WebCenter portal with the custom identity assertion provider?

Hi all

I developed all the custom identity assertion provider that always fills a topic for weblogic without validating the token as a test.

I moved the IdA provider at the top of the list of providers. and put the flag of control for the other provider of authentication as "SUFFICIENT."

I was expecting when I access the WebCenter portal (http://webcenter.local, host: 7777 / webcenter), default login page jump the homepage appear automatically connected by the custom of IdA provider like weblogic.

But there is no tracks from the custom of IdA WC_Spaces log file provider and the default login page has been demonstrated.

Please let me know what the problem...

Thank you and best regards,

I used a phony. After that I changed the token as 'JSESSIONID', the custom of IdA provider worked well.

Tags: Fusion Middleware

Similar Questions

  • Facing a problem with writing the custom for WLS identity assertion provider

    I am facing a problem with writing the custom for WLS identity assertion provider.

    Requirement:

    Asserter identity configured in WLS should get called when the following cookie is sent in a request by my application
    cookie name: OAMAuthnCookie_blr1234567.idc.oracle.com:7777

    I added the name of the cookie as a token of support and Active token in WeblogicCustomIdentityAsserter.xml

    < MBeanAttribute
    Name = "SupportedTypes.
    Type = "java.lang.String [].
    Writeable = "false".
    Default = "new String() {& quot; OAMAuthnCookie_blr1234567.idc.oracle.com:7777 & quot ;}.
    / >
    <!-ActiveTypes attribute contains the subset of your mbean SupportedTypes who are active in the area. ->
    < MBeanAttribute
    Name = "ActiveTypes".
    Type = "java.lang.String [].
    Default = "new String() {& quot; OAMAuthnCookie_blr1234567.idc.oracle.com:7777 & quot ;}.
    / >

    Problem:

    Identity asserter provider is not invoked for the request that has the cookie named OAMAuthnCookie_blr1234567.idc.oracle.com:7777.

    I did some experiments with the cookie name, to see where the problem could be

    Identity asserter provider is triggered for the following cookies:
    OAMAuthnCookie_blr1234567.idc.oracle.com7777.
    blr1234567. IDC. Oracle
    blr12_XXX. IDC. Oracle.com

    and it does not work for cookie name - OAMAuthnCookie_blr1234567.idc.oracle.com:7777

    I think that the name of the token supports not the colon. I don't have control over the name of the cookie, two points will always be

    Tried it with giving the name of the cookie after the encoding of the colon

    < MBeanAttribute

    Name = "SupportedTypes.

    Type = "java.lang.String [].

    Writeable = "false".

    Default = "new String() {& quot; OAMAuthnCookie_blr2211441.idc.oracle.com & #58;. 7777 & quot ;} »

    / >


    But still does not work
    Am I missing something? Any help will be appreciated.
    Help, please!

    colon ': ' is an illegal character in the name of the cookie.

    RFC 2616, Section 2.2 says:

    token = 1 *.

    separators = "(" | ")" | " <" |="" "="">" | " @"

    | "," | ";" | ":" | " \" |<">

    | "/" | "[" | "]" | "?" | "="

    | "{" | "}" | SP | HT

    It is clear ":" a "separator" and thus not allowed in a token or a cookie name.

  • Log in via the custom identity provider

    Hey, I have an HTML article that will use the new setAuthToken API to provide custom user authentication, and I can call it with an authToken is allowed on the right to connect the user to the article.

    However, I am having a problem to set up the custom identity provider required for this API working. I set the project settings to use a custom IdP and created a page which checks the credentials and retrieve an authToken. Now the user selects sign to from the account model a web view appears with the IDP login page. Once the user logs were can I redirect to return the authToken to the APP? I can see the https://es.publish.adobe.com/oauth2 URL in the case of the mouth, but don't see any for the Custom POI... This was again set up?

    Thanks in advance,

    Alex

    Hi Alex,

    The authentication URL should be in your generic identity provider, implemented, the page that you created to verify the credentials. When this page is launched from the Viewer, there are several query parameters that are passed with her. This includes:

    redirectUri: the recall of generic URI authentication.

    projectId: ID of the application project

    appId: ID of the application of the observer.

    appVersion: the version of the application of the observer.

    UUID: the identifier of the device.

