# Display of jps-config.xml File

## Information Taken from /u01/install/APPS/fs1/FMW_Home/user_projects/domains/Discoverer/config/fmwconfig/jse/jps-config.xml

     -rw-r----- 1 applmgr oinstall 12321  Jun 12 18:19 2015  Apr 21 18:18 2015  jps-config.xml

    <?xml version="1.0" encoding="UTF-8" standalone='yes'?>
    <jpsConfig xmlns="http://xmlns.oracle.com/oracleas/schema/11/jps-config-11_1.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://xmlns.oracle.com/oracleas/schema/11/jps-config-11_1.xsd jps-config-11_1.xsd" schema-major-version="11" schema-minor-version="1">
        <!-- This property is for jaas mode. Possible values are "off", "doas" and "doasprivileged" -->
        <property name="oracle.security.jps.jaas.mode" value="off"/>

        <!-- use WLS principals as default principals for login modules -->
        <property name="oracle.security.jps.enterprise.user.class" value="weblogic.security.principal.WLSUserImpl"/>
        <property name="oracle.security.jps.enterprise.role.class" value="weblogic.security.principal.WLSGroupImpl"/>

        <propertySets>
            <!-- SAML Trusted Issuer -->
            <propertySet name="saml.trusted.issuers.1">
                <property name="name" value="www.oracle.com"/>
            </propertySet>
            <!-- Trust Service embedded provider configuration -->
            <propertySet name="trust.provider.embedded">
                <property name="trust.provider.className"
                    value="oracle.security.jps.internal.trust.provider.embedded.EmbeddedProviderImpl"/>
                <property name="trust.clockSkew" value="60"/>
                <property name="trust.token.validityPeriod" value="1800"/>
                <property name="trust.token.includeCertificate" value="false"/>
           </propertySet>
        </propertySets>

        <serviceProviders>
            <serviceProvider type="CREDENTIAL_STORE" name="credstoressp" class="oracle.security.jps.internal.credstore.ssp.SspCredentialStoreProvider">
                <description>SecretStore-based CSF provider</description>
            </serviceProvider>

            <serviceProvider type="IDENTITY_STORE" name="idstore.xml.provider" class="oracle.security.jps.internal.idstore.xml.XmlIdentityStoreProvider">
                <description>XML-based IdStore Provider</description>
            </serviceProvider>

            <serviceProvider type="POLICY_STORE" name="policystore.xml.provider" class="oracle.security.jps.internal.policystore.xml.XmlPolicyStoreProvider">
                <description>XML-based PolicyStore Provider</description>
            </serviceProvider>

            <serviceProvider type="LOGIN" name="jaas.login.provider" class="oracle.security.jps.internal.login.jaas.JaasLoginServiceProvider">
                <description>This is Jaas Login Service Provider and is used to configure login module service instances</description>
            </serviceProvider>

            <serviceProvider type="KEY_STORE" name="keystore.provider" class="oracle.security.jps.internal.keystore.KeyStoreProvider">
                <description>PKI Based Keystore Provider</description>
                <property name="provider.property.name" value="owsm"/>
            </serviceProvider>

            <serviceProvider type="AUDIT" name="audit.provider" class="oracle.security.jps.internal.audit.AuditProvider">
                <description>Audit Service</description>
            </serviceProvider>

            <serviceProvider type="PDP" name="pdp.service.provider" class="oracle.security.jps.az.internal.runtime.provider.PDPServiceProvider">
                <description>Runtime PDP Service Provider</description>
            </serviceProvider>

            <serviceProvider name="trust.provider" type="TRUST" class="oracle.security.jps.internal.trust.TrustServiceProvider">
                <description>Trust Service</description>
            </serviceProvider>

        </serviceProviders>

        <serviceInstances>
            <serviceInstance name="credstore" provider="credstoressp" location="./">
                <description>File Based Credential Store Service Instance</description>
            </serviceInstance>

