Identity and Access Management : Forgerock OpenAM [Part 1]

Set up a hands-on Forgerock OpenAM lab using Oracle VirtualBox, Windows and Linux server images, and lab binaries; configure Tomcat or WebLogic to run OpenAM.

Install WebLogic 12c on Linux with the Fusion Middleware jar, configure Java, set up the Oracle middleware directory and inventory, then create and configure the domain.

Deploy OpenAM on WebLogic by understanding jar, war, ear, and exploded formats, and choosing stage, no stage, or external staging, guided by deployment descriptors such as web.xml.

Configure ForgeRock OpenAM 6.5 with the embedded directory, tune the heap from 1 GB to 3 GB, and learn to swap to an external directory via default and custom configurations.

Discover how OpenAM uses security realms to isolate authentication and authorization, with protected apps, challenges, and separate identity repositories for HR, customer, and admin groups.

Configure custom realms in Forgerock OpenAM, including root and subscriber realms, customize login pages, set DNS alias and cookie domain, and isolate identity stores with embedded and external directories.

Explore the history and purpose of directory servers, from embedded to external options, and see how LDAP and directory stores manage enterprise users and authenticate access to applications.

Explore the three modes of directory servers—directory server, proxy server, and replication gateway—and master access via the directory manager, server name, and ports 389, 636, and 8443.

Explore the directory information tree, root and leaf concepts, and how attributes form object classes and the schema, including abstract, structural, and auxiliary types in a Forgerock context.

Set up an external directory server for forgerock OpenAM by configuring the directory structure, running the setup, and enabling ldap and http/https with a directory manager.

Add an external directory server to a custom subscriber realm in Forgerock OpenAM by configuring an active directory identity store, loading the schema, and creating users and groups.

Configure self-service and email verification for the subscriber realm by setting up a mail server through global services. Enable user self-registration, forgot password, and auto-login flows with otp emails.

Understand how cookies enable access management in OpenAM, including iplanet directory pro cookies and load balancer cookies, and explore securing and hardening AM cookies to prevent session theft.

Explore the fundamentals of web servers and how they host web applications, and learn to protect a website deployed on an Apache httpd web server.

Analyze how the Apache http server operates as a free, open source web server across platforms, with key components like httpd.conf and http/https ports, and how clients fetch web pages.

Install Apache on Windows with required C++ binaries, extract directly to the C drive, edit httpd.conf, start the server, and map a web app via hosts file to secure access.

Understand how a web agent acts as a web server plugin for OpenAM, intercepting http requests and forwarding them to the access server for authentication and authorization.