Forum Discussion

AntonyLovric_15's avatar
AntonyLovric_15
Icon for Nimbostratus rankNimbostratus
Jul 04, 2014
Solved

APM + OAM (11GR1) Installation guide for HTTP Basic Authentication over HTTPS

I can't find a guide that describes how to setup APM with OAM11g and use HTTP Basic authentication (over https). I found the SSO guide and was able to follow the 11g and 10g sequence diagrams and un...
BIG-IP Access Policy Manager (APM)
design
oam
oracle
security
  • Chris_Akker_129's avatar
    Chris_Akker_129
    Jul 07, 2014

    Hi Anthony.

     

    It depends on what part(s) of the OAM tech stack you want to use.

     

    For User Auth only, you can use this guide:

     

    http://www.f5.com/pdf/deployment-guides/big-ip-apm-dg.pdf

     

    Which will provide for HTTP Basic Auth to the user ( the APM login page with username/password ), using OID - Oracle Internet Directory, OAM's LDAP server.

     

    If you want to use APM's Webgate functionality, then you use this guide:

     

    http://www.f5.com/pdf/deployment-guides/oracle-oam-apm-11-dg.pdf

     

    Which gives you both User Auth, and Web Access Control using the full OAM stack with AuthN/AuthZ policies. It is VERY important that you test and verify your OAM polices prior to setting up APM webgate - use a web server with a 10g Webgate agent is highly recommended. You MUST follow the steps in this deployment guide - exactly as outlined, in order, to have a successful deployment.

     

    Good Luck, let us know how it goes !

     

    -Chris.

     

AntonyLovric_15's avatar
AntonyLovric_15
Icon for Nimbostratus rankNimbostratus
Jul 21, 2014

Thanks for the reply, sorry I'm late getting back to you. (I was off on vacation for a week, then working on some other stuff the following week.)

 

I've read the articles you've linked before. I was looking for an example that demonstrated message flow for 'basic' authentication vs the documented 'SSO/forms' based authentication examples.

 

From this link; http://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-oam-integration-11-2-0/1.html

 

I was trying to find a sequence diagram like the one in the image 'Accessing a protected resource using Access Policy Manager deployed with OAM 11g' using basic authentication instead of Forms-based authentication.

 

Thanks Antony

 

I'll mark your answer as the correct one because I've scoured the support site and haven't found anything. When I finish the implementation I'll ask my client if I can pass back/upload the sequence diagram I wrote.