Oracle® Fusion Middleware

REST API Reference
for the Oracle Access Management Access Portal Service

Release 11.1.2.2

E52131-01

March 2014

Oracle Fusion Middleware REST API Reference for the Oracle Access Management Access Portal Service, Release 11.1.2.2

E52131-01

Copyright © 1998, 2014, Oracle and/or its affiliates. All rights reserved.

This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.

The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.

If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, the following notice is applicable:

U.S. GOVERNMENT END USERS: Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are "commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs. No other rights are granted to the U.S. Government.

This software or hardware is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all appropriate failsafe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.

Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group.

This software or hardware and documentation may provide access to or information on content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services.

Contents

Preface

- Audience

- Documentation Accessibility

- Related Documents

- Conventions

1 Entity Relationships and Permissions

- 1.1 Entity Relationships

- 1.2 Entity Permissions

2 Interface Definitions

- 2.1 Credential Operations

- 2.1.1 Credential Search

- 2.1.2 Credential List

- 2.1.3 Credential Add

- 2.1.4 Credential Update

- 2.1.5 Credential Delete

- 2.2 Policy Operations

- 2.2.1 Policy Search

- 2.2.2 Policy List

- 2.2.3 Policy Add

- 2.2.4 Policy Update

- 2.2.5 Policy Delete

- 2.3 Provisioning Operations

- 2.4 Event Operations

3 Implementation Examples

- 3.1 JSON Examples

- 3.1.1 Credential Add

- 3.1.1.1 Request

- 3.1.1.2 Response

- 3.1.2 Credential Delete

- 3.1.2.1 Request

- 3.1.2.2 Response

- 3.1.3 Credential List

- 3.1.3.1 Request

- 3.1.3.2 Response

- 3.1.4 Credential List (Specific Credentials)

- 3.1.4.1 Request

- 3.1.4.2 Response

- 3.1.5 Credential Search

- 3.1.5.1 Request

- 3.1.5.2 Response

- 3.1.6 Credential Update

- 3.1.6.1 Request

- 3.1.6.2 Response

- 3.1.7 Credential Update (Specific Fields)

- 3.1.7.1 Request

- 3.1.7.2 Response

- 3.1.8 Policy Add (AdminOverrides)

- 3.1.8.1 Request

- 3.1.8.2 Response

- 3.1.9 Policy Add (SSOProtected)

- 3.1.9.1 Request

- 3.1.9.2 Response

- 3.1.10 Policy Add (SharingGroup)

- 3.1.10.1 Request

- 3.1.10.2 Response

- 3.1.11 Policy Add (PasswordPolicy)

- 3.1.11.1 Request

- 3.1.11.2 Response

- 3.1.12 Policy Add (WebApplication)

- 3.1.12.1 Request

- 3.1.12.2 Response

- 3.1.13 Policy Delete

- 3.1.13.1 Request

- 3.1.13.2 Response

- 3.1.14 Policy List

- 3.1.14.1 Request

- 3.1.14.2 Response

- 3.1.15 Policy Search

- 3.1.15.1 Request

- 3.1.15.2 Response

- 3.1.16 Policy Update (AdminOverrides)

- 3.1.16.1 Request

- 3.1.16.2 Response

- 3.1.17 Policy Update (SSOProtected)

- 3.1.17.1 Request

- 3.1.17.2 Response

- 3.1.18 Policy Update (SharingGroup)

- 3.1.18.1 Request

- 3.1.18.2 Response

- 3.1.19 Policy Update (PasswordPolicy)

- 3.1.19.1 Request

- 3.1.19.2 Response

- 3.1.20 Policy Update (WebApplication)

- 3.1.20.1 Request

- 3.1.20.2 Response

- 3.1.21 Event Add

- 3.1.21.1 Request

- 3.1.21.2 Response

- 3.1.22 Provisioning Create

- 3.1.22.1 Request

- 3.1.22.2 Response

- 3.2 XML Examples

- 3.2.1 Credential Add

- 3.2.1.1 Request

- 3.2.1.2 Response

- 3.2.2 Credential Add (with Automatic Password Change)

- 3.2.2.1 Request

- 3.2.2.2 Response

- 3.2.3 Credential Update

- 3.2.3.1 Request

- 3.2.3.2 Response

- 3.2.4 Credential Delete

- 3.2.4.1 Request

- 3.2.4.2 Response

- 3.2.5 Credential Search

- 3.2.5.1 Request

- 3.2.5.2 Response

- 3.2.6 Credential Search (Specific Policy)

- 3.2.6.1 Request

- 3.2.6.2 Response

- 3.2.7 Credential List

- 3.2.7.1 Request

- 3.2.7.2 Response

- 3.2.8 Credential List (Specific Credential ID)

- 3.2.8.1 Request

- 3.2.8.2 Response

- 3.2.9 Policy Add

- 3.2.9.1 Request

- 3.2.9.2 Response

- 3.2.10 Policy Update

- 3.2.10.1 Request

- 3.2.10.2 Response

- 3.2.11 Policy Delete

- 3.2.11.1 Request

- 3.2.11.2 Response

- 3.2.12 Policy Search

- 3.2.12.1 Request

- 3.2.12.2 Response

- 3.2.13 Policy List

- 3.2.13.1 Request

- 3.2.13.2 Response

- 3.2.14 Provisioning Create

- 3.2.14.1 Request

- 3.2.14.2 Response

- 3.2.15 Event Add

- 3.2.15.1 Request

- 3.2.15.2 Response

Preface

This guide describes the REST interfaces implemented by the Access Portal Service. The interfaces enable developers to programmatically perform Access Portal Service administrative operations such as adding, modifying, and deleting application and other policies, as well as user wallet operations related to application credentials and events.

Audience

This guide is intended for developers looking to familiarize themselves with the REST interfaces implemented by the Access Portal Service. It covers the definitions of HTTP requests made to and HTTP responses received from the Access Portal Service REST interfaces for each supported task in JSON and XML format; the relationships between the data entities implemented by the Access Portal Service, including the permissions required to perform operations on those entities; and provides detailed implementation examples of each supported REST interface.

Documentation Accessibility

For information about Oracle's commitment to accessibility, visit the Oracle Accessibility Program website at http://www.oracle.com/pls/topic/lookup?ctx=acc&id=docacc.

Access to Oracle Support

Oracle customers have access to electronic support through My Oracle Support. For information, visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=info or visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=trs if you are hearing impaired.

Related Documents

For more information, see the following documents in the Oracle Fusion Middleware Release 11.1.2.2 documentation set:

- Oracle Access Management Release 11.1.2.2 Release Notes

- Oracle Fusion Middleware Installation Guide for Oracle Identity and Access Management—Explains how to use the Oracle Universal Installer and the WebLogic Configuration Wizard for initial Access Manager 11g deployment. Installing 11g WebGates for Access Manager is also covered.

- Oracle Fusion Middleware Administrator's Guide for Oracle Access Management—Explains how to manage configuration and policies for Access Manager, Security Token Service, Identity Federation, Mobile and Social, and Identity Context.

- Oracle Fusion Middleware Developer's Guide for Oracle Access Management—Explains how to write custom applications and plug-ins to functions programmatically, to create custom Access Clients that protect non-Web-based resources.

- Oracle Fusion Middleware Upgrade Guide for Java EE—For information about the types of Java EE environments available in 10g and instructions for upgrading those environments to Oracle Fusion Middleware 11g.

- Oracle Fusion Middleware Upgrade Guide for Oracle Identity and Access Management

- Oracle Fusion Middleware Performance and Tuning Guide

- Oracle Fusion Middleware Administrator's Guide—Describes how to manage a secure Oracle Fusion Middleware environment, including how to change ports, deploy applications, and how to back up and recover Oracle Fusion Middleware. This guide also explains how to move data from a test to a production environment.

- Oracle Fusion Middleware Enterprise Deployment Guide for Oracle Identity Management—For a step-by-step guide to deployment.

- Oracle Fusion Middleware High Availability Guide—For high availability conceptual information as well as administration and configuration procedures for Administrators, developers, and others whose role is to deploy and manage Oracle Fusion Middleware with high availability requirements.

- Oracle Fusion Middleware WebLogic Scripting Tool Command Reference—Provides a section on customized Oracle Access Management commands in the chapter "Infrastructure Security Custom WLST Commands".

- Oracle Fusion Middleware Security and Administrator's Guide for Web Services—Describes how to administer and secure Web services.

Conventions

The following text conventions are used in this document:

Convention

Meaning

boldface

Boldface type indicates graphical user interface elements associated with an action, or terms defined in text or the glossary.

italic

Italic type indicates book titles, emphasis, or placeholder variables for which you supply particular values.

monospace

Monospace type indicates commands within a paragraph, URLs, code in examples, text that appears on the screen, or text that you enter.

1 Entity Relationships and Permissions

This chapter describes the relationships between the data entities implemented by the Access Portal Service as well as permissions required to perform operations on those entities.

1.1 Entity Relationships

The Access Portal Service implements the following relationships between the application policy and other policy entities, as illustrated below:

- Password Policy - a single password policy can be assigned to each application policy at a given time, or none at all.

- Credential Sharing Group - a single credential sharing group can be assigned to each application policy at a given time, or none at all.

- Credential - any number of credentials can be assigned to each application policy, or none at all.

The Access Portal Service implements the Credential_ApplicationPolicy relationship, which allows exactly one application policy to be assigned to each credential at any given time. A credential entity cannot exist without an associated application policy, as illustrated below.

The Access Portal Service implements the following relationships between the user entity and other entities:

- ESSOUser_Registry - exactly one user registry is permitted for each user.

- ESSOUser_SyncState - exactly one user synchronization state is permitted
for each user.

- ESSOUser_SSOProvisioning - any number of provisioning instructions are permitted for each user, or none at all.

- ESSOUser_Credential - any number of credentials are permitted for each user, or none at all.

1.2 Entity Permissions

When either the Access Portal Service REST service or Logon Manager create the user wallet, the wallet's ACL is configured to allow that user to read, search, write, and compare entities within the wallet. These permissions are configured at the wallet level and inheritable by all objects stored within the wallet.

Each ACL for a policy entity contains the following keys policies ACL consist of two keys:

- AT_ProvisioningRights - defines the operations that the Provisioning Gateway server can perform to add, modify, and delete credentials.

- AT_Security - defines the access rights to the target policy.

The Enterprise Single Sign-On Suite Administrative Console can perform the following operations on the provisioning keys in the policy:

- AT_Security - set the ACL (orclaci) as defined by the key,

- AT_ProvisioningRights - Create an object of type ProvisioningRights under the CO. This is read by the Provisioning Gateway server to govern its operation.

The Enterprise Single Sign-On Suite Administrative Console operates on repository data in the user context, which allows us to allow the directory to filter and handle the rights for the AT_Security and ProvisioningRights keys.

The Access Portal Service REST service operates on repository data within the administrator context, preventing the use of the directory to filter and handle AT_Security rights. Because of this, the ProvisioningRights right must be maintained for the CO to allow create, update, and delete operations; no special rights are required for the read operation.

The Access Portal REST service can perform the following operations for AT_Security:

- READ - Using the AT_Security key defined for the policy, check whether the target user has the rights required to read the target policy; if the user does not have read access, do not return the policy in the request.

- CREATE - Update the ACL (orclaci) for the policy as defined by the AT_Security keys.

- UPDATE - Using the AT_Security key defined for the policy, check whether the target user has the rights required to update that policy.

- DELETE - Using the AT_Security key defined for the policy, check whether the target user has the rights required to delete that policy.

An ACL is configured for each individual policy entity. For example, a policy can be limited to read, write, search, and compare operations executed by members of a particular group - this would effectively limit access to that policy to only members of that user group.

2 Interface Definitions

This chapter describes the REST software interfaces exposed by the Access Portal Service. The Access Portal Service REST interfaces conform to the following:

- Each interface conforms to request and response definitions described in Interface Definitions and defines the expected payload for both the request and response.

- The response definition is the result of the request.

- Multiple requests/responses per payload are supported; each response/request pair is distinguished via a unique transient identifier generated by the client.

- The request header must be configured on the client side as follows:

- GET, DELETE - request defines payload type

- PUT, POST - set the Content-type parameter as follows:

Request/response format

Content-type value in header

XML

application/XML

JSON

application/JSON

- The OAMAuthnCookie value is used for validation and extraction of the user name. This will be passed into each REST interface call along with the partner (associated webgate name) as cookies.

This chapter covers the following operation categories:

- Credential Operations

- Policy Operations

- Provisioning Operations

- Event Operations

2.1 Credential Operations

This section describes the HTTP requests and responses for credential operations that the Access Portal Service can perform via its REST API. Request and response definitions in JSON and XML formats are described. The following operations are available:

- Credential Search

- Credential List

- Credential Add

- Credential Update

- Credential Delete

2.1.1 Credential Search

The credential search request/response pair enables the search for a credential.
It does not return protected fields.

- URI: /idass/am/esso/v1/userwallet/credentials

- Method: GET

- Category: User

The following table describes the parameters of the credential search request in JSON format. An example request string looks as follows:

/idass/am/esso/v1/userwallet/credentials?ESSO_Payload_Request=
base64+url-encoded-payload&Operation=Search&ESSO_Payload_Type= application/json

Field

Description

{ "Context": "uu-encoded, salted SHA256 payload hash",

"ESSO_General": { "ESSO_Version": "1", "ESSO_MaxRequest": "10"},
"ESSO_Requests": [ { "ESSO_Data": { "ESSO_CredentialFilters": [ { "ESSO_Field": "ConfigName",
"ESSO_PolicyName": "ESSO_Group",

"ESSO_Type": "Exact",
"ESSO_Value": "match-value"
} ] } }, { "ESSO_AttributeList": "ConfigName;Description" } ] }

String. Required. Base64 encoded.

String. Required. Interface version.

String. Optional. The maximum number of credentials to return; default is ALL.

Required. Multiple requests per payload allowed.

Required. Multiple filters allowed.

String. Required. Name of the target field. If target field is multi-value, all fields will be searched.

String. Required. Name of the policy to search for. This can be the target application name or the target credential sharing group. Mutually exclusive with the ESSO_Field key.

String. Optional. Regex | Wildcards | Exact. If using ESSO_PolicyName, "Exact" is the only supported type.

String. Required. Matching criteria. Not required if using ESSO_PolicyName.

String. Optional. Attribute list. No secure attributes allowed.

The following table describes the parameters of the credential search response in JSON format.

Field

Description

{"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": 1 },

"ESSO_Responses": [ {

"ESSO_Result": 0,

"ESSO_Data": {

"ESSO_Credentials": [ {

"ESSO_ID": "credential-GUID",

String. Required. Base64-encoded.

String. Required. Interface version.

Required. Can contain responses to multiple requests

Integer. Required. Overall response result.

Required. Array of credential responses.

String. Required. Returned credential's ID.

"ESSO_Result": 0,

"attributes": {

} }, {

"ESSO_ID": "credential-GUID", "ESSO_Result": 0, "attributes": { }}]}}}}

Integer. Required. Credential result.

String. Required. Key-value pairs of returned credential.

String. Required. Returned credential's ID.

Integer. Required. Credential result.

String. Key-value pairs of returned credential.

The following table describes the parameters of the credential search request in XML format. An example request string looks as follows:

/idass/am/esso/v1/userwallet/credentials?ESSO_Payload_Request=base64+url-encoded-payload&Operation=Search&ESSO_Payload_Type= application/xml

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

<ESSO_MaxRequest>10</ESSO_MaxRequest>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_Data>

<ESSO_CredentialFilters>

<ESSO_Field>ConfigName</ESSO_Field>

<ESSO_Type>Exact</ESSO_Type>

<ESSO_PolicyName>ESSO_Group</ESSO_PolicyName>

<ESSO_Value>match-value</ESSO_Value>

</ESSO_CredentialFilters>

</ESSO_Data>

String. Required. Base64-encoded.

Integer. Required. Interface version.

Integer. Optional. The maximum number of credentials to return; default is ALL.

String. Optional. If omitted, returns all credentials.

String. Required. Name of the target field. If target field is multi-value, all fields will be searched.

String. Required. Regex | Wildcards | Exact. If using ESSO_PolicyName, "Exact" is the only supported type.

String. Required. Name of the application policy or credential sharing group to search for.
Mutually exclusive with the ESSO_Field key.

String. Required. Matching criteria. Not required if using ESSO_PolicyName.

<ESSO_AttributeList>
ConfigName;Description
</ESSO_AttributeList>

</ESSO_Request>

</ESSO_Requests>

</ESSO>

String. Optional. Attribute list. No secure attributes allowed. Default is ALL.

The following table describes the parameters of the credential search response in XML format.

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_ID>guid of credential</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<CredDef>credential-here</CredDef>

</attributes>

</ESSO_Credentials>

<ESSO_Credentials>

<ESSO_ID>guid of credential</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<CredDef>credential here</CredDef>

</attributes>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

Required

Integer. Required. Interface version.

Can contain responses to multiple requests.

Integer. Required. Overall request result.

String. Required. Returned credential's ID.

Integer. Required. Result of credential operation.

Credential definition.

String. Required. Returned credential's ID.

Integer. Required. Result of credential operation.

Credential definition.

2.1.2 Credential List

The credential list operation provides the ability to list credentials, including protected fields.

- URI: /idass/am/esso/v1/userwallet/credentials

- Method: GET

- Category: User

The following table describes the parameters of the credential list request in JSON format. An example request string looks as follows:

/idass/am/esso/v1/userwallet/credentials?ESSO_Payload_Request=
base-64-encoded-payload&Operation=List&ESSO_Payload_Type=application/json

Field

Description

{"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General":{

"ESSO_Version": "1"},

"ESSO_Requests": [ { "ESSO_AttributeList": "ConfigName;LastUsed",

"ESSO_Data": {

"ESSO_Credentials": [ {

"ESSO_ID": "target credential ID" },{

"ESSO_ID": "target credential ID"

} ] } } ] }

String. Required. Base64-encoded.

Required.

String. Required. Interface version.

Required. Multiple requests allowed.

String. Optional. ALL (Default) | Attribute List | Protected

String. Optional. If omitted, all credentials are returned.

String. Required. ID of credential to retrieve.

String. Required. ID of credential to retrieve.

The following table describes the parameters of the credential list response in JSON format.

Field

Description

{"Context": "uu-encoded, salted SHA2-256 payload hash", "ESSO_General": { "ESSO_Version": 1}, "ESSO_Responses": [ { "ESSO_Result": 0, "ESSO_Data": { "ESSO_Credentials": [ { "ESSO_ID": "target credential ID", "ESSO_Result": 0,

"attributes": { } }, { "ESSO_ID": "target credential ID",

"ESSO_Result": 0,

"attributes": { } } ] } } ] }

String. Required. Base64-encoded.

Required.

Integer. Required. Interface version.

Required. Multiple requests allowed.

Integer. Required. Overall request result.

Required. Array of returned credentials.

String. Required. Target credential's ID.

Integer. Required. Result of returned credential.

String. Required. Key-value pairs of returned credential.

String. Required. Target credential's ID.

Integer. Required. Result of returned credential.

String. Required. Key-value pairs of returned credential.

The following table describes the parameters of the credential list request in XML format. An example request string looks as follows:

/idass/am/esso/v1/userwallet/credentials?ESSO_Payload_Request=
base-64-encoded-payload&Operation=List&ESSO_Payload_Type=application/XML

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

String. Required. Base64-encoded.

Integer. Required. Interface version.

<ESSO_Requests>

<ESSO_Request>

<ESSO_AttributeList>ConfigName;LastUsed
</ESSO_AttributeList>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_ID>{105a3a14-7523-496f-9114-4e0ed6ff7027}
</ESSO_ID>

</ESSO_Credentials>

<ESSO_Credentials>

<ESSO_ID>{391a3591-4164-44e0-8aa5-2b22c675990}
</ESSO_ID>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Request>

</ESSO_Requests>

</ESSO>

Multiple requests supported.

String. Optional. ALL (default) | Attribute List | PROTECTED

String. Optional. If omitted, all credentials are returned.

String. Required. Target credential's ID.

String. Required. Target credential's ID.

The following table describes the parameters of the credential list response in XML format.

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_ID>
{105a3a14-7523-496f-9114-4e0ed6ff7027}
</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<CredDef>credential-definition</CredDef>

</attributes>

</ESSO_Credentials>

<ESSO_Credentials>

<ESSO_ID>
{391a3591-4164-44e0-8aa5-2b22c6759a90}
</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<CredDef>credential-definition</CredDef>

String. Required. Base64-encoded.

Integer. Required. Interface version.

Multiple responses supported.

Integer. Required. Overall response result code.

String. Required. Target credential's ID.

Integer. Required. Operation request code.

Credential definition.

String. Required. Target credential's ID.

Integer. Required. Operation result code.

Credential definition.

</attributes>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

.

2.1.3 Credential Add

The credential add operation provides the ability to add credentials to the user's wallet.

- URI: /idass/am/esso/v1/userwallet/credentials

- Method: POST

- Category: User

Oracle recommends including the Modified, LastPwdChange, and LastUsed key-value pairs, which denote the Windows date and time of the credential's creation.

The following table describes the parameters of the credential add request in JSON format.

Field

Description

{"Context": "uu-encoded, slated SHA2-256 payload hash",

String. Required. Base64-encoded.

"ESSO_General": { "ESSO_Version": 1 }, "ESSO_Requests": [ { "ESSO_Data": { "ESSO_Credentials": [ { "ESSO_Identifier": "transient-credential-identifier",

"attributes": { } }, { "ESSO_CredentialType": "OPAM",
"ESSO_Identifier": "transient-credential-identifier",
"attributes": { }}]}}]}

Required.

Integer. Required. Interface version.

Multiple requests supported.

Required. List of credentials.

String. Required. Unique transient identifier used to identify the credential in the request and response.

String. Required. Key-value pairs for credential attributes.

