Oracle
Access Manager 11g R2 PS3 Impersonation Demo
Pre-requisites:
- OAM 11g R2 PS3 environment is up and running with OUD as user store & protected sample resource called “spokuri.html” with LDAPSchema
- Enabled Impersonation in OAM & Extend OAM LDAP schema into OUD directory server
- Created user “kpokuri”(Impersonatee) with “orclIDXPerson” object class in OUD
- Created user “spokuri”(Impersonator) in OUD
- Added an attribute “orclImpersonationGrantee” to “kpokuri” and value as “8c69d7465afc406a947669204ad88ecf|20100324163000Z|20180524172000Z”
Description: orclImpersonationGrantee attribute value has 3
parameters separated by pipe “|”.
1.
Impersonator orclguid. In this case, it’s
“spokuri” user orclguid.
2.
Impersonation start date
3.
Impersonation end date
Demo Video:
Test Case:
- Access OAM LDAP Schema protected resource http://pokuri.demo.com:7777/spokuri.html
- Enter impersonator credentials spokuri/<<password>>
- Open a new tab and access http://pokuri.demo.com:14100/oam/server/impersonate/start?userid=kpokuri&success_url=http://pokuri.demo.com:7777/kpokuri.html&failure_url=http://pokuri.demo.com:7777/error.html
- When prompted enter impersonator password again
- Up on successful impersonation to user “kpokuri” new session will be created in OAM for user “kpokuri”.
- Check the “kpokuri” user session in OAM admin console “session management” and notice that impersonation field will be “true”.
Hope this helps some one out there!!
-- Siva Pokuri.