Wednesday, July 30, 2014

OAM R2 Persistent Login (Keep Me logged In/ Remember Me) Set up

I remember struggling with this one in OAM R1.  Since this feature was not available in R1, we implemented this by our own custom code.  Finally this is available in R2.  Here is the link (http://docs.oracle.com/cd/E40329_01/admin.1112/e27239/getstarted.htm#CIHBEEAI) to set this up and test in 30 minutes max.

I am just posting the 1st step of exact WLST command taht I ran to enable it in OAM 11g R2.  Follow the rest of the steps from Oracle doc


$ cd ../Middleware/Oracle_IDM1/common/bin
$ ./wlst.sh

wls:/YOUR_DOMAIN/serverConfig> connect()
Please enter your username :weblogic
Please enter your password :
Please enter your server URL [t3://localhost:7001] :t3://YourServer:7001
Connecting to t3://YourServer:7001 with userid weblogic ...
Successfully connected to Admin Server 'AdminServer' that belongs to YOUR_DOMAINr'.

wls:/YOUR_DOMAIN/serverConfig> configurePersistentLogin(enable="true", validityInDays="30",maxAuthnLevel="2", userAttribute="obPSFTID")
SUCCESS

wls:/YOUR_DOMAIN/serverConfig> exit()

2 comments:

  1. Hi Pankaj,

    I have enabled persistence login for one application domain in my enterprise
    I am ok with that application but facing issue with apps in another domains
    Here is my test case

    1. Accessed application (Example : App1 )which is under application domain with persistent login enabled
    2. Provided credentials with keep me signed in and accessed resource
    3. closed browser
    4. Accessed App1 again and this time i am logged in without any login page (Expected)
    5. In same browser accessed another app (Say App2) which is in another domain for which persistent is not enabled
    6. it challenged me with login page without keep me sign in check box (expected)
    7 I provided correct credentials, but i got invalid username and password error specified error
    8. when i access App2 in another browser with same credentails,logged in successfully

    ReplyDelete
  2. [2015-01-16T06:30:01.769-05:00] [WLS_OAM1] [ERROR] [OAM-02054] [oracle.oam.controller] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-

    tuning)'] [userId: ] [ecid: 0053CDB5sgIDOdJLMml3ie0000gK000ILp,0:1] [APP: oam_server#11.1.2.0.0] [URI: /oam/server/auth_cred_submit] SSO session creation

    failed.[[
    oracle.security.am.common.utilities.exception.AmRuntimeException: LoggedIn user is different than the existing session user
    at oracle.security.am.engines.sso.adapter.MultipleUserSessionAdapterImpl.shouldUpdateOnSubjectValidationFailure(MultipleUserSessionAdapterImpl.java:252)

    [userId: ] [ecid: 0053CDB5sgIDOdJLMml3ie0000gK000ILp,0:1] [APP: oam_server#11.1.2.0.0] [URI: /oam/server/auth_cred_submit] OAM-02054

    ReplyDelete