            <serviceInstance name="idstore.xml" provider="idstore.xml.provider" location="./system-jazn-data.xml">
                <description>File Based Identity Store Service Instance</description>
                <property name="subscriber.name" value="jazn.com"/>
            </serviceInstance>

            <serviceInstance name="policystore.xml" provider="policystore.xml.provider" location="./system-jazn-data.xml">
                <description>File Based Policy Store Service Instance</description>
            </serviceInstance>

            <serviceInstance name="idstore.loginmodule" provider="jaas.login.provider">
                <description>Identity Store Login Module</description>
                <property name="loginModuleClassName" value="oracle.security.jps.internal.jaas.module.idstore.IdStoreLoginModule"/>
                <property name="jaas.login.controlFlag" value="REQUIRED"/>
            </serviceInstance>

            <!-- KeyStore Service Instance -->
            <serviceInstance name="keystore" provider="keystore.provider" location="./default-keystore.jks">
                <description>Default JPS Keystore Service</description>
                <property name="keystore.provider.type" value="file"/>
                <property name="keystore.file.path" value="./"/>
                <property name="keystore.type" value="JKS"/>
    	    <property name="keystore.csf.map" value="oracle.wsm.security"/>
                <property name="keystore.pass.csf.key" value="keystore-csf-key"/>
                <property name="keystore.sig.csf.key" value="sign-csf-key"/>
                <property name="keystore.enc.csf.key" value="enc-csf-key"/>
            </serviceInstance>

            <serviceInstance name="audit" provider="audit.provider" location="./audit-store.xml">
                <property name="audit.loader.user" value="username"/>
                <property name="audit.loader.password" value="password"/>
                <property name="audit.loader.jdbc.string" value="jdbcstring"/>
                <property name="audit.filterPreset" value="None"/>
    	    <property name="audit.maxDirSize" value ="0"/>
    	    <property name="audit.maxFileSize" value ="104857600"/>
                <property name="audit.loader.interval" value="15" />
                <property name="audit.loader.repositoryType" value="File" />
                <property name="auditstore.type" value="file"/>
            </serviceInstance>

            <!-- SAML Login Module -->
            <serviceInstance name="saml.loginmodule" provider="jaas.login.provider">
                <description>SAML Login Module</description>
                <property name="loginModuleClassName" value="oracle.security.jps.internal.jaas.module.saml.JpsSAMLLoginModule"/>
                <property name="jaas.login.controlFlag" value="REQUIRED"/>
                <propertySetRef ref="saml.trusted.issuers.1"/>
            </serviceInstance>

            <!-- JPS SAML2 Login Module -->
            <serviceInstance name="saml2.loginmodule" provider="jaas.login.provider">
                <description>SAML2 Login Module</description>
                <property name="loginModuleClassName" value="oracle.security.jps.internal.jaas.module.saml.JpsSAML2LoginModule"/>
                <property name="jaas.login.controlFlag" value="REQUIRED"/>
                <propertySetRef ref="saml.trusted.issuers.1"/>
            </serviceInstance>

            <!-- This is Kerberos Login Module Instance. -->
            <serviceInstance name="krb5.loginmodule" provider="jaas.login.provider">
                <description>Kerberos Login Module</description>
                <property name="loginModuleClassName" value="com.sun.security.auth.module.Krb5LoginModule"/>
                <property name="jaas.login.controlFlag" value="REQUIRED"/>
                <property name="storeKey" value="true"/>
                <property name="useKeyTab" value="true"/>
                <property name="doNotPrompt" value="true"/>
                <property name="keyTab" value="./krb5.keytab"/>
                <property name="principal" value="HOST/localhost@EXAMPLE.COM"/>
            </serviceInstance>

            <!-- Digest Authenticator Login Module Instance -->
            <serviceInstance name="digest.authenticator.loginmodule" provider="jaas.login.provider">
                <description>Digest Authenticator Login Module</description>
                <property name="loginModuleClassName" value="oracle.security.jps.internal.jaas.module.digest.DigestLoginModule"/>
                <property name="jaas.login.controlFlag" value="REQUIRED"/>
            </serviceInstance>

