# Step 2: Configure the Service Provider — Oracle Access Manager (OAM)

## Configure the Service Provider — Oracle Access Manager (OAM)

Oracle Access Manager (OAM) will be configured through its web-based management console, referred to as the **OAM Console**.\
You can access it via the following URL (example):\
\&#xNAN;**`http://test.public.myvcn.oraclevcn.com:7001/oamconsole`**

{% hint style="info" %}
 Note: This URL is provided as an example. Use the actual address of your OAM Console depending on your environment.
{% endhint %}

To log in, use the **WebLogic administrator account** (default username: `weblogic`) and the password provided during installation.

***

## **1. Enable Federation Services**

* In the OAM Console, go to **Configuration > Available Services**
* Click the **"Enable Service"** button next to **Identity Federation**
* Make sure the service status changes to **"Enabled"**

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXc2gFYFEI6usY_C9ADk4Os6y8i8xmXFfG0j6y08XoW3962vSnn7xJhGMp942vKfF9RCHkCfJZmTIArY7zERGoz8feL53eWZaaKRHafvBTi4_H5WWFbyHxtO01VJ4QJI1ay2Jd9sSA?key=flYwr8QHc9296S5s6V_SpI0A" alt=""><figcaption></figcaption></figure>

***

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXd_SQ-mHnq651WKqQyunjLI07WgODSFrLBwTk32HMLYDMpOPxN_XmHC2ctUtjZKtK4A5cbAsXecLL2ECvAkAyFGKOIhMC7mSrV22PIXxRyTm47DY31bBKHZtDc0P-Ip0Q1Wn8rJkA?key=flYwr8QHc9296S5s6V_SpI0A" alt=""><figcaption></figcaption></figure>

***

### **2. Configure HTTPS settings**

* Navigate to **Configuration > Settings > Access Manager**
* Update the required HTTPS parameters according to your environment\
  \&#xNAN;*(refer to the relevant configuration screenshot, if available)*

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdrSX3rIPRgdzhlyE5x4UsvTSqpsxN3Gpg_MjtcosnsJEXTVhMtDCDL-NtTMCG3OGuLufkOSFkBBzmZNFGnMhXQnPpD8zGBfgh-HOtGcxmSJYDTjZPp5izGttP4hoVQqcF650XhTA?key=flYwr8QHc9296S5s6V_SpI0A" alt=""><figcaption></figcaption></figure>

***

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXfvxm8zwAexcKAdUJ4mENyaq_0xrESgKF1TjLGEaJDZiwTa-eyzDogk_OEcgfjX8q2GPp3Jd_5pTZSRmZMAvghU4NdafNKjQTQaSFt9-N5MgOXH8LaGr4dHJ_HieUmvs5CTDNaHVA?key=flYwr8QHc9296S5s6V_SpI0A" alt=""><figcaption></figcaption></figure>

### **3. Configure Federation Settings and Export Metadata**

* Go to **Configuration > Settings > Federation**
* Update the federation parameters as shown in the screenshot
* Click **"Export SAML 2.0 Metadata…"** and save the file

{% hint style="info" %}
This metadata will be imported into **Hideez Enterprise Server (HES)** during Identity Provider (IdP) configuration.
{% endhint %}

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXfsR8X7g-s4Oa8dStERWSvunHKqEh6m80FW48Wry8MnN3_a_c96oWFMRGzrpd61vp-KuYjWkaMSksKyyXp6jAVgOVjgZHImFRtqT8TUpmJZH630U40_2XMIox3Y_7XqXGeBqUejqg?key=flYwr8QHc9296S5s6V_SpI0A" alt=""><figcaption></figcaption></figure>

