How to Protect two Apps running on two different Hosts using same OAM serve

Question

Hi All,
I am new to OAM. I am trying to configure SSO for an Application using OAM 11g server which is already protecting another Application(Oracle EBS) on a different host.
Oracle EBS application uses the Oracle EBS Access Gate to collect the credentials.
Now what should I do to protect the second application say APP2. Should I require to install a new OHS instance and new Webgate for this purpose ? or can i use the one already used by EBS application ?
Please reply me soon
Thanks,
Prabhu

Answer 1

You may use the same OHS instance by creating additional reverse proxy filter for your application 2.
Or create another instance of OHS and configure webgate, OAM policies for your application 2.
All the applications configured with OAM will be configured for single sign on and no special configuration needs to be done.
Here are my comments to your questions:
1) Can you tell me why we should have different OHS and Webgate to protect the 2nd application ?
- As per best practices, you should have different OHS instances (+webgate) for different applications. But you may also configure the same OHS for multiple applications.
2) If we have different OHS and Webgate, then the same OAM session will be shared between the applications ? Basically the user will navigate from the first application to the second application by clicking a link on the first application's page. Will the OAM_REMOTE_USER header be passed on to the second application in this case?
- Yes, if you have different OHS and Webgate, then the same OAM session will be shared between the applications.
To pass the header variables to any application, add the variables in the application's OAM authorization policy responses.
3) By default OAM 11.1.1.3 sets the userid to the OAM_REMOTE_USER? or we should manually set a response header ?
- To be on a safer side, set this header on the authz policy's response tab and put the vallue as $user.userid