SAML support in WebLogic Enterprise Security

Are there any documents and code examples that illustrate how to use SAML in WL Enterprise Security? Is there any identity provider included (NOT identity assertion provider) or is the SAML credential mapper an identity provider?
The only document that I could find was around setting up identity assertion provider and credential mapper in admin guide. There ia also a mention of types of SAML assertion supported as below without any further explanation on these. Moreover, there is no information available for com.bea.security.internal.SAMLChallenge interface.
SAML.Challenge - The token is a Challenge token that has implemented the
com.bea.security.internal.SAMLChallenge interface.
SAML.Assertion - SAML Assertion that contains the full CertPath. Same as
SAML.Assertion.Certpath.
SAML.Assertion.NoCertpath - SAML Assertion that does not contain the full
certificate chain.
SAML.Assertion.Certpath - SAML Assertion with a full cert chain. Same as
SAML.Assertion.

anyone had any luck with this yet?

Similar Messages

WebLogic Enterprise Security???

Does anybody tell me how long the weblogic enterprise security is in the market?
And also what is the specific business purpose of this product?
Thanks
Lara

These pages have a lot of info on the subject:
http://dev2dev.bea.com/products/wlesecurity/index.jsp
http://www.bea.com/framework.jsp?CNT=overview.htm&FP=/content/products/security/
Pavel.
"Lara123" <[email protected]> wrote:
>
Does anybody tell me how long the weblogic enterprise security is in
the market?
And also what is the specific business purpose of this product?
Thanks
Lara

HTTP Strict Transport Security support in Weblogic 10.3.3+

Hi Gurus,
1) Does Weblogic 10.3.3+ support HTTP Strict Transport Security (HSTS)?
2) Has anyone experienced with implementation of the HTTP Strict Transport Security (HSTS) header in Weblogic 10.3.3?
Thanks in advance.
James

Hi John,
Here are your answers :)
1) WebLogic 10.3 supports SCA. The Tech Preview, as its name tells, was a preview of the final release which is now out. The full package installer will provide the latest version of WebLogic 10.3.
2) Since the Tech Preview is incomplete compared to the version you can find on OTN, no need to download it.
However, I experienced some problems using SCA on a sample domain.
I had to unzip another complementary JAR to make it work. This JAR was supplied with the TP. I may send you a copy through email if you wish since the JAR is nowhere to be found.
But please note that BEA has chosen to use a Fabric3 implementation. Oracle has its own. Thus I don't think this SCA implementation will last long in WebLogic ... (http://fabric3.codehaus.org/)
I bet that in a very next future, with the 11G version, SCA will full work and won't have anything to do with Fabric3.
Hope this helps.
Regards.
Edited by: Maxence Button on Nov 9, 2008 2:52 PM

HTTP Strict Transport Security (HSTS) support in Weblogic?

Hi Gurus,
1) Does Weblogic 10.3.3+ support HTTP Strict Transport Security (HSTS)?
2) Has anyone experienced with implementation of the HTTP Strict Transport Security (HSTS) header in Weblogic 10.3.3?
Thanks in advance.
James

Hi Friends, Thanks for reply, none of them solves my issue. Also I have one simple question, Gmail works fine in IE and Chrome but not in Firefox, this purely means my security application (antivirus etc) are not playing any role in the error displayed.
This looks like some issue in Firefox only....

BEA Enterprise Security - Linux Support

Hi All,
Does anyone know if there is a plan to support Linux platform for this product
- BEA Enterprise Security. Also, has any one used this product. How does it compare
to IBM's Tivoli TIM/TAM or Netegrity SiteMinder?
TIA

Hi All,
Does anyone know if there is a plan to support Linux platform for this product
- BEA Enterprise Security. Also, has any one used this product. How does it compare
to IBM's Tivoli TIM/TAM or Netegrity SiteMinder?
TIA

Dose JCA support only Weblogic server 6.0 without SP1 ?

