Active Directory and Weblogic Application Data Source

DLopez

Hi,

I've been asked to find a way to save Users information created through Active Directory in my application datasource so my application can check if the user as authorization.

My application, services to fetch the data and datasource will be in the weblogic.

What I found so far was that there as to be a Active Directory Provider in the weblogic to do the authentication, and it will work similar to SQL Provider, puting all users and groups in the weblogic.

Basically what I think I have to do is create something ( service or DB package function maybe ) that will somehow establish the synchronization between both AD and my database.

How can I do it, or there is an easier way to do it?

Thanks

amey g

Hello,

Yes this is what I suggested in my initial post. In some scenario I am also using JAVA API to get the AD user details and its works pretty well.

Thanks,

Amey

amey g

Hello,

You can go for the solution like OIM. Because customize approach is difficult to manage and not supported with this product.

Or you can query AD using JAVA API to get the details about the users or you can map required attribute of AD in jps-config file and use EL to get the value of that particular attribute.

REF:http://stackoverflow.com/questions/23263161/get-custom-user-attributes-from-ad-in-weblogic

EM12c, Weblogic, and Finding Your Way Through Active Directory | Maaz Anjum's Blog

If you only want multi factor authentication please check below link.

http://www.oracle.com/technetwork/articles/idm/default-2030737.html

Thanks,
Amey

DLopez

Thanks @amey g for your reply.

I think that one of the problems will be when to use the AD querying part.

To the same project I was asked to develop a custom provider, but in case the Client wants to use is own AD, my provider won't see if the user is authenticated, so my app as to see if he's authorized and that verification will be executed in the application database, so unless the user is there and as a role he won't be authorized to access it.

That's why I wanted to send the user info to my DB, I know the AD provider in weblogic will load all the users into the weblogic, but that is not enought.

If possible I was thinking of some synchronization between client AD and my Datasource.

Any ideas?

Thanks

amey g

Hello,

I have never worked on the particular. But please check the below link where it showing sync between AD and data source.

https://technet.microsoft.com/en-us/library/cc720650(v=ws.10).aspx    

Thanks,

Amey

DLopez

Since there will be a AD Provider that will put all users in Weblogic, I can, using java, create an app to import all chosen users, from a specific provider to my database

amey g

Hello,

Yes this is what I suggested in my initial post. In some scenario I am also using JAVA API to get the AD user details and its works pretty well.

Thanks,

Amey