the Identity and Access Servers
  • 4.20.1 Creating a Directory Server Profile for the Identity Servers
  • 4.20.2 Creating a Directory Server Profile for the Access Servers
• 4.21 Verifying the Status of the Identity Servers

5 Installing and Configuring Oracle Single Sign-On and Oracle Delegated Administration Services

• 5.1 Setting up the Load Balancing Router
• 5.2 Installing the Oracle HTTP Servers on WEBHOST3 and WEBHOST4
  • 5.2.1 Renaming Apache 2.0 Web Server Instances
  • 5.2.2 Configuring the Oracle HTTP Server with the Load Balancing Router
  • 5.2.3 Configuring the esbd.myco.com URL for Internal Use
• 5.3 Installing and Configuring Oracle Single Sign-On
  • 5.3.1 Installing the First Identity Management Configuration
  • 5.3.2 Testing the Identity Management Components With Oracle Internet Directory
  • 5.3.3 Installing the Second Identity Management Configuration
• 5.4 Reconfiguring Oracle Single Sign-On and Oracle Delegated Administration Services with the Oracle HTTP Servers
• 5.5 Testing the Identity Management Tier Components
• 5.6 Configuring Session State Replication for the OC4J_SECURITY Instance
• 5.7 Disabling the Oracle HTTP Server on the Identity Management Tier

6 Maintaining the SOA Suite

• 6.1 Managing the SOA Suite
• 6.2 Enabling Disaster Recovery

Index