Oracle Access Manager 11g: Administration

Oracle Access Manager is a product for controlling access to Web and J2EE resources based on those profiles. It provides ways to implement access control and single sign-on to Web applications and J2EE resources such as EJBs, servlets, and JSPs. Oracle Access Manager provide centralized access control services, policy-based authorization, and auditing for heterogeneous application environments.

The participants learn to implement Oracle Access Manager as the access management solution in a typical business environment. This course provides in-depth understanding of the concepts and terminology used in Oracle Access Manager and teaches how to install, configure, and administer Oracle Access Manager. The exact version of OAM 11g Release 1 that will be used to teach this course is - 11.1.1.3.1, sometimes also referred to as OAM 11g Release 1 Bundled Patch Set 1 (BP01).

Learn To:

• Monitor, Diagnose and Troubleshoot issues relating to Oracle Access Manager
• Install and configure Oracle Access Manager
• Upgrade Oracle Single Sign-On to Oracle Access Manager
• Perform Horizontal Migration of Oracle Access Manager environment
• Configure High Availability environment for Oracle Access Manger
• Work with Application Domain and agents to protect web resources for Authentication and Authorization

Audience

• Support Engineer
• Web Administrator
• Sales Consultants
• Security Administrators
• Technical Consultant
• Technical Administrator

Course Topics Overview

• Overview of course objectives
• Division of lessons per day
• Overview of lab environment

Introduction to Oracle Access Manager

• Explaining the salient features of Oracle Access Manager
• Explaining the key products that comprise Oracle Access Management suite
• Explaining the functional areas for each of the Oracle Access Management products
• Understanding the Oracle Access Manager overall architecture
• Explaining the Oracle Access Manager runtime architecture
• Understanding Oracle Access Manager request flow diagram
• Identifying key Oracle Access Manager 11g new features
• Mapping Oracle Access Manager 10g and 11g terminologies

Installing and Configuring

• Basic concepts of Oracle WebLogic Server
• Key definitions and terminologies
• Prerequisites for installing Oracle Access Manager
• Installing Oracle WebLogic Server (WLS)
• Configuring seeded database schemas by using Repository Creation Utility
• Installing and configuring Oracle Access Manager
• Performing post-installation validation checks
• Performing an uninstallation

System Configuration: Servers, Data Sources and Agents

• Managing Servers using OAM Administration (Admin) Console and Oracle Web Logic Server (WLS) Admin Console
• Managing data sources
• Registering and managing agents using OAM Admin Console
• Registering agents remotely
• Securing Communication between WebGate and OAM Server

Policy Configuration: Shared Components and Application Domains

• Managing shared components
• Configuring application domains

Single Sign-On and Session Management

• Oracle Access Manager single sign-on and single logout
• The session life cycle
• Session caching
• Configuring single sign-on and single logout
• Customizing the login and logout pages
• Configuring session management and manage sessions
• Configuring Windows native authentication

Using Oracle Access Manager With WebLogic Applications

• Scenarios in which Oracle Access Manager protects WebLogic applications
• Configuring a WebLogic identity assertion provider
• The WebLogic OAM authenticator

Auditing and Logging

• Differentiating among auditing and logging
• Describing the Fusion Middleware Audit Framework
• Describing audit output options
• Configuring audit settings
• Describing audited events and data recorded when an audited event occurs
• Generating audit reports
• Configuring logging settings
• Locating and examining logging output Locating log files from other servers in an Oracle Access Manager deployment

Upgrading Oracle Single Sign On 10g to Oracle Access Manager 11g

• OAM upgrade overview
• Upgrade Step 1: Configuring a User Store
• Upgrade Step 2: Creating a Policy Domain
• Upgrade Step 3: Migrating Partners
• Retain and Change Port options
• Upgrading OSSO 10g associated with Oracle Portal
• Verifying successful upgrades
• Scenarios not upgraded to OAM 11g

Troubleshooting and Management

• Access Tester
• Identifying connectivity issues between agents and servers
• OAM-specific WLST commands
• Oracle Enterprise Manager Fusion Middleware Control

Horizontal Migration

• OAM horizontal migration overview
• Policy migration
• Partner migration
• Horizontal migration use cases

High Availability

• High availability goals
• Mitigating potential points of failure in an OAM deployment
• Providing high availability for OAM sessions and configuration data stored in XML files
• Backing up and restore OAM

Course Objectives

• Understand basic OAM 11g SDK concepts and techniques on building custom agents
• Set up a high availability topology for OAM 11g
• Monitor OAM environment using Oracle Grid Control (optional)
• Configure managed and administration servers, data sources, and agents
• Set up policy configuration – shared components and application domain
• Manage single sign-on, single logout, and sessions
• Explain and setup auditing and logging for OAM 11g
• Migrate OSSO 10g to OAM 11g
• Troubleshoot OAM 11g using Access Tester
• Set up horizontal migration for OAM 11g
• Install and configure OAM 11g