          I got a error message when starting weblogic server with SP1 in which
          configured the connector architecture beta implentation.
          Dose JCA support only Weblogic server 6.0 without SP1 ?
          How do i configure JCA on WLS6.0 with SP1 if it supports that?
          Taesun.
          Error message(exception) is following as :
          <2001-03-14 PM 02:11:41> <Emergency> <Server> <Unable to initialize the se
          rver: 'Fatal initialization exception
          Throwable: java.lang.VerifyError: Cannot inherit from final class
          java.lang.VerifyError: Cannot inherit from final class
          at java.lang.ClassLoader.defineClass0(Native Method)
          at java.lang.ClassLoader.defineClass(ClassLoader.java:486)
          at
          java.security.SecureClassLoader.defineClass(SecureClassLoader.java:11
          1)
          at java.net.URLClassLoader.defineClass(URLClassLoader.java:248)
          at java.net.URLClassLoader.access$100(URLClassLoader.java:56)
          at java.net.URLClassLoader$1.run(URLClassLoader.java:195)
          at java.security.AccessController.doPrivileged(Native Method)
          at java.net.URLClassLoader.findClass(URLClassLoader.java:188)
          at java.lang.ClassLoader.loadClass(ClassLoader.java:297)
          at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:286)
          at java.lang.ClassLoader.loadClass(ClassLoader.java:253)
          at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:313)
          at
          weblogic.rmi.internal.ServerRequest.makeCBVOutputStream(ServerRequest
          .java:50)
          at
          weblogic.rmi.internal.ServerRequest.getMsgOutput(ServerRequest.java:9
          5)
          at
          weblogic.rmi.cluster.ReplicaAwareRemoteRef.invoke(ReplicaAwareRemoteR
          ef.java:245)
          at
          weblogic.rmi.cluster.ReplicaAwareRemoteRef.invoke(ReplicaAwareRemoteR
          ef.java:225)
          at
          weblogic.jndi.internal.ServerNamingNode_WLStub.createSubcontext(Serve
          rNamingNode_WLStub.java:248)
          at
          weblogic.jndi.internal.WLContextImpl.createSubcontext(WLContextImpl.j
          ava:81)
          at
          weblogic.transaction.internal.JNDIAdvertiser.initialize(JNDIAdvertise
          r.java:76)
          at
          weblogic.transaction.internal.TransactionService.initialize(Transacti
          onService.java:38)
          at
          weblogic.t3.srvr.ServerServiceList.initialize(ServerServiceList.java:
          46)
          at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:405)
          at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:169)
          at weblogic.Server.main(Server.java:35)
          '>
          The WebLogic Server did not start up properly.
          Exception raised: java.lang.VerifyError: Cannot inherit from final class
          java.lang.VerifyError: Cannot inherit from final class
          at java.lang.ClassLoader.defineClass0(Native Method)
          at java.lang.ClassLoader.defineClass(ClassLoader.java:486)
          at
          java.security.SecureClassLoader.defineClass(SecureClassLoader.java:11
          1)
          at java.net.URLClassLoader.defineClass(URLClassLoader.java:248)
          at java.net.URLClassLoader.access$100(URLClassLoader.java:56)
          at java.net.URLClassLoader$1.run(URLClassLoader.java:195)
          at java.security.AccessController.doPrivileged(Native Method)
          at java.net.URLClassLoader.findClass(URLClassLoader.java:188)
          at java.lang.ClassLoader.loadClass(ClassLoader.java:297)
          at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:286)
          at java.lang.ClassLoader.loadClass(ClassLoader.java:253)
          at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:313)
          at
          weblogic.rmi.internal.ServerRequest.makeCBVOutputStream(ServerRequest
          .java:50)
          at
          weblogic.rmi.internal.ServerRequest.getMsgOutput(ServerRequest.java:9
          5)
          at
          weblogic.rmi.cluster.ReplicaAwareRemoteRef.invoke(ReplicaAwareRemoteR
          ef.java:245)
          at
          weblogic.rmi.cluster.ReplicaAwareRemoteRef.invoke(ReplicaAwareRemoteR
          ef.java:225)
          at
          weblogic.jndi.internal.ServerNamingNode_WLStub.createSubcontext(Serve
          rNamingNode_WLStub.java:248)
          at
          weblogic.jndi.internal.WLContextImpl.createSubcontext(WLContextImpl.j
          ava:81)
          at
          weblogic.transaction.internal.JNDIAdvertiser.initialize(JNDIAdvertise
          r.java:76)
          at
          weblogic.transaction.internal.TransactionService.initialize(Transacti
          onService.java:38)
          at
          weblogic.t3.srvr.ServerServiceList.initialize(ServerServiceList.java:
          46)
          at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:405)
          at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:169)
          at weblogic.Server.main(Server.java:35)
          Reason: Fatal initialization exception


