Cross Domain Security Configuration

Do you want to configure Oracle BI connections, or Process Portal, or access other resources on a different WebLogic domain ? Then you have to enable cross domain security on every domain involved.

To configure cross domain security, in Weblogic Console:

1. Select the domain name
2. Select the security tab
3. Enable 'Cross domain security' and apply
4. Expand the advance options, supply a credential and confirm the credentail.
5. Apply.

Repeat for all the other domains. Restart all the domains and servers.

Also keep in mind, if you don't use LDAP, although highly recommended, then you have to replicate the users to all the domains. For example, if a user 'user1' is trying to access a BI SOAP connection in WebCenter, the same user, in the same security realm, should exist in the BI Domain environment.

Clustered install of WebCenter Process Spaces

Follow the install steps as suggested by George Maggessy - BPM Process Portal Configuration  but with one excpetion, target only a single WebCenter instance and a single SOA instance.

After configuration and successfull install of Process Portal, we need to change a couple of settings to make it cluster aware.

WebCenter Cluster

All the content and required libraries are automatically installed to the WebCenter cluster.

To confirm, have a look at the deployed library oracle.bpm.spaces to see if it is deployed to the 'webcenter' cluster. If not, change all the deployed artifacts on the WebCenter target managed server specified above, to target the 'WebCenter cluster'. (Or remove all the servers from cluster, except for the one specified above, clone server and add it to the 'webcenter' cluster) 

Process Portal SOA Cluster Configuration

Process Portal uses a 'Foreign JNDI Provider' to lookup the BPM/SOA service to interact with. The configuration is done during the installation of the Process Portal.

First of all, go to Domain>Services > Foreign JNDI Providers >BPMRuntimeProvider in the Weblogic Console. Change the target to the 'WebCenter Cluster'.

The next steps is to change the JNDI Provider URL to point to the cluster address of the 'SOA Cluster' by editing the BPMRuntimeProvider in the Weblogic Console.

Remember: If using a two domains, you have to configured cross domain security and if you are using SSL, you have to configure keystores.  See my post on Cross Domain Security

 

Oracle BPM PS4FP - Process Spaces Resource Catalog

Missing the BPM Resource Catalog in your WebCenter Catalog ?

Log into WebCenter Spaces, (as administrator or weblogic) select Administration, select the Resources tab, select Resource Catalogs under Structure on the left hand side. Click Upload and depending on your configuration, point to the  /MiddlewareHOME/Oracle_WC1/bpm/process_spaces/resourceCatalog/ProcessSpacesCatalog.ear.

There should now be a "BPM Process Spaces Catalog" listed.

Oracle Unified Directory and Weblogic

Do you want to use "Oracle Unified Directory 11.1.1.5.0" with WebLogic as a security provider ? Use the OpenLDAP provider, configure the provider with you custom configuration, and you are up and running.