Federation Trusted Entities

When performing a secure search on a federation endpoint, the following steps take place:

1. The Federation broker passes the identity of the logged in user to the federation endpoint.

2. If the endpoint instance trusts the broker instance, then the broker instance can proxy as the end user.

3. To establish this trust relationship, Oracle SES instances should exchange some secret. This secret is exchanged in the form of a Trusted Entity.

4. A trusted entity consists of two values: entity name and entity password. Each Oracle SES instance can have one or more trusted entities that it can use to participate in secure federated search.

5. Each trusted entity can be authenticated by either an IDM system or by the Oracle SES instance directly, independent of an IDM system.