My Oracle Support Banner

After Upgrading to Oracle Access Manager 12c PS3 (OAM from to, Accessing the Unprotected Resources Require Login (Doc ID 2402341.1)

Last updated on AUGUST 31, 2023

Applies to:

Oracle Access Manager - Version and later
Information in this document applies to any platform.
Oracle is not responsible for instructions/information from 3rd party sites that may be contained in this KM note.


Using OHS/WebGate and OAM

OAM server is running on the SSL port and has the "require valid certificate" option set then after upgrading OHS/WebGate from to, all the unprotected resources required login although it should not.

Using the native WebGate in OHS to connect to OAM on another server but after upgrading OHS from to, it is prompted to authenticate just by landing on the main page that is listed as unprotected in the OAM configuration.

When changing the /** URL in OAM from using the Unprotect-Public Resource Policy to Excluded then no authentication is required.

Expected behavior to work as it did in WebGate / OHS and no authentication is required for the unprotected resource.

There is a workaround by changing the resource from unprotected to Excluded.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.