SSO integration for OAS using OAM & OCI

Karthik-Oracle

Currently we have BIP login with just local accounts..

Now want to implement OAS(BIP) login including all WLS, EM etc., based on OCI IAM's SAML SSO method.

we can create a SAML App in OCI identity domain.

as per my understanding, we need OAM as intermediate layer for this SSO login of OAS via OCI IAM.

—

Now I am able to build oam domain, along with existing bi domain (for OAS) on same pod.

I am referring this https://docs.oracle.com/en/middleware/bi/analytics-server/security-oas/configure-sso-oracle-access-manager-environment.html#GUID-885C518B-BE3D-4F3E-8970-D6B9D4F42DDE

But need to know if we have any elaborated document to understand how to achieve this.

what to be configured on OAS WLS page is said in this above link, and further steps on how to configure OAM, how to link to OCI IAM app etc.. those kind of details I am searching for to achieve this OAS SSO flow..

.

SteveF-Oracle

Some options for you to research.


Connecting an On-Premises Oracle Analytics Server (OAS) to an IAM Domain for Single Sign-On Using the IAM App Gateway (Doc ID 3019744.1)


Integrate Oracle Analytics Server with Oracle Identity Cloud Service or IAM Identity Domain for Single Sign-On using App Gateway (Doc ID 3021142.1)

SSO Configuration for OAS with IDCS using Apache HTTP Server and OpenID Module

Mostafa Morsy-Oracle

@Karthik-Oracle

no Need for OAM unless you strict with OAM Only in between you can create SAML Application in OCI IAM Domain and use docker solution as stated her SAML 2.0 and Kerberos Single Sign-On Configuration for Oracle Analytics Server (Doc ID 2761678.1)

or use Configuring Oracle Analytics Server for SAML 2.0 Single Sign-On (SSO) Using Mellon Authentication Module of Apache HTTP Server (Doc ID 2902159.1)

Karthik-Oracle

related to:

https://community.oracle.com/products/oracleanalytics/discussion/22567/extending-existing-domain-to-add-oam

Karthik-Oracle

Thanks @SteveF-Oracle, @Mostafa Morsy-Oracle

I am reading these documents, will get back if any further questions.

Thanks a lot for quick response..

Karthik-Oracle

these docs, suggesting to use Oracle Cloud Service Application using client id & secret kind of configurations..
Searching for the reference to use Integrated application ( SAML certificates metadata) way..