secure forms applications · •identity manager • ... oracle adaptive access manager oracle...

Copyright © 2013, Oracle and/or its affiliates. All rights reserved. 1

Secure Forms Applications with OAM, OAAM and DB Label Security

Roy Schultheiß,

Sudhir Tadi


The following is intended to outline our general product direction. It is intended

for information purposes only, and may not be incorporated into any contract.

It is not a commitment to deliver any material, code, or functionality, and

should not be relied upon in making purchasing decisions. The development,

release, and timing of any features or functionality described for Oracle’s

products remains at the sole discretion of Oracle.


Agenda Introduction

Solution Architecture

Use Case Demonstration

Business Benefits

Q&A


Introduction


Introduction EMEA Presales Center

Malaga

Bucharest

Bangalore


Introduction

We had to showcase the following Security Features for

a Forms Application running on a WebLogic Application Server:

Single Sign-on

Fraud Detection and Strong Authentication

Geographic Location Access Control

Turn Oracle Forms into a modern and secure Application

The Challange


Solution Architecture


Solution Architecture Product Selection

Oracle Access

Manager

Single Sign-On

Oracle Adaptive

Access Manager

Fraud Detection

Strong Authentication

Oracle Label

Security

Oracle Adaptive

Access Manager

Location Security


Governance

• Identity Manager

• Identity Analytics

• Privileged Account Manager

Access

• Access Manager

• Adaptive Access Manager

• Identity Federation

• Entitlement Server

• Mobile & Social Sign On

Directory

• Unified Directory

• Directory Server EE

• Internet Directory

• Virtual Directory

Platform Security Services

Solution Architecture Identity Management Platform


Solution Architecture Access Management

ACCESS

MANAGER

Scalable

Deployment

Single

Sign-on

Centralized

Policy

Management

Mobile &

Social

Access

Management

In a complex

Environment

Web SSO

Authentication & Authorization

Policy Administration

Session Management

Windows Native Authentication


Solution Architecture Access Management

ADAPTIVE

ACCESS

MANAGER

Helps

Preventing

Fraud

Security for

Browser &

Mobile

Risk based

Authentication

Device Tracking

Answer Logic

One Time Password

Risk Analytics

Investigation & Forensics


Solution Architecture Oracle Label Security


Solution Architecture Architecture

OAM WebGate

OAM WebGate

Oracle Access Manager

Oracle Adaptive Access Manager

Oracle Internet

Directory

Oracle Forms

Web Application

End-User

Single Sign-On

to Enterprise

Applications

HTTP/S

HTTP/S

LDAP/S

Secure

Protocol

over SSL

User Identities

Security Policies

Database

HTTP Server

Resource

Access

Descriptors


Solution Architecture Architecture

OAM WebGate

OAM WebGate

Oracle Access Manager

Oracle Adaptive Access Manager

Oracle Internet

Directory

Oracle Forms

Web Application

End-User

Single Sign-On

to Enterprise

Applications

HTTP/S

HTTP/S

LDAP/S

Secure

Protocol

over SSL

User Identities

Security Policies

Database

HTTP Server

Resource

Access

Descriptors

Label

Security

IP address


Solution Architecture Sending End-User‘s IP into the DB

Source: http://docs.oracle.com/cd/E24269_01/doc.11120/e24477/javascript.htm

Trigger: WHEN-CUSTOM-JAVASCRIPT-EVENT

JavaScript Events Calling into Oracle Forms

http://docs.oracle.com/cd/E24269_01/doc.11120/e24477/javascript.htm


Use Case Demonstation


a) First time access with restricted view

b) User Accessing from Trusted Source

c) User accessing outside Restricted Area


Oracle Access Management

OAM WebGate

OAAM Registration

OAM WebGate

Sample Web

Application

Oracle Forms

Servlet

End-User

Allowed Location

1

2

Access Sample Web

Application

Access Oracle Forms

User Store

Employees

Managers

Database Oracle Forms Server



b) User accessing from Trusted Source



Administrator

Adding Trusted IP

1

OAM WebGate

OAAM Authentication

Oracle Forms

Servlet

2

User Store

Employees

Managers

Database Oracle Forms Server

End-User

Allowed Location

Access Oracle Forms




b) User accessing from Trusted Source



Oracle Forms

Servlet

2 Access Oracle Forms

(blocked)

Administrator

Defining Restricted Area

1

End-User

Outside Restricted Area


OAM WebGate

OAAM Authentication


Business Benefits


Business Benefits

Increased end-user productivity

Increased agility

Reduced risk – avoid costs!

Enhanced security and compliance

secure forms applications · •identity manager • ... oracle adaptive access manager oracle...

Documents