OIM 11gR1 -- SSO using Weblogic negotiateIdentityasserter

Question

Hello Experts,
I'm trying to have OIM 11.1.1.5 authenticate its Web-UI using kerberos.
All the guides I found were based on OAM or third party SSO products.
I know that the weblogic application server itself provides support for Kerberos based authentication, but I failed to locate a Weblogic Kerberos configuration guide specific to OIM.
The part I'm missing is about mapping the AD authenticated identity to the OIM repository based identity, assuming the user's login in OIM is the same as its AD login.
Will appreciate your help and happy new year
Meni,

Answer 1

Hi GK Goalla, thank you so much for trying to help me. Really appreaciate you time.
Yes, I see xelsysadm account in the ldap.
Just before integrating OIM with OAM (using oimitg.props), xelsysadm was working fine to login into OIM. After integrating, when I try to use weblogic_idm as per the deployment guide, I am not able to login neither into OIM or into OAM.
All I see is below error messages :
<Apr 29, 2012 9:59:58 AM EDT> <Error> <OIM Authentication Provider> <BEA-000000> <*oracle.iam.platform.auth.providers.wls.OIMSignatureLoginModule login() Invalid Input username/password*>
<Apr 29, 2012 5:06:53 PM EDT> <Error> <OIM Authenticator> <BEA-000000> <*User weblogic_idm soft locked*>
When I try to use xelsysadm, OAM server is throwing below error. This id is no more working.
<Apr 30, 2012 5:38:49 PM EDT> <Error> <oracle.oam.user.identity.provider> <OAMSSA-20023> <Authentication Failure for user : xelsysadm.>
Also, I am wondering how weblogic_idm will work for OIM and OAM. I do not understand the logic. I know it belongs to "IDM Administrators" group. but I am not sure just because of this
OIM and OAM will let us to login with this id.
thank you again for helping me.
Edited by: Jyothi on Apr 30, 2012 2:00 PM
Edited by: Jyothi on Apr 30, 2012 2:18 PM
Edited by: Jyothi on Apr 30, 2012 2:19 PM
Edited by: Jyothi on Apr 30, 2012 2:40 PM