Forum Discussion

Auke_Zaaiman's avatar
Auke_Zaaiman
Icon for Nimbostratus rankNimbostratus
Nov 05, 2013

Oracle Access Manager Form-based authentication HTTP headers not populated

When we use the basic LDAP authentication scheme the HTTP headers are provided correctly. But when we use the form-based authentication scheme the HTTP headers are not populated.

 

configuration form-based authentication:

 

Challenge Method Form Challenge Parameter: form:/menuview/login/login.jsp creds: userid password action: /menuview/dummy passthrough: no

 

Challenge Redirect: http://intern.demo.ioo.rotterdam.nl

 

In apache 2.x with the OAM plugin it works for both scenario's.

 

APM
oracle
security

1 Reply

Sort By
  • Chris_Akker_129's avatar
    Chris_Akker_129
    Historic F5 Account
    Nov 12, 2013

    Hi Auke, I am not familiar with all the various types of user Auth that OAM provides. When we configure APM webgate to work with OAM, the user is re-directed to the OAM Credential Collector service, bypassing the BIG-IP/APM software. As far as I know, the configuration of the Credential Collector service is all done on the OAM server. I have only seen it work first hand with the LDAP Auth scheme, and have not tried or seen any of the other types. I think you will have to consult an Oracle OAM expert to get a definite answer.

     

    And don't forget, the APM webgate is based on the OAM 10g SDK, not 11g. So just because it works on a server or another version, it doesn't mean it will work on the other. There are significant webgate changes from 10g to 11g.

     

    Let us know what you find out !

     

    -Chris