OIF11g-OAM11g integration - Auth mode?

Question

I'm tying to get OIF11g-OAM11g auth mode integration work. I'm following the OIF integration mode doc and followed all the steps. I'm getting redirected to the OAM forum login. Authentication is going through successfull, but I'm getting this error from OIF:
<Mar 13, 2012 1:17:36 PM CDT> <Error> <oracle.security.fed.eventhandler.authn.engines.oam.OAMAuthnEventHandler> <FED-18068> <Authentication failed: WebGate did not authenticate the user>
<Mar 13, 2012 1:17:36 PM CDT> <Warning> <oracle.security.fed.http.handlers.authn.LoginRequestHandler> <FED-18051> <Authentication instant was not sent from the authentication engine.>
Installed OHS server (for Webgate 11g agent) on the same server hosting OIF (configured for both IdP and SP). I'm NOT using OSSO agent.
The index.html of OHS server was modified and set to redirect the loopback testing URL of fed server as below. The reason I did this was to suppress the OIF login page and make OIF understand the OAM cookie.
http://oifhost:7499/fed/idp/initiatesso?providerid=http://oifhost:7499/fed/sp&returnurl=http://anyresouce
Under Authentication Engine, made OAM as the default authentication engine and added "OAM_REMOTE_USER" as the header attribute
Create OAM policy in OAM. The host identifier has both OHS proxy and OIF host URL
Added "OAM_REMOTE_USER" as the header attribute under authorization policy
Has someone faced this issue before. I have seen many threads with the same issue but no solutions yet. Please help.

Answer 1

Hi community,
I have a problem with the integration between oracle access manager 11g and Oracle identity Federation. I want propagate the credential from an application called WSebra to Oracle Access Manager with a SAML Assertion. I have tested the procedure of the integration guide of Oracle "Integration Guide for Oracle Access Manager E15740-04" but not work.
I want know if is possible propagate the credentials betwen an application that send SAML Assertion like WSebra and Oracle Access Manager 11G and if is possible the procedure of integration, i don´t use WebGate i just need propagate the credentials from wsebra to Access Manager. Wsebra has an authentication mechanism with an LDAP system and make the work of authentication, Access Manager must create the Session.
At this point, i create and identity provider and service provider with Oracle Single Sign-On like the integrattion manual describe and i get the message:
Resultado de Autenticación de SSO: Fallo de Autenticación
Código de Estado Secundario de SSOUNKNOWN_PRINCIPAL
And in the log i get the next message:
Authentication instant was not sent from the authentication engine.
Please i need help with this topic because we must integrate this products for a migration process, we want migrate from SUN ACCESS MANAGER to Oracle Access Manager 11g, the SUN ACCESS MANAGER has the SAML setting out of the box. Oracle Access Manager 11g doesn't has SAML and RSA authenticacion is very bad, and we have many problems for this features.
Thanks.