          I got a error message when starting weblogic server with SP1 in which
          configured the connector architecture beta implentation.
          Dose JCA support only Weblogic server 6.0 without SP1 ?
          How do i configure JCA on WLS6.0 with SP1 if it supports that?
          Taesun.
          Error message(exception) is following as :
          <2001-03-14 PM 02:11:41> <Emergency> <Server> <Unable to initialize the se
          rver: 'Fatal initialization exception
          Throwable: java.lang.VerifyError: Cannot inherit from final class
          java.lang.VerifyError: Cannot inherit from final class
          at java.lang.ClassLoader.defineClass0(Native Method)
          at java.lang.ClassLoader.defineClass(ClassLoader.java:486)
          at
          java.security.SecureClassLoader.defineClass(SecureClassLoader.java:11
          1)
          at java.net.URLClassLoader.defineClass(URLClassLoader.java:248)
          at java.net.URLClassLoader.access$100(URLClassLoader.java:56)
          at java.net.URLClassLoader$1.run(URLClassLoader.java:195)
          at java.security.AccessController.doPrivileged(Native Method)
          at java.net.URLClassLoader.findClass(URLClassLoader.java:188)
          at java.lang.ClassLoader.loadClass(ClassLoader.java:297)
          at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:286)
          at java.lang.ClassLoader.loadClass(ClassLoader.java:253)
          at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:313)
          at
          weblogic.rmi.internal.ServerRequest.makeCBVOutputStream(ServerRequest
          .java:50)
          at
          weblogic.rmi.internal.ServerRequest.getMsgOutput(ServerRequest.java:9
          5)
          at
          weblogic.rmi.cluster.ReplicaAwareRemoteRef.invoke(ReplicaAwareRemoteR
          ef.java:245)
          at
          weblogic.rmi.cluster.ReplicaAwareRemoteRef.invoke(ReplicaAwareRemoteR
          ef.java:225)
          at
          weblogic.jndi.internal.ServerNamingNode_WLStub.createSubcontext(Serve
          rNamingNode_WLStub.java:248)
          at
          weblogic.jndi.internal.WLContextImpl.createSubcontext(WLContextImpl.j
          ava:81)
          at
          weblogic.transaction.internal.JNDIAdvertiser.initialize(JNDIAdvertise
          r.java:76)
          at
          weblogic.transaction.internal.TransactionService.initialize(Transacti
          onService.java:38)
          at
          weblogic.t3.srvr.ServerServiceList.initialize(ServerServiceList.java:
          46)
          at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:405)
          at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:169)
          at weblogic.Server.main(Server.java:35)
          '>
          The WebLogic Server did not start up properly.
          Exception raised: java.lang.VerifyError: Cannot inherit from final class
          java.lang.VerifyError: Cannot inherit from final class
          at java.lang.ClassLoader.defineClass0(Native Method)
          at java.lang.ClassLoader.defineClass(ClassLoader.java:486)
          at
          java.security.SecureClassLoader.defineClass(SecureClassLoader.java:11
          1)
          at java.net.URLClassLoader.defineClass(URLClassLoader.java:248)
          at java.net.URLClassLoader.access$100(URLClassLoader.java:56)
          at java.net.URLClassLoader$1.run(URLClassLoader.java:195)
          at java.security.AccessController.doPrivileged(Native Method)
          at java.net.URLClassLoader.findClass(URLClassLoader.java:188)
          at java.lang.ClassLoader.loadClass(ClassLoader.java:297)
          at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:286)
          at java.lang.ClassLoader.loadClass(ClassLoader.java:253)
          at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:313)
          at
          weblogic.rmi.internal.ServerRequest.makeCBVOutputStream(ServerRequest
          .java:50)
          at
          weblogic.rmi.internal.ServerRequest.getMsgOutput(ServerRequest.java:9
          5)
          at
          weblogic.rmi.cluster.ReplicaAwareRemoteRef.invoke(ReplicaAwareRemoteR
          ef.java:245)
          at
          weblogic.rmi.cluster.ReplicaAwareRemoteRef.invoke(ReplicaAwareRemoteR
          ef.java:225)
          at
          weblogic.jndi.internal.ServerNamingNode_WLStub.createSubcontext(Serve
          rNamingNode_WLStub.java:248)
          at
          weblogic.jndi.internal.WLContextImpl.createSubcontext(WLContextImpl.j
          ava:81)
          at
          weblogic.transaction.internal.JNDIAdvertiser.initialize(JNDIAdvertise
          r.java:76)
          at
          weblogic.transaction.internal.TransactionService.initialize(Transacti
          onService.java:38)
          at
          weblogic.t3.srvr.ServerServiceList.initialize(ServerServiceList.java:
          46)
          at weblogic.t3.srvr.T3Srvr.initialize(T3Srvr.java:405)
          at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:169)
          at weblogic.Server.main(Server.java:35)
          Reason: Fatal initialization exception

