My Oracle Support Banner

Oracle Access Manager (OAM) How To Configure LDAP SSL Communication For An Identity Store (Doc ID 1503942.1)

Last updated on JULY 26, 2024

Applies to:

Oracle Access Manager - Version 11.1.2.3.210611 and later
Information in this document applies to any platform.

Goal

Background

  • Oracle Access Manager supports LDAP SSL "No-Authentication" and SSL "Server Authentication" communication.
  • The SSL "no-authentication" mode encrypts the data without exchanging a certificate between the LDAP server and the OAM Server.
  • Oracle Internet Directory and Oracle Virtual Directory support the SSL "no-authentication" mode.
  • Most LDAP server configured for SSL use the  "Server Authentication" mode.
  • This means during the SSL handshake the LDAP server sends a certificate to the LDAP client.
  • The LDAP client trusts the LDAP server certificate, if the root certificate of the Certificate Authority ( CA ) , which signed the certificate of the LDAP server, is loaded to the LDAP client certificate trust store. For OAM it means the root CA certificate has to be imported to the OAM trust keystore.

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.