Credential type. "OPAM" permits the checkout of an OPAM credential. Default is not OPAM.

String. Required. Unique transient identifier used to identify the credential in the request and response.

String. Required. Key-value pairs for credential attributes.

The following table describes the parameters of the credential add response in JSON format.

Field

Description

{"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": "1"},

"ESSO_Responses": [ {

String. Required. Base64-encoded.

Required.

Integer. Required. Interface version.

"ESSO_Result": "0",

"ESSO_Data": {

"ESSO_Credentials": [ {

"ESSO_Identifier": "transient-identifier",

"ESSO_ID": "repository-credential-ID",

"ESSO_Result": "0" },{
"ESSO_Identifer": "transient-identifier",

"ESSO_ID": "repository-credential-ID",
"ESSO_Result": "0" }]}}]}

Overall response result code.

Array of added credentials.

String. Required. Unique transient identifier used to match the operation's data in the request and response.

String. Required. Credential identifier used to identify the credential in the ESSO repository.

String. Required. Unique transient identifier used to match the operation's data in the request and response.

String. Required. Credential identifier used to identify the credential in the ESSO repository.

String. Required. Operation result code.

The following table describes the parameters of the credential add request in XML format.

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_Identifier>transient-credential-identifier</ESSO_Identifier>

<attributes>

<CredDef>credential-definition</CredDef>

</attributes>

</ESSO_Credentials>

<ESSO_Credentials>

<ESSO_CredentialType>OPAM
</ESSO_CredentialType>

<ESSO_Identifier>transient-credential-identifier
</ESSO_Identifier>

<attributes>

<CredDef>credential-definition</CredDef>

</attributes>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Request></ESSO_Requests></ESSO>

String. Required. Base64-encoded.

Integer. Required. Interface version.

Multiple requests supported.

String. Required. Unique transient credential identifier used to identify the credential in the request and response.

Key-value pairs for the credential definition.

String. Optional. Credential type. "OPAM" allows the checkout of an OPAM credential; default is "not OPAM"

String. Required. Unique transient credential identifier used to identify the credential in the request and response.

Key-value pairs for the credential definition.

The following table describes the parameters of the credential add response in XML format.

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

String. Required. Base64-encoded.

String. Required. Interface version.

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_Identifier>transient-credential-identifier
</ESSO_Identifier>

<ESSO_ID>
{8dcaf202-1554-46e6-8640-74857c98487a}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Credentials>

<ESSO_Credentials>

<ESSO_Identifier>transient-credential-identifier
</ESSO_Identifier>

<ESSO_ID>
{7dcaf202-1554-46e6-8640-74857c98487a}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

Multiple responses supported.

Integer. Required. Overall responses result code.

String. Required. Unique credential identifier used to identify the credential in the request and response.

String. Required. Credential identifier used to identify the credential in the ESSO repository.

Integer. Required. Credential operation result code.

Required

String. Required. Unique credential identifier used to identify the credential in the request and response.

String. Required. Credential identifier used to identify the credential in the ESSO repository.

Integer. Required. Credential operation result code.

2.1.4 Credential Update

The credential update operation provides the ability to update credentials in the user's wallet.

- URI: /idass/am/esso/v1/userwallet/credentials

- Method: PUT

- Category: User

If the LastUsed key is set to NOW on the input, the LastUsed key should be set to the the current Windows time. If the credential operation is a PasswordChange, the keys LastPwdChange and Modified should be updated to the current time, while the OldPassKey key should be updated to the current password of the credential in the repository.

The following table describes the parameters of the credential update request in JSON format.

Field

Description

{ "Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": 1 },

"ESSO_Requests": [ {

"ESSO_Update_Delta": "true",

"ESSO_Data": {

"ESSO_Credentials": [ {

"ESSO_ID": "credential-ID",

"attributes": {

},

String. Required. Base64-encoded.

Required.

Integer. Required. Interface version.

Required.

String. Required. When set to "true," only values supplied in the credential will be updated.

String. Required. ID of the target credential.

String. Required. Key-value pairs to be updated.

"PASSSWORDCHANGE": "AUTO" }, {

"ESSO_ID": "credential-ID", "attributes": { }, "PASSWORDCHANGE": "AUTO" } ] } } ] }

String. Optional. AUTO | OFF | MANUAL.
AUTO: the server will perform the password reset. MANUAL: the server checks the incoming password against policy. Default is OFF.

String. Required. ID of the target credential.

String. Required. Key-value pairs to be updated.

String. Optional. AUTO | OFF | MANUAL.
AUTO: the server will perform the password reset. MANUAL: the server checks the incoming password against policy. Default is OFF.

The following table describes the parameters of the credential update response in JSON format.

Field

Description

"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": 1},

"ESSO_Responses": [ {

String. Required. Base64-encoded.

Required.

Integer. Required. Interface version.

Required. Multiple responses supported.

"ESSO_Result": 0, "ESSO_Data": { "ESSO_Credentials": [ { "ESSO_ID": "ID of credential", "ESSO_Result": 0 }, { "ESSO_ID": "ID of Credential", "ESSO_Result": 0 } ] } } ] }

Integer. Required. Overall response result code.

Required. Array of credentials.

String. Required. Target credential ID.

Integer. Required. Credential operation result code.

String. Required. Target credential ID.

Integer. Required. Credential operation result code.

The following table describes the parameters of the credential update request in XML format.

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_Update_Delta>true</ESSO_Update_Delta>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_ID>
{8dcaf202-1554-46e6-8640-74857c98487a}
</ESSO_ID>

<attributes>

<CredDef>credential-definition</CredDef>

</attributes>

<PASSWORDCHANGE>
AUTO
</PASSWORDCHANGE>

</ESSO_Credentials>

<ESSO_Credentials>

<ESSO_ID>
{7dcaf202-1554-46e6-8640-74857c98487a}
</ESSO_ID>

<attributes>

<CredDef>credential-definition</CredDef>

</attributes>

<PASSWORDCHANGE>AUTO</PASSWORDCHANGE>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Request>

</ESSO_Requests>

</ESSO>

String. Required. Base64-encoded.

Integer. Required. Interface version.

Multiple requests supported.

String. Required. When set to "true," only values included in the credential will be updated.

String. Required. Target credential ID.

Key-value pairs to update in target credential.

String. Optional. AUTO | OFF | MANUAL.
AUTO: the server will perform the password reset. MANUAL: the server checks the incoming password against policy. Default is OFF.

String. Required. Target credential ID.

Key-value pairs to update in target credential.

String. Optional. AUTO | OFF | MANUAL.
AUTO: the server will perform the password reset. MANUAL: the server checks the incoming password against policy. Default is OFF.

The following table describes the parameters of the credential update response in XML format.

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_ID>
{8dcaf202-1554-46e6-8640-74857c98487a}
</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Credentials>

<ESSO_Credentials>

<ESSO_ID>
{7dcaf202-1554-46e6-8640-74857c98487a}
</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

String. Required. Base64-encoded.

Integer. Required. Interface version.

Integer. Required. Overall request result code.

String. Required. Target credential ID.

String. Required. Update operation result code.

String. Required. Target credential ID.

String. Required. Update operation result code.

2.1.5 Credential Delete

The credential delete operation provides the ability to delete credentials from the user's wallet.

- URI: /idass/am/esso/v1/userwallet/credentials

- Method: DELETE

- Category: User

The following table describes the parameters of the credential delete request in JSON format. An example request string looks as follows:

/idass/am/esso/v1/userwallet/credentials?ESSO_Payload_Request=base64+url-encoded-payload&ESSO_Payload_Type=application/json

Field

Description

{ "Context": "uu-encoded, salted SHA2-256 payload hash", "ESSO_General": { "ESSO_Version": 1 }, "ESSO_Requests": [ { "ESSO_Data": { "ESSO_Credentials": [ { "ESSO_ID": "target-credential-ID" }, { "ESSO_ID": "target-credential-ID" } ] } } ] }

String. Required. Base64-encoded.

Required.

Integer. Required. Interface version.

Multiple requests supported.

Required. Array of returned credentials.

String. Required. Target credential's ID.

String. Required. Target credential's ID.

The following table describes the parameters of the credential delete response in JSON format.

Field

Description

{ "Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": 1 },

"ESSO_Responses": [ {

"ESSO_Result": 0,

"ESSO_Data": {

"ESSO_Credentials": [{

String. Required. Base64-encoded.

Required.

Integer. Required. Interface version.

Multiple responses supported. Required.

Integer. Required. Overall response result code.

Array of credentials in this operation.

"ESSO_ID": "target-credential-ID", "ESSO_Result": 0 },{ "ESSO_ID": "target-credential-ID", "ESSO_Result": 0 } ] } } ] }

String. required. Target credential's ID.

Integer. Required. Operation result code.

String. required. Target credential's ID.

Integer. Required. Operation result code.

The following table describes the parameters of the credential delete request in XML format. An example request string looks as follows:

/idass/am/esso/v1/userwallet/credentials?ESSO_Payload_Request=base64+url-encoded-payload&ESSO_Payload_Type=application/xml

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

String. Required. Base64-encoded.

Integer. Required. Interface version.

</ESSO_General>

<ESSO_Requests>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_ID>
{8dcaf202-1554-46e6-8640-74857c98487a}
</ESSO_ID>

</ESSO_Credentials>

<ESSO_Credentials>

<ESSO_ID>
{7dcaf202-1554-46e6-8640-74857c98487a}
</ESSO_ID>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Requests>

</ESSO>

Multiple requests supported.

String. Required. Target credential's ID.

String. Required. Target credential's ID.

The following table describes the parameters of the credential delete response in XML format.

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_ID>
{8dcaf202-1554-46e6-8640-74857c98487a}
</ESSO_ID>

String. Required. Base64-encoded.

Integer. Required. Interface version.

Multiple responses supported.

Integer. Required. Overall response result code.

String. Required. Target credential's ID.

<ESSO_Result>0</ESSO_Result>

</ESSO_Credentials>

<ESSO_Credentials>

<ESSO_ID>
{7dcaf202-1554-46e6-8640-74857c98487a}
</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

Integer. Required. Operation result code.

String. Required. Target credential's ID.

Integer. Required. Operation result code.

2.2 Policy Operations

This section describes the HTTP requests and responses for application policy operations that the Access Portal Service can perform via its REST API. Request and response definitions in JSON and XML formats are described. The following operations are available:

- Policy Search

- Policy List

- Policy Add

- Policy Update

- Policy Delete

2.2.1 Policy Search

The policy search operation provides the ability to search the repository for application policies.

- URI: /idass/am/esso/v1/app/policies

- Method: GET

- Category: User

The following table describes the parameters of the policy search request in JSON format. An example request string looks as follows:

/idass/am/esso/v1/app/policies?ESSO_Payload_Request=base64+url-encoded-payload
&Operation=Search&ESSO_Payload_Type=application/json

Field

Description

{"Context": "uu-encoded, salted SHA2-256 payload hash", "ESSO_General": { "ESSO_Version": "1"}, "ESSO_Requests": { "ESSO_Types": "SharingGroup;PasswordPolicy;WebApplication",

"ESSO_RepositoryID": "policy-ID",
"ESSO_AttributeList": "Description;FormType",
"ESSO_Data": { "ESSO_PolicyFilters": { "ESSO_PolicyFilter": [ { "ESSO_Match_Type": "Match", "ESSO_Enumerated_List": "URL",

"ESSO_Value": "match-value",

"ESSO_PolicyType": "WebApplication;PasswordPolicy",

String. Required. Base64-encoded.

String. Required.

String. Required. Interface version.

Multiple requests supported.

String. Required. ALL | PolicyType1, PolicyType2 Types of application policies to return: WebApplication, WindowsApplication,MainFrameApplication, SSOProtected, Federated, PasswordPolicy

GUID. Optional. Administrators only. Repository ID of target policy.

String. Optional. ALL (Default) | Attribute List. Supports returning metadata subsets.

Optional. Only needed if applying filters.

String. Required. Regex | Wildcards | Match | Exact.

String. Required. Field(s) to match against.
URL | ESSO_Field. Multiple URLs in the application policy supported.

String. Required. Match value.

String. Optional. List of policy types. Overrides
ESSO_Types for this filter only.

"ESSO_Operation": "OR" },

"ESSO_Match_Type": "Exact",

"ESSO_Field": "ConfigName",

"ESSO_Value": "match-value"

} ] } } } }

String. Optional. AND | OR | NOT. Match operation to apply to the next field.

String. Required. Regex | Wildcards | Match | Exact.

String. Required. Field(s) to match against.

String. Required. Match value.

The following table describes the parameters of the policy search response in JSON format.

Field

Description

{

"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": 1},

"ESSO_Responses": [ {

"ESSO_Data": {

"ESSO_Policies": [ {

"ESSO_Result": 0,

"name": "WebApplication",

"ESSO_PolicyList": [ {

String. Required. Base64-encoded.

Integer. Required. interface version.

Multiple responses supported.

Integer. Required. Overall response result code.

"ESSO_Responses": [ { "ESSO_Data": { "ESSO_Policies": [ { "ESSO_Result": 0, "name": "WebApplication", "ESSO_PolicyList": [ { "ESSO_Result": 0, "ESSO_ID": "7025e50b-f7a6-4f61-9012-4aa2a95733dd" }, { "ESSO_Result": 0, "ESSO_ID": "1736cb10-d746-4652-9e7a-22da35e43fec" }] } ] } } ] }

String. Required. Policy type.

Integer. Required. Operation result code.

String. Required. Target policy's ID.

Integer. Required. Operation result code.

String. Required. Target policy's ID.

The following table describes the parameters of the policy search request in XML format. An example request string looks as follows:

/idass/am/esso/v1/app/policies?ESSO_Payload_Request=base64+url-encoded-payload
&Operation=Search&ESSO_Payload_Type=application/XML

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

String. Required. Base64-encoded.

String. Required. Interface version.

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_Types>SharingGroup;PasswordPolicy;
WebApplication</ESSO_Types>

<ESSO_RepositoryID>
3d8d102e-d31d-4223-9ddb-ef154e5f8c45
</ESSO_RepositoryID>

<ESSO_AttributeList>Description;FormType</ESSO_AttributeList>

<ESSO_Data>

<ESSO_PolicyFilters>

<ESSO_PolicyFilter>

<ESSO_Match_Type>Regex</ESSO_Match_Type>

<ESSO_Enumerated_List>URL
</ESSO_Enumerated_List>

<ESSO_Value>match-value</ESSO_Value>

<ESSO_PolicyType>WebApplication;PasswordList</ESSO_PolicyType>

<ESSO_Operation>OR</ESSO_Operation>

</ESSO_PolicyFilter>

Multiple requests supported.

String. Required. ALL | PolicyType1, PolicyType2 Types of application policies to return: WebApplication, WindowsApplication,MainFrameApplication, SSOProtected, Federated, PasswordPolicy

GUID. Optional. Administrators only. Repository ID of target policy.

String. Optional. ALL (Default) | Attribute List. Supports returning metadata subsets.

Optional. Only needed if applying filters.

String. Required. Regex | Wildcards | Match | Exact.

String. Required. Field(s) to match against.
URL | ESSO_Field. Multiple URLs in the application policy supported.

String. Required. Match value.

String. Optional. List of policy types. Overrides
ESSO_Types for this filter only.

String. Optional. AND | OR | NOT. Match operation to apply to the next field.

<ESSO_PolicyFilter>

<ESSO_Match_Type>Exact</ESSO_Match_Type>

<ESSO_Field>AT_ConfigType</ESSO_Field>

<ESSO_Value>match-value</ESSO_Value>

</ESSO_PolicyFilter>

</ESSO_PolicyFilters>

</ESSO_Data>

</ESSO_Request>

</ESSO_Requests>

</ESSO>

String. Required. Regex | Wildcards | Match | Exact.

String. Required. Field(s) to match against.

String. Required. Match value.

The following table describes the parameters of the policy search response in XML format.

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

String. Required. Base64-encoded.

String. Required. Interface version.

Multiple responses supported.

String. Required. Overall response result code.

<ESSO_Data>

<ESSO_Policies>

<ESSO_PolicyType>

<name>PasswordPolicy</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>
3458-fafcd-3829-adfe-4822
</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

'

<!--policy-definition -->

'

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>SharingGroup</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>
e37c2142-41d7-48da-8d6d-bf4fdbc8f807</ESSO_ID>

String. Required. Policy type.

String. Required. Target policy's ID.

String. Required. Policy retrieval result code.

String. Required. Policy type.

String. Required. Target policy's ID.

<ESSO_Result>0</ESSO_Result>

</ESSO_Policy>

'

<!--policy-definition -->

'

<ESSO_Policy>

<ESSO_ID>
1c81852e-4910-4a95-8f1c-77CSG</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

'

<!--policy-definition-->

'

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

</ESSO_Policies>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

String. Required. Policy retrieval result code.

String. Required. Target policy's ID

2.2.2 Policy List

The policy list operation provides the ability to get a list of policies from the repository.

- URI: /idass/am/esso/v1/app/policies

- Method: GET

- Category: User, Admin

The following table describes the parameters of the policy list request in JSON format. An example request string looks as follows:

/idass/am/esso/v1/app/policies?ESSO_Payload_Request=base64+url-encoded-payload
&Operation=List&ESSO_Payload_Type=application/json

Field

Description

{ "Context": "uu-encoded, salted SHA2-256 payload hash", "ESSO_General": { "ESSO_Version": "1"}, "ESSO_Requests": { "ESSO_Request": { "ESSO_RepositoryID": "3d8d102e-d31d-4223-9ddb-ef154e5f8c45", "ESSO_AttributeList": "Description;FormType",
"ESSO_Data": { "ESSO_Policies": { "ESSO_PolicyType": [ { "name": "Federated", "ESSO_PolicyList": {

"ESSO_Policy": { "ESSO_ID": "56729f5b-9cde-4a3b-be01-9f5dff5fd7a1" } } }, { "name": "SharingGroup", "ESSO_PolicyList": {

"ESSO_Policy": [ {

"ESSO_ID": "635029a9-bc17-42d6-b973-3510b01c5e91"}, {

"ESSO_ID": "725029a9-bc17-42d6-b973-3510b01c5e91" }

] } } ] } } } } }

String. Required. Base64-encoded.

String. Required. Interface version.

Multiple requests supported.

String. Administrator only. Target repository ID.

String. Optional. ALL (Default) | Attribute List. Supports returning metadata subsets.

Required.

String. Required. Policy type.

String. Optional. Allows policy retrieval by ID; if not specified, all policies of the selected type will be returned.

String. Optional. IDs of policies to return.

String. Required. Policy type.

String. Optional. Allows policy retrieval by ID; if not specified, all policies of the selected type will be returned.

String. Optional. IDs of policies to return.

String. Optional. IDs of policies to return.

The following table describes the parameters of the policy list response in JSON format.

Field

Description

{"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": 1 },

"ESSO_Responses": [ {

"ESSO_Data": {

"ESSO_Policies": [ {

"ESSO_Result": 0,

"name": "Federated",

"ESSO_PolicyList": [ {

"ESSO_Result": 0,

"ESSO_ID": "cb4aac9d-0b03-485b-b34a-e9d40c69d611" } ] { },

"name": "SharingGroup",

"ESSO_PolicyList": [ {

"ESSO_Result": 0,

"ESSO_ID": "1736cb10-d746-4652-9e7a-22da35e43fec" }

] } ] } } ] }

String. Required. Base64-encoded.

Integer. Required. Interface version.

Multiple responses supported.

Integer. Required. Overall response result code.

String. Required. Policy type.

Integer. Required. Policy list operation result code.

String. Required. Target policy ID.

Integer. Required. Policy list operation result code.

String. Required. Target policy ID.

The following table describes the parameters of the policy list request in XML format. An example request string looks as follows:

/idass/am/esso/v1/app/policies?ESSO_Payload_Request=base64+url-encoded-payload
&Operation=List&ESSO_Payload_Type=application/XML

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_RepositoryID>
3d8d102e-d31d-4223-9ddb-ef154e5f8c45</ESSO_RepositoryID>

<ESSO_AttributeList>Description;FormType
</ESSO_AttributeList>

<ESSO_Data>

<ESSO_Policies>

<ESSO_PolicyType>

<name>Federated</name>

String. Required. Base64-encoded.

String. Required. Interface version.

String. Optional. Administrator only. Target repository ID.

String. Optional. ALL (Default) | Attribute List. Supports returning metadata subsets.

String. Required. Policy type.

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>
609e0d44-3815-4064-a204-7061b2be917f</ESSO_ID>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>PasswordPolicy</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>
1c81852e-4910-4a95-8f1c-77CSG</ESSO_ID>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>
11128fbf-6242-48ac-8714-2b2234a36e119</ESSO_ID>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

</ESSO_Policies>

</ESSO_Data>

</ESSO_Request>

</ESSO_Requests>

</ESSO>

String. Optional. Allows policy retrieval by ID; if not specified, all policies of the selected type will be returned.

String. Optional. ID of policy to return.

String. Required. Policy type.

String. Optional. Allows policy retrieval by ID; if not specified, all policies of the selected type will be returned.

String. Optional. ID of policy to return.

String. Optional. ID of policy to return.

The following table describes the parameters of the policy list response in XML format.

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_Policies>

<ESSO_PolicyType>

<name>Federated</name>

<ESSO_PolicyList>

<ESSO_Policy>

String. Required. Base64-encoded.

String. Required. Interface version.

Multiple responses supported.

String. Required. Overall response result code.

String. Required. Policy type.

<ESSO_ID>
609e0d44-3815-4064-a204-7061b2be917f</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

'

<!-- policy-definition -->

'

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>PasswordPolicy</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>
3458-fafcd-3829-adfe-4822</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

String. Required. Target policy ID.

String. Required. Policy list operation result code.

String. Required. Policy type.

String. Required. Target policy ID.

String. Required. Policy list operation result code.

