OAM Password Change Page Restriction With Special Characters (Doc ID 2968238.1)

Last updated on AUGUST 16, 2023

Applies to:

Symptoms

In an Oracle Access Manager environment where OAM policy has special characters in "Characters Not Allowed" textbox invoking an authentication flow for a user that has to change password fails.

• If a F5 load balancer is in front of OAM instances (for SSL setup, with another http-Profile at F5 LB, where http-Profile is not OneConnect profile)

• If F5 workaround is in place (SSL setup with http-Profile setup as OneConnect profile) OR there is no F5 load balancer

Changes

 
Enable Oracle Access Management password policy:

1. User ID Store Configuration

2. Enable Password Management

3. Configure other attributes as required for OAM password policy as described in 24.3 Accessing Password Policy Configuration Page, of the Identity Management (IdM), Access Manager, Release 12.2.1.4, Administering Oracle Access Management.

Set special characters in "Characters Not Allowed" textbox

4. Ensure to extend the schema as required if not already imported in the environment
<OAM_HOME>/idm/oam/server/pswdservice/ldif/OID_PWDPersonSchema.ldif

5. Authentication module should include PasswordManagementPlugin to evaluate the OAM schema attributes used for locking the user after authentication.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.