1.2.1 Configure Custom Authentication Provider

This topic provides systematic instructions to configure the Custom Authentication Provider.

FCUBS Custom Authenticator Provider configuration must be done through the Weblogic console of SOA or manually update the config.xml of the SOA domain.

Follow the below steps to setup Custom Authentication Provider:

  1. Along with the FCUBS Ear file, the installer generates the FCUBSAuthenticationProvider.jar file in the BPELbuild folder. Copy this file in the following path on the application server host <ORACLE_HOME>\wlserver\server\lib\mbeantypes.
  2. Restart the Admin Server.
  3. Login to the Console.
  4. Click Security Realms.

    Figure 1-1 Oracle Weblogic Server - Security Realms


    Description of Figure 1-1 follows
    Description of "Figure 1-1 Oracle Weblogic Server - Security Realms"

  5. Click myrealm.

    Figure 1-2 Oracle Weblogic Servers_SecurityRealm_myrealms


    Description of Figure 1-2 follows
    Description of "Figure 1-2 Oracle Weblogic Servers_SecurityRealm_myrealms"

  6. Click the Providers tab and then click the New button to create a new authentication provider.

    Figure 1-3 Oracle Weblogic Server - Providers


    Description of Figure 1-3 follows
    Description of "Figure 1-3 Oracle Weblogic Server - Providers"

  7. Specify the Provider name as FCJCustomProvider and type as FCUBSUserAuthenticator and click OK.

    Figure 1-4 Oracle Weblogic Server - Providers - Create New Authentication Provider


    Description of Figure 1-4 follows
    Description of "Figure 1-4 Oracle Weblogic Server - Providers - Create New Authentication Provider"

  8. Click the Reorder button.

    Figure 1-5 Oracle Weblogic Server - Providers - Reorder


    Description of Figure 1-5 follows
    Description of "Figure 1-5 Oracle Weblogic Server - Providers - Reorder"

    The Reorder Authentication Providers screen displays.

    Figure 1-6 Oracle Weblogic Server - Settings for FCJCustomProvider


    Description of Figure 1-6 follows
    Description of "Figure 1-6 Oracle Weblogic Server - Settings for FCJCustomProvider"

  9. On the Reorder Authentication Providers screen, bring the newly created provider to the first of all providers and click OK.
  10. Click FCJCustomProvider.
    The Settings for FCJCustomProvider screen displays.

    Figure 1-7 Settings for FCJCustomProvider - Common


    Description of Figure 1-7 follows
    Description of "Figure 1-7 Settings for FCJCustomProvider - Common"

  11. In the Common tab, change the Control flag to SUFFICIENT from the drop-down list.
  12. In Provider Specific tab, perform one of the following actions:
    1. Set JNDIName as Flexcube JNDI Name.
    2. If external authentications are used in FCUBS, then specify the LDAP/MSAD related fields.
  13. For manual edit, browse the config.xml file from the following folder:
    \Middleware\user_projects\domains\base_domain\config\
    The following codes should be added at proper locations in the config.xml file.
    • Search for <realm> tag and add the following code between <realm> and </realm> tags. This should be the first child of the realm Node.
      <sec:authentication-provider xmlns:n1="http://fcubs.ofss.com/security"
xsi:type="n1:fcubs-user-authenticatorType">
  <sec:name>FCJCustomProvider</sec:name>
  <sec:control-flag>SUFFICIENT</sec:control-flag>
  <n1:msad-or-ldap-login-required>true</n1:msad-or-ldap-login-required>
  <n1:external-password-required>true</n1:external-password-required>  
  <n1:authentication-type>MSAD</n1:authentication-type>
  <n1:ldap-server-ip-and-port>LDAP://localhost:389</n1:ldap-server-ip-and-port>
  <n1:ldap-ssl-enabled>true</n1:ldap-ssl-enabled>
  <n1:security-authentication-type>simple</n1:security-authentication-type> 
  <n1:ldap-domain-name>OFSS.COM</n1:ldap-domain-name>
  <n1:ldap-server-time-out-duration>0</n1:ldap-server-time-out-duration>
</sec:authentication-provider>
    • Make sure tag values matches the value given during Property file creation.

Parent topic: Integrate Oracle FLEXCUBE UBS and BPEL