F5 Access Policy Manager & Oracle Access Manager Integration Part 1

An overview of how BIG-IP Access Policy Manager and Oracle Access Manager are integrated along with a demonstration on how to configure the units. Part 1 of 2 Watch Part 2 at: http://www.youtube.com/watch?v=cedgkNAWp08

---

Closed Caption:

welcome to the f5 Access Policy Manager
and Oracle Access Manager immigration
overview
this evening presentation will provide
an overview
the f5 Access Policy Manager integration
with Oracle Access Manager
which is now available in big IP
software version PennDOT to
after viewing this presentation
you'll be able to understand the basics
about five Access Policy Manager
understand the basics Oracle Access
Manager
understand the details however five
Access Policy Manager
and the Oracle Access Manager are
integrated configure Access Policy
Manager for Oracle Access Manager on the
big I P
and know where to find additional
information and resources about the APM
Inouye M integration will start the
discussion with an overview
both f5's Access Policy Manager and the
Oracle Access Manager
let's start by discussing the business
drivers for this integration
in today's ecosystem organizations need
implement identity and web access
management solutions their scaleable
secure and cost-effective one approach
to achieve this is to remove
access management decisions from with in
an application
which takes these decisions out of the
hands of the application developers
by doing this user authentication is
simplified
infrastructure can be consolidated and
costs will be reduced
let's cover them the basics a5 Access
Policy Manager
the big IP access policy manager module
or APM works in concert with your
existing identity management systems to
control access to Web applications
in addition the APM software can provide
network-based
identity management and control client
web access by performing client
inspections
which insures that your organization
knows what computer
which user with the appropriate security
profile is allowed to access your
business critical resources
to improve response time scale
performance
8 p.m. can catch credentials and provide
single sign-on features
these policies are created using the
visual Policy Editor
f5's easy to use web interface a PM also
has software components and features
from the Oracle Access Manager platform
making integration with Oracle
Applications a breeze
this a5 Access Policy Manager and Oracle
Access Manager integration
is available on big IP software version
PennDOT
to next we'll cover the basics
the Oracle Access Manager the Oracle
Access Manager
or 00 a.m. is part Oracle's identity and
access management platform
providing identity and access control
for Oracle and non Oracle Applications
Oracle Access Manager has the following
components: the Oracle Identity Server
is an L that database
that contains all the required
information about users the Oracle
Policy Manager
is the policy administration interface
that determines who will have access to
what resource
and how they will be authenticated the
Oracle access server
is the component that is the policy
decision points and finally
the Oracle Web gate is the SOP for a gym
running on the actual web servers
or Web Access proxies that inspect each
user request
enforce the policy when using the f5 and
or clinic Gration this becomes the
responsibility
f5's Access Policy Manager in the next
section
will examine had a high-level the
architecture the Access Policy Manager
and Oracle Access Manager integration
let's examine how the various
Oracle component are configured in a
basic architecture
the WebKit agent running on a web server
intercepts each client request and
compares the request to a policy
to determine if the user has permission
for the requested URL
the Oracle Access server policy server
and directory servers provide the back
in policy infrastructure
to classify users and resources and set
policies for access permissions
together these components make up the
Oracle Access Manager
the focus at this presentation is on the
web gate agents responsibilities
as this is the software component from
Oracle but is now running an ef-5
Access Policy Manager on the big IP
platform
understand this better let's look at
three different options available to an
organization currently being used
to provide access control to web
applications in the first option
the access control decisions are written
into the web application code
by the developers this solution is both
costly
and difficult to maintain it's not
easily repeatable
the axis decisions are decentralized and
is typically much less secure
remember with this solution the access
control decisions are being enforced
by the web application developers the
second option involves deploying an
agent each Web server like CA site
minder
IBM Web CO or Oracle Web gate
using agents can be very difficult and
expensive to administer
and maintain don't always work with
every application are operating system
and can't increase your application
performance
in addition similar to the previous
option
the axis decisions are decentralized as
well as being less secure
the third option involves deploying it
here specialized access proxy servers
in front each Web server as new proxy
servers are required for new web servers
this option does not scale well often
the reliability of this option is
inferior and in addition
this option can be very expensive as the
capital and operating expenses now
require dedicated hardware
and personnel to keep these proxy
servers up and running
using the f5 and Oracle integration
organizations can remove the resources
required for the proxied here
which will dramatically reduce their
capital and operating expenses
in addition this integration provides
superior performance
security and reliability
the f5 in Oracle integration offers a
unified access
an authorization solution civil fine
access to Oracle Applications
by consolidating authentication
authorization
and accounting policy control on to
bigger IP devices
organizations can reduce their
deployment complexity
create greater levels business agility
and satisfy the regulatory compliance
requirements
such as sarbanes-oxley and hip now let's
examine how using the big IP Access
Policy Manager
with the Oracle Access Manager
integration provides a much better
alternative
to the previous three options using this
integration
an organization will replace the entire
proxied here
and WebKit functionality with the big I
P axes Policy Manager module
which now includes the website
functionality and is running in
high-performance software on the big I P
this result in the following benefits
for an organization
first the organization will get a
significant cost savings in both capital
and operating expenses from eliminating
the entire proxy tear
which require dedicated hardware and
software in addition to IT administrator
resources
second the big IP provide better
performance
as it can handle a large number of users
am large volumes of traffic
third using the big I P always provide
superior scalability
and high availability to web
applications and forth
this solution simplifies the
infrastructure as the big I P may
already be an organization's network
performing load balancing the
organization simply needs to at the
Access Policy Manager module
and perform a few minutes have
configuration in order to achieve their
application access control requirements
in addition to the benefits we just
highlighted there are several additional
benefits an organization can take
advantage over when using the big IP
platform
using the big IP with axes Policy
Manager
provides better security as a PM can
perform pre log on in point inspections
like verifying the client anti-virus
software in addition to providing load
balancing for web applications
and organization can use the big I P to
provide both high availability
and load balancing for all the Oracle
Access Manager services
including the big IP's application
security manager module
adds a web application firewall to the
infrastructure
providing layer 7 application inspection
and finally
including the big IP's web accelerator
module
provides both web caching and
acceleration
foreign organizations web applications
most importantly
all this can be achieved with one
investment in a5
on one platform