4 Billing Care Preinstallation Tasks
Learn about prerequisite tasks, such as installing your Oracle database, that you perform before installing the Oracle Communications Billing Care software.
Topics in this document:
Overview of Production Preinstallation Tasks
In production installations, the Billing Care installer deploys Billing Care on a running Oracle Platform Security Services (OPSS) JRF-enabled domain. The installer assumes that the following required software preinstallation tasks, including applying patches and workarounds, have already been completed successfully.
Note:
A test installation without OPSS security can be performed on a basic WebLogic domain. Do not use a test installation in production.
Preinstallation tasks for Billing Care consist of the following steps:
Installing and Configuring Oracle Enterprise Database
Billing Care requires Oracle Enterprise Database for storing authentication and authorization policies and user information. If you are using Oracle Identity Management (IDM) for user authentication and authorization, you must install the database before you install and deploy IDM components.
Oracle recommends that an experienced database administrator install and configure your database. To install and configure Oracle Database, see the Oracle Database installation documentation at: https://docs.oracle.com/en/database/.
Installing and Configuring Oracle WebLogic Server
Billing Care requires a JRF-enabled WebLogic Server domain for deploying Billing Care. You must download and install Oracle WebLogic Server using the Fusion Middleware Infrastructure installer.
If you are using IDM for user authentication and authorization, download and install WebLogic Server before installing IDM.
See Installing and Configuring Oracle WebLogic Server and Coherence for information about installing WebLogic Server.
In a production environment, Oracle recommends using the SSL protocol for sending and receiving messages
For more information about configuring SSL in WebLogic Server, see "Configuring SSL" in Administering Security for Oracle WebLogic Server.
Billing Care supports TLS versions 1.2 (all 15.0 releases) and 1.3 (Release 15.0.1 or later). For information about setting the protocol version, see "Specifying the SSL/TLS Protocol Version" in Administering Security for Oracle WebLogic Server.
Configuring the OPSS JRF-Enabled Billing Care Application Domain
You deploy Billing Care on a JRF-enabled Oracle WebLogic Server domain configured as an Oracle Platform Security Services (OPSS) client domain. Create a JRF-enabled domain in Oracle WebLogic Server and configure an application domain policy that controls access to the Billing Care application.
For creating the domain and configuring the domain policy, see in "Configuring the Oracle Fusion Middleware Infrastructure Domain" in Oracle Fusion Middleware Installing and Configuring the Oracle Fusion Middleware Infrastructure.
Installing and Configuring Oracle Unified Directory
Download and install the Oracle Unified Directory software. For more information, see "Installing the Oracle Unified Directory Software" in Oracle Fusion Middleware Installing Oracle Unified Directory.
Configuring Oracle Unified Directory as Authentication Provider
After installing OUD, configure the OPSS Administration Server to use OUD as the authentication provider.
See "Configuring Authentication Providers" in Oracle Fusion Middleware Administering Security for Oracle WebLogic Server for information on setting up OUD as your authentication provider.
See "Introduction to Oracle Unified Directory" in Oracle Fusion Middleware Administering Oracle Unified Directory for information on setting up OUD, including how to synchronize OUD with existing directories that you may already have.
Installing and Configuring Oracle Access Management
Download and install the Oracle Access Management (OAM) software. For more information, see the information about installing and configuring Oracle Access Management at:
https://docs.oracle.com/en/middleware/idm/suite/12.2.1.4/index.html
Configuring the Oracle Access Manager Billing Care Application Domain
Create a Billing Care application domain in Oracle Access Manager (OAM) and configure an application domain policy that controls access to the Billing Care application.
To create your Billing Care application domain in OAM, complete the following steps:
-
Creating the Billing Care Authentication Policy and Adding Resources
-
Creating the Billing Care Authorization Policy and Adding Resources
For more information about application domains and policies, see Oracle Fusion Middleware Administering Oracle Access Management.
Creating the Billing Care Application Domain
To create the Billing Care application domain:
-
Log in to your OAM web console at http://hostname:port/oamconsole, where hostname and port are the server name or IP address and port for your OAM instance.
-
Click Application Domains in the Access Manager frame.
-
Click Create Application Domain.
-
In the Name field, enter a name for your application domain.
-
(Optional) Provide Description, Session Idle Timeout (minutes), Allow OAuth Token, and Allow Session Impersonation values.
-
Click Apply.
The Billing Care application domain is created.
See "Creating a New Application Domain" in Oracle Fusion Middleware Administering Oracle Access Management for more information.
Defining Billing Care Resources
Define the /bc**, /bc*, and /** resources for your Billing Care application domain. Repeat steps 1 through 4 for each of these resources.
To define Billing Care resources in your Billing Care application domain:
-
Click Application Domains in the Access Manager frame.
-
Click the link for your Billing Care application domain.
The Summary tab for your Billing Care application domain is shown.
-
Click the Resources tab.
-
Enter or select the following values listed in Table 4-1.
Table 4-1 Billing Care Protected Resource Creation Values
Field Value Type
HTTP
Description
(Optional) Enter text description
Host Identifier
IAMSuiteAgent
Protection Level
Protected
Authentication Policy
Protected Policy
Resource URL (String)
/bc**, /bc*, or /**
Define an excluded resource for /fav.ico.
To define the excluded resource, repeat steps 1 through 4 using the values listed in Table 4-2.