    Your page should analyze the redirectUri on URL parameters and redirect it when your authentication is complete. When this redirectUri forwarding, you can include the following information in the application:

    authToken: authToken to the user after the successful login.

    expiresIn: optional duration in seconds before the expiration of the authToken.

    error: error after the failure of the connection. Error or authToken must be specified but not both.

    I hope this helps.

    Thank you

    Christine

  • WebCenter portal and the content on the same domain

    Hello.

    A simple question. Is this really install Webcenter portal on the same field with Webcenter content? I have a domain with Webcenter content and now want to extend it with Webcenter product portal - space, Discussion etc.. Will I have problems making this operation?

    Portal and content are 11.1.1.8

    Thank you.

    See the preparation of the components backend for portal WebCenter 11 g Release 1 (11.1.1.8.0) - Services and tools

    "Content and refinery incoming server must be installed in the same domain. Oracle recommends that you install Content Server and refinery in the same domain as Oracle WebCenter Portal. When they are installed in the same domain, no additional configuration is necessary to use an external LDAP authentication provider. »

  • AssertIdentity() custom identity Asserter never invoked method

    I'm trying to implement a custom identity asserter. I created my Asserter custom identity following the documentation (http://download.oracle.com/docs/cd/E12839_01/web.1111/e13718/ia.htm#i1156163) and an example on Weblogic wonders (http://weblogic-wonders.com/weblogic/2010/03/15/custom-identity-asserter-for-weblogic-server/).

    The problem is that the assertIdentity() method is not called.

    I used a simple web application to test the asserter. Its web.xml is like this:
    < security constraint >
    < web-resource-collection >
    Pages protected < Web-resource-name > < / web-resource-name >
    < url-pattern >/app / * < / url-pattern >
    < / web-resource-collection >
    <!-this-> a defined security role References
    <>auth-constraint
    MYROLE < role name > < / role name > <!-MYROLE is also defined in weblogic.xml as part of security-role-assignment->
    < / auth-constraint >
    < user-data-constraint >
    > transport security < NONE < / transport-guarantee >
    < / user-data-constraint >
    < / security constraint >

    <! - authentication method - >
    <>login-config
    FORM < auth-method > < / auth-method >
    < form-login-config >
    login.jsp < form-login-page > < / form-login-page >
    rejected.jsp < form-error-page > < / form-error-page >
    < / form-login-config >
    < / login-config >

    These are the elements of MDF of my identity Asserter:
    < MBeanType
    Name = "MyAsserter".
    DisplayName = "MyAsserter."
    Package = "com.pccw.security.policysvr.agent.weblogic."
    Will = "weblogic.management.security.authentication.IdentityAsserter."
    PersistPolicy = "OnUpdate".
    / >
    < MBeanAttribute
    Name = "ProviderClassName".
    Type = "java.lang.String".
    Writeable = "false".
    By default = "& quot; test. MyIdentityAsserter & quot; »
    / >
    < MBeanAttribute
    Name = "Description".
    Type = "java.lang.String".
    Writeable = "false".
    By default = "& quot; My identity Asserter & quot; »
    / >
    < MBeanAttribute
    Name = "Version".
    Type = "java.lang.String".
    Writeable = "false".
    By default = "& quot; 1.0 & quot; »
    / >
    < MBeanAttribute
    Name = "Base64DecodingRequired".
    Type = 'boolean '.
    Writeable = "false".
    Default = "false".
    / >
    < MBeanAttribute
    Name = "SupportedTypes.
    Type = "java.lang.String [].
    Writeable = "false".
    Default = "new String() {& quot; MyToken & quot ;} »
    / >
    < MBeanAttribute
    Name = "ActiveTypes".
    Type = "java.lang.String [].
    Default = "new String() {& quot; MyToken & quot ;} »
    / >

    At this point the MyIdentityAsserter checks simply token type is correct, then return a CallbackHandler custom that contains a hard-coded user name.

    Here is the custom CallbackHandler:

    / public class MyAssertionCallbackHandler implements CallbackHandler {}

    private String userName;

    public MyAssertionCallbackHandler (String userName) {}
    Me.username = username;
    }

    @Override
    public void handle ([recall] recalls) survey IOException,
    {UnsupportedCallbackException}
    for (c reminder: reminders) {}
    If (ch. instanceof NameCallback) {}
    NameCallback nc = c (NameCallback);
    nc.setName (userName);
    }
    }
    }
    }

    In the web console, I configured MyIdentityAsserter as the first element. When you start the server, I saw its initialize method is called. However, when I hit a page protected in my test application, he went directly on the login form.