'

<!-- policy-definition -->

'

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>
fa0f3b29-9b74-49e3-a15a-2d5978ce3a31</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

'

<!-- policy-definition -->

'

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

</ESSO_Policies>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

String. Required. Target policy ID.

String. Required. Policy list operation result code.

2.2.3 Policy Add

The policy add operation provides the ability to add policies to the repository.

- URI: /idass/am/esso/v1/app/policies

- Method: POST

The following table describes the parameters of the policy add request in JSON format.

Field

Description

{"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": "1" },

"ESSO_Requests": {

String. Required. Base64-encoded.

String. Required. Interface version.

Multiple requests supported.

"ESSO_RepositoryID": "3d8d102e-d31d-4223-9ddb-ef154e5f8c45", "ESSO_Data": { "ESSO_Policies": { "ESSO_PolicyType": [ { "name": "WebApplication", "ESSO_Policy": { } }, { "name": "SSOProtected", "ESSO_Policy": { } } ] } } } }

String. Optional. Administrator only. Target repository ID.

String. Required. Policy type.

String. Required. Policy data.

String. Required. Policy type.

String. Required. Policy data.

The following table describes the parameters of the policy add response in JSON format.

Field

Description

{"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": 1 },

"ESSO_Responses": [ {

"ESSO_Data": {

"ESSO_Result": 0,

"ESSO_PolicyList": [ {

String. Required. Base64-encoded.

Integer. Required. Interface version.

Multiple responses supported.

Integer. Required. Overall response result code.

"ESSO_Identifier": "transient-identifier",

"ESSO_Result": 0,

"ESSO_ID": "312eab5d-62c9-4e9c-af31-8b6d18807526"

},{

"ESSO_Identifier": "transient-identifier",

"ESSO_Result": 0,

"ESSO_ID": "412eab5d-62c9-4e9c-af31-8b6d18807526" }

] } } ] }

String. Required. Unique transient identifier to match response data to the appropriate data in the request.

String. Required. Operation result code.

String. Required. ID of the added policy.

String. Required. Unique transient identifier to match response data to the appropriate data in the request.

String. Required. Operation result code.

String. Required. ID of the added policy.

The following table describes the parameters of the policy add request in XML format.

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_RepositoryID>
3d8d102e-d31d-4223-9ddb-ef154e5f8c45
</ESSO_RepositoryID>

<ESSO_Data>

<ESSO_Policies>

<ESSO_PolicyType>

<name>WebApplication</name>

<ESSO_PolicyList>

<ESSO_Policy>

'

<!-- policy-definition -->

'

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>PasswordPolicy</name>

<ESSO_PolicyList>

<ESSO_Policy>

'

<!-- policy-definition -->

'

</ESSO_Policy>

String. Required. Base64-encoded.

String. Required. Interface version.

String. Optional. Administrator only. Target repository ID.

String. Required. Policy type.

String. Required. Policy type.

</ESSO_PolicyList>

</ESSO_PolicyType>

</ESSO_Policies>

</ESSO_Data>

</ESSO_Request>

</ESSO_Requests>

</ESSO>

The following table describes the parameters of the policy add response in XML format.

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>
4e02bfd2-a734-4ff4-a31a-8a6933417b3d</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_Identifier>0</ESSO_Identifier>

<ESSO_ID>
ca654a16-f638-462b-a2e9-5f30cd9cd59e</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_Identifier>0003</ESSO_Identifier>

<ESSO_ID>
4df7399c-e923-4d16-a2ad-e22fce680a05</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_Identifier>0</ESSO_Identifier>

<ESSO_ID>
626fc22a-d5ba-4221-83e7-a0908be616a1</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Policy>

</ESSO_PolicyList>

String. Required. Base64-encoded.

String. Required. Interface version.

Multiple responses supported.

String. Required. Overall response result code.

String. Required. Newly added policy's ID.

String. Required. Operation result code.

String. Required. Newly added policy's ID.

String. Required. Operation result code.

String. Required. Newly added policy's ID.

String. Required. Operation result code.

String. Required. Newly added policy's ID.

String. Required. Operation result code.

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

2.2.4 Policy Update

The policy update operation provides the ability to update policies in the repository.

- URI: /idass/am/esso/v1/app/policies

- Method: PUT

The following table describes the parameters of the policy update request in JSON format.

Field

Description

{ "Context": "uu-encoded, salted SHA2-256 payload hash", "ESSO_General": { "ESSO_Version": "1"}, "ESSO_Requests": { "ESSO_RepositoryID": "3d8d102e-d31d-4223-9ddb-ef154e5f8c45", "ESSO_Data": { "ESSO_Policies": { "ESSO_PolicyType": [ {

"name": "WebApplication",

"ESSO_Policy": {

String. Required. Base64-encoded.

String. Required. Interface version.

Multiple requests supported.

String. Optional. Administrator only. Target repository ID.

String. Required. Policy type.

Policy data.

} }, {

"name": "SSOProtected",

"ESSO_Policy": {

} } ] } } } }

String. Required. Policy type.

Policy data.

The following table describes the parameters of the policy update response in JSON format.

Field

Description

{"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": 1},

"ESSO_Responses": [ {

"ESSO_Result": 0,

String. Required. Base64-encoded.

Integer. Required. Interface version.

Multiple responses supported.

Integer. Required. Overall response result code.

"ESSO_Data": {

"ESSO_PolicyList": [ {

"ESSO_Result": 0,

"ESSO_ID": "5529e0e0-435d-4ae3-a97b-66eb64e05499"},{

"ESSO_Result": 0,

"ESSO_ID": "6529e0e0-435d-4ae3-a97b-66eb64e05499"

} ] } } ] }

Integer. Required. Operation result code.

Target policy ID.

Integer. Required. Operation result code.

Target policy ID.

The following table describes the parameters of the policy update request in XML format.

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_RepositoryID>
3d8d102e-d31d-4223-9ddb-ef154e5f8c45
</ESSO_RepositoryID>

String. Required. Base64-encoded.

String. Required. Interface version.

Multiple requests supported.

String. Optional. Administrator only. Target repository ID.

<ESSO_Data>

<ESSO_Policies>

<ESSO_PolicyType>

<name>WebApplication</name>

<ESSO_PolicyList>

<ESSO_Policy>

'<!-- policy-definition -->'

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>PasswordPolicy</name>

<ESSO_PolicyList>

<ESSO_Policy>

'<!-- policy-definition -->'

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

</ESSO_Policies>

</ESSO_Data>

</ESSO_Request>

</ESSO_Requests></ESSO>

String. Required. Policy type.

String. Required. Policy type.

The following table describes the parameters of the policy update response in XML format.

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

String. Required. Base64-encoded.

Required.

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>
4e02bfd2-a734-4ff4-a31a-8a6933417b3d
</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_Identifier>0</ESSO_Identifier>

<ESSO_ID>
ca654a16-f638-462b-a2e9-5f30cd9cd59e
</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_Identifier>0003</ESSO_Identifier>

<ESSO_ID>
4df7399c-e923-4d16-a2ad-e22fce680a05
</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_Identifier>0</ESSO_Identifier>

<ESSO_ID>
626fc22a-d5ba-4221-83e7-a0908be616a1
</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

String. Required. Interface version

Required. Multiple responses supported.

String. Required. Overall response result code.

String. Required. Target policy ID.

String. Required. Operation result code.

String. Required. Target policy ID.

String. Required. Operation result code.

String. Required. Target policy ID.

String. Required. Operation result code.

String. Required. Target policy ID.

String. Required. Operation result code.

2.2.5 Policy Delete

The policy delete operation provides the ability to delete policies from the repository.

- URI: /idass/am/esso/v1/app/policies

- Method: DELETE

- Category: User, Admin

The following table describes the parameters of the policy delete request in JSON format. An example request string looks as follows:

/idass/am/esso/v1/app/policies?ESSO_Request_Payload=base64+url-encoded-payload
&ESSO_Payload_Type=application/json

Field

Description

{"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": "1" },

"ESSO_Requests": {

"ESSO_Request": {

"ESSO_RepositoryID": "3d8d102e-d31d-4223-9ddb-ef154e5f8c45",

"ESSO_Data": {

"ESSO_Policies": {

"ESSO_Policy_Type": [ {

"name": "WebApplication",

"ESSO_PolicyList": {

"ESSO_Policy": [ {

"ESSO_ID": "3e8d102e-d31d-4223-9ddb-ef154e5f8c45"

}, ] } }, {

String. Required. Base64-encoded.

String. Required. Interface version.

Multiple requests supported.

String. Optional. Administrator only. Target repository ID.

String. Required. Policy type.

String. Required. Target policy ID.

"name": "SSOProtected", "ESSO_PolicyList": { "ESSO_Policy": [ { "ESSO_ID": "78d102e-d31d-4223-9ddb-ef154e5f8c45" } ] } } ] } } } } }

String. Required. Policy type.

String. Required. Target policy ID.

The following table describes the parameters of the policy delete response in JSON format.

Field

Description

{ "Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": 1 },

"ESSO_Responses": [ {

"ESSO_Result": 0,

"ESSO_Data": {

"ESSO_PolicyList": [ {

"ESSO_Result": 0,

"ESSO_ID": "9e6285dc-0db6-432c-84fe-de4d6cc52b02"}, {

"ESSO_Result": 0,

"ESSO_ID":
"8e6285dc-0db6-432c-84fe-de4d6cc52b02"
} ] } } ] }

String. Required. Base64-encoded.

String. Required. Interface version.

Multiple responses supported.

Integer. Required. Overall response result code.

Integer. Required. Operation result code.

String. Required. Target policy ID.

Integer. Required. Operation result code.

String. Required. Target policy ID.

The following table describes the parameters of the policy delete request in XML format. An example request string looks as follows:

/idass/am/esso/v1/app/policies?ESSO_Request_Payload=base64+url-encoded-payload
&ESSO_Payload_Type=application/xm

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_RepositoryID>
3d8d102e-d31d-4223-9ddb-ef154e5f8c45
</ESSO_RepositoryID>

<ESSO_Data>

<ESSO_Policies>

<ESSO_PolicyType>

<name>WebApplication</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>
bcc6ac7f-7773-44e5-b952-a4ae3eec9515
</ESSO_ID>

</ESSO_Policy>

String. Required. Base64-encoded.

String. Required. Interface version.

Multiple requests supported.

String. Optional. Administrator only. Target repository ID.

String. Required. Policy type.

String. Required. Target policy ID.

<ESSO_Policy>

<ESSO_ID>
ab4f9632-4670-400b-9b5b-b9479c4a9e3f
</ESSO_ID>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>Federated</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>
93d31e9c-e961-4457-a1dc-d1625ce659df
</ESSO_ID>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

</ESSO_Policies>

</ESSO_Data>

</ESSO_Request>

</ESSO_Requests></ESSO>

String. Required. Target policy ID.

String. Required. Policy type.

String. Required. Target policy ID.

The following table describes the parameters of the policy delete response in XML format.

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>
d384b40a-b3f9-41ea-9ef6-b06a5f907824
</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>
93d31e9c-e961-4457-a1dc-d1625ce659df
</ESSO_ID>

String. Required. Base64-encoded.

String. Required. Interface version.

Multiple responses supported.

String. Required. Overall response result code.

String. Required. Target policy ID.

String. Required. Operation result code.

String. Required. Target policy ID.

<ESSO_Result>0</ESSO_Result>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

String. Required. Operation result code.

2.3 Provisioning Operations

This section describes the HTTP requests and responses for creating credential provisioning instructions that allow credential delegation, as well as revocation of existing delegations, via the Access Portal Service REST API. Request and response definitions in JSON and XML formats are described.

- URI: /idass/am/esso/v1/userwallet/provisioining

- Method: POST

- Category: User, Admin

The following table describes the parameters of the provisioning instruction create request in JSON format.

Field

Description

{ "Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": "1" },

"ESSO_Requests": [ {

"ESSO_Data": {

"ESSO_Instructions": [

{

"ESSO_Identifier": "transient-identifier",

"ESSO_Type": "DELEGATE",

"ESSO_TargetUser": "target-username",

"ESSO_ExceutionTime": "DateTime" },

String. Required. Base64-encoded.

Integer. Required. Interface version.

Multiple requests supported.

String. Required. Unique transient identifier to match the operation's response with its request.

String. Required. DELEGATE | REVOKE.
Provisioning operation type.

String. Required. Target user account ID.

String. Optional. Desired instruction execution time in the following format:
year:month:day hour:minute:second:millisecond.
If not specified, instruction is executed immediately.

{ "ESSO_Identifier": "transient-identifier",

"ESSO_Type": "REVOKE",

"ESSO_TargetUser": "target-username",

"ESSO_ExceutionTime": "DateTime" }

] } } ] }

String. Required. Unique transient identifier to match the operation's response with its request.

String. Required. DELEGATE | REVOKE.
Provisioning operation type.

String. Required. Target user account ID.

String. Optional. Desired instruction execution time in the following format:
year:month:day hour:minute:second:millisecond.
If not specified, instruction is executed immediately.

The following table describes the parameters of the provisioning instruction create response in JSON format.

Field

Description

{ "Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": 1 },

"ESSO_Responses": [ {

"ESSO_Result": 0,

"ESSO_Data": {

"ESSO_Instructions": [ {

"ESSO_ID": "{43041556-d7cd-4a10-b480-2d575f1e917e}",

"ESSO_Result": 0 }, {

"ESSO_ID": "{53041556-d7cd-4a10-b480-2d575f1e917e}",

"ESSO_Result": 0 }

} ] } } ] }

String. Required. Base64-encoded.

Integer. Required. Interface version.

Multiple responses supported.

Integer. Required. Overall response result code.

String. Optional. ID of newly created provisioning instruction. Present only if operation was successful.

String. Required. Operation result code.

String. Optional. ID of newly created provisioning instruction. Present only if operation was successful.

String. Required. Operation result code.

The following table describes the parameters of the provisioning instruction create request in XML format.

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_Data>

<ESSO_Instructions>

<ESSO_Identifier>transient-identifier
</ESSO_Identifier>

<ESSO_Type>DELEGATE</ESSO_Type>

String. Required. Base64-encoded.

Integer. Required. Interface version.

Multiple requests supported.

String. Required. Unique transient identifier to match the operation's response data with its request data.

String. Required. DELEGATE | REVOKE
Provisioning operation type.

<ESSO_TargetUser>target-username
</ESSO_TargetUser>

<ESSO_ExecutionTime>DateTime
</ESSO_ExecutionTime>

</ESSO_Instructions>

<ESSO_Instructions>

<ESSO_Identifier>transient-identifier</ESSO_Identifier>

<ESSO_Type>REVOKE</ESSO_Type>

<ESSO_TargetUser>target-username
</ESSO_TargetUser>

<ESSO_ExecutionTime>DateTime
</ESSO_ExecutionTime>

</ESSO_Instructions>

</ESSO_Data>

</ESSO_Request>

</ESSO_Requests>

</ESSO>

String. Required. Target user account ID.

String. Optional. Desired instruction execution time in the following format:
year:month:day hour:minute:second:millisecond.
If not specified, instruction is executed immediately.

String. Required. Unique transient identifier to match the operation's response data with its request data.

String. Required. DELEGATE | REVOKE
Provisioning operation type.

String. Required. Target user account ID.

String. Optional. Desired instruction execution time in the following format:
year:month:day hour:minute:second:millisecond.
If not specified, instruction is executed immediately.

The following table describes the parameters of the provisioning instruction create response in XML format.

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

String. Required. Base64-encoded.

Integer. Required. Interface version.

</ESSO_General>

<ESSO_Responses>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data />

<ESSO_Instructions>

<ESSO_ID>
{53041556-d7cd-4a10-b480-2d575f1e917e}
</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Instructions>

<ESSO_Instructions>

<ESSO_ID>
{73041556-d7cd-4a10-b480-2d575f1e917
</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Instructions>

</ESSO_Responses>

</ESSO>

Multiple responses supported.

Integer. Required. Overall response result code.

String. Optional. ID of newly created provisioning instruction. Present only if operation was successful.

Integer. Required. Operation result code.

String. Optional. ID of newly created provisioning instruction. Present only if operation was successful.

Integer. Required. Operation result code.

2.4 Event Operations

This section describes the HTTP requests and responses for adding events to the Access Portal Service's event log via the Access Portal Service REST API.
Request and response definitions in JSON and XML formats are described.

- URI: //idass/am/esso/v1/audit/events

- Method: POST

- Category: User, Admin

The following table describes the parameters of the event add request in JSON format.

Field

Description

{ "Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": "1" },

"ESSO_Requests": [ {

"ESSO_Data": {

"ESSO_Events": [ {

"data": {

} }, {

"data": {

} } ] } } ] }

String. Required. Base64-encoded.

String. Required. Interface version.

Multiple requests supported.

Required. Array of events to add.

Required. Data of event to add.

Required. Data of event to add.

The following table describes the parameters of the event add response in JSON format.

Field

Description

{ "Context": "uu-encoded, salted SHA2-256 payload hash", "ESSO_General": { "ESSO_Version": 1 }, "ESSO_Responses": [ { "ESSO_Result": 0, "ESSO_Data": { "ESSO_Events": [ { "ESSO_ID": "{43041556-d7cd-4a10-b480-2d575f1e917e}", "ESSO_Result": 0 }, { "ESSO_ID": "{53041556-d7cd-4a10-b480-2d575f1e917e}", "ESSO_Result": 0 } ] } } ] }

String. Required. Base64-encoded.

Integer. Required. Interface version.

Multiple responses supported.

Integer. Required. Overall response result code.

String. Optional. ID of newly added event.
Present only if operation was successful.

Integer. Required. Operation result code.

String. Optional. ID of newly added event.
Present only if operation was successful.

Integer. Required. Operation result code.

The following table describes the parameters of the event add request in XML format.

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_Data>

<ESSO_Events><ESSO_Event>

<ESSO_Identifier>transient-identifier
</ESSO_Identifier>

String. Required. Base64-encoded.

Integer. Required. Interface version.

Multiple requests supported.

String. Required. Unique transient identifier to match the operation's response data with its request data.

<data>

<! - event-data ->

</data>

</ESSO_Event>

<ESSO_Event />

<ESSO_Identifier>transient-identifier
</ESSO_Identifier>

<data>

<! - event-data ->

</data>

</ESSO_Events>

</ESSO_Data>

</ESSO_Request></ESSO_Requests></ESSO>

Event data.

String. Required. Unique transient identifier to match the operation's response data with its request data.

Event data.

The following table describes the parameters of the event add response in XML format.

Field

Description

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

String. Required. Base64-encoded.

Integer. Required. Interface version.

Multiple responses supported.

Integer. Required. Overall response result code.

<ESSO_Events>

<ESSO_Event>

<ESSO_Result>0</ESSO_Result>

<ESSO_ID>
{43041556-d7cd-4a10-b480-2d575f1e917e}
</ESSO_ID>

</ESSO_Event>

<ESSO_Event>

<ESSO_Result>0</ESSO_Result>

<ESSO_ID>
{53041556-d7cd-4a10-b480-2d575f1e917e}
</ESSO_ID>

</ESSO_Event>

</ESSO_Events>

</ESSO_Data>

</ESSO_Responses>

</ESSO>

Integer. Required. Operation result code.

String. Optional. ID of newly added event.
Only present if the operation was successful.

Integer. Required. Operation result code.

String. Optional. ID of newly added event.
Only present if the operation was successful.

3 Implementation Examples

This chapter provides implementation code examples of the Access Portal Service REST interfaces described earlier in this guide. It contains the following sections:

- JSON Examples

- XML Examples

3.1 JSON Examples

This section provides JSON implementation examples for the following operations:

- Credential Add

- Credential Delete

- Credential List

- Credential List (Specific Credentials)

- Credential Search

- Credential Update

- Credential Update (Specific Fields)

- Policy Add (AdminOverrides)

- Policy Add (SharingGroup)

- Policy Add (PasswordPolicy)

- Policy Add (WebApplication)

- Policy Delete

- Policy List

- Policy Search

- Policy Update (AdminOverrides)

- Policy Update (SSOProtected)

- Policy Update (SharingGroup)

- Policy Update (PasswordPolicy)

- Policy Update (WebApplication)

- Event Add

- Provisioning Create

3.1.1 Credential Add

Credential add operation for a policy with the following Base64-encoded values:

- IDName = essooracle

- PassField = password

- URL = google

- ConfigName = google

- AutoOK = 1

- ConfigKey = *OtherWebs

- MainSectionName = AccessManager

3.1.1.1 Request

{ "ESSO_General": {

"ESSO_Version": 1},

"ESSO_Requests": [{

"ESSO_Data": {

"ESSO_Credentials": [{

"ESSO_Identifier": "abcd1234:transient identifier",

"attributes": {

"IDName": "ZXNzb29yYWNsZQ==",

"PassField": "cGFzc3dvcmQ=",

"URL": "Z29vZ2xl",

"ConfigName": "Z29vZ2xl",

"AutoOK": "AQ==",

"ConfigKey": "Kk90aGVyIFdlYnM=",

"MainSectionName": "QWNjZXNzTWFuYWdlcg==" }}]}}]}

3.1.1.2 Response

The response provides the ID of the created credential.

{"ESSO_General": {

"ESSO_Version": "1"},

"ESSO_Responses": [{

"ESSO_Result": 0,

"ESSO_Data": {

"ESSO_Credentials": [{

"ESSO_Identifier": "abcd1234:transient identifier",

"ESSO_ID": "{8dcaf202-1554-46e6-8640-74857c98487a}",

"ESSO_Result": 0 }]}}]}

3.1.2 Credential Delete

Credential delete operation (single credential with specified ID).

