PAM-IDCS Integration Module - OCI Cloud Services

Jobs

NetSuite Integration NetSuite Backup Ecommerce Platform Integration GCP Integrations Chat Integration APEX Chat Integration APEX OAC Integration Oracle Apex Chat Plugin Integration Oracle Apex OAC Integration Dentrix Technology Integration Secure Cloud Integration Google Workspace Migration Integration

PAM-IDCS

Oracle Identity Cloud Service Linux Pluggable Authentication Module (PAM) is used to manage Linux users in Oracle Identity Cloud service. End users can log in to a Linux server, with SSH, and authenticate with their Oracle Identity Cloud Service user credentials.

PAM-IDCS Integration:

To integrate PAM-IDCS, the following steps should be conducted:

Install PAM on Linux servers where users can SSH. Download pam_cloud.rpm and authn_oracle_cloud.rpm.
Create one confidential application in Oracle Identity Cloud Service with POSIX viewer role to register the Oracle Identity Cloud Service Linux Pluggable Authentication Module (PAM) as a client application and note the client id and client secret of confidential application.

Configure a wallet on Linux servers to store client_ID and client_secret of the confidential application. Use the following commands: walletMgr add client_id walletMgr add client_secret
Configure (PAM) on Linux servers using SSSD service.
Configure group and users with POSIX attributes to allow end-users authenticate with Oracle Identity Cloud Service using PAM on Linux. This is a very essential step. Only users with Posix attributes can authenticate with PAM. And this is not possible via console. This can be done using the command line only.