My Oracle Support Banner

Oam-webgate Question (Doc ID 2480433.1)

Last updated on DECEMBER 03, 2018

Applies to:

Oracle Access Manager - Version 12.2.1.3.0 and later
Information in this document applies to any platform.

Goal

You have WebGate 11g installed and would want to know if there is a way we can add to the obrar?encreply URI that the VIP can look at to know to forward the obrar?encreply to OBIEE OHS WebGate (installed on OHS Linux 64-bit machine) or the Siebel IIS WebGate (installed on Windows 2012 R12). The OBIEE OHS WebGate / Siebel IIS WebGate can then decrypt and get the original URL to send redirect back to the user browser respectively

OAM -12.2.1.3
WebGate -11.1.1.2
OHS - 12.2.1.3

VIP-->OHS (BOTH OBIEE & SIEBEL CONTEXT PATH CONFIGURED) --> OAM (ONCE AUTHENTICATION AND AUTHORIZATION) IS COMPLETE ATTACHES SESSION TOKEN (encreply?) encrypted token --> WebGate --> OBIEE

VIP-->OHS (BOTH OBIEE & SIEBEL CONTEXT PATH CONFIGURED) --> OAM (ONCE AUTHENTICATION AND AUTHORIZATION) IS COMPLETE ATTACHES SESSION TOKEN (encreply?) encrypted token --> WebGate --> Siebel

In both the flow the OAMauthcookie is encryptedtoken in response header so when it goes to WebGate, WebGate intercepts but it cannot recognize as both OBIEE and Siebel have same encrypted value, even though you implement session stickiness on the Load Balancer, it would not be able to re-direct to the right host.

 

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.