Table 4-2 Billing Care Excluded Resource Creation Values
Field | Value |
---|---|
Type |
HTTP |
Description |
(Optional) Enter text description |
Host Identifier |
IAMSuiteAgent |
Protection Level |
Excluded |
Resource URL (String) |
/favicon.ico |
See "Adding and Managing Policy Resource Definitions" in Oracle Fusion Middleware Administering Oracle Access Management for more information on creating resources in OAM console.
Configuring Billing Care Authentication Modules
Create an OIMIDStore authentication model in OAM for authenticating Billing Care users.
To create the required authentication model in OAM:
-
Click Authentication Modules in the Access Manager frame.
The Authentication Modules node is shown.
-
Click the Create Authentication Module menu and select Create LDAP Authentication Module.
-
In the Name field, provide a name for your authentication module.
-
In User Identity Store, select OIMIDStore.
-
Click Apply.
See "Managing Native Authentication Modules" in Oracle Fusion Middleware Administering Oracle Access Management for more information on creating an authentication module in OAM console.
Creating a Billing Care Authentication Scheme
The authentication module you previously created must be added to an authentication scheme in your Billing Care application domain.
To create an authentication scheme and add the authentication module to it:
-
Click Authentication Schemes in the Access Manager frame.
The Authentication Schemes node is shown.
-
Click Create Authentication Scheme.
-
Enter or select the following values listed in Table 4-3.
Table 4-3 Billing Care Authentication Scheme Creation Values
Field Value Name
Billing Care LDAP Scheme name
Description
(Optional) Enter text description
Authentication Level
2
Challenge Method
FORM
Challenge Redirect URL
/oam/server
Authentication Module
Select the authentication module created in the previous step
Challenge URL
/pages/login.jsp
Context Type
default
Context Value
/oam
-
Click Apply.
See "Creating an Authentication Scheme" in Oracle Fusion Middleware Administering Oracle Access Management for more information.
Creating the Billing Care Authentication Policy and Adding Resources
Create an authentication policy that the Billing Care application domain uses to manage the resources, authentication module, and authentication scheme previously created.
To create an authentication policy:
-
Click Application Domains in the Access Manager frame.
The Application Domain tab is shown.
-
In the Search field, enter the name of your Billing Care application domain and press enter.
-
In Search Results, click the name of your Billing Care application domain.
-
Click the Authentication Policies tab.
The Authentication Policy node is shown.
-
Click Create Authentication Policy.
-
Enter or select the following values listed in Table 4-4.
Table 4-4 Billing Care Authentication Policy Creation Values
Field Value Name
Billing Care authentication policy name
Description
(Optional) Enter text description
Authentication Scheme
Select the authentication scheme created in the previous step
-
Click Apply.
To add your Billing Care resources to your authentication policy:
-
In the Authentication Policy node for your previously created policy, click the Resources tab.
-
Click Add.
-
Select all of the Billing Care resources created in "Defining Billing Care Resources".
-
Click Apply.
See "Defining Authentication Policies for Specific Resources" in Oracle Fusion Middleware Administering Oracle Access Management for more information on creating an authentication policy and adding resources in OAM console.
Creating the Billing Care Authorization Policy and Adding Resources
Create an authorization policy and add resources to this policy for the Billing Care application domain.
To create the Billing Care application domain authorization policy:
-
Click Application Domains in the Access Manager frame.
The Application Domain tab is shown.
-
In the Search field, enter the name of your Billing Care application domain and press enter.
-
In Search Results, click the name of your Billing Care application domain.
-
Click the Authorization Policies tab.
-
Enter or select the following values listed in Table 4-5.
Table 4-5 Billing Care Authorization Policy Creation Values
Field Value Name
Billing Care authorization policy name
Description
(Optional) Enter text description
Success URL
The redirect URL to be used upon successful authorization
Failure URL
The redirect URL to be used upon failed authorization
-
Click Apply.
-
Click the Resources tab.
-
Click Add.
-
Select all of the Billing Care resources created in "Defining Billing Care Resources".
-
Click Apply.
See "Creating an Authorization Policy and Specific Resources" in Oracle Fusion Middleware Administering Oracle Access Management for more information on creating an authorization policy and adding resources in OAM console.
Configuring and Restarting the Oracle HTTP Server
After configuring the required Billing Care OAM components, edit the Oracle HTTP Server (OHS) idm.conf file in your OAM instance to specify the handler, host, and port for the /bc resource. Restart your OHS instance after editing this file.
To configure the /bc resource in the OHS idm.conf file:
-
Open a secure shell or terminal window to your OAM host as a user with administrative permissions.
-
Change to the Middleware_home/config/OHS/OHS_Instance/moduleconf directory, where Middleware_home is the middleware home directory of the OAM WebLogic Server instance and OHS_Instance is the OHS instance where OAM is hosted.
-
Append the following entry into the idm.conf file before the </VirtualHost> closing tag:
<Location /bc> SetHandler weblogic-handler WebLogicHost
host name or IP address of your OPSS Administration Server
WeblogicPort port number the WebLogic host is listening on </Location> -
Save the file.
-
Change to the OHS_home/bin directory, where OHS_home is the Oracle home directory of your OHS installation.
-
Restart OHS with the following commands:
./opmnctl status
./opmnctl stopall
./opmnctl startall
See "Using the idm.conf File" in Oracle Fusion Middleware Integration Guide for Oracle Identity Management Suite for more information on the OHS idm.conf file.
Installing and Configuring Oracle Identity Governance
Download and install the Oracle Identity Governance software. For more information, see the information about installing and configuring Oracle Identity Governance at:
https://docs.oracle.com/en/middleware/idm/suite/12.2.1.4/index.html.