Oracle Access Manager implementation. An English version of the presentation I delivered at SrOUG 2016 (Serbian Oracle User Group) meet up.

1. Web Single Sign-on
Solution in Telekom
Srbija
Ivan Arsenijević

2. Solving the existing
problem

3. Project goal
Build a new system as a solution for the issues of
current implementation:
Slow, complex, expensive
Development of the
SSO product
Protecting new
applications
Resolving operational
issues

4. Oracle Access Manager
Web Single Sign-on (SSO) solution
SECURE EXPANDABLE ADAPTIVE

5. Proposed solution
OAM FULFILLED ALL REQUIREMENTS AND
ADDITIONALY ENABLED:
• integration with Cloud services offering
• offloading the staff from most tasks
• performance enhancements

6. The project
July 2015 - April 2016
Test system - Saga
Test system - Telekom Srbija
Production system - Telekom Srbija
Web servers with protected applications:
• Apache httpd
(CentOS Linux, SuSE Linux, Windows)
• IIS (Windows)

7. The project
Key:
Application
code expanded
for unsolicited
login
Unique part
of the solution

8. End user's perspective

9. Web SSO in OAM
Login page
Content for
logged-out users
Protected resource
- access
Protected resource
(DCC)
Protected resource
- logout
Protected resource
(unsolicited)
1
2
,3
1,2,3
4
5
6

10. User login
Authentication and authorization
Dedicated login page
• ECC – accessing OAM servers
• DCC – accessing separate Web servers (DDoS)
Login form embedded in page (unsolicited)
• using WebGate
• REST API

11. Architecture
R-WG
OAM
LDAPDCC-WG
Application
Web server

12. Architecture
OAM and WebGate are Web applications
• OAM - WebLogic Server
• DCC - OHS (Oracle HTTP Server)
• Database (used implicitly)
• LDAP
WebGate is a module for Web server (httpd, IIS)
• Resource WebGate
• DCC WebGate

13. Workflows

14. WF 1: Login - DCC
R-WG
OAM
LDAPDCC-WG
Application
Web server
1
2
3
4 567
8

15. WF 2: Login - unsolicited
R-WG
OAM
LDAPDCC-WG
Application
Web server
1
2
3 4
5
6

16. WF 3: Subsequent access
R-WG
OAM
LDAPDCC-WG
Application
Web server
1
2

17. WF 4: Logout
R-WG
OAM
LDAPDCC-WG
Application
Web server
1
4
Web server
content for
logged-out
users
5
2
3

18. Delivered system

19. Production run
• Manual for partners – protecting own Web
applications with Web SSO (DCC, unsolicited)
• Localization & Customization
• Login page
• Login error handling
• Measured performance above required
• MTS Shop - first partner (DCC)
• Integrated Portal - first internal application
(unsolicited)

20. The team
ICT Services Department (Cloud),
Marketing Department, Web
developers, System administrators
Proof of Concept, Solution development,
Training (courses for the product)
Solution development,
Implementation, Support

21. Thank you!