    At first I thought that there is a problem with passing the token, so I used "Modify Headers" add-on for FireFox to stick MyToken header in all applications and monitored with Fiddler2. I saw the header, but MyIdentityAsserter is not always invoked; not in my application of test and not during the connection to the admin console.

    Then I changed "MyToken" in "User-Agent", so that it is always present. Hitting a page protected in my test application went directly to the login form; However, this connection to the console admin time called assertIdentity().

    Why is this? What I am doing wrong? Y did he do any scope of particular debugging I can turn on to see what decisions WLS? I already lit atz and DebugSecurity but I don't see anything relevant in the newspapers.

    Published by: user6476654 on March 21, 2011 15:27

    Replace your CLIENT-CERT auth metod

    CLIENT-CERT

    If it still does not work, send me a message to [email protected]

    Faisal
    http://www.WebLogic-wonders.com

  • Urgent: how to integrate the SOUL with the custom of the OPS form?

    Hello

    One is to have the idea of integrating the TEA with the custom of the OPS form? Please provide the solution if it is possible. The requirement is to initiate the approval using the SOUL of the irecruitement customization form.

    Kind regards
    Ashish

    Hi Ashish,

    SOUL is called from the workflow - you need to open the workflow or pl/sql calls using wf_engine or by outbreak of corporate event (I dunno how to initiate this workflow).

    Kind regards
    Gareth

  • LOV cascading if I don't have only one table with the customer name and the name of the product in the ADF.

    Hi Please help me how to use cascade, if I don't have only one table with the customer name and the name of the product in the ADF... I use Jdeveloper 11.1.

    For the client, I used customer VO with client list to fill but to populate the product that I use bind variable PrODUCT_NAME select distinct from TABLE where client_name =: bindCustomer

    so first of all, I need to set the variable of liaison on behalf of the selected customer.

    Can you please tell me how to set this variable binding in this case.

    After you set the LOV to your product attribute, correspondting VO in the LOV will appear under view accessors.

    Change the accessor of the view, you will see the variable binding. Set its value to the customer field of the parent object.

    Visit this link: https://www.youtube.com/watch?v=nXwL2_RP7AQ

    Kind regards

    Elias.

  • can I install CS5 on my laptop if 2 people already use the creative suite? I've now been referred to as forums after talking with the customer service and technical support online

    can I install CS5 on my laptop if 2 people already use the creative suite? I've now been referred to as forums after talking with the customer service and technical support online

    I was told they are separated once and also says to check the forums?

    Yes you can.

    ~ Rohit

  • I start on the site where I bought Adobe After Effects. Then I pressed 'Download', but the site you get on says (translated from English): there are problems, try again later. Get in touch with the customer, if the problem keept going. "While it

    I start on the site where I bought Adobe After Effects. Then I pressed 'Download', but the site you get on says (translated from English): there are problems, try again later. Get in touch with the customer, if the problem keept going. "So, here am I, I really hope someone knows the answer...

    Thank you

    Are you referring to CC version After Effects?

    If so, you must download and install Adobe Creative Cloud app using whiuch, you can install after effects CC.

    Windows:

    https://ccmdls.adobe.com/AdobeProducts/KCCC/1/Win32/CreativeCloudSet-up.exe

    Mac:

    https://ccmdls.Adobe.com/AdobeProducts/KCCC/1/OSX10/CreativeCloudInstaller.dmg

    Reference:

    Download and install Adobe Creative Cloud apps

  • Settings RDP with the customer to view.

    Hi all.

    Is it possible to change the RDP with the customer to display settings (resolution, colors,...) as the RDP of Windows client as it allows? View Client has just 2 options (port connection and SSL or not) by default.

    Thanks in advance.

    Sincerely,

    Jean-Philippe

    Yes you can do it.

    You can use the standard GPO in the ad and you'll find ADM files on the Server View Manager: C:\Program Files\VMware\View Manager\Extras\GPO

    Blog: http://communities.vmware.com/blogs/dommermuth

  • Oracle Weblogic domain creation problem with Webcenter portal and the content of the products.

    Hello

    I tried to create a new domain weblogic support webcenter portal and content products. However, I got the following error on the progression of 70%:

    --------------------------------------------------------------------------------------------------------------------------

    Preparing...