3.1.2.1 Request

{ "ESSO_General": {"ESSO_Version": 1},"ESSO_Requests": [{"ESSO_Data": {"ESSO_Credentials": [{"ESSO_ID": "{8dcaf202-1554-46e6-8640-74857c98487a}" }]}}],"Context": "uu-encoded, salted SHA2-256 payload hash" }

3.1.2.2 Response

{"Context": "uu-encoded, salted SHA2-256 payload hash","ESSO_General": {"ESSO_Version": 1},"ESSO_Responses": [{"ESSO_Result": 0,"ESSO_Data": {"ESSO_Credentials": [{"ESSO_ID": "{8dcaf202-1554-46e6-8640-74857c98487a}","ESSO_Result": 0 }]}}]}

3.1.3 Credential List

Credential list operation with partial metadata (all credentials).

3.1.3.1 Request

{"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": "1"},

"ESSO_Requests": [{

"ESSO_AttributeList": "ConfigName;LastUsed",

"ESSO_Data": {

"ESSO_Credentials": []}}]}

3.1.3.2 Response

The attributes are BASE64 encoded. The last time is a windows system time structure.

{"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": 1},

"ESSO_Responses": [{

"ESSO_Result": 0,

"ESSO_Data": {

"ESSO_Credentials": [{

"ESSO_ID": "{512a9c14-db6d-4304-93fe-f4a4bb40326f}",

"ESSO_Result": 0,

"attributes": {

"ConfigName": "Z29vZ2xl",

"LastUsed": "3QcLAAQABgABADAANgA6Ag=="}},{

"ESSO_ID": "{6f63add1-8ee3-4e05-8def-a4a91b36babc}",

"ESSO_Result": 0,

"attributes": {

"ConfigName": "Q2lzY28gQ2FsbCBNYW5hZ2Vy",

"LastUsed": "3QcLAAQABgAAADcAHwByAg=="}},{

"ESSO_ID": "{e30a7812-b295-4e03-bb15-73bf42739808}",

"ESSO_Result": 0,

"attributes": {

"ConfigName": "Z29vZ2xl",

"LastUsed": "3QcLAAQABgABADIAJgDwAQ=="}},{

"ESSO_ID": "{391a3591-4164-44e0-8aa5-2b22c6759a90}",

"ESSO_Result": 0,

"attributes": {

"ConfigName": "U2ltcGxlVGVzdEFwcA==",

"LastUsed": "3QcLAAQABgAKACEAAQDUAQ=="}},{

"ESSO_ID": "{105a3a14-7523-496f-9114-4e0ed6ff7027}",

"ESSO_Result": 0,

"attributes": {

"ConfigName": "RHJvcEJveDEyMzQ0NTIzNA==",

"LastUsed": "3QcLAAMABQAWADEAAwC9Aw==" }}]}}]}

3.1.4 Credential List (Specific Credentials)

Credential list operation for specific credentials, with partial metadata.

3.1.4.1 Request

{"Context": "uu-encoded, salted SHA2-256 payload hash","ESSO_General": {"ESSO_Version": "1"},"ESSO_Requests": [{"ESSO_AttributeList": "ConfigName;LastUsed","ESSO_Data": {"ESSO_Credentials": [{"ESSO_ID": "{105a3a14-7523-496f-9114-4e0ed6ff7027}"},{"ESSO_ID": "{391a3591-4164-44e0-8aa5-2b22c6759a90}" }]}}]}

3.1.4.2 Response

The attributes are BASE64 encoded. The last time is a windows system time structure.

{"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": 1},

"ESSO_Responses": [{

"ESSO_Result": 0,

"ESSO_Data": {

"ESSO_Credentials": [{

"ESSO_ID": "{105a3a14-7523-496f-9114-4e0ed6ff7027}",

"ESSO_Result": 0,

"attributes": {

"ConfigName": "RHJvcEJveDEyMzQ0NTIzNA==",

"LastUsed": "3QcLAAMABQAWADEAAwC9Aw=="}},{

"ESSO_ID": "{391a3591-4164-44e0-8aa5-2b22c6759a90}",

"ESSO_Result": 0,

"attributes": {

"ConfigName": "U2ltcGxlVGVzdEFwcA==",

"LastUsed": "3QcLAAQABgAKACEAAQDUAQ==" }}]}}]}

3.1.5 Credential Search

This is an example of a filtered credential search. The first filter is for any credential that has the ConfigName field of google. The second filter returns all credentials associated with the policy ESSO_Group.

3.1.5.1 Request

{"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": "1"},

"ESSO_Requests": [{

"ESSO_Data": {

"ESSO_CredentialFilters": [{

"ESSO_Field": "ConfigName",

"ESSO_Type": "Exact",

"ESSO_Value": "google"} ]},

"ESSO_AttributeList": "ConfigName;Description;LastUsed;MainSectionName;URL;AutoOK;ConfigKey;egostoreciph;UID;egoStore_SyncState"},{

"ESSO_Data": {

"ESSO_CredentialFilters": [{

"ESSO_PolicyName": "ESSO_Group",

"ESSO_Type": "Exact" }]},

"ESSO_AttributeList": "All"}]}

3.1.5.2 Response

The attributes are BASE64 encoded. The LastUsed, Modified, LastPwdChanged paramteres are windows system time structure.

{"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": 1},

"ESSO_Responses": [{

"ESSO_Result": 0,

"ESSO_Data": {

"ESSO_Credentials": [{

"ESSO_ID": "{512a9c14-db6d-4304-93fe-f4a4bb40326f}",

"ESSO_Result": 0,

"attributes": {

"UID": "ezUxMmE5YzE0LWRiNmQtNDMwNC05M2ZlLWY0YTRiYjQwMzI2Zn0=",

"ConfigKey": "Kk90aGVyIFdlYnM=",

"egoStore_SyncState": "YWIzOTJhOTEtOGFkMS00NWU2LTlhOTItMTE1OGMwZTU0ZmEy",

"MainSectionName": "QWNjZXNzTWFuYWdlcg==",

"ConfigName": "Z29vZ2xl",

"LastUsed": "3QcLAAQABgABADAANgA6Ag==",

"egostoreciph": "e2c=",

"URL": "Z29vZ2xl"}},{

"ESSO_ID": "{e30a7812-b295-4e03-bb15-73bf42739808}",

"ESSO_Result": 0,

"attributes": {

"UID": "e2UzMGE3ODEyLWIyOTUtNGUwMy1iYjE1LTczYmY0MjczOTgwOH0=",

"AutoOK": "AQ==",

"ConfigKey": "Kk90aGVyIFdlYnM=",

"egoStore_SyncState": "MDgzN2YyM2YtYWRmOS00MzQ5LTg4ZTYtMjJmZmUzYWFjMDll",

"MainSectionName": "QWNjZXNzTWFuYWdlcg==",

"ConfigName": "Z29vZ2xl",

"LastUsed": "3QcLAAQABgABADIAJgDwAQ==",

"egostoreciph": "e2c=",

"URL": "Z29vZ2xl"}}]}},{

"ESSO_Result": 0,

"ESSO_Data": {

"ESSO_Credentials": [{

"ESSO_ID": "{512a9c14-db6d-4304-93fe-f4a4bb40326f}",

"ESSO_Result": 0,

"attributes": {

"UID": "ezUxMmE5YzE0LWRiNmQtNDMwNC05M2ZlLWY0YTRiYjQwMzI2Zn0=",

"ConfigKey": "Kk90aGVyIFdlYnM=",

"egoStore_SyncState": "YWIzOTJhOTEtOGFkMS00NWU2LTlhOTItMTE1OGMwZTU0ZmEy",

"MainSectionName": "QWNjZXNzTWFuYWdlcg==",

"ConfigName": "Z29vZ2xl",

"LastUsed": "3QcLAAQABgABADAANgA6Ag==",

"egostoreciph": "e2c=",

"URL": "Z29vZ2xl",

"Modified": "3QcLAAUABwABABUAHwDCAg==" }},{

"ESSO_ID": "{e30a7812-b295-4e03-bb15-73bf42739808}",

"ESSO_Result": 0,

"attributes": {

"AutoOK": "AQ==",

"UID": "e2UzMGE3ODEyLWIyOTUtNGUwMy1iYjE1LTczYmY0MjczOTgwOH0=",

"ConfigKey": "Kk90aGVyIFdlYnM=",

"egoStore_SyncState": "MDgzN2YyM2YtYWRmOS00MzQ5LTg4ZTYtMjJmZmUzYWFjMDll",

"MainSectionName": "QWNjZXNzTWFuYWdlcg==",

"ConfigName": "Z29vZ2xl",

"PassField": "I1NTT09yYWNsZQ==",

"LastUsed": "3QcLAAQABgABADIAJgDwAQ==",

"egostoreciph": "e2c=",

"URL": "Z29vZ2xl",

"Modified": "3QcLAAUABwABABUAHwDCAg=="}},{

"ESSO_ID": "{391a3591-4164-44e0-8aa5-2b22c6759a90}",

"ESSO_Result": 0,

"attributes": {

"UID": "ezM5MWEzNTkxLTQxNjQtNDRlMC04YWE1LTJiMjJjNjc1OWE5MH0=",

"ConfigKey": "Kk90aGVyIFdlYnM=",

"MainSectionName": "QWNjZXNzTWFuYWdlcg==",

"ConfigName": "U2ltcGxlVGVzdEFwcA==",

"egostoreciph": "e2c=",

"URL": "U2ltcGxlVGVzdEFwcA==",

"Modified": "3QcLAAUABwABABUAHwC9Ag==",

"RetryCount": "LTE=",

"DESCRIPTION": "Q3JlZGVudGlhbCBwcm92aXNvbmVkIGJ5IEVTU08gcHJvdmlzaW9uaW5nIG",

"LastPwdChanged": "M1FjTEFBVUFCd0FCQUJVQUh3QzhBZz09",

"LastUsed": "3QcLAAQABgAKACEAAQDUAQ==" }}]}}]}

3.1.6 Credential Update

Credential update, all fields, with automatic password change
(new password generated by the REST server):

3.1.6.1 Request

{"ESSO_General": {

"ESSO_Version": 1},

"ESSO_Requests": [{

"ESSO_Update_Delta": "false",

"ESSO_Data": {

"ESSO_Credentials": [{

"ESSO_ID": "{105a3a14-7523-496f-9114-4e0ed6ff7027}",

"ESSO_Result": 0,

"attributes": {

"Favorite": "MA==",

"ConfigKey": "Kk90aGVyIFdlYnM=",

"egoStore_SyncState": "Zjg2NjE3OGItMzI3MS00MDg1LTlmMjAtMDVmMjYyN2YxNGMx",

"IDName": "c2l2YQ==",

"MainSectionName": "QWNjZXNzTWFuYWdlcg==",

"ConfigName": "Y3JlZCBuYW1l",

"egostoreciph": "e2c=",

"LastPwdChange": "3QcHAAYAGgAAACwAIgCwAQ==",

"Modified": "3QcHAAYAGgAAACwAIgCwAQ==",

"UID": "e2EwMjQzZjY1LWI2OGUtNDA3Zi1iM2E4LThkMGMyOTUxMzhhNH0=",

"PassKey": "dmNvekhIRVU=",

"OldPassKey": "WXZ5ZVV2Qlk=",

"URL": "ZG9jdXNpZ24="},

"PASSWORDCHANGE": "AUTO"}]}}],

"Context": " uu-encoded, salted SHA2-256 payload hash"}

3.1.6.2 Response

{"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": 1},

"ESSO_Responses": [{

"ESSO_Result": 0,

"ESSO_Data": {

"ESSO_Credentials": [{

"ESSO_ID": "{105a3a14-7523-496f-9114-4e0ed6ff7027}",

"PASSWORDCHANGE": "AUTO",

"ESSO_Result": 0 }]}}]}

3.1.7 Credential Update (Specific Fields)

Credential update, specific fields only:

3.1.7.1 Request

{"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": 1},

"ESSO_Requests": [{

"ESSO_Update_Delta": "true",

"ESSO_Data": {

"ESSO_Credentials": [{

"ESSO_ID": "{8dcaf202-1554-46e6-8640-74857c98487a}",

"attributes": {

"IDName": "ZXNzb29yYWNsZQ==" }}]}}]}

3.1.7.2 Response

{"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": 1},

"ESSO_Responses": [{

"ESSO_Result": 0,

"ESSO_Data": {

"ESSO_Credentials": [{

"ESSO_ID": "{8dcaf202-1554-46e6-8640-74857c98487a}",

"ESSO_Result": 0 }]}}]}

3.1.8 Policy Add (AdminOverrides)

Policy add operation for policy type AdminOverrides.

3.1.8.1 Request

{"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc",

"ESSO_General": {

"ESSO_Version": "1"},

"ESSO_Requests": [{

"ESSO_Data": {

"ESSO_Policies": [{

"ESSO_PolicyList": [

{"ESSO_Identifier": "1234",

"section": {

"id": "shilpa_gas",

"attributes": {

"Extensions\\AccessManager:LowerAlphaChars": "STRING:abcdefghi_shilpa_jklmnopqrstuvwxyz_lowercase char",

"Extensions\\AccessManager\\BHO:FeedbackColor": "STRING:red 6px solid shilpa",

"Extensions\\AccessManager:SpecialChars": "STRING:!@#$î&*()_-_shilpa_+=[]\\|,?_specialchar",

"AT_Name": "shilpa_gas",

"AT_Description": "shilpa description new gas",

"Extensions\\AccessManager:DNLevelsToMatch": "DWORD:2",

"Extensions\\AccessManager\\BHO:ShowBorder": "DWORD:1",

"Context": "X8W+X16pz8DBzT6\/aqe1YEYYH58znTtLUiWprWpMqyW2kx05",

"AT_ConfigType": "AdminOverrides",

"Extensions\\AccessManager:NumericChars": "STRING:1234567890_shilpa_numeric char",

"Extensions\\AccessManager\\BHO:ScrollIntoView": "DWORD:0",

"Extensions\\AccessManager:HideMaskedFieldLength": "DWORD:1",

"Extensions\\AccessManager:DefaultPolicy": "STRING:test",

"Extensions\\AccessManager:ReauthOnReveal": "DWORD:1",

"Extensions\\AccessManager:UpperAlphaChars": "STRING:ABCDEFGHIJKLMNO_shilpa_PQRSTUVWXYZ_uppercasechar",

"Extensions\\AccessManager\\BHOAllowedDynamicWebPages:DynamicWebPage1": "STRING:Allowed Dynamic Web Pages_shilpa_kadam",

"Extensions\\AccessManager\\BHOIgnoredWebPages:WebPage1": "STRING:Web Pages to Ignorr_shilpa_kadam",

"Extensions\\AccessManager:AllowReveal": "DWORD:1" }},

"COConfigInfo": "shilpa_gas" }],

"name": "AdminOverrides"}]}}]}

3.1.8.2 Response

{"ESSO_Responses": [{

"ESSO_Data": {

"ESSO_PolicyList": [{

"ESSO_Identifier": "1234",

"ESSO_Result": 0,

"ESSO_ID": "312eab5d-62c9-4e9c-af31-8b6d18807526"}]},

"ESSO_Result": 0}],

"ESSO_General": {

"ESSO_Version": 1},

"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc"}

3.1.9 Policy Add (SSOProtected)

Policy add operation for policy type SSOProtected.

3.1.9.1 Request

{"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc",

"ESSO_General": {

"ESSO_Version": "1"},

"ESSO_Requests": [{

"ESSO_Data": {

"ESSO_Policies": [{

"ESSO_PolicyList": [{

"ESSO_Identifier": "3333",

"ApplicationConfiguration": {

"ApplicationName": {

"name": "shilpa_app",

"attributes": {

"LogoIcon": "http:\/\/iconimage url_app",

"Description": "description",

"Context": "z48zI7dhC6KZTGhDIAK6RUFUVbCpwTwGDKBhbY\/Pr99lmsJV",

"AT_ConfigType": "SSOProtected",

"AT_Vendor": "vendor_app",

"Launch1": "Web;http:\/\/launchurl_app",

"Reference": "reference_app",

"CategoryLvl1": "category_app",

"LogoNormal": "http:\/\/logo image url_app"}},

"egoStore_SyncState": "null"},

"COConfigInfo": "ApplicationConfiguration"}],

"name": "SSOProtected"}]}}]}

3.1.9.2 Response

{"ESSO_Responses": [{

"ESSO_Data": {

"ESSO_PolicyList": [{

"ESSO_Identifier": "3333",

"ESSO_Result": 0,

"ESSO_ID": "9e6285dc-0db6-432c-84fe-de4d6cc52b02"}]},

"ESSO_Result": 0}],

"ESSO_General": {

"ESSO_Version": 1},

"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc"}

3.1.10 Policy Add (SharingGroup)

Policy add operation for policy type SharingGroup.

3.1.10.1 Request

{"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc",

"ESSO_General": {

"ESSO_Version": "1"},

"ESSO_Requests": [{

"ESSO_Data": {

"ESSO_Policies": [{

"ESSO_PolicyList": [{

"ESSO_Identifier": "52",

"section": {

"id": "shilpa_sharinggrp",

"attributes": {

"Description": "description_sharing grp",

"IsPreFillSharedFields": "1",

"KeyCredentialFields": "",

"Group": "shilpa_sharinggrp",

"SharedFields": "Fourth;Third;Password;UserID",

"Context": "\/oIt4vN9YwBPwNXHuV\/nT8OamFMJW1JP0Str4n\/J88RvDGTq",

"AT_ConfigType": "SharingGroup",

"SharedPolicy2": "{abeede44-1239-4c6b-8005-ddd2033d9377}",

"SharedPolicy1": "{41ae1541-99d8-4c4f-b69a-815fd7918575}",

"Reference": "reference_sharinggrp",

"IsCreatePreDetAccountsAuto": "1",

"SharedPolicy3": "{4931a888-edcb-45e3-8fff-d595284dff2a}"}},

"COConfigInfo": "shilpa_sharinggrp"}],

"name": "SharingGroup"}]}}]}

3.1.10.2 Response

{"ESSO_Responses": [{

"ESSO_Data": {

"ESSO_PolicyList": [{

"ESSO_Identifier": "52",

"ESSO_Result": 0,

"ESSO_ID": "a3db0dfa-89ee-4b41-9d4e-c9c3550ee1a5"}]},

"ESSO_Result": 0}],

"ESSO_General": {

"ESSO_Version": 1},

"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc"}

3.1.11 Policy Add (PasswordPolicy)

Policy add operation for policy type PasswordPolicy.

3.1.11.1 Request

{"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc",

"ESSO_General": {

"ESSO_Version": "1"},

"ESSO_Requests": [{

"ESSO_Data": {

"ESSO_Policies": [{

"ESSO_PolicyList": [{

"ESSO_Identifier": "567",

"section": {

"id": "test_shilpa",

"attributes": {

"OTHER": "1",

"SCHARS": "0",

"PasswordApplication2": "{8c01e153-5b10-4a8f-bfa9-273e8315a933}",

"PasswordApplication1": "{7025e50b-f7a6-4f61-9012-4aa2a95733dd}",

"PasswordApplication3": "{8367a344-7b32-4b5e-89c5-87bc5cff9446}",

"NUMSIZE": "0",

"SCHARFLAGLAST": "0",

"AT_GUID": "5aa49ae5-b799-457a-99d0-673003cd8bef",

"SCHARSIZEMIN": "0",

"Context": "3Mf\/uCTGuT2bvMH3CDpSa19jKNyV0SlUecOWo05Rm3w91lob",

"LIMSAMECHARSAP": "0",

"NUMFLAGLAST": "0",

"SIZEMINUPPER": "0",

"AT_ConfigType": "PasswordPolicy",

"NUMERIC": "0",

"ALPHA": "UL",

"Description": "test_description_shilpa",

"NUMFLAGFIRST": "0",

"ConfigName": "test_shilpa",

"SCHARFLAGFIRST": "0",

"SCHARSIZE": "0",

"NUMRPTMAX": "8",

"NUMLIMSAMECAP": "5",

"SIZEMIN": "8",

"SBYE": "",

"SIZEMINLOWER": "0",

"NOTSAMEASPREV": "0",

"NUMCONSMAX": "8",

"Reference": "test_reference_shilpa",

"NUMSIZEMIN": "0",

"SIZE": "8"}},

"COConfigInfo": "test_shilpa"}],

"name": "PasswordPolicy"}]}}]}

3.1.11.2 Response

{"ESSO_Responses": [{

"ESSO_Data": {

"ESSO_PolicyList": [{

"ESSO_Identifier": "567",

"ESSO_Result": 0,

"ESSO_ID": "26660d71-2b0b-40cd-b1a7-e38b01df1abf"}]},

"ESSO_Result": 0}],

"ESSO_General": {

"ESSO_Version": 1},

"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc"}

3.1.12 Policy Add (WebApplication)

Policy add operation for policy type WebApplication.

3.1.12.1 Request

{"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc",

"ESSO_General": {

"ESSO_Version": "1"},

"ESSO_Requests": [{

"ESSO_Data": {

"ESSO_Policies": [{

"ESSO_PolicyList": [{

"ESSO_Identifier": "17",

"ApplicationConfiguration": {

"ApplicationName": {

"name": "shilpa_new",

"attributes": {

"LogoIcon": "http:\/\/image",

"AT_PageName": "ggg",

"Launch1": "Web;http:\/\/url",

"DisableLogon": "1",

"LogoNormal": "http:\/\/dkjfh",

"AllowReveal": "0",

"Context": "gwDUpleg5phPav77EwdA8h9\/bbJpqMFcfCSe0LXaCSyTuW3+",

"AT_ConfigType": "WebApplication",

"QuietGenerator": "0",

"AT_UserVisible": "1",

"AffectedByLogonGracePeriod": "0",

"ForceReauth": "0",

"MutltiFrame": "null",

"Description": "desc",

"AT_PageGUID": "85cb2b23-d79e-4079-8ea9-fe04b569522c",

"LoginFailureURI": "http:\/\/logon",

"PresetFocusAll": "0",

"CategoryLvl1": "cat",

"ActiveLogon": "0",

"FormType": "LogonFailure",

"SubmitViaKeyboard": "0",

"Dynamic": "0",

"AT_Vendor": "shilpa",

"Reference": "ref"}},

"egoStore_SyncState": "null"},

"COConfigInfo": "ApplicationConfiguration"}],

"name": "WebApplication"}]}}}

3.1.12.2 Response

{"ESSO_Responses": [{"ESSO_Data": {"ESSO_PolicyList": [{"ESSO_Identifier": "17","ESSO_Result": 0,"ESSO_ID": "5529e0e0-435d-4ae3-a97b-66eb64e05499"}]},"ESSO_Result": 0}],"ESSO_General": {"ESSO_Version": 1},"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc"}

3.1.13 Policy Delete

Policy delete operation.

