Oracle University | Contact Us: 92 21 3583 9292

Oracle Access Manager 11g: Administration

Duration: 5 Days

What you will learn

Oracle Access Manager is a product for controlling access to Web and J2EE resources based on those profiles. It
provides ways to implement access control and single sign-on to Web applications and J2EE resources such as EJBs,
servlets, and JSPs. Oracle Access Manager provide centralized access control services, policy-based authorization, and
auditing for heterogeneous application environments.

The participants learn to implement Oracle Access Manager as the access management solution in a typical business
environment. This course provides in-depth understanding of the concepts and terminology used in Oracle Access
Manager and teaches how to install, configure, and administer Oracle Access Manager. The exact version of OAM 11g
Release 1 that will be used to teach this course is - 11.1.1.3.1, sometimes also referred to as OAM 11g Release 1
Bundled Patch Set 1 (BP01).

Learn To:

Monitor, Diagnose and Troubleshoot issues relating to Oracle Access Manager

Install and configure Oracle Access Manager
Upgrade Oracle Single Sign-On to Oracle Access Manager
Perform Horizontal Migration of Oracle Access Manager environment
Configure High Availability environment for Oracle Access Manger
Work with Application Domain and agents to protect web resources for Authentication and Authorization

Audience
Sales Consultants
Security Administrators
Support Engineer
Technical Administrator
Technical Consultant
Web Administrator

Prerequisites

Suggested Prerequisites
Oracle WebLogic Server 11g: Administration Essentials

Course Objectives
Understand basic OAM 11g SDK concepts and techniques on building custom agents
Set up a high availability topology for OAM 11g
Monitor OAM environment using Oracle Grid Control (optional)
Configure managed and administration servers, data sources, and agents
Set up policy configuration shared components and application domain
Manage single sign-on, single logout, and sessions

Copyright 2011, Oracle. All rights reserved. Page 1

Explain and setup auditing and logging for OAM 11g
Migrate OSSO 10g to OAM 11g
Troubleshoot OAM 11g using Access Tester
Set up horizontal migration for OAM 11g
Install and configure OAM 11g

Course Topics

Overview
Overview of course objectives
Division of lessons per day
Overview of lab environment

Introduction to Oracle Access Manager

Explaining the salient features of Oracle Access Manager
Explaining the key products that comprise Oracle Access Management suite
Explaining the functional areas for each of the Oracle Access Management products
Understanding the Oracle Access Manager overall architecture
Explaining the Oracle Access Manager runtime architecture
Understanding Oracle Access Manager request flow diagram
Identifying key Oracle Access Manager 11g new features
Mapping Oracle Access Manager 10g and 11g terminologies

Installing and Configuring

Basic concepts of Oracle WebLogic Server
Key definitions and terminologies
Prerequisites for installing Oracle Access Manager
Installing Oracle WebLogic Server (WLS)
Configuring seeded database schemas by using Repository Creation Utility
Installing and configuring Oracle Access Manager
Performing post-installation validation checks
Performing an uninstallation

System Configuration: Servers, Data Sources and Agents

Managing Servers using OAM Administration (Admin) Console and Oracle Web Logic Server (WLS) Admin Console
Managing data sources
Registering and managing agents using OAM Admin Console
Registering agents remotely
Securing Communication between WebGate and OAM Server

Policy Configuration: Shared Components and Application Domains

Managing shared components
Configuring application domains

Single Sign-On and Session Management

Oracle Access Manager single sign-on and single logout
The session life cycle
Session caching
Configuring single sign-on and single logout
Customizing the login and logout pages
Configuring session management and manage sessions

Copyright 2011, Oracle. All rights reserved. Page 2

Configuring Windows native authentication

Using Oracle Access Manager With WebLogic Applications

Scenarios in which Oracle Access Manager protects WebLogic applications
Configuring a WebLogic identity assertion provider
The WebLogic OAM authenticator

Auditing and Logging

Differentiating among auditing and logging
Describing the Fusion Middleware Audit Framework
Describing audit output options
Configuring audit settings
Describing audited events and data recorded when an audited event occurs
Generating audit reports
Configuring logging settings
Locating and examining logging output Locating log files from other servers in an Oracle Access Manager deployment

Upgrading Oracle Single Sign On 10g to Oracle Access Manager 11g

OAM upgrade overview
Upgrade Step 1: Configuring a User Store
Upgrade Step 2: Creating a Policy Domain
Upgrade Step 3: Migrating Partners
Retain and Change Port options
Upgrading OSSO 10g associated with Oracle Portal
Verifying successful upgrades
Scenarios not upgraded to OAM 11g

Troubleshooting and Management

Access Tester
Identifying connectivity issues between agents and servers
OAM-specific WLST commands
Oracle Enterprise Manager Fusion Middleware Control

Horizontal Migration
OAM horizontal migration overview
Policy migration
Partner migration
Horizontal migration use cases

High Availability
High availability goals
Mitigating potential points of failure in an OAM deployment
Providing high availability for OAM sessions and configuration data stored in XML files
Backing up and restore OAM

Copyright 2011, Oracle. All rights reserved. Page 3