            <!-- X509 Certificate Authenticator Login Module Instance -->
            <serviceInstance name="certificate.authenticator.loginmodule" provider="jaas.login.provider">
                <description>X509 Certificate Login Module</description>
                <property name="loginModuleClassName" value="oracle.security.jps.internal.jaas.module.x509.X509LoginModule"/>
                <property name="jaas.login.controlFlag" value="REQUIRED"/>
            </serviceInstance>

            <!-- WSS Username token digest login module -->
            <serviceInstance name="wss.digest.loginmodule" provider="jaas.login.provider">
                <description>WSS Digest Login Module</description>
                <property name="loginModuleClassName" value="oracle.security.jps.internal.jaas.module.digest.WSSDigestLoginModule"/>
                <property name="jaas.login.controlFlag" value="REQUIRED"/>
            </serviceInstance>

            <!-- User Authentication Login Module -->
            <serviceInstance name="user.authentication.loginmodule" provider="jaas.login.provider">
                <description>User Authentication Login Module</description>
                <property name="loginModuleClassName" value="oracle.security.jps.internal.jaas.module.authentication.JpsUserAuthenticationLoginModule"/>
                <property name="jaas.login.controlFlag" value="REQUIRED"/>
            </serviceInstance>

            <serviceInstance location="./bootstrap" provider="credstoressp" name="bootstrap.credstore">
                <property value="./bootstrap" name="location"/>
            </serviceInstance>

            <!-- User Assertion Login Module -->
            <serviceInstance name="user.assertion.loginmodule" provider="jaas.login.provider">
                <description>User Assertion Login Module</description>
                <property name="loginModuleClassName" value="oracle.security.jps.internal.jaas.module.assertion.JpsUserAssertionLoginModule"/>
                <property name="jaas.login.controlFlag" value="REQUIRED"/>
            </serviceInstance>

            <serviceInstance name="pdp.service" provider="pdp.service.provider">
                <description>Runtime PDP service instance</description>
            </serviceInstance>

            <!-- JPS Trust Service Instance -->
            <serviceInstance name="trust" provider="trust.provider">
                <extendedProperty>
                  <name>trust.providers</name>
                   <values>
                      <value>trust.provider.embedded</value>
                   </values>
                 </extendedProperty>
            </serviceInstance>

        </serviceInstances>

        <jpsContexts default="default">
            <!-- This is the default JPS context. All the mendatory services and Login Modules must be configured in this default context -->
            <jpsContext name="default">
                <serviceInstanceRef ref="credstore"/>
                <serviceInstanceRef ref="idstore.xml"/>
                <serviceInstanceRef ref="policystore.xml"/>
                <serviceInstanceRef ref="idstore.loginmodule"/>
    	    <serviceInstanceRef ref="audit"/>
    	    <serviceInstanceRef ref="trust"/>
    	    <serviceInstanceRef ref="pdp.service"/>
                <serviceInstanceRef ref="keystore"/>
            </jpsContext>

            <jpsContext name="bootstrap_credstore_context">
                <serviceInstanceRef ref="bootstrap.credstore"/>
            </jpsContext>

            <!-- Digest Authenticator Login Module -->
            <jpsContext name="oracle.security.jps.fmw.authenticator.DigestAuthenticator">
                <serviceInstanceRef ref="digest.authenticator.loginmodule"/>
            </jpsContext>

            <!-- Basic Authenticator Login Module -->
            <jpsContext name="oracle.security.jps.fmw.authenticator.BasicAuthenticator">
                <serviceInstanceRef ref="idstore.loginmodule"/>
            </jpsContext>

            <!-- Certificate Authenticator Login Module -->
            <jpsContext name="X509CertificateAuthentication">
                <serviceInstanceRef ref="certificate.authenticator.loginmodule"/>
            </jpsContext>

            <!-- SAML Login Module Context -->
            <jpsContext name="SAML">
                <serviceInstanceRef ref="saml.loginmodule"/>
            </jpsContext>

        </jpsContexts>
    </jpsConfig>

Back to top