A really quick post to share something that I found this morning. I am constantly trying to remember the exact version of OHS (Oracle HTTP Server) that is installed (Actually any Fusion Middleware component). Sometimes I am inheriting an existing environment or validating someone else’s environment and need to baseline what is installed. Here is …
uh, so … what version was that again? #Oracle #Fusion #Identity #OHS Read More »
As many of you may know, Atul Kumar, has finished writing his book “Oracle Identity and Access Manager 11g for Administrators“. I had the pleasure of being a technical reviewer for this book. If you know Atul or his website then you know my job was pretty easy as he is well versed and experienced …
I had to re-install my Oracle Identity Management environment server and I must have had a listener running that I forgot to shutdown. The default Admin Port (7001) wasn’t available, so the installer used 7002. Typically, I would have shutdown all of the services, restarted the server and then uninstall the software. This usually frees …
Change the Listen Port for Weblogic AdminServer #Oracle #IDM #Identity Read More »
Prerequisites I am going to assume that you have already downloaded the required software: OpenDJ 2.4 OpenAM 9.5.2 A J2ee container for OpenAM (I am using Glassfish 2.1 ** I have included a note on using Glassfish a little later in this post.) ** If not, you can download at: http://www.forgerock.com and http://glassfish.java.net/public/downloads/index.html My System …
I have had a number of conversations over the last few weeks regarding ICAM, which is the U.S. Government’s Identity, Credentialing, and Access Management initiative. Essentially, these are a set of guidelines, frameworks and specifications to assist Federal agencies in implementing Identity and Access Management. I have had my own library that I often refer …
I was following a conversation on Twitter about claims-based authorizations … the guys having the conversation brought up some pretty good points and I thought it would be great to have a copy of this conversation. Feel free to correct any mistakes I may have made in my notes. I’d like to eventually follow up …
Implementing Identity and Access Management requires working with PKI certs to secure communication channels. For development purposes you can create your own self-signed certificates. I use OpenSSL as the RootCA (Signing Authority) and keytool as interface to the Java Key Store (JKS). The following outlines the steps required to create a RootCA, generate a certificate …
Creating self-signed certs for a development environment. #Oracle #IDM #PKI Read More »
Background: Oracle Identity Federation is set up and configured as an Identity Provider. One of the client’s partners would like for the assertion to include two (2) attributes that do not exist in the IDP’s user data store. To include these attributes in the assertion we will use Oracle’s Custom Action Framework. (Documented in 11.1.1.4) …
Adding static attributes to #SAML Assertions in #OIF 11g #Oracle #Identity #IDM Read More »
I am in the process of reviewing the Access Management book, OpenAM, by Indira Thangasamy. So far, I have been very impressed with the level of detail that Indira has managed to pack into each chapter. The first chapters focus on explaining what IDM is and a background on OpenAM the product. This overview touches …
I just finished reading through the newly released M-11-11, “Continued Implementation of Homeland Security Presidential Directive (HSPD) 12 – Policy for a Common Identification Standard for Federal Employees and Contractors“. Disclaimer: The following is my interpretation of M-11-11 … I have no authority or influence over actual requirements. My opinions, interpretations or recommendations in no …