3.1.13.1 Request

{"Context": "uu-encoded, salted SHA2-256 payload hash","ESSO_General": {"ESSO_Version": "1"},"ESSO_Requests": [{"ESSO_Data": {"ESSO_Policies": [{"name": "AdminOverride","ESSO_PolicyList": [{"ESSO_ID": "3fd4208b-bfc1-4352-9ee2-ee45bdfff4d1"}]}}}]}

3.1.13.2 Response

{"ESSO_Responses": [{"ESSO_Data": {"ESSO_PolicyList": [{"ESSO_Result": 0,"ESSO_ID": "3fd4208b-bfc1-4352-9ee2-ee45bdfff4d1"}]},"ESSO_Result": 0}],"ESSO_General": {"ESSO_Version": 1},"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc"}

3.1.14 Policy List

Policy list operation.

3.1.14.1 Request

{"Context": "uu-encoded, salted SHA2-256 payload hash","ESSO_General": {"ESSO_Version": "1"},"ESSO_Requests": [{"ESSO_RepositoryID": "3d8d102e-d31d-4223-9ddb-ef154e5f8c45","ESSO_Data": {"ESSO_Policies": [{"name": "AdminOverrides","ESSO_PolicyList": [{"ESSO_ID": "cb4aac9d-0b03-485b-b34a-e9d40c69d611"}]},{"name": "WebApplication","ESSO_PolicyList": [{"ESSO_ID": "1736cb10-d746-4652-9e7a-22da35e43fec"}]},{"name": "PasswordPolicy","ESSO_PolicyList": [{"ESSO_ID": "5aa49ae5-b799-457a-99d0-673003cd8bef"}]}]}}]}

3.1.14.2 Response

{"ESSO_Responses": [{

"ESSO_Data": {

"ESSO_Policies": [{

"ESSO_PolicyList": [{

"ESSO_Result": 0,

"ESSO_ID": "cb4aac9d-0b03-485b-b34a-e9d40c69d611",

"section": {

"id": "cb4aac9d-0b03-485b-b34a-e9d40c69d611",

"attributes": {

"Extensions\\AccessManager:LowerAlphaChars": "STRING:abcdefghijklmnopqrstuvwxyz",

"Extensions\\AccessManager\\BHO:FeedbackColor": "STRING:red 6px solid",

"Extensions\\AccessManager:SpecialChars": "STRING:!@#$î&*()_-+=[]\\|,?",

"AT_Name": "skjdfh",

"AT_Description": "",

"Extensions\\AccessManager:DNLevelsToMatch": "DWORD:2",

"AT_GUID": "cb4aac9d-0b03-485b-b34a-e9d40c69d611",

"Extensions\\AccessManager\\BHO:ShowBorder": "DWORD:1",

"Context": "X8W+X16pz8DBzT6\/aqe1YEYYH58znTtLUiWprWpMqyW2kx05",

"AT_ConfigType": "AdminOverrides",

"Extensions\\AccessManager:NumericChars": "STRING:1234567890",

"Extensions\\AccessManager\\BHO:ScrollIntoView": "DWORD:0",

"Extensions\\AccessManager:HideMaskedFieldLength": "DWORD:1",

"Extensions\\AccessManager:DefaultPolicy": "STRING:",

"Extensions\\AccessManager:ReauthOnReveal": "DWORD:1",

"Extensions\\AccessManager:UpperAlphaChars": "STRING:ABCDEFGHIJKLMNOPQRSTUVWXYZ",

"Extensions\\AccessManager\\BHOAllowedDynamicWebPages:DynamicWebPage1": "STRING:",

"Extensions\\AccessManager\\BHOIgnoredWebPages:WebPage1": "STRING:",

"Extensions\\AccessManager:AllowReveal": "DWORD:1"}},

"COConfigInfo": "cb4aac9d-0b03-485b-b34a-e9d40c69d611"}],

"name": "AdminOverrides"},{

"ESSO_PolicyList": [{

"ESSO_Result": 0,

"ESSO_ID": "1736cb10-d746-4652-9e7a-22da35e43fec",

"ApplicationConfiguration": {

"ApplicationName": {

"name": "gmail",

"attributes": {

"TemplateType": "Delegated",

"LogoIcon": "https:\/\/mail.google.com\/favicon.ico",

"AuthGrade": "1",

"DcMaxDurationInMins": "21600",

"AT_PageName": "gmail",

"Launch1": "WebProxy;https:\/\/accounts.google.com\/Login",

"DcDay4Begin": "09:00",

"Group": "\u534e\u76db\u987f\u00c2\u00a1\u03a3\u03a3\u00c2\u00a1\u03c3\u03c2\u00c3\u0178\u00c3\u2020\u03ce\u038f\u03b0\u03ac\u038e\u0163\u0111\u00c2\u00b1\u013e\u0105\u0119\u0430\u045a\u045e\u0439\u20ac\u201e\u0192\u00c3\u2014\u20aa\u05e5\u00c3\u00b7\u00c2\u00aa\u00c3\u00a7\u00c2\u00b6\u00c3\u00ab\u0152123\u05e0\u05de\u0643\u06fb\u0625",

"URLReferrer": "https:\/\/accounts.google.com\/ServiceLogin?service=mail&passive=true&rm=false&continue=http:\/\/mail.google.com\/mail\/&scc=1&ltmpl=default&ltmplcache=2&emr=1",

"LogoNormal": "https:\/\/ssl.gstatic.com\/images\/logos\/google_logo_41.png",

"DcDay1End": "17:00",

"DcDay5End": "17:00",

"DcDay4End": "17:00",

"URL1": ".*?https:\/\/accounts\\.google\\.com\/Login.*",

"AllowReveal": "0",

"Context": "SxwvZfyAgLBhljiy8\/vw\/6tyhaUFJYQDiK503w2+dxaTnh17",

"DcDay2End": "17:00",

"AT_ConfigType": "WebApplication",

"MultiFrame": "1",

"QuietGenerator": "0",

"PassPolicy": "\u8cc7\u683c\u8a3c\u660e\u5171\u6709\u30b0\u30eb\u30fc\u30d7",

"DelayChar": "50",

"IDField": "0,0,Email,text",

"DcMaxUsers": "1",

"AffectedByLogonGracePeriod": "1",

"SubmitDelay": "0",

"ForceReauth": "0",

"AT_PageGUID": "f02d0e29-9f67-48b1-b7b0-2ae468e83e6b",

"Description": "GMail Account Template",

"IsSecureID": "0",

"DcDay2Begin": "09:00",

"DcDay5Begin": "09:00",

"SubmitField": "0,0,signIn,submit",

"PresetFocusAll": "1",

"PassField": "0,0,Passwd,password",

"DcCanRevealPassword": "1",

"ActiveLogon": "1",

"FormType": "Logon",

"AT_AppGUID": "1736cb10-d746-4652-9e7a-22da35e43fec",

"SubmitViaKeyboard": "0",

"DcDay1Begin": "09:00",

"UID": "1736cb10-d746-4652-9e7a-22da35e43fec",

"Dynamic": "0",

"DcDay3Begin": "09:00",

"DcDay3End": "17:00",

"URLMatchType1": "regex"}},

"egoStore_SyncState": "a73ed5cd-8cf2-46fe-9563-54a4ffaf66d7"},

"COConfigInfo": "ApplicationConfiguration"}],

"name": "WebApplication"},{

"ESSO_PolicyList": [{

"ESSO_Result": 0,

"ESSO_ID": "5aa49ae5-b799-457a-99d0-673003cd8bef",

"section": {

"id": "test",

"attributes": {

"OTHER": "1",

"SCHARS": "0",

"PasswordApplication2": "{8367a344-7b32-4b5e-89c5-87bc5cff9446}",

"PasswordApplication1": "{7025e50b-f7a6-4f61-9012-4aa2a95733dd}",

"NUMSIZE": "0",

"SCHARFLAGLAST": "0",

"AT_GUID": "5aa49ae5-b799-457a-99d0-673003cd8bef",

"SCHARSIZEMIN": "0",

"Context": "3Mf\/uCTGuT2bvMH3CDpSa19jKNyV0SlUecOWo05Rm3w91lob",

"LIMSAMECHARSAP": "0",

"NUMFLAGLAST": "0",

"SIZEMINUPPER": "0",

"AT_ConfigType": "PasswordPolicy",

"NUMERIC": "0",

"ALPHA": "UL",

"Description": "test_description",

"NUMFLAGFIRST": "0",

"ConfigName": "test",

"SCHARFLAGFIRST": "0",

"SCHARSIZE": "0",

"NUMRPTMAX": "7",

"NUMLIMSAMECAP": "5",

"SIZEMIN": "8",

"SBYE": "",

"SIZEMINLOWER": "0",

"NOTSAMEASPREV": "0",

"NUMCONSMAX": "7",

"UID": "5aa49ae5-b799-457a-99d0-673003cd8bef",

"Reference": "test_reference",

"NUMSIZEMIN": "0",

"SIZE": "8"}},

"COConfigInfo": "test"}],

"name": "PasswordPolicy"}]},

"ESSO_Result": 0}],

"ESSO_General": {

"ESSO_Version": 1},

"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc"}

3.1.15 Policy Search

Policy search operation.

3.1.15.1 Request

{"Context": "uu-encoded, salted SHA2-256 payload hash","ESSO_General": {"ESSO_Version": "1"},"ESSO_Requests": [{"ESSO_Types": "WebApplication","ESSO_RepositoryID": "3d8d102e-d31d-4223-9ddb-ef154e5f8c45","ESSO_Data": {"ESSO_PolicyFilters": [{"ESSO_Match_Type": "Regex","ESSO_Enumerated_List": "URL","ESSO_Value": "https:\/\/accounts.google.com\/Login","ESSO_Operation": "OR"},{"ESSO_Match_Type": "Match","ESSO_Field": "ApplicationName","ESSO_Value": "facebook"}]}}]}

3.1.15.2 Response

{"ESSO_Responses": [{

"ESSO_Data": {

"ESSO_Policies": [{

"ESSO_PolicyList": [{

"ESSO_Result": 0,

"ESSO_ID": "7025e50b-f7a6-4f61-9012-4aa2a95733dd",

"ApplicationConfiguration": {

"ApplicationName": {

"OffsetMatches": [{

"id": "b472f48f-71e5-4ac7-878a-2152876478f9",

"attributes": {}}],

"name": "facebook",

"attributes": {

"TemplateType": "Privileged",

"LogoIcon": "https:\/\/fbstatic-a.akamaihd.net\/rsrc.php\/yl\/r\/H3nktOa7ZMg.ico",

"AuthGrade": "5",

"AT_PageName": "facebook",

"Matching_1": "2,pass,text,regex,password_val",

"Launch1": "Web;http:\/\/facebook.com",

"Group": "\u3042\u306a\u305f\u306f\u8ab0\u3067\u3059",

"LogoNormal": "https:\/\/fbstatic-a.akamaihd.net\/rsrc.php\/yl\/r\/H3nktOa7ZMg.ico",

"URL1": "http:\/\/facebook.com",

"URL2": "http:\/\/facebook.com_identification",

"AllowReveal": "1",

"Context": "P56VJw1yZAoyiddcZGXxsIy31XEl0PzqprDADd7GFdE4fPns",

"Match1": "e9c9f2a8-3d8d-49b5-9997-98d5a3ba63f3",

"AT_ConfigType": "WebApplication",

"QuietGenerator": "0",

"PassPolicy": "test",

"IDField": "abc,gef,email,text",

"AffectedByLogonGracePeriod": "1",

"IDField_1": "null,null,null,text",

"SubmitDelay": "0",

"MutltiFrame": "null",

"ForceReauth": "1",

"PassField_1": "1,1,<Matching_1>,password",

"OffsetMatch1": "b472f48f-71e5-4ac7-878a-2152876478f9,1",

"IDField_2": "0,0,username,text",

"AT_PageGUID": "266c99f0-b562-4860-bbb1-2d61cb948217",

"Description": "This is the Facebook app.",

"SubmitField": "null,null,submit,submit",

"LoginFailureURI": "login failure URI",

"PresetFocusAll": "0",

"CategoryLvl1": "Category",

"PassField": "null,null,pass,password",

"ActiveLogon": "1",

"FormType": "Logon",

"AT_AppGUID": "7025e50b-f7a6-4f61-9012-4aa2a95733dd",

"AutoOK": "1",

"SubmitViaKeyboard": "0",

"UID": "7025e50b-f7a6-4f61-9012-4aa2a95733dd",

"Dynamic": "0",

"URLMatchType2": "exact",

"AT_Vendor": "vendor",

"Reference": "Reference",

"URLMatchType1": "exact"},

"Matches": [{

"id": "e9c9f2a8-3d8d-49b5-9997-98d5a3ba63f3",

"attributes": {

"AT_GUID": "e9c9f2a8-3d8d-49b5-9997-98d5a3ba63f3",

"Context": "AiqLH93ISa35H2MLD0Tr3UT3v9AQkimnnB2qqX3a0x5Ws6fi",

"Match1": "2,detection_match,text,exact,detectionmatch_value,and"}}]},

"egoStore_SyncState": "null"},

"COConfigInfo": "ApplicationConfiguration"},{

"ESSO_Result": 0,

"ESSO_ID": "1736cb10-d746-4652-9e7a-22da35e43fec",

"ApplicationConfiguration": {

"ApplicationName": {

"name": "gmail",

"attributes": {

"TemplateType": "Delegated",

"LogoIcon": "https:\/\/mail.google.com\/favicon.ico",

"AuthGrade": "1",

"DcMaxDurationInMins": "21600",

"AT_PageName": "gmail",

"Launch1": "WebProxy;https:\/\/accounts.google.com\/Login",

"DcDay4Begin": "09:00",

"Group": "\u534e\u76db\u987f\u00c2\u00a1\u03a3\u03a3\u00c2\u00a1\u03c3\u03c2\u00c3\u0178\u00c3\u2020\u03ce\u038f\u03b0\u03ac\u038e\u0163\u0111\u00c2\u00b1\u013e\u0105\u0119\u0430\u045a\u045e\u0439\u20ac\u201e\u0192\u00c3\u2014\u20aa\u05e5\u00c3\u00b7\u00c2\u00aa\u00c3\u00a7\u00c2\u00b6\u00c3\u00ab\u0152123\u05e0\u05de\u0643\u06fb\u0625",

"URLReferrer": "https:\/\/accounts.google.com\/ServiceLogin?service=mail&passive=true&rm=false&continue=http:\/\/mail.google.com\/mail\/&scc=1&ltmpl=default&ltmplcache=2&emr=1",

"LogoNormal": "https:\/\/ssl.gstatic.com\/images\/logos\/google_logo_41.png",

"DcDay1End": "17:00",

"DcDay5End": "17:00",

"DcDay4End": "17:00",

"URL1": ".*?https:\/\/accounts\\.google\\.com\/Login.*",

"AllowReveal": "0",

"Context": "4vbdSYa9dF8I7CeI4aJf3gErAkjpQqudmJugcrdYrxKKzBrA",

"DcDay2End": "17:00",

"AT_ConfigType": "WebApplication",

"MultiFrame": "1",

"QuietGenerator": "0",

"PassPolicy": "\u8cc7\u683c\u8a3c\u660e\u5171\u6709\u30b0\u30eb\u30fc\u30d7",

"DelayChar": "50",

"IDField": "0,0,Email,text",

"DcMaxUsers": "1",

"AffectedByLogonGracePeriod": "1",

"SubmitDelay": "0",

"ForceReauth": "0",

"AT_PageGUID": "f02d0e29-9f67-48b1-b7b0-2ae468e83e6b",

"Description": "GMail Account Template",

"IsSecureID": "0",

"DcDay2Begin": "09:00",

"DcDay5Begin": "09:00",

"SubmitField": "0,0,signIn,submit",

"PresetFocusAll": "1",

"PassField": "0,0,Passwd,password",

"DcCanRevealPassword": "1",

"ActiveLogon": "1",

"FormType": "Logon",

"AT_AppGUID": "1736cb10-d746-4652-9e7a-22da35e43fec",

"SubmitViaKeyboard": "0",

"DcDay1Begin": "09:00",

"UID": "1736cb10-d746-4652-9e7a-22da35e43fec",

"Dynamic": "0",

"DcDay3Begin": "09:00",

"DcDay3End": "17:00",

"URLMatchType1": "regex"}},

"egoStore_SyncState": "a73ed5cd-8cf2-46fe-9563-54a4ffaf66d7"},

"COConfigInfo": "ApplicationConfiguration"}],

"name": "WebApplication"}]},

"ESSO_Result": 0}],

"ESSO_General": {

"ESSO_Version": 1},

"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc"}

3.1.16 Policy Update (AdminOverrides)

Policy update operation for policy type AdminOverrides.

3.1.16.1 Request

{"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc",

"ESSO_General": {

"ESSO_Version": "1"},

"ESSO_Requests": [{

"ESSO_Data": {

"ESSO_Policies": [{

"ESSO_PolicyList": [{

"ESSO_ID": "312eab5d-62c9-4e9c-af31-8b6d18807526",

"section": {

"id": "shilpa_gas_updated",

"attributes": {

"Extensions\\AccessManager:LowerAlphaChars": "STRING:abcdefghi_shilpa_jklmnopqrstuvwxyz_updated",

"Extensions\\AccessManager\\BHO:FeedbackColor": "STRING:red 6px solid updated",

"Extensions\\AccessManager:SpecialChars": "STRING:!@#$î&*()_-_shilpa_+=[]\\|,?_updated",

"AT_Name": "shilpa_gas_updated",

"AT_Description": "shilpa description new gas updated",

"Extensions\\AccessManager:DNLevelsToMatch": "DWORD:2",

"Extensions\\AccessManager\\BHO:ShowBorder": "DWORD:1",

"Context": "X8W+X16pz8DBzT6\/aqe1YEYYH58znTtLUiWprWpMqyW2kx05",

"AT_ConfigType": "AdminOverrides",

"Extensions\\AccessManager:NumericChars": "STRING:1234567890_updated",

"Extensions\\AccessManager\\BHO:ScrollIntoView": "DWORD:0",

"Extensions\\AccessManager:HideMaskedFieldLength": "DWORD:1",

"Extensions\\AccessManager:DefaultPolicy": "STRING:test",

"Extensions\\AccessManager:ReauthOnReveal": "DWORD:1",

"Extensions\\AccessManager:UpperAlphaChars": "STRING:ABCDEFGHIJKLMNO_shilpa_updated_PQRSTUVWXYZ_",

"Extensions\\AccessManager\\BHOAllowedDynamicWebPages:DynamicWebPage1": "STRING:Allowed Dynamic Wupdated",

"Extensions\\AccessManager\\BHOIgnoredWebPages:WebPage1": "STRING:Web Pages to updated",

"Extensions\\AccessManager:AllowReveal": "DWORD:1"}},

"COConfigInfo": "312eab5d-62c9-4e9c-af31-8b6d18807526"}],

"name": "AdminOverrides"}]}}]}

3.1.16.2 Response

{"ESSO_Responses": [{

"ESSO_Data": {

"ESSO_PolicyList": [{

"ESSO_Result": 0,

"ESSO_ID": "312eab5d-62c9-4e9c-af31-8b6d18807526"}]},

"ESSO_Result": 0}],

"ESSO_General": {

"ESSO_Version": 1},

"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc"}

3.1.17 Policy Update (SSOProtected)

Policy update operation for policy type SSOProtected.

3.1.17.1 Request

{"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc",

"ESSO_General": {

"ESSO_Version": "1"},

"ESSO_Requests": [{

"ESSO_Data": {

"ESSO_Policies": [{

"ESSO_PolicyList": [{

"ESSO_ID": "9e6285dc-0db6-432c-84fe-de4d6cc52b02",

"ApplicationConfiguration": {

"ApplicationName": {

"name": "shilpa_app_updated",

"attributes": {

"LogoIcon": "http:\/\/iconimage url_app_updated",

"Description": "description_updated",

"Context": "z48zI7dhC6KZTGhDIAK6RUFUVbCpwTwGDKBhbY\/Pr99lmsJV",

"AT_ConfigType": "SSOProtected",

"AT_Vendor": "vendor_app_updated",

"Launch1": "Web;http:\/\/launchurl_appi_updated",

"Reference": "reference_appi_updated",

"CategoryLvl1": "category_app_updated",

"LogoNormal": "http:\/\/logo image url_app_updated"}},

"egoStore_SyncState": "null"},

"COConfigInfo": "ApplicationConfiguration"}],

"name": "SSOProtected"}]}}]}

3.1.17.2 Response

{"ESSO_Responses": [{

"ESSO_Data": {

"ESSO_PolicyList": [{

"ESSO_Result": 0,

"ESSO_ID": "9e6285dc-0db6-432c-84fe-de4d6cc52b02"}]},

"ESSO_Result": 0}],

"ESSO_General": {

"ESSO_Version": 1},

"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc"}

3.1.18 Policy Update (SharingGroup)

Policy update operation for policy type SharingGroup.

