Installation guide

Deploying the Integrated SSO Solution
Chapter 5 Single Sign-on Solution for Oracle Application Servers 135
5. Install the policy agent, version 2.1 for Apache 1.3.29 on the same machine
where Oracle SSO Server is running. The policy agent for Apache 1.3.29 can be
downloaded from Sun at:
http://wwws.sun.com/software/download/allproducts.html#id_server_agents
Refer Chapter 2, “Policy Agents on Solaris and HP-UX” of this guide for
detailed instructions toinstallthe agent. Whenthe installation promptsyou for
an Apache instance, select the Oracle Single Sign-On server instance, which
was installed with the midtier. This allows the agent to protect the Oracle SSO
Server. Additionally, the SSL Ready box must be checked since Oracle’s
Apache is SSL ready.
6. Configure the policy agent for Apache 1.3.29 by modifying the agent’s
AMAgent.properties file. Refer the section Configuring the Agent for more
information about the properties you should modify.
7. Once you have set the values for agent properties, create a file called
SSOTPAMAuth.java in the directory
$<ORACLE_HOME_INFRASTRUCTURE>/j2ee/OC4J_SECURITY/applications/sso/web/W
EB-INF/classes
Here isa samplefile thatyou can use. You should use the exact contentsof this
file except the URL returned by the method getUserCredentialPage. This
method should be configured to return an error URL that is pertinent to your
environment. In this example, you should substitute error.html with an error
URL from your environment. Additionally, you can add extra debug
information in this file or change the exception output to help diagnose any
problems arising out of third-party authentication.
Code Example 5-3 SSOTPAMAuth.java
/**
* returns IPASUserInfo
/**
/* Copyright (c) 2002, 2003, Oracle Corporation. All rights reserved. */
/*
DESCRIPTION
Class for Sun ONE Identity Server integration with SSO Server
PRIVATE CLASSES
NOTES
This class implements the SSOServerAuthInterface. To enable this
integration, replace: oracle.security.sso.server.auth.SSOServerAuth with
oracle.security.sso.server.auth.SSOTPAMAuth for the desired security level
in policy.properties.
*/
package SunTPAM.security.ssoplugin;