***

### **4. Create Oracle Internet Directory (OID) Identity Store**

* Navigate to **Configuration > User Identity Stores**

This store will be used to authenticate and authorize users in **Oracle Business Intelligence Enterprise Edition (OBIEE)**.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdkWGragVjmIy9rKvcEKUBKjBhbKhzku5lA-Jwoqs6tno905XOJNQzlYo6nr_GfVi1Ub6kOsyNZhrIqFbFovLJUU1xfdailPwJL5mbI_jXXAAve5e0TU6AwyQrw7D6eY-jaAOk6Ig?key=flYwr8QHc9296S5s6V_SpI0A" alt=""><figcaption></figcaption></figure>

* Click **"Create"** and provide the necessary connection details for **Oracle Internet Directory (OID)**

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdbJFPceyItgZz8KO8DCONSq8dhR72J2Hzs7JvKqNG-8-oHhnON-lGgM-Hir3ti1flINcCVwx99Dn5ZJLrep8ze7oqiBISNSCk8o_cn_Cp9xZ8MunIpGlyPREW94jJJDXJDGCUvcg?key=flYwr8QHc9296S5s6V_SpI0A" alt=""><figcaption></figcaption></figure>

***

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXemYXSTlsbCT5IbQXXHO6ZqMp9kp3V3Y30kwhCiGmyZn8LS3kWvUqS4cNwU8eF50E4Mxqg8fpYhCG8W4JMpdT1CcyStZA9F8xOPx1W0KFfBaDjslYsQWNN3afqO-JAQOiahBoTC?key=flYwr8QHc9296S5s6V_SpI0A" alt=""><figcaption></figcaption></figure>

### **5. Create SAML 2.0 Service Provider**

* Go to **Federation > Service Provider Management**
* Click **"Create"** and fill in the required fields
* Click **"Browse"** and select the **IdP metadata file** downloaded from HES
* Click **"Authentication Scheme and Module"** to finalize the configuration

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXeGU1EllyVXcFXV5gHb3PKesSl_hMSPrGJVtNbZIdo0F3WRbN_R2c_9qlmXw5Va4Y_A6SnY4Fv0Dq_sXdAdSCTmIcia5hqSJYh1vjdgWon21TSmznnaWvwLZPWzhtjQHzHEKdlK?key=flYwr8QHc9296S5s6V_SpI0A" alt=""><figcaption></figcaption></figure>

