Contents

List of Examples

List of Figures

List of Tables

Title and Copyright Information

Preface

• Intended Audience
• Documentation Accessibility
• Related Documents
• Conventions

1 What is an Enterprise Deployment?

• 1.1 Description
• 1.2 Benefits
  • 1.2.1 Built-in Security
  • 1.2.2 High Availability
• 1.3 Enterprise Deployments In This Guide
• 1.4 Hardware Requirements
• 1.5 Variants
  • 1.5.1 Multimaster Replication with Oracle Internet Directory
  • 1.5.2 OracleAS Cold Failover Cluster (Identity Management)
  • 1.5.3 Forward and Reverse Proxies for Oracle HTTP Server
  • 1.5.4 Variants for J2EE Applications
• 1.6 How to Use This Guide

2 Installing and Configuring the Security Infrastructure

• 2.1 Installing the Oracle Application Server Metadata Repository for the Security Infrastructure
  • 2.1.1 Installing the OracleAS RepCA
  • 2.1.2 Installing the Metadata Repository in a Database Using Raw Devices
  • 2.1.3 Installing the Metadata Repository in an Oracle Cluster File System (OCFS)
  • 2.1.4 Configuring the Time out Value in the sqlnet.ora File
• 2.2 Installing the Oracle Internet Directory Instances in the Data Tier
  • 2.2.1 Installing the First Oracle Internet Directory
  • 2.2.2 Installing the Second Oracle Internet Directory
• 2.3 Configuring the Virtual Server to Use the Load Balancing Router
• 2.4 Testing the Data Tier Components

3 Installing and Configuring the myJ2EECompany Application Infrastructure

• 3.1 Installing and Configuring the Security Infrastructure
• 3.2 Installing and Configuring the Application and Web Tiers
  • 3.2.1 Installing the Application Tier Application Server Instances on APPHOST1 and APPHOST2
  • 3.2.2 Installing the Oracle HTTP Servers on WEBHOST1 and WEBHOST2
• 3.3 Configuring the Oracle HTTP Server with Apache 2.0 for Use With Oracle Application Server Single Sign-On/Oracle Delegated Administration Services
• 3.4 Configuring the Oracle HTTP Server with the Load Balancing Router
• 3.5 Configuring OC4J Routing
• 3.6 Managing Oracle Application Server Component Connections
• 3.7 Configuring Application Authentication and Authorization
  • 3.7.1 Using the Oracle Application Server Java Authentication and Authorization Service (JAAS) Provider
  • 3.7.2 Adding Administrative Users and Groups to Oracle Internet Directory for the OracleAS JAAS Provider

4 Installing and Configuring JAZN-SSO/DAS

• 4.1 Setting up the Load Balancing Router
• 4.2 Installing and Configuring Oracle Application Server Single Sign-On
  • 4.2.1 Installing the First Identity Management Configuration
  • 4.2.2 Testing the Identity Management Components With Oracle Internet Directory
  • 4.2.3 Installing the Second Identity Management Configuration
• 4.3 Reconfiguring Oracle Application Server Single Sign-On and Oracle Delegated Administration Services with the Oracle HTTP Servers
• 4.4 Testing the Identity Management Tier Components
• 4.5 Configuring Session State Replication for the OC4J_SECURITY Instance
• 4.6 Disabling the Oracle HTTP Server on the Identity Management Tier

5 Installing and Configuring Oracle Access Manager

• 5.1 Understanding Oracle Access Manager Components
• 5.2 The myJ2EECompany Oracle Access Manager Authentication and Authorization Process
• 5.3 Preparing to Install Oracle Access Manager Components
• 5.4 Installing the First Identity Server on IDMHOST1
• 5.5 Installing WebPass on WEBHOST1
• 5.6 Configuring the First Identity Server
• 5.7 Installing the Second Identity Server on IDMHOST2
• 5.8 Installing WebPass on WEBHOST2
• 5.9 Configuring the Second Identity Server
• 5.10 Installing the Access System
  • 5.10.1 Installing the Web Server for the Policy Manager
  • 5.10.2 Installing WebPass for the Policy Manager
  • 5.10.3 Installing the Policy Manager on ADMINHOST
  • 5.10.4 Configuring the Policy Manager
  • 5.10.5 Installing the Access Server on IDMHOST1 and IDMHOST2
  • 5.10.6 Installing the WebGate
• 5.11 Configuring the Access Server with the Load Balancing Router
• 5.12 Installing the Access Server SDK
  • 5.12.1 Installing the Access SDK on APPHOST1 and APPHOST2 (Windows)
  • 5.12.2 Installing the Access SDK on APPHOST1 and APPHOST2 (Solaris and Linux)
  • 5.12.3 Configuring the AccessGate on APPHOST1 and APPHOST2
• 5.13 Configuring Oracle Access Manager Single Sign-On for OC4J Applications
• 5.14 Configuring the Second Identity Server as a Failover Server
  • 5.14.1 Configuring Failover Between the Secondary Identity Server on IDMHOST2 and the WebPass
• 5.15 Configuring the Second Access Server as a Failover Server
  • 5.15.1 Configuring Failover Between the Access Server and WebGate
• 5.16 Mitigating Identity Server Product Installation Failures on Linux
• 5.17 Configuring Directory Server Failover
  • 5.17.1 Configuring Directory Failover for User Data
  • 5.17.2 Configuring Directory Failover for Oracle and Policy Data
    • 5.17.2.1 Configuring Identity Server Failover for Oracle Data
• 5.18 Configuring Access Server Directory Failover for Oracle and Policy Data
  • 5.18.1 Adding a Failover Directory Server Using the ConfigureAAAServer Tool
• 5.19 Configuring Policy Manager Failover
• 5.20 Creating Failover LDAP Directory Server Profiles for the Identity and Access Servers
  • 5.20.1 Creating a Directory Server Profile for the Identity Servers
  • 5.20.2 Creating a Directory Server Profile for the Access Servers
• 5.21 Verifying the Status of the Identity Servers

Index