Installation guide
Configuring the Agent
142 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005
Policy Agent for Oracle Application Server 10g
You can configure the agent for Oracle Application Server 10g by modifying the
following properties in the file
AMAgent.properties
:
fetchHeaders
Set this value to
true
so that additional policy response attributes can be
introduced into the HTTP headers.
com.sun.am.policy.am.fetchHeaders=true
headerAttributes
This value represents what policy attributes should be added to the HTTP header
(if the value of
fetchHeaders
is
true
). Set this value to
uid|identity-user
so that
the user id of Sun ONE Identity Server is passed to Oracle SSO Server via HTTP
headers.
com.sun.am.policy.am.headerAttributes=uid|identity-user
do_sso_only
Set this value to
true
so that the agent will just enforce user authentication without
enforcing policies (authorization). In this integration, Oracle SSO Server handles
authorization.
com.sun.am.policy.agents.do_sso_only = true
fqdnDefault
This value is set by the agent installation program to thehostname wherethe agent
is installed. Make sure thatthis valueis a fully qualified domainname. Itshould be
set to
hostname.domain
. For example, if the machine is called agent1 and the domain is
example.com
, this property should be set as follows:
com.sun.am.policy.agents.fqdnDefault = agent1.example.com
reverse_the_meaning_of_notenforcedList
Set this value to
true
so that the
notenforcedList
becomes the enforced list.
com.sun.am.policy.agents.reverse_the_meaning_of_notenforcedList = true