Oracle Adaptive Access Manager UIO Integration Issue

Question

Hello fellows!
I'm trying to integrate one app using the Univesal integration option (UIO) in Discovery mode With Tomcat 5.5.
I already have installed the OARM and OASA and already have configured the proxy using apache.
My doubt is about the xml config files, to be more specific these ones : UIO_Settings.xml and TestConfig.xml.
In the oracle manual, we can see a example of TestConfig.xml, but I can't understand the proccess of authentication using this method.
In the documentation at this link:
http://download.oracle.com/docs/cd/E12057_01/doc.1014/e12052/uioprxy.htm#sthref454
on topic 5.9.4 Scenarios :
talk about Information should be collected for the following scenarios during the discovery process.
These informations have to be mapped on TestConfig.xml? how i have to put this informations at xml??
Has anyone done this kind of integration before?
Does anyone have any document more specific about this XML or a example?
tks for any help!
Edited by: Hildebrando on 06/01/2010 03:50

Answer 1

You need to create interceptors in the TestConfig.xml file that look for certain URLs and conditions in the HTTP traffic. UIO sits there and listens to the HTTP traffic. When it sees a URL that matches a URL in its TextConfig.xml file, it will evaluate the interceptors that have a URL match and it will evaluate the conditions block in the interceptor. If they match, UIO will execute the filter block and condition block.
You need to look in the UIO log file to see the traffic that UIO is watching. Tools like HTTP headers also help you watch the traffic and create interceptors to trap the HTTP traffic.
The sample interceptor code shown in TestConfig.xml is written for a sample application called BigBank.
For an example, look at request interceptor "Phase1BigBankLoginPostRequest." It is watching for a request for "/bigbank/login.do". When it sees this request from the user, it will then evaluate the condition block to see if the request method is a POST. If this is true, UIO will execute the filter block. Many interceptors also have action blocks that cause the user's browser to request another URL (most often through the use of a redirect).
There's lots more to say about this, but I recommend reading all the UIO documentation.