Skip to Main Content
Forums

Security Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Interested in getting your voice heard by members of the Developer Marketing team at Oracle? Check out this post for AppDev or this post for AI focus group information.

how to get the sso token of an active user session required for a UserSession OAM SDK object?

Venkatesh Mohan-OracleJul 9 2014 — edited Jul 10 2014

We have a Java Web Application running on Weblogic proxied by an OHS with a Webgate installed for SSO and Security. We'd like that Java Application to use the OAM SDK to access/modify session attributes. We can not use the username/password to start an SDK UserSession because users are federated (SAML) so we'd like to use the ssoToken associated to the current OAM session generated for the Webgate. It is not clear how to obtain the session. Can the session token or authn token be read from a cookie available to the app behind the webgate? What cookie to use for an 11g Webgate?

Documentation states:

http://docs.oracle.com/cd/E40329_01/dev.1112/e27134/as_api.htm

For an Access Client developed using the Access SDK, a SSO token is issued as a string type with no name. Use getSessionToken() on an existing UserSession object to return that session's token. If you have an existing token, it can be used to construct a user session object. The token is encrypted and opaque to a user, but internally, can be either in 10g or 11g format

Regards,

Venkat

Comments

aakash wasnik

For 11G webgate , you would need to use OAMAuthn Cookie's content to get object of UserSession.

To get OAMAuthn cookie at weblogic level , you would need to set "filterOAMAuthnCookie" as user defined parameter of webgate to "false" in OAM admin console.

Registering and Managing OAM 11g Agents - 11g Release 2 (11.1.2.2)

Also check ObAccessClient.xml file (webgate) to see this change (userdefined parameter) has been reflected.

Regards

Aakash

1 - 1
Locked Post
New comments cannot be posted to this locked post.

Post Details

Locked on Aug 7 2014
Added on Jul 9 2014
#identity-management, #identity-manager, #oam
1 comment
538 views