How to Configure OAM for Second Factor Authentication Using a Google Cloud Messaging (GCM) Push Notification to an Android Device (Doc ID 2308621.1)

Last updated on AUGUST 24, 2023

Applies to:

Oracle Access Manager - Version 11.1.2.3.0 and later
Oracle Mobile and Social - Version 11.1.2.3.0 and later
Information in this document applies to any platform.
Oracle is not responsible for instructions/information from 3rd party sites that may be contained in this KM note.

Goal

How to configure OAM second factor authentication (SFA) such that a push notification is delivered to an Android device where the end-user has to either allow or deny the login attempt. The push notification is delivered to the Oracle Mobile Authenticator application (OMA) which then communicates with the OAM server to grant or deny the end-user access to the protected resource.

The steps below are ONLY for configuring push notifications to Android devices. While the setup would be very similar for push notifications to Apple devices there are considerable differences in the setup that are not covered in this document.

Note that this note covers the use of SFA to send a push notification only. While the configuration of a one-time password with the OMA application covers some of the same pieces (such as OMA and the AdaptiveAuthentication scheme) that setup is covered in note 2307570.1.