Weblogic Enterprise 5.1 and threads

I know when building servers based on WLE 4.2 in was a big no-no to link in threading libraries like pthread and thread. Is this still the case in Weblogic Enterprise 5.1?

According to the product information, WLE 5.1 does not support Oracle 8.1.6, it
only goes up to
Oracle 8.1.5. But in general, I thought that with oracle there are 2 sets of
libraries, one for threads and
one for non-threaded support. You need to use the correct one, in the case of
WLE, that would be the
non-threaded one.
MAS
Paul Power wrote:
Thanks Mary,
Do you know of any customers who have managed to work
with Oracle 8.1.6 without linking with the thread libraries ?
cheers,
P.
Mary Ann Slavin wrote in message <[email protected]>...
WLE 5.1 C++ is not a threaded product. Compiling WLE 5.1 C++ with thread
libraries is not supported and will give unpredictable results for allprograms.
This should not be done.
Paul Power wrote:
Hi Mary,
Is it a dictate from BEA that you "can't" link with thread libraries ?
We are using WLE 5.0.1 ( and some 5.1) with Oracle 8.1.6 on
Solaris and found that we had to link using -lthread in order to use
Oracle (not the case in 8.1.5)
We don't actually attempt to try any threading in our apps and
have not had any problems yet but if it's the case that there
are known problems using threads we'd love to hear about
them :-)
As an aside, is Oracle 8.1.6 cleared for use by WLE ?
P.
Mary Ann Slavin wrote in message <[email protected]>...
No matter how WLE 5.1 C++ is used, it cannot be compiled with threadedlibraries, so that restriction remains.
A WLE C++ server can act as a client and call a WLE Java Server. Doingthis does not require the WLE C++ server to be compiled with threaded
libraries.
Wendell MacKenzie wrote:
Does this also mean if CORBA C++ servers want to invoke threaded
JavaServers
the same DEFECT will be prevent this from being accomplished?
Mary Ann Slavin wrote:
WLE 5.1 does not have threads in the C++ clients or servers. Java
threads are naturally occuring in the language, however, there are WLE
restrictions on what can be done in the
Java threads. These are documented.
jd wrote:
I know when building servers based on WLE 4.2 in was a big no-no
to
link in threading libraries like pthread and thread. Is this still thecase
in Weblogic Enterprise 5.1?
>

Operating system support (standard and enterprise ) in OBIEE 11g

Hi
Can any one help me in whether OBIEE 11g installation will be possible in both standard & enterprise edition operating system of windows server 2003 and windows server 2008 or not.
Thanks in advance.