    Extract the contents of field...

    Creating new domain security information...

    Failed to create in the domain!

    Location of area: C:\Oracle\Middleware\user_projects\domains\base_domain

    Reason: null

    Exception:

    Traceback (innermost last):

    "< Iostream >" file, line 86, in there?

    ImportError: no module named javaos

    --------------------------------------------------------------------------------------------------------------------------

    Server operating system: Windows Server 2012 R2

    FMW Version: 11.1.1.8

    Your help would be greatly appreciated.

    Thank you

    Cyrus

    Hello

    Did you add the name of your operating system (Windows Server 2012) in the javashell.py file?

    After you add the name of your os you must re-create the jython file - modules.jar.

    Use after command to generate the jar again

    jar - cvf jython - module.jar Lib META_INF (records created after extraction of the jar file)

    I have also been facing same problem, solved by above to get around.

    -Prashant

  • deploy from model with the custom form does not not - NIC becomes disconnected

    [We're using vcenter 5.1 update 2]

    I have created a new model for 2012 Server R2 and I created a specification tailored to go with it. I went to test the deployment of the other day and it seemed that the personalised has not quite finished. He had put the local administrator password and baptized, but he does not join the domain. I finally understood that after the deployment, the NETWORK adapter is not connected despite having me 'connect to light' checked in the model. We are using the VMXNET 3 card.

    I've been messing around with the template for the past 2 days and I am stuck as to why it does not work. I tried the following...

    -checked the windows firewall is disabled (3 options) (Re: ESXi 5 VM / Server 2008 R2 loses the network connection after reboot)

    -removed NIC; cleaned up the registry to the HKLM\System\CurrentControlSet\Control\Network\; restarted; readded NIC (it was to eliminate any ghost NICs) (http://vnetwise.wordpress.com/2012/06/09/vmware-template-deploymentspart-1-trying-to-modify/)

    -Remove vmware tools and reinstall. (http://vnetwise.wordpress.com/2012/06/09/vmware-template-deploymentspart-1-trying-to-modify/)

    -card network in the operating system, unchecked "allow the computer to turn off to save energy" (Re: ESXi 5 VM / Server 2008 R2 loses the network connection after reboot)

    -checked that my new 2012R2 model uses the same host cluster and storage as my 2012 model that works. Also on the same port group distributed. (Essentially, all parameters of vcenter are identical between the two models)

    -also tried disabling the NETWORK card in the model (Windows Server 2012 comments customization)

    I have re-deployed the same server about 10 times and each time after deployment, you can see restart and try starting the customization but it crashes. If I manually turn the NIC on it is completed successfully. The problem is that I don't want to have to do that each time I deploy a server. Why is it disable the NIC and unchecking my option to connect to turn on and how to fix this?

    6.23.2014

    Based on tests (as detailed below):

    5.1 U2 - when patterns of deployment Server R2 2012 using a custom form, the NIC is not on after the deployment despite having ' connect at power on "checked.

    * We use VMXNET 3 and we use vDS


    Any help is very appreciated!

    -Adam

    Post edited by: atom_acres

    Problem solved: you need to update the hardware VM version from 8 to 9 on the template (also be sure to check "running on check and put vmtools")

    When you create a new virtual machine from scratch in 5.1 U2, he apparently uses VM Hardware version 8 instead of the latest v9. Once I upgraded it, made sure to check the box to have check and tools upgrade vm market, deploying with customization works and the NETWORK adapter is enabled when lit!

  • Socket connection WebCenter portal to the WebCenter content error

    I'm trying to connect WebCenter Portal 11.1.1.6 to WebCenter content and I get the following error in my log of the Complutense University of MADRID:

    [< 12 may 2012 2:32:12 PM CDT > < error > < Socket > < BEA-000403 > < IOException occurred in the socket: Socket[addr=/192.168.106.19,port=52721,localport=16200]
    java.net.SocketException: recv failed: descriptor not a socket.
    java.net.SocketException: recv failed: descriptor not a socket
    at jrockit.net.SocketNativeIO.readBytesPinned (Native Method)
    at jrockit.net.SocketNativeIO.socketRead(SocketNativeIO.java:32)
    at java.net.SocketInputStream.socketRead0 (SocketInputStream.java)
    at java.net.SocketInputStream.read(SocketInputStream.java:129)
    at weblogic.socket.SocketMuxer.readFromSocket(SocketMuxer.java:988)
    Truncated. check the log file full stacktrace
    >

