OAM - Webcenter Content Imaging (IPM) Logout Configuration

Environment Details

Oracle Access Manager - Version 11.1.1.5.0 and later
Oracle WebCenter Content: Imaging - Version 11.1.1.6.0 and later

Scenario

Here we are talking about the typical Fusion Application environment consisting of multiple applications like for ex: Oracle Webcenter Content, Imaging and Portal. OAM is used to provide the SSO fuctionality. I faced problem while configuring the SSO logout URL for IPM application.

Solution

To configure SSO logout url for Oracle Webcenter Content and portal, we run the command -

addOAMSSOProvider(loginuri, logouturi, autologinuri)

See Oracle Doc for details.

The same solution doesn't go well with IPM. I fixed it by writing the redirect rules in web server using the OHS URL rewrite engine. I am not sure if it's the oracle recommended approach.

RewriteCond %{QUERY_STRING} end_url=/imaging [NC]
RewriteCond %{QUERY_STRING} logout=true [NC]
RewriteRule ^/imaging/adfAuthentication  /imaging/adfAuthentication?logout=true&end_url=<OAM-Logout-URL>[L,R=301]

<OAM-Logout-URL> - http://OAMServer_host:14200/oam/server/logout

Go through the below links to get better understanding of OHS Rewrite Rules and flags -

http://www.webforgers.net/mod-rewrite/mod-rewrite-syntax.php
http://www.colder.ch/news/01-26-2007/24/truth-about-the-last-mod_.html (Very Good explaination of L Flag)