3.1.18.1 Request

{"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc",

"ESSO_General": {

"ESSO_Version": "1"},

"ESSO_Requests": [{

"ESSO_Data": {

"ESSO_Policies": [{

"ESSO_PolicyList": [{

"ESSO_ID": "a3db0dfa-89ee-4b41-9d4e-c9c3550ee1a5",

"section": {

"id": "shilpa_sharinggrp_updated",

"attributes": {

"Description": "description_sharing grp_updated",

"IsPreFillSharedFields": "1",

"KeyCredentialFields": "",

"Group": "shilpa_sharinggrpi_updated",

"SharedFields": "Fourth;Third;UserID",

"Context": "\/oIt4vN9YwBPwNXHuV\/nT8OamFMJW1JP0Str4n\/J88RvDGTq",

"AT_ConfigType": "SharingGroup",

"SharedPolicy2": "{abeede44-1239-4c6b-8005-ddd2033d9377}",

"SharedPolicy1": "{41ae1541-99d8-4c4f-b69a-815fd7918575}",

"Reference": "reference_sharinggrp",

"IsCreatePreDetAccountsAuto": "1"}},

"COConfigInfo": "shilpa_sharinggrp_updated"}],

"name": "SharingGroup"}]}}]}

3.1.18.2 Response

{"ESSO_Responses": [{

"ESSO_Data": {

"ESSO_PolicyList": [{

"ESSO_Result": 0,

"ESSO_ID": "a3db0dfa-89ee-4b41-9d4e-c9c3550ee1a5"}]},

"ESSO_Result": 0}],

"ESSO_General": {

"ESSO_Version": 1},

"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc"}

3.1.19 Policy Update (PasswordPolicy)

Policy update operation for policy type PasswordPolicy.

3.1.19.1 Request

{"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc",

"ESSO_General": {

"ESSO_Version": "1"},

"ESSO_Requests": [{

"ESSO_Data": {

"ESSO_Policies": [{

"ESSO_PolicyList": [{

"ESSO_ID": "26660d71-2b0b-40cd-b1a7-e38b01df1abf",

"section": {

"id": "test_shilpa_updated",

"attributes": {

"OTHER": "1",

"SCHARS": "0",

"PasswordApplication2": "{8c01e153-5b10-4a8f-bfa9-273e8315a933}",

"PasswordApplication1": "{7025e50b-f7a6-4f61-9012-4aa2a95733dd}",

"NUMSIZE": "0",

"SCHARFLAGLAST": "0",

"SCHARSIZEMIN": "0",

"Context": "3Mf\/uCTGuT2bvMH3CDpSa19jKNyV0SlUecOWo05Rm3w91lob",

"LIMSAMECHARSAP": "0",

"NUMFLAGLAST": "0",

"SIZEMINUPPER": "0",

"AT_ConfigType": "PasswordPolicy",

"NUMERIC": "0",

"ALPHA": "UL",

"Description": "test_description_shilpa_updated",

"NUMFLAGFIRST": "0",

"ConfigName": "test_shilpa_updated",

"SCHARFLAGFIRST": "0",

"SCHARSIZE": "0",

"NUMRPTMAX": "8",

"NUMLIMSAMECAP": "8",

"SIZEMIN": "8",

"SBYE": "",

"SIZEMINLOWER": "0",

"NOTSAMEASPREV": "0",

"NUMCONSMAX": "7",

"Reference": "test_reference_shilpa_updated",

"NUMSIZEMIN": "0",

"SIZE": "8"}},

"COConfigInfo": "test_shilpa"}],

"name": "PasswordPolicy"}]}}]}

3.1.19.2 Response

{"ESSO_Responses": [{

"ESSO_Data": {

"ESSO_PolicyList": [{

"ESSO_Result": 0,

"ESSO_ID": "26660d71-2b0b-40cd-b1a7-e38b01df1abf"}]},

"ESSO_Result": 0}],

"ESSO_General": {

"ESSO_Version": 1},

"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc"}

3.1.20 Policy Update (WebApplication)

Policy update operation for policy type WebApplication.

3.1.20.1 Request

{"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc",

"ESSO_General": {

"ESSO_Version": "1"},

"ESSO_Requests": [{

"ESSO_Data": {

"ESSO_Policies": [{

"ESSO_PolicyList": [{

"ESSO_ID": "5529e0e0-435d-4ae3-a97b-66eb64e05499",

"ApplicationConfiguration": {

"ApplicationName": {

"name": "shilpa_new_updated",

"attributes": {

"LogoIcon": "http:\/\/image_updated",

"AT_PageName": "ggg_updated",

"Launch1": "Web;http:\/\/url_updated",

"DisableLogon": "1",

"LogoNormal": "http:\/\/dkjfh_updated",

"AllowReveal": "0",

"Context": "gwDUpleg5phPav77EwdA8h9\/bbJpqMFcfCSe0LXaCSyTuW3+",

"AT_ConfigType": "WebApplication",

"QuietGenerator": "0",

"AT_UserVisible": "1",

"AffectedByLogonGracePeriod": "0",

"ForceReauth": "0",

"MutltiFrame": "null",

"Description": "desc_updated",

"LoginFailureURI": "http:\/\/logon_updated",

"PresetFocusAll": "0",

"CategoryLvl1": "cat",

"ActiveLogon": "0",

"FormType": "LogonFailure",

"SubmitViaKeyboard": "0",

"Dynamic": "0",

"AT_Vendor": "shilpa_updated",

"Reference": "ref"}},

"egoStore_SyncState": "null"},

"COConfigInfo": "ApplicationConfiguration"}],

"name": "WebApplication"}]}}]}

3.1.20.2 Response

{"ESSO_Responses": [{

"ESSO_Data": {

"ESSO_PolicyList": [{

"ESSO_Result": 0,

"ESSO_ID": "5529e0e0-435d-4ae3-a97b-66eb64e05499"}]},

"ESSO_Result": 0}],

"ESSO_General": {

"ESSO_Version": 1},

"Context": "+GKHmKP0u0\/BVeBDBqKEg9B8W\/EuIK1jIV3C8hcdq0wT7vzc"}

3.1.21 Event Add

Event add operation.

3.1.21.1 Request

{"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": "1"},

"ESSO_Requests": [{

"ESSO_Data": {

"ESSO_Events": [{

"data": {

"guid": "guid",

"prodVersion": "prod version",

"prodName": "product name",

"appName": "app name",

"appUserId": "userid",

"appRef": "app reference",

"appThirdField": "third field",

"appFourthField": "fourth field",

"eventTimeServer": "561261267889",

"eventTimeClient": "7816219269178",

"ssoUserId": "sso user id",

"credType": "cred type",

"winUserName": "win user name",

"samAccName": "sam acc name",

"hashValue": "hash value",

"hashType": "hash type",

"logonMethod": "logon method",

"hostName": "host name",

"hostFingerPrint": "host finger print",

"comments": "comments",

"serviceOperation": "service operation"}},{

"data": {

"guid": "guid",

"prodVersion": "prod version",

"prodName": "product name",

"appName": "app name",

"appUserId": "userid",

"appRef": "app reference",

"appThirdField": "third field",

"appFourthField": "fourth field",

"eventTimeServer": "561261267889",

"eventTimeClient": "7816219269178",

"ssoUserId": "sso user id",

"credType": "cred type",

"winUserName": "win user name",

"samAccName": "sam acc name",

"hashValue": "hash value",

"hashType": "hash type",

"logonMethod": "logon method",

"hostName": "host name",

"hostFingerPrint": "host finger print",

"comments": "comments",

"serviceOperation": "service operation"}},{

"data": {

"guid": "guid",

"prodVersion": "prod version",

"prodName": "product name",

"appName": "app name",

"appUserId": "userid",

"appRef": "app reference",

"appThirdField": "third field",

"appFourthField": "fourth field",

"eventTimeServer": "561261267889",

"eventTimeClient": "7816219269178",

"ssoUserId": "sso user id",

"credType": "cred type",

"winUserName": "win user name",

"samAccName": "sam acc name",

"hashValue": "hash value",

"hashType": "hash type",

"logonMethod": "logon method",

"hostName": "host name",

"hostFingerPrint": "host finger print",

"comments": "comments",

"serviceOperation": "service operation"}},{

"data": {

"guid": "guid",

"prodVersion": "prod version",

"prodName": "product name",

"appName": "app name",

"appUserId": "userid",

"appRef": "app reference",

"appThirdField": "third field",

"appFourthField": "fourth field",

"eventTimeServer": "561261267889",

"eventTimeClient": "7816219269178",

"ssoUserId": "sso user id",

"credType": "cred type",

"winUserName": "win user name",

"samAccName": "sam acc name",

"hashValue": "hash value",

"hashType": "hash type",

"logonMethod": "logon method",

"hostName": "host name",

"hostFingerPrint": "host finger print",

"comments": "comments",

"serviceOperation": "service operation"}},{

"data": {

"guid": "guid",

"prodVersion": "prod version",

"prodName": "product name",

"appName": "app name",

"appUserId": "userid",

"appRef": "app reference",

"appThirdField": "third field",

"appFourthField": "fourth field",

"eventTimeServer": "561261267889",

"eventTimeClient": "7816219269178",

"ssoUserId": "sso user id",

"credType": "cred type",

"winUserName": "win user name",

"samAccName": "sam acc name",

"hashValue": "hash value",

"hashType": "hash type",

"logonMethod": "logon method",

"hostName": "host name",

"hostFingerPrint": "host finger print",

"comments": "comments",

"serviceOperation": "service operation"}},{

"data": {

"guid": "guid",

"prodVersion": "prod version",

"prodName": "product name",

"appName": "app name",

"appUserId": "userid",

"appRef": "app reference",

"appThirdField": "third field",

"appFourthField": "fourth field",

"eventTimeServer": "561261267889",

"eventTimeClient": "7816219269178",

"ssoUserId": "sso user id",

"credType": "cred type",

"winUserName": "win user name",

"samAccName": "sam acc name",

"hashValue": "hash value",

"hashType": "hash type",

"logonMethod": "logon method",

"hostName": "host name",

"hostFingerPrint": "host finger print",

"comments": "comments",

"serviceOperation": "service operation"}},{

"data": {

"guid": "guid",

"prodVersion": "prod version",

"prodName": "product name",

"appName": "app name",

"appUserId": "userid",

"appRef": "app reference",

"appThirdField": "third field",

"appFourthField": "fourth field",

"eventTimeServer": "561261267889",

"eventTimeClient": "7816219269178",

"ssoUserId": "sso user id",

"credType": "cred type",

"winUserName": "win user name",

"samAccName": "sam acc name",

"hashValue": "hash value",

"hashType": "hash type",

"logonMethod": "logon method",

"hostName": "host name",

"hostFingerPrint": "host finger print",

"comments": "comments",

"serviceOperation": "service operation"}},{

"data": {

"guid": "guid",

"prodVersion": "prod version",

"prodName": "product name",

"appName": "app name",

"appUserId": "userid",

"appRef": "app reference",

"appThirdField": "third field",

"appFourthField": "fourth field",

"eventTimeServer": "561261267889",

"eventTimeClient": "7816219269178",

"ssoUserId": "sso user id",

"credType": "cred type",

"winUserName": "win user name",

"samAccName": "sam acc name",

"hashValue": "hash value",

"hashType": "hash type",

"logonMethod": "logon method",

"hostName": "host name",

"hostFingerPrint": "host finger print",

"comments": "comments",

"serviceOperation": "service operation"}},{

"data": {

"guid": "guid",

"prodVersion": "prod version",

"prodName": "product name",

"appName": "app name",

"appUserId": "userid",

"appRef": "app reference",

"appThirdField": "third field",

"appFourthField": "fourth field",

"eventTimeServer": "561261267889",

"eventTimeClient": "7816219269178",

"ssoUserId": "sso user id",

"credType": "cred type",

"winUserName": "win user name",

"samAccName": "sam acc name",

"hashValue": "hash value",

"hashType": "hash type",

"logonMethod": "logon method",

"hostName": "host name",

"hostFingerPrint": "host finger print",

"comments": "comments",

"serviceOperation": "service operation"}}]}}]}

3.1.21.2 Response

{"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": 1},

"ESSO_Responses": [{

"ESSO_Result": 0,

"ESSO_Data": {

"ESSO_Events": [{

"ESSO_ID": "{43041556-d7cd-4a10-b480-2d575f1e917e}",

"ESSO_Result": 0}]}}]}

3.1.22 Provisioning Create

Provisioning create operation.

3.1.22.1 Request

{"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": "1"},

"ESSO_Requests": [{

"ESSO_Data": {

"ESSO_Instructions": [{

"ESSO_Identifier": "abcd1234:transient identifier",

"ESSO_Type": "DELEGATE",

"ESSO_TargetUser": "marcOAM",

"ESSO_CredId": "{3fe6237d-023b-45ea-97ab-6b2d65430d4d}"}]}}]}

3.1.22.2 Response

{"Context": "uu-encoded, salted SHA2-256 payload hash",

"ESSO_General": {

"ESSO_Version": 1},

"ESSO_Responses": [{

"ESSO_Result": 0,

"ESSO_Data": {

"ESSO_Instructions": [{

"ESSO_ID": "{43041556-d7cd-4a10-b480-2d575f1e917e}",

"ESSO_Result": 0}]}}]}

3.2 XML Examples

This section provides XML implementation examples for the following operations:

- Credential Add

- Credential Add (with Automatic Password Change)

- Credential Update

- Credential Delete

- Credential Search

- Credential Search (Specific Policy)

- Credential List

- Credential List (Specific Credential ID)

- Policy Add

- Policy Update

- Policy Delete

- Policy Search

- Policy List

- Provisioning Create

- Event Add

3.2.1 Credential Add

Credential add operation.

3.2.1.1 Request

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_Identifier>abcd1234:transient identifier</ESSO_Identifier>

<attributes>

<IDName>ZXNzb29yYWNsZQ==</IDName>

<PassField>I1NTT09yYWNsZQ==</PassField>

<URL>Z29vZ2xl</URL>

<ConfigName>Z29vZ2xl</ConfigName>

<AutoOK>AQ==</AutoOK>

<ConfigKey>Kk90aGVyIFdlYnM=</ConfigKey>

<MainSectionName>QWNjZXNzTWFuYWdlcg==</MainSectionName>

</attributes>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Request>

</ESSO_Requests>

</ESSO>

3.2.1.2 Response

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_Identifier>abcd1234:transient identifier</ESSO_Identifier>

<ESSO_ID>{8dcaf202-1554-46e6-8640-74857c98487a}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

3.2.2 Credential Add (with Automatic Password Change)

Credential add operation with automatic password change (new password autogenerated by REST server).

3.2.2.1 Request

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_Update_Delta>false</ESSO_Update_Delta>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_ID>{105a3a14-7523-496f-9114-4e0ed6ff7027}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<Favorite>MA==</Favorite>

<ConfigKey>Kk90aGVyIFdlYnM=</ConfigKey>

<egoStore_SyncState>Zjg2NjE3OGItMzI3MS00MDg1LTlmMjAtMDVmMjYyN2YxNGMx</egoStore_SyncState>

<IDName>c2l2YQ==</IDName>

<MainSectionName>QWNjZXNzTWFuYWdlcg==</MainSectionName>

<ConfigName>Y3JlZCBuYW1l</ConfigName>

<egostoreciph>e2c=</egostoreciph>

<LastPwdChange>3QcHAAYAGgAAACwAIgCwAQ==</LastPwdChange>

<Modified>3QcHAAYAGgAAACwAIgCwAQ==</Modified>

<UID>e2EwMjQzZjY1LWI2OGUtNDA3Zi1iM2E4LThkMGMyOTUxMzhhNH0=</UID>

<PassKey>dmNvekhIRVU=</PassKey>

<OldPassKey>WXZ5ZVV2Qlk=</OldPassKey>

<URL>ZG9jdXNpZ24=</URL>

</attributes>

<PASSWORDCHANGE>AUTO</PASSWORDCHANGE>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Request>

</ESSO_Requests>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

</ESSO>

3.2.2.2 Response

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_ID>{105a3a14-7523-496f-9114-4e0ed6ff7027}</ESSO_ID>

<PASSWORDCHANGE>AUTO</PASSWORDCHANGE>

<ESSO_Result>0</ESSO_Result>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

3.2.3 Credential Update

Credential update operation.

3.2.3.1 Request

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_Update_Delta>true</ESSO_Update_Delta>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_ID>{8dcaf202-1554-46e6-8640-74857c98487a}</ESSO_ID>

<attributes>

<IDName>ZXNzb29yYWNsZQ==</IDName>

</attributes>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Request>

</ESSO_Requests>

</ESSO>

3.2.3.2 Response

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_ID>{8dcaf202-1554-46e6-8640-74857c98487a}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

3.2.4 Credential Delete

Credential delete operation.

3.2.4.1 Request

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_ID>{8dcaf202-1554-46e6-8640-74857c98487a}</ESSO_ID>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Requests>

</ESSO>

3.2.4.2 Response

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_ID>{8dcaf202-1554-46e6-8640-74857c98487a}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

3.2.5 Credential Search

Credential search operation.

3.2.5.1 Request

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_Data>

<ESSO_CredentialFilters>

<ESSO_Field>ConfigName</ESSO_Field>

<ESSO_Type>Exact</ESSO_Type>

<ESSO_Value>google</ESSO_Value>

</ESSO_CredentialFilters>

</ESSO_Data>

<ESSO_AttributeList>ConfigName;Description;LastUsed;MainSectionName;URL;AutoOK;ConfigKey;egostoreciph;UID;egoStore_SyncState</ESSO_AttributeList>

</ESSO_Request>

<ESSO_Request>

<ESSO_Data>

<ESSO_CredentialFilters>

<ESSO_PolicyName>ESSO_Group</ESSO_PolicyName>

<ESSO_Type>Exact</ESSO_Type>

</ESSO_CredentialFilters>

</ESSO_Data>

<ESSO_AttributeList>All</ESSO_AttributeList>

</ESSO_Request>

</ESSO_Requests>

</ESSO>

3.2.5.2 Response

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_ID>{512a9c14-db6d-4304-93fe-f4a4bb40326f}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<UID>ezUxMmE5YzE0LWRiNmQtNDMwNC05M2ZlLWY0YTRiYjQwMzI2Zn0=</UID>

<ConfigKey>Kk90aGVyIFdlYnM=</ConfigKey>

<egoStore_SyncState>YWIzOTJhOTEtOGFkMS00NWU2LTlhOTItMTE1OGMwZTU0ZmEy</egoStore_SyncState>

<MainSectionName>QWNjZXNzTWFuYWdlcg==</MainSectionName>

<ConfigName>Z29vZ2xl</ConfigName>

<LastUsed>3QcLAAQABgABADAANgA6Ag==</LastUsed>

<egostoreciph>e2c=</egostoreciph>

<URL>Z29vZ2xl</URL>

</attributes>

</ESSO_Credentials>

<ESSO_Credentials>

<ESSO_ID>{e30a7812-b295-4e03-bb15-73bf42739808}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<UID>e2UzMGE3ODEyLWIyOTUtNGUwMy1iYjE1LTczYmY0MjczOTgwOH0=</UID>

<AutoOK>AQ==</AutoOK>

<ConfigKey>Kk90aGVyIFdlYnM=</ConfigKey>

<egoStore_SyncState>MDgzN2YyM2YtYWRmOS00MzQ5LTg4ZTYtMjJmZmUzYWFjMDll</egoStore_SyncState>

<MainSectionName>QWNjZXNzTWFuYWdlcg==</MainSectionName>

<ConfigName>Z29vZ2xl</ConfigName>

<LastUsed>3QcLAAQABgABADIAJgDwAQ==</LastUsed>

<egostoreciph>e2c=</egostoreciph>

<URL>Z29vZ2xl</URL>

</attributes>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Response>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_ID>{512a9c14-db6d-4304-93fe-f4a4bb40326f}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<UID>ezUxMmE5YzE0LWRiNmQtNDMwNC05M2ZlLWY0YTRiYjQwMzI2Zn0=</UID>

<ConfigKey>Kk90aGVyIFdlYnM=</ConfigKey>

<egoStore_SyncState>YWIzOTJhOTEtOGFkMS00NWU2LTlhOTItMTE1OGMwZTU0ZmEy</egoStore_SyncState>

<MainSectionName>QWNjZXNzTWFuYWdlcg==</MainSectionName>

<ConfigName>Z29vZ2xl</ConfigName>

<LastUsed>3QcLAAQABgABADAANgA6Ag==</LastUsed>

<egostoreciph>e2c=</egostoreciph>

<URL>Z29vZ2xl</URL>

<Modified>3QcLAAUABwABABUAHwDCAg==</Modified>

</attributes>

</ESSO_Credentials>

<ESSO_Credentials>

<ESSO_ID>{e30a7812-b295-4e03-bb15-73bf42739808}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<AutoOK>AQ==</AutoOK>

<UID>e2UzMGE3ODEyLWIyOTUtNGUwMy1iYjE1LTczYmY0MjczOTgwOH0=</UID>

<ConfigKey>Kk90aGVyIFdlYnM=</ConfigKey>

<egoStore_SyncState>MDgzN2YyM2YtYWRmOS00MzQ5LTg4ZTYtMjJmZmUzYWFjMDll</egoStore_SyncState>

<MainSectionName>QWNjZXNzTWFuYWdlcg==</MainSectionName>

<ConfigName>Z29vZ2xl</ConfigName>

<PassField>I1NTT09yYWNsZQ==</PassField>

<LastUsed>3QcLAAQABgABADIAJgDwAQ==</LastUsed>

<egostoreciph>e2c=</egostoreciph>

<URL>Z29vZ2xl</URL>

<Modified>3QcLAAUABwABABUAHwDCAg==</Modified>

</attributes>

</ESSO_Credentials>

<ESSO_Credentials>

<ESSO_ID>{391a3591-4164-44e0-8aa5-2b22c6759a90}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<UID>ezM5MWEzNTkxLTQxNjQtNDRlMC04YWE1LTJiMjJjNjc1OWE5MH0=</UID>

<ConfigKey>Kk90aGVyIFdlYnM=</ConfigKey>

<MainSectionName>QWNjZXNzTWFuYWdlcg==</MainSectionName>

<ConfigName>U2ltcGxlVGVzdEFwcA==</ConfigName>

<egostoreciph>e2c=</egostoreciph>

<URL>U2ltcGxlVGVzdEFwcA==</URL>

<Modified>3QcLAAUABwABABUAHwC9Ag==</Modified>

<RetryCount>LTE=</RetryCount>

<DESCRIPTION>Q3JlZGVudGlhbCBwcm92aXNvbmVkIGJ5IEVTU08gcHJvdmlzaW9uaW5nIGF1dGggcGx1Z2lu</DESCRIPTION>

<LastPwdChanged>M1FjTEFBVUFCd0FCQUJVQUh3QzhBZz09</LastPwdChanged>

<LastUsed>3QcLAAQABgAKACEAAQDUAQ==</LastUsed>

</attributes>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

3.2.6 Credential Search (Specific Policy)

Credential search operation against a specific policy.

