Using Custom Form Auth Scheme with OAM11g

In order to use the custom web app for authentication in oam11g you need to create an authentication scheme.

In our example we have created an web app testsso and the login page is login.jsp.

1. The login page will have only two parameters username and password.

2. Login page needs to submit the request to /oam/server/auth_cred_submit which is the centralized credential collector

3. Login form also needs to get the request id from the request and submit it to credential collector as hidden field.

4. The web app needs to be deployed to oam managed server. (default oam_server1 running in 14100)

Once you deploy the webapp check the deployment. Assuming OAM Managed server is on default port, Access the App http://:14100/testsso/login.jsp . You should see the login page

Here is the link to source code containing login.jsp

Creating an Authentication Scheme

Once you have the app deployed, create an authentication scheme.

Login to OAM Console

Navigate to Authentication Scheme, Click on Create New

Enter the details as below

Name : MyLDAP

Description: My LDAP Scheme

Authentication Level: 2

Challenge Method: FORM

Challenge Redirect URL: /oam/server/

Authentication Module: LDAP

Challenge URL: /login.jsp

ContextType : CustomWar

Context Value: /testsso

Save the Authentication Scheme.

The Scheme should look like this

Now Protect the application with this newly created scheme and test SSO.