OBIEE 11g is an application which runs on the Weblogic Application Server. Then if the windows plateform are supported for Weblogic, OBIEE 11g is also supported.
I assume that you talk about Standard Edition one and Enterprise Edition.
http://gerardnico.com/wiki/_detail/dat/obiee/obi_edition.jpg?id=dat%3Aobiee%3Astart
When we talked about Standard Edition on 10g, it was not about Oracle BI but on Discover for the reporting plateform.
If you want to be really sure, you can ask it to your representative sale.
Cheers
Nico

Versions supported by Weblogic 8.1

Hi,
I am very new to java and weblogic. I am about to install weblogic 8.1 Service Pack 5. I wants to know which are best version of jdk, servlet/jsp, ejb and tomcat supported by weblogic 8.1.
Please help me ..............
Thanks & Regards
-Sandeep

Hi Sandeep,
WLS 8.1 supports the JSP 1.2 specification from Sun Microsystems. JSP 1.2 includes support for defining custom JSP tag extensions. (See Programming JSP Extensions)
WLS 8.1 also supports the Servlet 2.3 specification from Sun Microsystems.
WLS 8.1 supports the Enterprise Java Beans 1.1 and 2.0 specifications.
Please refer to the following links for additional information
http://e-docs.bea.com/wls/docs81/jsp/intro.html
http://e-docs.bea.com/wls/docs81/upgrade/upgrade51to81.html
Cheers
-raj

Weblogic.management.security with transactions, Please HELP

I am using weblogic.management.security.authentication API to programmatically insert/delete users and passwords into/from default security provider on Weblogic Server 8.1. I want to add transactional support to this these actions, I tried using UserTransaction API but without any luck. Does weblogi.managment.security.authenication has no transactional support (rollback-commit) or am I doing something wrong? I very much appreciate your help and looking forward to hearing from you!!!!
It doesn't rollback, Here is the code:
UserTransaction transaction = (UserTransaction)ctx.lookup("javax.transaction.UserTransaction");
transaction.begin();
UserEditorMBean userEditor = (UserEditorMBean)providers;
userEditor.createUser(userName, password, description);
transaction.rollback();

I do not think you can have transactions over MBean calls as they communicate with relevant object over t3 and this objects are possibly in different class loader.
-TJ

Oracle Enterprise Security Manager

Hi!
I have some problems with installing the Oracle Aplication Server Infrastructure 10g. I need to configure the Oracle Internet Directory. For this i did following steps:
1) Install the Oracle Aplication Server Infrastructure 10g, which include the OID
2) For the aplication server database configure a Oracle Context through the Net Configuration Assistant
3) Configure the database for using OID
4) Create user in the database that identified globally
After that i need to configure a Enterprise User in OID. For this i need Oracle Enterprise Security Manager. But ESM isn't installed with the Oracle Aplication Server.
What application includes Oracle Enterprise Security Manager?
Thanks a lot!

Without knowing exactly what he referring to. I can't comments much more.
What's version are you using?
Data Guard is very mature feature of Oracle 10g, since it first appeared in Oracle 8i in the form of Standby server.
Whatever bugs he experienced, he should work with Oracle support to fix it. It could be known bugs that already has a fix, it could be he didn't use the feature correctly and assume it's a bug, it could be a real undocumented bug.
Using his own stored procedure to monitor data guard like reinventing the wheel. Actually it's worse, what on earth is he thinking that he could out smart whole Data Guard team of Oracle :D

