For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Auke_Zaaiman's avatar
Auke_Zaaiman
Icon for Nimbostratus rankNimbostratus
Nov 05, 2013

Oracle Access Manager Form-based authentication HTTP headers not populated

When we use the basic LDAP authentication scheme the HTTP headers are provided correctly. But when we use the form-based authentication scheme the HTTP headers are not populated.   configuration ...
BIG-IP Access Policy Manager (APM)
oracle
security
Chris_Akker_129's avatar
Chris_Akker_129
Historic F5 Account
Nov 12, 2013

Hi Auke, I am not familiar with all the various types of user Auth that OAM provides. When we configure APM webgate to work with OAM, the user is re-directed to the OAM Credential Collector service, bypassing the BIG-IP/APM software. As far as I know, the configuration of the Credential Collector service is all done on the OAM server. I have only seen it work first hand with the LDAP Auth scheme, and have not tried or seen any of the other types. I think you will have to consult an Oracle OAM expert to get a definite answer.

 

And don't forget, the APM webgate is based on the OAM 10g SDK, not 11g. So just because it works on a server or another version, it doesn't mean it will work on the other. There are significant webgate changes from 10g to 11g.

 

Let us know what you find out !

 

-Chris