3.2.6.1 Request

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_Data>

<ESSO_CredentialFilters>

<ESSO_PolicyName>DropBox</ESSO_PolicyName>

<ESSO_Type>Exact</ESSO_Type>

</ESSO_CredentialFilters>

</ESSO_Data>

<ESSO_AttributeList>All;ConfigName;Description;LastUsed;MainSectionName;URL;AutoOK;ConfigKey;egostoreciph;UID;egoStore_SyncState</ESSO_AttributeList>

</ESSO_Request>

<ESSO_Request>

<ESSO_Data>

<ESSO_CredentialFilters>

<ESSO_PolicyName>ESSO_Group</ESSO_PolicyName>

<ESSO_Type>Exact</ESSO_Type>

</ESSO_CredentialFilters>

</ESSO_Data>

<ESSO_AttributeList>All</ESSO_AttributeList>

</ESSO_Request>

</ESSO_Requests>

</ESSO>

3.2.6.2 Response

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_ID>{105a3a14-7523-496f-9114-4e0ed6ff7027}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<UID>ezEwNWEzYTE0LTc1MjMtNDk2Zi05MTE0LTRlMGVkNmZmNzAyN30=</UID>

<ConfigKey>Kk90aGVyIFdlYnM=</ConfigKey>

<egoStore_SyncState>ezhkNDZiODIwLWM3NWUtNGVlMC1iMDY0LThkOWRjNDUxYmQ2Zn0=</egoStore_SyncState>

<MainSectionName>QWNjZXNzTWFuYWdlcg==</MainSectionName>

<ConfigName>RHJvcEJveDEyMzQ0NTIzNA==</ConfigName>

<egostoreciph>e2c=</egostoreciph>

<URL>RHJvcEJveA==</URL>

<Description>c3VubnlzYWRmZ3NkZnNhZGZzZGZzZHNkZmRzZGZzYWRmc2E=</Description>

<LastUsed>3QcLAAMABQAWADEAAwC9Aw==</LastUsed>

</attributes>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Response>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_ID>{512a9c14-db6d-4304-93fe-f4a4bb40326f}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<UID>ezUxMmE5YzE0LWRiNmQtNDMwNC05M2ZlLWY0YTRiYjQwMzI2Zn0=</UID>

<ConfigKey>Kk90aGVyIFdlYnM=</ConfigKey>

<egoStore_SyncState>YWIzOTJhOTEtOGFkMS00NWU2LTlhOTItMTE1OGMwZTU0ZmEy</egoStore_SyncState>

<MainSectionName>QWNjZXNzTWFuYWdlcg==</MainSectionName>

<ConfigName>Z29vZ2xl</ConfigName>

<LastUsed>3QcLAAQABgABADAANgA6Ag==</LastUsed>

<egostoreciph>e2c=</egostoreciph>

<URL>Z29vZ2xl</URL>

<Modified>3QcLAAUABwABADAAFQAoAw==</Modified>

</attributes>

</ESSO_Credentials>

<ESSO_Credentials>

<ESSO_ID>{e30a7812-b295-4e03-bb15-73bf42739808}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<AutoOK>AQ==</AutoOK>

<UID>e2UzMGE3ODEyLWIyOTUtNGUwMy1iYjE1LTczYmY0MjczOTgwOH0=</UID>

<ConfigKey>Kk90aGVyIFdlYnM=</ConfigKey>

<egoStore_SyncState>MDgzN2YyM2YtYWRmOS00MzQ5LTg4ZTYtMjJmZmUzYWFjMDll</egoStore_SyncState>

<MainSectionName>QWNjZXNzTWFuYWdlcg==</MainSectionName>

<ConfigName>Z29vZ2xl</ConfigName>

<PassField>I1NTT09yYWNsZQ==</PassField>

<LastUsed>3QcLAAQABgABADIAJgDwAQ==</LastUsed>

<egostoreciph>e2c=</egostoreciph>

<URL>Z29vZ2xl</URL>

<Modified>3QcLAAUABwABADAAFQAoAw==</Modified>

</attributes>

</ESSO_Credentials>

<ESSO_Credentials>

<ESSO_ID>{391a3591-4164-44e0-8aa5-2b22c6759a90}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<UID>ezM5MWEzNTkxLTQxNjQtNDRlMC04YWE1LTJiMjJjNjc1OWE5MH0=</UID>

<ConfigKey>Kk90aGVyIFdlYnM=</ConfigKey>

<MainSectionName>QWNjZXNzTWFuYWdlcg==</MainSectionName>

<ConfigName>U2ltcGxlVGVzdEFwcA==</ConfigName>

<egostoreciph>e2c=</egostoreciph>

<URL>U2ltcGxlVGVzdEFwcA==</URL>

<Modified>3QcLAAUABwABADAAFQAiAw==</Modified>

<RetryCount>LTE=</RetryCount>

<DESCRIPTION>Q3JlZGVudGlhbCBwcm92aXNvbmVkIGJ5IEVTU08gcHJvdmlzaW9uaW5nIGF1dGggcGx1Z2lu</DESCRIPTION>

<LastPwdChanged>M1FjTEFBVUFCd0FCQURBQUZRQWhBdz09</LastPwdChanged>

<LastUsed>3QcLAAQABgAKACEAAQDUAQ==</LastUsed>

</attributes>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

3.2.7 Credential List

Credential list operation.

3.2.7.1 Request

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_AttributeList>ConfigName;LastUsed</ESSO_AttributeList>

<ESSO_Data />

</ESSO_Request>

</ESSO_Requests>

</ESSO>

3.2.7.2 Response

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_ID>{512a9c14-db6d-4304-93fe-f4a4bb40326f}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<ConfigName>Z29vZ2xl</ConfigName>

<LastUsed>3QcLAAQABgABADAANgA6Ag==</LastUsed>

</attributes>

</ESSO_Credentials>

<ESSO_Credentials>

<ESSO_ID>{6f63add1-8ee3-4e05-8def-a4a91b36babc}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<ConfigName>Q2lzY28gQ2FsbCBNYW5hZ2Vy</ConfigName>

<LastUsed>3QcLAAQABgAAADcAHwByAg==</LastUsed>

</attributes>

</ESSO_Credentials>

<ESSO_Credentials>

<ESSO_ID>{e30a7812-b295-4e03-bb15-73bf42739808}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<ConfigName>Z29vZ2xl</ConfigName>

<LastUsed>3QcLAAQABgABADIAJgDwAQ==</LastUsed>

</attributes>

</ESSO_Credentials>

<ESSO_Credentials>

<ESSO_ID>{391a3591-4164-44e0-8aa5-2b22c6759a90}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<ConfigName>U2ltcGxlVGVzdEFwcA==</ConfigName>

<LastUsed>3QcLAAQABgAKACEAAQDUAQ==</LastUsed>

</attributes>

</ESSO_Credentials>

<ESSO_Credentials>

<ESSO_ID>{105a3a14-7523-496f-9114-4e0ed6ff7027}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<ConfigName>RHJvcEJveDEyMzQ0NTIzNA==</ConfigName>

<LastUsed>3QcLAAMABQAWADEAAwC9Aw==</LastUsed>

</attributes>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

3.2.8 Credential List (Specific Credential ID)

Credential list operation by specific credential ID.

3.2.8.1 Request

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_AttributeList>ConfigName;LastUsed</ESSO_AttributeList>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_ID>{105a3a14-7523-496f-9114-4e0ed6ff7027}</ESSO_ID>

</ESSO_Credentials>

<ESSO_Credentials>

<ESSO_ID>{391a3591-4164-44e0-8aa5-2b22c6759a90}</ESSO_ID>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Request>

</ESSO_Requests>

</ESSO>

3.2.8.2 Response

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_Credentials>

<ESSO_ID>{105a3a14-7523-496f-9114-4e0ed6ff7027}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<ConfigName>RHJvcEJveDEyMzQ0NTIzNA==</ConfigName>

<LastUsed>3QcLAAMABQAWADEAAwC9Aw==</LastUsed>

</attributes>

</ESSO_Credentials>

<ESSO_Credentials>

<ESSO_ID>{391a3591-4164-44e0-8aa5-2b22c6759a90}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<attributes>

<ConfigName>U2ltcGxlVGVzdEFwcA==</ConfigName>

<LastUsed>3QcLAAQABgAKACEAAQDUAQ==</LastUsed>

</attributes>

</ESSO_Credentials>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

3.2.9 Policy Add

Policy add operation.

3.2.9.1 Request

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>+GKHmKP0u0/BVeBDBqKEg9B8W/EuIK1jIV3C8hcdq0wT7vzc</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_RepositoryID>3d8d102e-d31d-4223-9ddb-ef154e5f8c45</ESSO_RepositoryID>

<ESSO_Data>

<ESSO_Policies>

<ESSO_PolicyType>

<name>WebApplication</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>4e02bfd2-a734-4ff4-a31a-8a6933417b3d</ESSO_ID>

<COConfigInfo>ApplicationConfiguration</COConfigInfo>

<ApplicationConfiguration>

<egoStore_SyncState>d2978ef5-0821-45c9-ad76-205066e57c27</egoStore_SyncState>

<ApplicationName>

<name>Oracle SSO</name>

<attributes>

<entry>

<key>AuthGrade</key>

<value>1</value>

</entry>

<entry>

<key>IsSecureID</key>

<value>0</value>

</entry>

<entry>

<key>PassField</key>

<value>0,0,0,password</value>

</entry>

<entry>

<key>URL1</key>

<value>.*?https://login\.oracle\.com/mysso/signon\.jsp.*</value>

</entry>

<entry>

<key>DelayChar</key>

<value>50</value>

</entry>

<entry>

<key>IDField</key>

<value>0,0,0,text</value>

</entry>

<entry>

<key>Reference</key>

<value>Oracle</value>

</entry>

<entry>

<key>URLMatchType1</key>

<value>regex</value>

</entry>

</attributes>

<Sections>

<Section>

<id>606d41a8-4d19-43ed-b96c-8241e222d0b0</id>

<attributes>

<entry>

<key>AT_PageGUID</key>

<value>606d41a8-4d19-43ed-b96c-8241e222d0b0</value>

</entry>

<entry>

<key>AT_PageName</key>

<value>VPN Off</value>

</entry>

<entry>

<key>Dynamic</key>

<value>0</value>

</entry>

<entry>

<key>FormType</key>

<value>Logon</value>

</entry>

<entry>

<key>IDField</key>

<value>0,LoginForm,ssousername,text</value>

</entry>

<entry>

<key>Match1</key>

<value>95ed06e8-a5a4-4821-87f5-c1fd92595602</value>

</entry>

<entry>

<key>MultiFrame</key>

<value>1</value>

</entry>

<entry>

<key>ParentKey1</key>

<value>=Oracle SSO</value>

</entry>

<entry>

<key>PassField</key>

<value>0,LoginForm,password,password</value>

</entry>

<entry>

<key>PresetFocusAll</key>

<value>1</value>

</entry>

<entry>

<key>SubmitField</key>

<value>0,LoginForm,2,anchor</value>

</entry>

<entry>

<key>SubmitViaKeyboard</key>

<value>0</value>

</entry>

<entry>

<key>URL1</key>

<value>.*?https://login\.oracle\.com/mysso/signon\.jsp.*</value>

</entry>

<entry>

<key>URLMatchType1</key>

<value>regex</value>

</entry>

<entry>

<key>URLReferrer</key>

<value>https://login.oracle.com/mysso/signon.jsp</value>

</entry>

<entry>

<key>Context</key>

<value>aMa0C0cETtfJylH5z1PhV8ltsNgZNV/o9NLhZwf0hDcOGbe8</value>

</entry>

</attributes>

<Matches>

<Match>

<id>95ed06e8-a5a4-4821-87f5-c1fd92595602</id>

<attributes>

<entry>

<key>AT_GUID</key>

<value>95ed06e8-a5a4-4821-87f5-c1fd92595602</value>

</entry>

<entry>

<key>Match1</key>

<value>all,a,html,regex,Lost Username</value>

</entry>

<entry>

<key>Context</key>

<value>U3oCXvSysJTcCbvtKVAuz7YcCjvX9niC4YlnF9AvHc0ow4FW</value>

</entry>

</attributes>

</Match>

</Matches>

</Section>

<Section>

<id>c64e5b56-a85d-4547-8556-46e106e4e544</id>

<attributes>

<entry>

<key>AT_PageGUID</key>

<value>c64e5b56-a85d-4547-8556-46e106e4e544</value>

</entry>

<entry>

<key>AT_PageName</key>

<value>VPN</value>

</entry>

<entry>

<key>Dynamic</key>

<value>0</value>

</entry>

<entry>

<key>FormType</key>

<value>Logon</value>

</entry>

<entry>

<key>IDField</key>

<value>0,LoginForm,ssousername,text</value>

</entry>

<entry>

<key>MultiFrame</key>

<value>1</value>

</entry>

<entry>

<key>ParentKey1</key>

<value>Oracle SSO</value>

</entry>

<entry>

<key>PassField</key>

<value>0,LoginForm,password,password</value>

</entry>

<entry>

<key>PresetFocusAll</key>

<value>1</value>

</entry>

<entry>

<key>SubmitField</key>

<value>0,LoginForm,1,anchor</value>

</entry>

<entry>

<key>SubmitViaKeyboard</key>

<value>0</value>

</entry>

<entry>

<key>URL1</key>

<value>.*?https://login\.oracle\.com/mysso/signon\.jsp.*</value>

</entry>

<entry>

<key>URLMatchType1</key>

<value>regex</value>

</entry>

<entry>

<key>URLReferrer</key>

<value>https://login.oracle.com/mysso/signon.jsp</value>

</entry>

<entry>

<key>Context</key>

<value>oFuY6TckxpDtP7jl1YbJ3AwmcCJwtXY0wog7e7rK6cHd9wim</value>

</entry>

</attributes>

</Section>

</Sections>

</ApplicationName>

</ApplicationConfiguration>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<!-- import case where a policy can be created with ESSO_ID specified. This would be applicable to any types of policies -->

<ESSO_PolicyType>

<name>PasswordPolicy</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>99953016-0a52-4ef2-9f89-6ccd64e0fd87</ESSO_ID>

<COConfigInfo>PasswordPolicy1 import</COConfigInfo>

<section>

<id>PasswordPolicy1 import</id>

<attributes>

<entry>

<key>NUMFLAGFIRST</key>

<value>1</value>

</entry>

<entry>

<key>OTHER</key>

<value>1</value>

</entry>

<entry>

<key>SCHARS</key>

<value>1</value>

</entry>

<entry>

<key>ConfigName</key>

<value>TargetUser-PSP1</value>

</entry>

<entry>

<key>NUMSIZE</key>

<value>13</value>

</entry>

<entry>

<key>SCHARFLAGFIRST</key>

<value>1</value>

</entry>

<entry>

<key>SCHARSIZE</key>

<value>13</value>

</entry>

<entry>

<key>NUMRPTMAX</key>

<value>7</value>

</entry>

<entry>

<key>SCHARFLAGLAST</key>

<value>1</value>

</entry>

<entry>

<key>SCHARSIZEMIN</key>

<value>0</value>

</entry>

<entry>

<key>NUMLIMSAMECAP</key>

<value>5</value>

</entry>

<entry>

<key>SIZEMIN</key>

<value>3</value>

</entry>

<entry>

<key>SIZEMINLOWER</key>

<value>0</value>

</entry>

<entry>

<key>LIMSAMECHARSAP</key>

<value>0</value>

</entry>

<entry>

<key>NUMFLAGLAST</key>

<value>1</value>

</entry>

<entry>

<key>NOTSAMEASPREV</key>

<value>0</value>

</entry>

<entry>

<key>NUMCONSMAX</key>

<value>7</value>

</entry>

<entry>

<key>SIZEMINUPPER</key>

<value>0</value>

</entry>

<entry>

<key>NUMERIC</key>

<value>1</value>

</entry>

<entry>

<key>NUMSIZEMIN</key>

<value>0</value>

</entry>

<entry>

<key>SIZE</key>

<value>13</value>

</entry>

<entry>

<key>ALPHA</key>

<value>UL</value>

</entry>

<entry>

<key>AT_Security1</key>

<value>10.232.8.229 9 ESSOAdmin1 cn=ESSOAdmin1,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

<entry>

<key>AT_Security2</key>

<value>10.232.8.229 9 ESSOAdmin2 cn=ESSOAdmin2,cn=users,dc=us,dc=oracle,dc=com 0 0 0</value>

</entry>

</attributes>

</section>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>PasswordPolicy</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_Identifier>0001</ESSO_Identifier>

<COConfigInfo>PasswordPolicy1</COConfigInfo>

<section>

<id>PasswordPolicy1</id>

<attributes>

<entry>

<key>NUMFLAGFIRST</key>

<value>1</value>

</entry>

<entry>

<key>OTHER</key>

<value>1</value>

</entry>

<entry>

<key>SCHARS</key>

<value>1</value>

</entry>

<entry>

<key>ConfigName</key>

<value>TargetUser-PSP1</value>

</entry>

<entry>

<key>NUMSIZE</key>

<value>13</value>

</entry>

<entry>

<key>SCHARFLAGFIRST</key>

<value>1</value>

</entry>

<entry>

<key>SCHARSIZE</key>

<value>13</value>

</entry>

<entry>

<key>NUMRPTMAX</key>

<value>7</value>

</entry>

<entry>

<key>SCHARFLAGLAST</key>

<value>1</value>

</entry>

<entry>

<key>SCHARSIZEMIN</key>

<value>0</value>

</entry>

<entry>

<key>NUMLIMSAMECAP</key>

<value>5</value>

</entry>

<entry>

<key>SIZEMIN</key>

<value>3</value>

</entry>

<entry>

<key>SIZEMINLOWER</key>

<value>0</value>

</entry>

<entry>

<key>LIMSAMECHARSAP</key>

<value>0</value>

</entry>

<entry>

<key>NUMFLAGLAST</key>

<value>1</value>

</entry>

<entry>

<key>NOTSAMEASPREV</key>

<value>0</value>

</entry>

<entry>

<key>NUMCONSMAX</key>

<value>7</value>

</entry>

<entry>

<key>SIZEMINUPPER</key>

<value>0</value>

</entry>

<entry>

<key>NUMERIC</key>

<value>1</value>

</entry>

<entry>

<key>NUMSIZEMIN</key>

<value>0</value>

</entry>

<entry>

<key>SIZE</key>

<value>13</value>

</entry>

<entry>

<key>ALPHA</key>

<value>UL</value>

</entry>

<entry>

<key>AT_Security1</key>

<value>10.232.8.229 9 ESSOAdmin1 cn=ESSOAdmin1,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

<entry>

<key>AT_Security2</key>

<value>10.232.8.229 9 ESSOAdmin2 cn=ESSOAdmin2,cn=users,dc=us,dc=oracle,dc=com 0 0 0</value>

</entry>

</attributes>

</section>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>SharingGroup</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_Identifier>0002</ESSO_Identifier>

<COConfigInfo>SharingGroup1</COConfigInfo>

<section>

<id>SharingGroup1</id>

<attributes>

<entry>

<key>Group</key>

<value>TargetUser-CSG1</value>

</entry>

<entry>

<key>IsCreatePreDetAccountsAuto</key>

<value>0</value>

</entry>

<entry>

<key>IsPreFillSharedFields</key>

<value>1</value>

</entry>

<entry>

<key>KeyCredentialsFields</key>

<value />

</entry>

<entry>

<key>SharedFields</key>

<value>Password;UserID</value>

</entry>

<entry>

<key>Logo</key>

<value>img/logos/sq_oracle.png</value>

</entry>

<entry>

<key>AT_Security1</key>

<value>10.232.8.229 9 ESSOAdmin1 cn=ESSOAdmin1,cn=users,dc=us,dc=oracle,dc=com 0 0 0</value>

</entry>

<entry>

<key>AT_Security2</key>

<value>10.232.8.229 9 ESSOAdmin2 cn=ESSOAdmin2,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

</attributes>

</section>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>AdminOverrides</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_Identifier>0003</ESSO_Identifier>

<COConfigInfo>GAS1</COConfigInfo>

<section>

<id>GAS1</id>

<attributes>

<entry>

<key>AUI\LDAPauth:UserPath1</key>

<value>STRING:cn=users,dc=us,dc=oracle,dc=com</value>

</entry>

<entry>

<key>AUI\LDAPauth:UserPrepend</key>

<value>STRING:cn</value>

</entry>

<entry>

<key>AUI\LDAPauth:UseSSL</key>

<value>DWORD:0</value>

</entry>

<entry>

<key>Extensions\AccessManager:DisableAllowExcludePWSG</key>

<value>DWORD:0</value>

</entry>

<entry>

<key>Extensions\AccessManager:DNLevelsToMatch</key>

<value>DWORD:2</value>

</entry>

<entry>

<key>Extensions\AccessManager:EnableCancelButton</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>Extensions\AccessManager:EnableNeverButton</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>Extensions\AccessManager:LogonAfterConfig</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>Extensions\AccessManager:ShowAddAdditionalLogon</key>

