Oracle Access Management 11gR2 PS3 (11.1.2.3) QuickTour

In this short video we take a look at the latest release of OAM 11gR2 PS3 (11.1.2.3). Focusing on the upgrade user interface. Updated audio

More information is available at http://OracleIdentity.com

---

Closed Caption:

I'm Gregory how principal consultant of
the oracle identity management practice
your ingenious ideas . net today we're
going to take a look at oracle access
manager 11gr2 ps3 this is the latest
releases from oracle of the taxes
management product for today's quick
look we're going to use a virtual
machine on the oracle identity . com
managed cloud platform and these are VMS
had already have the latest Oracle
products already pre-configured for you
so go to our URL for virtual machine
will login with the OEM admin and
password
so the major change in the ps3 offering
is the user interface and completely
revamp the previous releases of the
product they moved to this tile-based
paradigm along the top you have the
major areas of the application
application security Federation mobile
security and configuration and then you
have the tile set up here for the
different areas so let's focus on access
manager to start off with my host
identifier a list of hosts that are
protected by Access Management so let's
go ahead and put on that I again this
search within a name search or create a
host identifier here
search comes with a to host identifiers
already configured one for the IM sweet
another for the as OHS servers that come
as part of the vm let's take a look at
these same God information that was
available in PS added to it as well as
ps1 so it really hasn't changed you list
your host report description you can
duplicate and apply your changes
application domains
let's go to the IM sweet so again same
tabs as we had in ps2 but really
different UI a summary of the resources
right so here's we define our URLs as
well as the authentication and
authorization policies for each of those
URLs chillin here and we'll edit so
again the information is is almost
identical to ps2 for all this really is
the UI changes that are that are
significant i moved to the accordion
cells we can collapse and expand each of
these depending on what we're interested
in
so let's dive into access manager so
most everything we are interested in
will be accessible through application
domains take a look here now we can
search for the domains or create a new
one
let's pick the is sweet this protects
the pork identity manager and access
manager product itself
ok so we have a summary of information
for this domain we have the resources
which are the URLs that are protected by
access manager
here's a list of all and so for instance
this is the bi publisher console is
protected by high-level policy and it
also has an authorization policy
associated with it as well let's go
ahead and take a deeper little this from
here we can make changes or duplicate
the entry so you have description the
host that the host identifier a group
associated with the url url sell any
very list at the could be sent and
protective individually and you have the
operations that are covered by this is
resource entry i have the accordion
style you like this so you can class
things up and then down here we have the
protection level of the different
authentication policies that we use and
the authorization again saying saying
information same layout that was in the
ps2 just the UI itself has been improved
okay from here we can access our various
authentication policies
let's go ahead and take a look at the
protected higher level policy and list
the URLs of that architect
buy it the responses and again we have a
cookie word or different content here
set up a cookie to find our values and
then get this URL business and then
advanced rules
I throughout the application are set of
advanced rules that can be associated
with a lot of different aspects of the
products from the access policies all
who I am
so basically with the new rules ending
final rule you find a condition and then
if the condition is true true you could
switch authentication policies or he'd
just deny access based on it this
conditions
that's a major change in project being
will access all that from farms you life
you have pre authentication post
authentication rules they're really
moving the functionality that was in
oracle adaptive access manager in to
access manager in the shoes
ok we have our authorization policies we
have our token nations on policy and
administration this is for delegated
administration which is a concept that
was introduced in ps2 in oracle identity
manager now making its way into access
let's take a look at the agents
the web get IDM agent and normal setup
of for interaction our webpage that is
on the OHS server that comes as part of
the qualified nvm going to find our
session timeout or cookie and a session
high routes the exact same thing
let's take a look at password policies
again where we can define the name
number of uppercase characters principle
number of lowercase characters the
length characters that are required all
the basic information to find our
password policies apply
ok so let's come over here to
configuration so again a launchpad for
this but this where we can define them
the basic setup that's system-wide for
access manager so one of the first
things is the various identity stores
you can configure here but we have a
default store as well as a system store
we already have in this BM a ID store
set up with or for unified directory you
can take a look at that let's edit it
okay and here's where we define oracle
unified directories Oracle's new ldap
server it comes from the Sun directory
server i specify the hostname and port
for ldap are we have are buying