***

### **6. Create OAM Agent and Application Domain for OBIEE**

* Open an SSH session to the OAM host
* Navigate to the following directory:\
  `$OAM_HOME/idm/oam/server/rreg/input`
* Create a file named `bi_sso.xml` with the required configuration (provided in the next section)

```xml
<OAM11GRegRequest>
    <serverAddress>http://test.public.myvcn.oraclevcn.com:7001</serverAddress>
    <hostIdentifier>TEST_BI_HostId</hostIdentifier>
    <agentName>TEST_BI_OAM</agentName>
    <agentBaseUrl>http://test.public.myvcn.oraclevcn.com:7777</agentBaseUrl>
    <applicationDomain>TEST_BI_OAM</applicationDomain>
	<security>open</security>
	<logOutUrls>
    		<url>/analytics/saw.dll?Logoff</url>
	</logOutUrls>
    <protectedResourcesList>
        		<resource>/aps/SmartView/**</resource>
		<resource>/aps/SmartView/*</resource>
		<resource>/cds/**</resource>
		<resource>/cds/*</resource>
		<resource>/va/**</resource>
		<resource>/va*</resource>
		<resource>/dv/**</resource>
		<resource>/dv*</resource>
		<resource>/mobile/.../*</resource>
		<resource>/mobile/**</resource>
		<resource>/mobile*</resource>
		<resource>/bisearch/**</resource>
		<resource>/bisearch*</resource>
		<resource>/bicomposer/**</resource>
		<resource>/bicomposer*</resource>
		<resource>/mapviewer/mcsadmin/**</resource>
		<resource>/mapviewer/mcsadmin*</resource>
		<resource>/mapviewer/mapadmin/**</resource>
		<resource>/mapviewer/mapadmin*</resource>
		<resource>/mapviewer/console/**</resource>
		<resource>/mapviewer/console*</resource>
		<resource>/mapviewer/**</resource>
		<resource>/mapviewer*</resource>
		<resource>/xmlpserver/**</resource>
		<resource>/xmlpserver*</resource>
		<resource>/bicontent/**</resource>
		<resource>/bicontent*</resource>
		<resource>/analytics/jbips/**</resource>
		<resource>/analytics/jbips*</resource>
		<resource>/analytics/saw.dll/**</resource>
		<resource>/analytics/saw.dll*</resource>
    </protectedResourcesList>
    <publicResourcesList>
        		<resource>/essbase-webservices/**</resource>
		<resource>/essbase-webservices/*</resource>
		<resource>/essbase/agent/**</resource>
		<resource>/essbase/agent/*</resource>
		<resource>/aps/Essbase/**</resource>
		<resource>/aps/Essbase/*</resource>
		<resource>/mapviewer/wmts/**</resource>
		<resource>/mapviewer/wmts/*</resource>
		<resource>/mapviewer/wms/**</resource>
		<resource>/mapviewer/wms/*</resource>
		<resource>/mapviewer/mcserver/**</resource>
		<resource>/mapviewer/mcserver/*</resource>
		<resource>/mapviewer/foi/**</resource>
		<resource>/mapviewer/foi/*</resource>
		<resource>/mapviewer/dataserver/**</resource>
		<resource>/mapviewer/dataserver/*</resource>
		<resource>/aps/JAPI/**</resource>
		<resource>/aps/JAPI/*</resource>
		<resource>/aps/**</resource>
		<resource>/aps/*</resource>
		<resource>/analytics-ws/saw.dll/**</resource>
		<resource>/analytics-ws/saw.dll/*</resource>
		<resource>/analytics/**</resource>
		<resource>/analytics/*</resource>
    </publicResourcesList>
	<excludedResourcesList>
        		<resource>/biservices</resource>
		<resource>/analytics-bi-adf</resource>
		<resource>/xmlpserver/Guest</resource>
		<resource>/xmlpserver/ReportTemplateService.xls</resource>
		<resource>/xmlpserver/report_service</resource>
		<resource>/xmlpserver/services</resource>
		<resource>/analytics/saw.dll/wsdl</resource>
		<resource>/analytics-ws</resource>
		<resource>/ws/.../*</resource>
		<resource>/wsm-pm</resource>
		<resource>/wsm-pm/.../*</resource>
    </excludedResourcesList>
	<protectedAuthnScheme>HidFederationScheme</protectedAuthnScheme>
	<userDefinedParameters>
		<userDefinedParam>
            <name>SSLVerfifyHostname</name>
            <value>false</value>
        </userDefinedParam>
		<userDefinedParam>
            <name>SSLVerifyPeerCert</name>
            <value>false</value>
        </userDefinedParam>
	</userDefinedParameters>
</OAM11GRegRequest>

```

### 7. Register Oracle Access Manager (OAM) in Hideez Enterprise Server (HES)

After you export the **SAML 2.0 metadata** from Oracle Access Manager (OAM), you need to create a corresponding Service Provider (SP) entry in the **Hideez Enterprise Server (HES)** to establish a trust relationship.

Follow these steps:

1. **Log in** to the **Hideez Enterprise Server (HES)** as an administrator.
2. **Navigate** to **Settings > Parameters** in the left panel.
3. **Click** on the **SAML** widget in the right panel.
4. **Click** the **"Add Service Provider"** button.
5. **Upload** the **SAML 2.0 metadata file** that was previously exported from OAM.
6. **Provide** any additional required configuration details if prompted.
7. **Save** the new Service Provider configuration.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://enterprise.hideez.com/hideez-server-integration/saml-integration/oracle-business-intelligence-enterprise-edition-obiee/step-2-configure-the-service-provider-oracle-access-manager-oam.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.