CODEWITHSUNDEEP
javaoracle-databasespring-securitysingle-sign-on
c12
c12

Reputation: 9827

Migrating From Spring Security to Oracle Access Manager

I currently have a web application that is using the Spring Framework for authentication and authorization. I have a customer base that is wanting to implement Oracle Access Manager for authentication and authorization. Does anyone have any ideas how complex this migration will be given my current web application setup below?

Current Web Application:

Upvotes: 2

Views: 1609

Answers (1)

alexkasko
alexkasko

Reputation: 4925

I've done a reverse migration once, from Sun Access Manager to plain Spring Security.

From what I've seen in legacy AM access code, your problem may be solved with single custom Spring Security filter, that accesses AM for authentication and authorization using this API (link may be outdated). So customer will be able to manage users and roles in Access Manager, but no architectural changes will be required for application itself.

AM access snippet (not tested):

SSOToken adminToken = (SSOToken) AccessController.doPrivileged(AdminTokenAction.getInstance());
AMIdentityRepository repo = new AMIdentityRepository(adminToken, "realm_name");
IdSearchResults res = rep.searchIdentities(IdType.USER, uid, new IdSearchControl());

I've never done such integration myself, so maybe more proper ways exist.

Upvotes: 2

Related Questions