credentials bynar ID attributes the
password
and the connection details full-size
timeouts various we enable password
management and this is important
depending this is disabled obviously the
identity manager in integrated approach
to do a password management if you have
an apple an instance where you installed
access natural out
oh I am and then you would use this if
you wanted oud to do the password
mansion om and you need
that these are the various components
that are available for access answered
enabled this one here access manager
adaptive authentication service
Federation security token the access
portal comes disabled out-of-the-box
this is because there are licensing
impacts for this I this java apology
attention I the series of small steps
that you can basically to gain some
files and executed license agreements to
get this functionality mobile and social
and mobile security services again
everything except the access portal
comes comes pre-configured in the in the
administration's were becoming the bag
grant administrative privileges to two
different users or rolls certificate
validation is where we cannot validate
our our trust as you can it's for ssl
server instances where we can actually
monitor the OEM instances out there to
search only have the one server running
now the work that it's running on the
proxy information log levels courts held
a big logs to get
so here let's look at our settings will
go to common settings first so here's
where we can set things like the session
lifetime limit the timeouts are
coherence configuration our audits
configuration
come on down to our people identity
stores for access manager settings are
load-balanced om server host as well as
sports whatever doing Mikey validation
that they the basic access manager
settings from ps2 home and laid out all
courses one life Federation setup so our
provider ID of proxy if you're doing
that orders key stores
and we do our security token services
social identity as we can set up our
proxy
and then finally access services where
we set up our portal profiles
let's take a look over in Federation so
in Federation we can set up our identity
providers or service providers are
social identity a configuration our
token services or all plots services and
again access portal which is and
disabled until the download the proper
files let's go into identity provider
and we don't have any currently defined
so let's create one again we can put in
our name the protocol sampled 12 or open
ID and you can bring in the metadata
from a file you can specify the name ID
format and our mapping options let's
take a look at the setting up a service
provider again same basic information we
find the name the protocol and use the
identity store on our side the search
base for the vm in our identity store
what are assertions are are going to be
and are attribute happening
ok you can also define our fighter
attribute profiles and give it a name
description the football that we want to
use and then create napping again have a
message attribute name we are an
obsession attribute and the quest one
important as social identity and they
have a provider's already configured out
here 400 for facebook and twitter
linkedin google yahoo and of course
Oracle's we have the service provider
interfaces
let's take a look over and social
identity we can manage our social
identity providers already comes up we
can figure Facebook Twitter Linkedin
Google Yahoo and historical go into
facebook take a look at how that's
configured it's an auth provider as the
icon that we're going to use the
authorization URL specify again there's
no hope you're all three of you are for
facebook which is an access our
attribute mappings
and we have our service provider
interfaces and find here or the oin
service provider
ok again these are the internals are
used as important you're setting up a
new one and then our profiles so this is
our mobile application profile again
here's what we can find our
our mobile services a lot of the URLs as
well as a progressive configuration for
mobile and finally we'll look at mobile
security now mobile security has been
renamed in his 32 mobile and social
services and this has been extensively
enhanced from PS users a lot of the
functionality within mobile and social
services and so from this interface we
can define and create new service
providers take a look at the mobile om
authentication a service but it's
already find forest again we have a
description you have the attributes the
OEM webgate version that we're going to
use the web gate id/password basic the
basic setup for the service provider how
we have our profiles go ahead and take a
look at the mobile
ok here's where we can enable our
various a token support so client
registration handlers are user code
enter access token finder service
endpoints which service provider
obviously this profile blondes to our
security handler plugins and closing the
accordions build our at any application
profiles that we defined
it's going to take a look at the mobile
services domain a the authentication
scheme you can have our own security and
more plugins that we could find
application profiles service profiles
and service protection
and then finally RR jailbreak a policy
configuration and whether we're going to
detect it and then and then on so long
do not come over to mobile a cloth and
again here we have our domain
information service profile that the
clients service providers resources and
our plug-in set we've defined again
oam ok and then RHCP proxy a
configuration our Apple push
notification or jailbreak detection and
then our token lifecycle mention so that
concludes the quick tour of oracle
access manager and you can go to oracle
identity . com
for more information thank you
yeah