OAM SSO for the citizens & legal entities

The customer was using OAM OSSO 10g and upgraded to OAM 11g, which is backwards compatible with OSSO agents. When they decided to move to OAM 12c, logout was failing because OAM 12c no longer supports OSSO agents.

Oracle Access Manager authenticates a very large national user base — several million users — which made the customer very cautious about this integration. We found that most applications integrated with OAM 11g had hard-coded OSSO-specific logout links, meaning the customer would need to change the code of dozens of applications.

We proposed a co-existence model of OAM 11g and OAM 12c using SAML integration, allowing the customer to migrate applications one-by-one, seamlessly and transparently to the user. It also lets the customer improve business processes by allowing third parties to integrate with OAM 12c using open standards (SAML and OpenID) and a modern user interface.