Weblogic Enterprise manager with Oracle Portal

Hi All,
Iam working on a architecture defination which is basically a B2B and B2C based web applications. I intially thought the Oracle Portal+Oracle BPM as the right combination as it gives a complete technical stack as well as we will have a well defined control over the integrations.
Since the application requires high sclability and high transactions support, wanted to choose Weblogic Enterprise manager instead of oracle AS. In this context i have following quoestions
1. Will the Oracle Portal+Oracle Discoverer+Portlets(PLSQL, JAVA) can be ported onto WEBLOGIC Enterprise manager server?
2. What is the feature of OracleASOC4J?
Request to respond on this as quicly as possible
Advance Thanks,
Sreedhar

In a RAC environment database control runs by default on a master mode,when this node goes down,EM does the same. There's a comprehensive article on metalink how to handle this:
How to manage DB Control 10.2 for RAC Database with emca
Doc ID: 395162.1
Werner

Web Services, is SAML supported?

SAML Token Profile is supported in WebLogic Web Services and
we would like to take advantage of it for SSO. Besides inserting
SAML assertions into SOAP header manually, is there any help
offered in Flex? For our use scenarios, check out the following
topic "SAML Token Profile Support in WebLogic Web Services" using
the following URL:
http://download.oracle.com/docs/cd/E12840_01/wls/docs103/secintro/archtect.html#wp1068771
Thanks,
Stanley

UPDATE: Some issues were encountered during the deployment phase of CRES 4.0. These issues required us to perform a rollback to the previous version. Currently this upgrade is scheduled to take place Saturday November 12th.
Christopher C Smith
CSE CSCM
CISCO IronPort Customer Support

WebLogic Enterprise 5.1: Which version of Tuxedo included?

Hi,
can you tell me, which version of Tuxedo is included in WebLogic Enterprise
5.1?
Thanks,
Marita

Marita,
My understanding is that it is a version of Tuxedo based on v6.5, but not
released in any form other than as the deployment engine for WLE 5.x
Tuxedo 8.0 (which includes the C++ CORBA support formerly only available as part
of the "WLE" product obviously shares a single Tuxedo kernel between ATMI and CORBA
Of course, as with all Tuxedo versions, the version underpining WLE 5.x will
interoperate with other supported versions, so the exact version shouldn't be a
cause for concern.
Regards,
Peter.
Got a Question? Ask BEA at http://askbea.bea.com
The views expressed in this posting are solely those of the author, and BEA
Systems, Inc. does not endorse any of these views.
BEA Systems, Inc. is not responsible for the accuracy or completeness of the
information provided
and assumes no duty to correct, expand upon, delete or update any of the
information contained in this posting.
Marita León Ohl wrote:
Hi,
can you tell me, which version of Tuxedo is included in WebLogic Enterprise
5.1?
Thanks,
Marita

Internal SD Encryption & Enterprise Security

Does Sony has any plans for the above?
Internal SD encryption is something that a lot of users have been seeking. And the fact that Android doesn't have this feature built in or there's no such app in the Play store makes it more appealing to have it built in on Xperia phones. The current Android encryption only effect the 'data' partition and not the internal sd card. Which becomes an issue when an Xperia phone is lost or stolen. All one need to do is flash a new os, erasing all user data, but the content in the internal sd is still intact.
As for Enterprise Security, it's something that Xperia phones need to have if it wants to penetrate the Enterprise Market that are still being dominated by Blackberrys. Samsung has Knox, and it's about time Xperia has one of it's own.

I continue to refer Sony's whitepapers. ;-) This time the section about memory in Android devices from http://www-support-downloads.sonymobile.com/c6602/whitepaper_EN_c6602_xperia_z.pdf
"In Sony Mobile 2013 products, “Internal Storage” is now the union of what was previously known as “Phone Memory” (for applications and their data. “/data”) and “Internal Storage” (for user’s content, “/sdcard”). The reason for this change is to make the use of available memory more flexible, and also to enable the optional encryption of user’s content."
This basically means that there are no such things as "data partition" or " internal sd-card" anymore, only one big "internal storage" that holds everything. When it is encrypted, everything stored on the phone is encrypted.

SAML support in WebLogic Enterprise Security

Similar Messages

Maybe you are looking for