Learn to create an Apple iOS Certificate, App ID, Bundle Identifier, and Keystore.

After creating the APNSCertificate.jks file, you must copy this file to the <NFS_VAULT_PATH> which maps to /u01/oracle/service/store/oaa.

You must set up some OAA properties that are required for configuring push notification for iOS devices.

PUT  <PolicyUrl>/policy/config/property/v1

curl --location -g --request PUT 'https://<PolicyUrl>/policy/config/property/v1' \
--header 'Content-Type: application/json' \
--header 'Authorization: Basic <Base64Encoded(<username>:<password>)>' \
--data '[
{
"name": "bharosa.uio.default.challenge.type.enum.ChallengeOMAPUSH.proxyProtocol",
"value": "https"
},
{
"name": "bharosa.uio.default.challenge.type.enum.ChallengeOMAPUSH.proxyHost",
"value": "proxy.example.com"
},
{
"name": "bharosa.uio.default.challenge.type.enum.ChallengeOMAPUSH.proxyPort",
"value": "80"
},
{
"name": "bharosa.uio.default.challenge.type.enum.ChallengeOMAPUSH.pushPreferencesEndpoint",
"value": "https://oaainstall"
},
{
"name": "bharosa.uio.default.challenge.type.enum.ChallengeOMAPUSH.challengeAnswerEndpoint",
"value": "https://oaainstall"
},
{
"name": "bharosa.uio.default.challenge.type.enum.ChallengeOMAPUSH.retrycount",
"value": "50"
},
{
"name": "bharosa.uio.default.challenge.type.enum.ChallengeOMAPUSH.apns.keystorePath",
"value": "/u01/oracle/service/store/oaa/ChallengeOMAPUSH/apns/APNsCertificate.jks"
},
{
"name": "bharosa.uio.default.challenge.type.enum.ChallengeOMAPUSH.apns.keystorePass",
"value": "<password>"
},
{"name": "bharosa.uio.default.challenge.type.enum.ChallengeOMAPUSH.apns.h2Topic",
"value": "com.example.MyApp"}
]'

This section provides information about how to register the user account within the OMA application.

1. Log in to the Self-Service Portal at https://<SpuiUrl>.
2. Under Authentication Factors, select Add Authentication Factor, and then OMA Push Notification Challenge.
   The Add Mobile Device screen appears.
3. Open the signed OMA app on the iOS device.
4. Click Add Account +.
   This will launch the camera on your iOS device.
5. Use the camera to scan the QR code on the screen.
   The Login Required screen appears.
6. Do the following:
   1. In the Username field, enter the user name displayed on the Self-Service Portal screen as the user name is case sensitive.
   2. In the PIN code field, enter the PIN code displayed on the Self-Service Portal screen.
7. Click Sign in and accept the certificate if prompted.
   The account is successfully added in OMA.
8. On the Self-Service Portal screen, click Done.

The standard OMA application installed directly from the Apple App Store does not support push notifications for OAA login attempts.

The push notification certificate generated from the Apple Developer Console is tied directly to the OMA application. Therefore, you must build a custom OMA application and get it signed by the same certificate to receive push notifications.

See document ID 2319759.1 in My Oracle Support for instructions on how to create this custom OMA application.

To test the push notification you must access a protected application.

1. Access the protected application. For example, https://www.example.com/application.
   The OAA challenge choice screen appears.
2. Under OMA Push Notification Challenge, select Approve login on device <DeviceID>.
   You are redirected to the PUSH screen where a notification should appear on your iOS device.
3. Select Allow on the device to login.