    I followed the instructions to activate the Folders_g and all these other quirks, but it still does not. Here is my file config.cfg:

    <? jcharset cfg = "Cp1252"? >
    Properties of the #Server system
    IDC_Name = webctr_4444
    IdcProductName = idccs
    InstanceMenuLabel = webctr_4444
    InstanceDescription = Instance webctr_4444
    SocketHostAddressSecurityFilter=192.168.106.19|127.0.0.1|0.0.0.0.0.0.0.1

    Variable #Database
    SystemDatabase:DataSource = CSD
    SystemDatabase:UseDataSource = true

    Variable #Internet
    HttpServerAddress = webctr.domain .net: 16200
    Mail = mail server
    [email protected]
    HttpRelativeWebRoot = / cs /.
    UseSSL = No

    #General option Variables
    IsAutoNumber = Yes
    AutoNumberPrefix = webctr_4444
    UseAccounts = 1

    Variable #Additional
    AllowUpdateForGenwww = 1
    registerStartMenuActions = 1
    FileEncoding = UTF8
    Web server = javaAppServer
    IDC_ID = IpmNode
    FsAutoConfigure = true
    IntradocServerPort = 4444


    And my settings in WebCenter for the connection of content repository:

    Content administrator: weblogic
    Root folder: /content
    Application name: PortalContent

    RIDC Type of Socket: Socket
    Host: webctr.domain.net
    Server port: 16200
    Timeout: 300
    Authentication method: identity Propagation
    The root of context Server Web site: /cs/
    Administrator username: weblogic
    Administrator password: < disabled >


    Any ideas that I might be missing? I tried to reboot several times.

    Published by: dvmorris on May 12, 2012 12:41

    You try to connect using the web port.
    A socket connection uses RIDC, which means you need to use the port of intradoc which 4444 in your case.
    So to change the port number in your connection to 4444 and it should work.

  • The customer wants announcement provided as. Gif

    I have an announcement of 50 mm x 190 created in indesign... Asked me to provide advertising as a Hi res .gif with a purge of 5mm down - I was never asked to work in this way. How can I achieve this?

    Thanks in advance.

    GIF is not a very wise choice. It supports transparency (which may or may not be necessary), but it is really meant for small Web graphics, and it only supports RGB color in picture mode - only 256 colors. You might want to confirm with your customer

    InDesign does not export to GIF format natively. You can use a workaround, export as a JPEG instead and that to convert a GIF, but the JPEG export is known to be of very poor quality. A much better way is to export in PDF format - you can add the purge in the export to PDF options dialog box - and convert that to the format GIF using save for Web in Photoshop.

  • How to install firefox last with the custom network home page

    I'm trying to figure out how to do a network with the latest firefox installation, but suitable for the bringing into default homepage for the intranet portal of companies. I have several thousand computers that require installation and pushing by network is the only realistic method, but I can't find a solution on how to change the homepage for this. Help, please!

    See:

Maybe you are looking for

  • upgrade to el capitan, now error message at first upward...

    last night I clicked on free upgrade to el capitan on the itunes site... download for a long time, then when done... the system restarts and I get the following error message and it does not start... Please help...

  • Speed of scanning and samples for FFT affecting dt

    Hello I have currently acquire the accelerometer data and the value of the scanning speed of the clock to 5120 s/s. I use then the analog 1 d Wfm Nchan N Samp to acquire 5120 samples, then use analysis FFT on it to create a chart of the frequency. It

  • DVD player won't play a movie made with movie maker

    I downloaded the movie maker and made the movie to mpeg and jpg saved on my computer to my Sony cybershot camera. He burned first to a DVD-R and nothing. So I saved a copy on my computer then burn a copy on a CD - R. Now, when I put the CD or the DVD

  • Problems of network of phones smart blackBerry after upgrade

    After upgrade today, my entire calendar disappeared... and google sync fails!... says connection failed due to network problems, check your settings... Don't know what that means... Any ideas? THX I also got an error that there in no browser configur

  • Cannot minimize/maximize/close/move/resize Windows.

    The right upper buttons to minimize, maximize, and close a window do not work. Respond to mouse pointer, they don't take any action when you click it. Also, I can't move or resize windows by dragging them, etc. I can always shut down windows with the