Oracle Access Manager 11g: Administration

Course Description

Oracle Access Manager is a product for controlling access to Web and J2EE resources based on those profiles. It provides ways to implement access control and single sign-on to Web applications and J2EE resources such as EJBs, servlets, and JSPs. Oracle Access Manager provide centralized access control services, policy-based authorization, and auditing for heterogeneous application environments.The participants learn to implement Oracle Access Manager as the access management solution in a typical business environment. This course provides in-depth understanding of the concepts and terminology used in Oracle Access Manager and teaches how to install, configure, and administer Oracle Access Manager. The exact version of OAM 11g Release 1 that will be used to teach this course is - 11.1.1.3.1, sometimes also referred to as OAM 11g Release 1 Bundled Patch Set 1 (BP01).Learn To: Monitor, Diagnose and Troubleshoot issues relating to Oracle Access ManagerInstall and configure Oracle Access ManagerUpgrade Oracle Single Sign-On to Oracle Access ManagerPerform Horizontal Migration of Oracle Access Manager environment Configure High Availability environment for Oracle Access Manger Work with Application Domain and agents to protect web resources for Authentication and Authorization

Skills Gained

• Understand basic OAM 11g SDK concepts and techniques on building custom agents
• Set up a high availability topology for OAM 11g
• Monitor OAM environment using Oracle Grid Control (optional)
• Configure managed and administration servers, data sources, and agents
• Set up policy configuration – shared components and application domain
• Manage single sign-on, single logout, and sessions
• Explain and setup auditing and logging for OAM 11g
• Migrate OSSO 10g to OAM 11g
• Troubleshoot OAM 11g using Access Tester
• Set up horizontal migration for OAM 11g
• Install and configure OAM 11g

Who Can Benefit

• Sales Consultants
• Security Administrators
• Support Engineer
• Technical Administrator
• Technical Consultant
• Web Administrator

Syllabus

Overview

• Overview of course objectives
• Division of lessons per day
• Overview of lab environment

Introduction to Oracle Access Manager

• Explaining the salient features of Oracle Access Manager
• Explaining the key products that comprise Oracle Access Management suite
• Explaining the functional areas for each of the Oracle Access Management products
• Understanding the Oracle Access Manager overall architecture
• Explaining the Oracle Access Manager runtime architecture
• Understanding Oracle Access Manager request flow diagram
• Identifying key Oracle Access Manager 11g new features
• Mapping Oracle Access Manager 10g and 11g terminologies

Installing and Configuring

• Basic concepts of Oracle WebLogic Server
• Key definitions and terminologies
• Prerequisites for installing Oracle Access Manager
• Installing Oracle WebLogic Server (WLS)
• Configuring seeded database schemas by using Repository Creation Utility
• Installing and configuring Oracle Access Manager
• Performing post-installation validation checks
• Performing an uninstallation

System Configuration: Servers, Data Sources and Agents

• Managing Servers using OAM Administration (Admin) Console and Oracle Web Logic Server (WLS) Admin Console
• Managing data sources
• Registering and managing agents using OAM Admin Console
• Registering agents remotely
• Securing Communication between WebGate and OAM Server

Policy Configuration: Shared Components and Application Domains

• Managing shared components
• Configuring application domains

Single Sign-On and Session Management

• Oracle Access Manager single sign-on and single logout
• The session life cycle
• Session caching
• Configuring single sign-on and single logout
• Customizing the login and logout pages
• Configuring session management and manage sessions
• Configuring Windows native authentication

Using Oracle Access Manager With WebLogic Applications

• Scenarios in which Oracle Access Manager protects WebLogic applications
• Configuring a WebLogic identity assertion provider
• The WebLogic OAM authenticator

Auditing and Logging

• Differentiating among auditing and logging
• Describing the Fusion Middleware Audit Framework
• Describing audit output options
• Configuring audit settings
• Describing audited events and data recorded when an audited event occurs
• Generating audit reports
• Configuring logging settings
• Locating and examining logging output Locating log files from other servers in an Oracle Access Manager deployment

Upgrading Oracle Single Sign On 10g to Oracle Access Manager 11g

• OAM upgrade overview
• Upgrade Step 1: Configuring a User Store
• Upgrade Step 2: Creating a Policy Domain
• Upgrade Step 3: Migrating Partners
• Retain and Change Port options
• Upgrading OSSO 10g associated with Oracle Portal
• Verifying successful upgrades
• Scenarios not upgraded to OAM 11g

Troubleshooting and Management

• Access Tester
• Identifying connectivity issues between agents and servers
• OAM-specific WLST commands
• Oracle Enterprise Manager Fusion Middleware Control

Horizontal Migration

• OAM horizontal migration overview
• Policy migration
• Partner migration
• Horizontal migration use cases

High Availability

• High availability goals
• Mitigating potential points of failure in an OAM deployment
• Providing high availability for OAM sessions and configuration data stored in XML files
• Backing up and restore OAM