<value>DWORD:0</value>

</entry>

<entry>

<key>Extensions\AccessManager\BHO:ActivateTab</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>Extensions\AccessManager\BHO:FeedbackColor</key>

<value>STRING:red 3px solid</value>

</entry>

<entry>

<key>Extensions\AccessManager\BHO:RespondToIEModalDialogs</key>

<value>DWORD:0</value>

</entry>

<entry>

<key>Extensions\AccessManager\BHO:ScrollIntoView</key>

<value>DWORD:0</value>

</entry>

<entry>

<key>Extensions\AccessManager\BHO:ShowBorder</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>Extensions\AccessManager\BHOAllowedDynamicWebPages:DynamicWebPage1</key>

<value>STRING:.*http://login\.company\.com/.*</value>

</entry>

<entry>

<key>Extensions\AccessManager\BHOIgnoredWebPages:WebPage1</key>

<value>STRING:.*http://login\.company\.com/.*</value>

</entry>

<entry>

<key>Extensions\SyncManager:RetrieveCO</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>Extensions\SyncManager:SyncOrder</key>

<value>STRING:LDPEXT</value>

</entry>

<entry>

<key>Extensions\SyncManager\Syncs\LDPEXT:DirectoryType</key>

<value>DWORD:10</value>

</entry>

<entry>

<key>Extensions\SyncManager\Syncs\LDPEXT:UserPath1</key>

<value>STRING:cn=Users,dc=us,dc=oracle,dc=com</value>

</entry>

<entry>

<key>Extensions\SyncManager\Syncs\LDPEXT:UserPrepend</key>

<value>STRING:cn</value>

</entry>

<entry>

<key>Extensions\SyncManager\Syncs\LDPEXT:UseSSL</key>

<value>DWORD:0</value>

</entry>

<entry>

<key>Shell:CaptureType</key>

<value>DWORD:2</value>

</entry>

<entry>

<key>Shell:CleanupOnShutdown</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>Shell:UseActiveLogin</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>Shell:UseAutoSense</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>AT_NODE1</key>

<value>%AD%,ADEXT</value>

</entry>

<entry>

<key>AT_NODE2</key>

<value>%LDAP%,LDPEXT</value>

</entry>

<entry>

<key>Extensions\AccessManager:DefaultPolicy</key>

<value>STRING:PasswordPolicy1</value>

</entry>

<entry>

<key>AT_Security1</key>

<value>10.232.8.229 9 ESSOAdmin1 cn=ESSOAdmin1,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

<entry>

<key>AT_Security2</key>

<value>10.232.8.229 9 ESSOAdmin2 cn=ESSOAdmin2,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

</attributes>

</section>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

</ESSO_Policies>

</ESSO_Data>

</ESSO_Request>

</ESSO_Requests>

</ESSO>

3.2.9.2 Response

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>4e02bfd2-a734-4ff4-a31a-8a6933417b3d</ESSO_ID>

<ESSO_Result>30</ESSO_Result>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_Identifier>0001</ESSO_Identifier>

<ESSO_ID>ca654a16-f638-462b-a2e9-5f30cd9cd59e</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_Identifier>0003</ESSO_Identifier>

<ESSO_ID>4df7399c-e923-4d16-a2ad-e22fce680a05</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_Identifier>0002</ESSO_Identifier>

<ESSO_ID>626fc22a-d5ba-4221-83e7-a0908be616a1</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

3.2.10 Policy Update

Policy update operation.

3.2.10.1 Request

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>+GKHmKP0u0/BVeBDBqKEg9B8W/EuIK1jIV3C8hcdq0wT7vzc</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_RepositoryID>3d8d102e-d31d-4223-9ddb-ef154e5f8c45</ESSO_RepositoryID>

<ESSO_Data>

<ESSO_Policies>

<ESSO_PolicyType>

<name>PasswordPolicy</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>3458-fafcd-3829-adfe-4822</ESSO_ID>

<COConfigInfo>PasswordPolicy11</COConfigInfo>

<section>

<id>PasswordPolicy11</id>

<attributes>

<entry>

<key>NUMFLAGFIRST</key>

<value>1</value>

</entry>

<entry>

<key>OTHER</key>

<value>1</value>

</entry>

<entry>

<key>SCHARS</key>

<value>1</value>

</entry>

<entry>

<key>ConfigName</key>

<value>TargetUser-PSP1</value>

</entry>

<entry>

<key>NUMSIZE</key>

<value>13</value>

</entry>

<entry>

<key>SCHARFLAGFIRST</key>

<value>1</value>

</entry>

<entry>

<key>SCHARSIZE</key>

<value>13</value>

</entry>

<entry>

<key>NUMRPTMAX</key>

<value>7</value>

</entry>

<entry>

<key>SCHARFLAGLAST</key>

<value>1</value>

</entry>

<entry>

<key>SCHARSIZEMIN</key>

<value>0</value>

</entry>

<entry>

<key>NUMLIMSAMECAP</key>

<value>5</value>

</entry>

<entry>

<key>SIZEMIN</key>

<value>3</value>

</entry>

<entry>

<key>SIZEMINLOWER</key>

<value>0</value>

</entry>

<entry>

<key>LIMSAMECHARSAP</key>

<value>0</value>

</entry>

<entry>

<key>NUMFLAGLAST</key>

<value>1</value>

</entry>

<entry>

<key>NOTSAMEASPREV</key>

<value>0</value>

</entry>

<entry>

<key>NUMCONSMAX</key>

<value>7</value>

</entry>

<entry>

<key>SIZEMINUPPER</key>

<value>0</value>

</entry>

<entry>

<key>NUMERIC</key>

<value>1</value>

</entry>

<entry>

<key>NUMSIZEMIN</key>

<value>0</value>

</entry>

<entry>

<key>SIZE</key>

<value>13</value>

</entry>

<entry>

<key>ALPHA</key>

<value>UL</value>

</entry>

<entry>

<key>AT_Security1</key>

<value>10.232.8.229 9 ESSOAdmin1 cn=ESSOAdmin1,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

<entry>

<key>AT_Security2</key>

<value>10.232.8.229 9 ESSOAdmin2 cn=ESSOAdmin2,cn=users,dc=us,dc=oracle,dc=com 0 0 0</value>

</entry>

</attributes>

</section>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>SharingGroup</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>1c81852e-4910-4a95-8f1c-77CSG</ESSO_ID>

<COConfigInfo>SharingGroup11</COConfigInfo>

<section>

<id>SharingGroup11</id>

<attributes>

<entry>

<key>Group</key>

<value>TargetUser-CSG1</value>

</entry>

<entry>

<key>IsCreatePreDetAccountsAuto</key>

<value>0</value>

</entry>

<entry>

<key>IsPreFillSharedFields</key>

<value>1</value>

</entry>

<entry>

<key>KeyCredentialsFields</key>

<value />

</entry>

<entry>

<key>SharedFields</key>

<value>Password;UserID</value>

</entry>

<entry>

<key>Logo</key>

<value>img/logos/sq_oracle.png</value>

</entry>

<entry>

<key>AT_Security1</key>

<value>10.232.8.229 9 ESSOAdmin1 cn=ESSOAdmin1,cn=users,dc=us,dc=oracle,dc=com 0 0 0</value>

</entry>

<entry>

<key>AT_Security2</key>

<value>10.232.8.229 9 ESSOAdmin2 cn=ESSOAdmin2,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

</attributes>

</section>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>AdminOverrides</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>4df7399c-e923-4d16-a2ad-e22fce680a05</ESSO_ID>

<COConfigInfo>GAS2</COConfigInfo>

<section>

<id>GAS2</id>

<attributes>

<entry>

<key>AUI\LDAPauth:UserPath1</key>

<value>STRING:cn=users,dc=us,dc=oracle,dc=com</value>

</entry>

<entry>

<key>AUI\LDAPauth:UserPrepend</key>

<value>STRING:cn</value>

</entry>

<entry>

<key>AUI\LDAPauth:UseSSL</key>

<value>DWORD:0</value>

</entry>

<entry>

<key>Extensions\AccessManager:DisableAllowExcludePWSG</key>

<value>DWORD:0</value>

</entry>

<entry>

<key>Extensions\AccessManager:DNLevelsToMatch</key>

<value>DWORD:2</value>

</entry>

<entry>

<key>Extensions\AccessManager:EnableCancelButton</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>Extensions\AccessManager:EnableNeverButton</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>Extensions\AccessManager:LogonAfterConfig</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>Extensions\AccessManager:ShowAddAdditionalLogon</key>

<value>DWORD:0</value>

</entry>

<entry>

<key>Extensions\AccessManager\BHO:ActivateTab</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>Extensions\AccessManager\BHO:FeedbackColor</key>

<value>STRING:red 3px solid</value>

</entry>

<entry>

<key>Extensions\AccessManager\BHO:RespondToIEModalDialogs</key>

<value>DWORD:0</value>

</entry>

<entry>

<key>Extensions\AccessManager\BHO:ScrollIntoView</key>

<value>DWORD:0</value>

</entry>

<entry>

<key>Extensions\AccessManager\BHO:ShowBorder</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>Extensions\AccessManager\BHOAllowedDynamicWebPages:DynamicWebPage1</key>

<value>STRING:.*http://login\.company\.com/.*</value>

</entry>

<entry>

<key>Extensions\AccessManager\BHOIgnoredWebPages:WebPage1</key>

<value>STRING:.*http://login\.company\.com/.*</value>

</entry>

<entry>

<key>Extensions\SyncManager:RetrieveCO</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>Extensions\SyncManager:SyncOrder</key>

<value>STRING:LDPEXT</value>

</entry>

<entry>

<key>Extensions\SyncManager\Syncs\LDPEXT:DirectoryType</key>

<value>DWORD:10</value>

</entry>

<entry>

<key>Extensions\SyncManager\Syncs\LDPEXT:UserPath1</key>

<value>STRING:cn=Users,dc=us,dc=oracle,dc=com</value>

</entry>

<entry>

<key>Extensions\SyncManager\Syncs\LDPEXT:UserPrepend</key>

<value>STRING:cn</value>

</entry>

<entry>

<key>Extensions\SyncManager\Syncs\LDPEXT:UseSSL</key>

<value>DWORD:0</value>

</entry>

<entry>

<key>Shell:CaptureType</key>

<value>DWORD:2</value>

</entry>

<entry>

<key>Shell:CleanupOnShutdown</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>Shell:UseActiveLogin</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>Shell:UseAutoSense</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>AT_NODE1</key>

<value>%AD%,ADEXT</value>

</entry>

<entry>

<key>AT_NODE2</key>

<value>%LDAP%,LDPEXT</value>

</entry>

<entry>

<key>Extensions\AccessManager:DefaultPolicy</key>

<value>STRING:PasswordPolicy1</value>

</entry>

<entry>

<key>AT_Security1</key>

<value>10.232.8.229 9 ESSOAdmin1 cn=ESSOAdmin1,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

<entry>

<key>AT_Security2</key>

<value>10.232.8.229 9 ESSOAdmin2 cn=ESSOAdmin2,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

</attributes>

</section>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

</ESSO_Policies>

</ESSO_Data>

</ESSO_Request>

</ESSO_Requests>

</ESSO>

3.2.10.2 Response

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>4df7399c-e923-4d16-a2ad-e22fce680a05</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>1c81852e-4910-4a95-8f1c-77CSG</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>3458-fafcd-3829-adfe-4822</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

3.2.11 Policy Delete

Policy delete operation.

3.2.11.1 Request

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_RepositoryID>3d8d102e-d31d-4223-9ddb-ef154e5f8c45</ESSO_RepositoryID>

<ESSO_Data>

<ESSO_Policies>

<ESSO_PolicyType>

<name>WebApplication</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>bcc6ac7f-7773-44e5-b952-a4ae3eec9515</ESSO_ID>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>ab4f9632-4670-400b-9b5b-b9479c4a9e3f</ESSO_ID>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>WindowsApplication</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>5107a7e8-2ab4-4ed8-891a-96e88e112050</ESSO_ID>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>cdf6f30e-496b-40b5-a8b2-bd7d22ec0717</ESSO_ID>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>SSOProtected</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>c7e8673e-5ed5-4698-a790-38852f265497</ESSO_ID>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>71e72772-96c0-47ef-931e-dd89c088f323</ESSO_ID>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>MainFrameApplication</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>d384b40a-b3f9-41ea-9ef6-b06a5f907824</ESSO_ID>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>8d2b1c64-b197-4e9a-9edf-d4c4d7603f3f</ESSO_ID>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>Federated</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>93d31e9c-e961-4457-a1dc-d1625ce659df</ESSO_ID>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>AdminOverrides</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>b26de3a3-9339-4265-9766-164a27722077</ESSO_ID>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>SharingGroup</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>11128fbf-6242-48ac-8714-2b2234a36e18</ESSO_ID>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>PasswordPolicy</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>88853016-0a52-4ef2-9f89-6ccd64e0fd89</ESSO_ID>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

</ESSO_Policies>

</ESSO_Data>

</ESSO_Request>

</ESSO_Requests>

</ESSO>

3.2.11.2 Response

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>d384b40a-b3f9-41ea-9ef6-b06a5f907824</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>93d31e9c-e961-4457-a1dc-d1625ce659df</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

3.2.12 Policy Search

Policy search operation.

3.2.12.1 Request

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_Types>SharingGroup;PasswordPolicy;WebApplication</ESSO_Types>

<ESSO_RepositoryID>3d8d102e-d31d-4223-9ddb-ef154e5f8c45</ESSO_RepositoryID>

<ESSO_Data>

<ESSO_PolicyFilters>

<ESSO_PolicyFilter>

<ESSO_Match_Type>Regex</ESSO_Match_Type>

<ESSO_Enumerated_List>URL</ESSO_Enumerated_List>

<ESSO_Value>https://www.oraclebenefits.com/ess/home/login</ESSO_Value>

<ESSO_Operation>OR</ESSO_Operation>

</ESSO_PolicyFilter>

<ESSO_PolicyFilter>

<ESSO_Match_Type>Match</ESSO_Match_Type>

<ESSO_Enumerated_List>URL</ESSO_Enumerated_List>

<ESSO_Value>https://www.oraclebenefits.com/ess/home/login</ESSO_Value>

<ESSO_Operation>OR</ESSO_Operation>

</ESSO_PolicyFilter>

<ESSO_PolicyFilter>

<ESSO_Match_Type>Exact</ESSO_Match_Type>

<ESSO_Field>AT_ConfigType</ESSO_Field>

<ESSO_Value>SharingGroup</ESSO_Value>

<ESSO_Operation>OR</ESSO_Operation>

</ESSO_PolicyFilter>

<ESSO_PolicyFilter>

<ESSO_Match_Type>Match</ESSO_Match_Type>

<ESSO_Field>ConfigName</ESSO_Field>

<ESSO_Value>TargetUserPGP</ESSO_Value>

<ESSO_Operation>OR</ESSO_Operation>

</ESSO_PolicyFilter>

<ESSO_PolicyFilter>

<ESSO_Match_Type>Match</ESSO_Match_Type>

<ESSO_Field>AT_ConfigType</ESSO_Field>

<ESSO_Value>AdminOverrides</ESSO_Value>

</ESSO_PolicyFilter>

</ESSO_PolicyFilters>

</ESSO_Data>

</ESSO_Request>

</ESSO_Requests>

</ESSO>

3.2.12.2 Response

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_Policies>

<ESSO_PolicyType>

<name>PasswordPolicy</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>3458-fafcd-3829-adfe-4822</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<COConfigInfo>TargetUserPGP</COConfigInfo>

<section>

<id>TargetUserPGP</id>

<attributes>

<entry>

<key>UID</key>

<value>3458-fafcd-3829-adfe-4822</value>

</entry>

<entry>

<key>NUMERIC</key>

<value>1</value>

</entry>

<entry>

<key>AT_GUID</key>

<value>3458-fafcd-3829-adfe-4822</value>

</entry>

<entry>

<key>OTHER</key>

<value>1</value>

</entry>

<entry>

<key>NUMRPTMAX</key>

<value>7</value>

</entry>

<entry>

<key>SIZEMINUPPER</key>

<value>0</value>

</entry>

<entry>

<key>SCHARSIZE</key>

<value>13</value>

</entry>

<entry>

<key>LIMSAMECHARSAP</key>

<value>0</value>

</entry>

<entry>

<key>SIZEMINLOWER</key>

<value>0</value>

</entry>

<entry>

<key>ALPHA</key>

<value>UL</value>

</entry>

<entry>

<key>NUMCONSMAX</key>

<value>7</value>

</entry>

<entry>

<key>NUMSIZE</key>

<value>13</value>

</entry>

<entry>

<key>SCHARSIZEMIN</key>

<value>0</value>

</entry>

<entry>

<key>ConfigName</key>

<value>TargetUserPGP</value>

</entry>

<entry>

<key>SCHARFLAGLAST</key>

<value>1</value>

</entry>

<entry>

<key>NUMFLAGLAST</key>

<value>1</value>

</entry>

<entry>

<key>AT_ConfigType</key>

<value>PasswordPolicy</value>

</entry>

<entry>

<key>SIZE</key>

<value>13</value>

</entry>

<entry>

<key>SCHARS</key>

<value>1</value>

</entry>

<entry>

<key>NUMSIZEMIN</key>

<value>0</value>

</entry>

<entry>

<key>SIZEMIN</key>

<value>3</value>

</entry>

<entry>

<key>NOTSAMEASPREV</key>

<value>0</value>

</entry>

<entry>

<key>Context</key>

<value>BrmMYXKuk8sT8M6LwxOg5OgGAR1IT2ytcLRx+twCHEZyfa70</value>

</entry>

<entry>

<key>NUMLIMSAMECAP</key>

<value>5</value>

</entry>

<entry>

<key>NUMFLAGFIRST</key>

<value>1</value>

</entry>

<entry>

<key>AT_Security2</key>

<value>10.232.8.229 9 ESSOAdmin2 cn=ESSOAdmin2,cn=users,dc=us,dc=oracle,dc=com 0 0 0</value>

</entry>

<entry>

<key>AT_Security1</key>

<value>10.232.8.229 9 ESSOAdmin1 cn=ESSOAdmin1,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

<entry>

<key>SCHARFLAGFIRST</key>

<value>1</value>

</entry>

</attributes>

</section>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>SharingGroup</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>e37c2142-41d7-48da-8d6d-bf4fdbc8f807</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<COConfigInfo>testCSGFromAdmin</COConfigInfo>

<section>

<id>testCSGFromAdmin</id>

<attributes>

<entry>

<key>UID</key>

<value>e37c2142-41d7-48da-8d6d-bf4fdbc8f807</value>

</entry>

<entry>

<key>SharedFields</key>

<value>Password</value>

</entry>

<entry>

<key>AT_GUID</key>

<value>e37c2142-41d7-48da-8d6d-bf4fdbc8f807</value>

</entry>

<entry>

<key>Description</key>

<value />

</entry>

<entry>

<key>Context</key>

<value>qBYDZC6IZBwLibgYgkpaTI738ACh707pjiJhwOkdo+MQrf55</value>

</entry>

<entry>

<key>IsPreFillSharedFields</key>

<value>1</value>

</entry>

<entry>

<key>KeyCredentialFields</key>

<value />

</entry>

<entry>

<key>Group</key>

<value>testCSGFromAdmin</value>

</entry>

<entry>

<key>IsCreatePreDetAccountsAuto</key>

<value>0</value>

</entry>

<entry>

<key>Reference</key>

<value />

</entry>

<entry>

<key>AT_ConfigType</key>

<value>SharingGroup</value>

</entry>

</attributes>

</section>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>1c81852e-4910-4a95-8f1c-77CSG</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<COConfigInfo>TargetUserCSG</COConfigInfo>

<section>

<id>TargetUserCSG</id>

<attributes>

<entry>

<key>UID</key>

<value>1c81852e-4910-4a95-8f1c-77CSG</value>

</entry>

<entry>

<key>Logo</key>

<value>img/logos/sq_oracle.png</value>

</entry>

<entry>

<key>SharedFields</key>

<value>Password;UserID</value>

</entry>

<entry>

<key>AT_GUID</key>

<value>1c81852e-4910-4a95-8f1c-77CSG</value>

</entry>

<entry>

<key>KeyCredentialsFields</key>

<value />

</entry>

<entry>

<key>Context</key>

<value>3xyO3EiNNMxOY1Wf8bCoVRKLTH08T8R5FJAezD/qOEHz95Gb</value>

</entry>

<entry>

<key>IsPreFillSharedFields</key>

<value>1</value>

</entry>

<entry>

<key>Group</key>

<value>TargetUserCSG</value>

</entry>

<entry>

<key>AT_Security2</key>

<value>10.232.8.229 9 ESSOAdmin2 cn=ESSOAdmin2,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

<entry>

<key>IsCreatePreDetAccountsAuto</key>

<value>0</value>

</entry>

<entry>

<key>AT_Security1</key>

<value>10.232.8.229 9 ESSOAdmin1 cn=ESSOAdmin1,cn=users,dc=us,dc=oracle,dc=com 0 0 0</value>

</entry>

<entry>

<key>AT_ConfigType</key>

<value>SharingGroup</value>

</entry>

</attributes>

</section>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>WebApplication</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>3789f8e2-881f-4d5f-9ab1-187e2c43733d</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<COConfigInfo>ApplicationConfiguration</COConfigInfo>

<ApplicationConfiguration>

<egoStore_SyncState>d2978ef5-0821-45c9-ad76-205066e57c27</egoStore_SyncState>

<ApplicationName>

<name>WebPolicy1 section with Match_OffsetMatches1</name>

<attributes>

<entry>

<key>UID</key>

<value>3789f8e2-881f-4d5f-9ab1-187e2c43733d</value>

</entry>

<entry>

<key>CaptureType</key>

<value>0</value>

</entry>

<entry>

<key>URL1</key>

<value>.*?https://www\.oraclebenefits\.com/ess/home/login.*</value>

</entry>

<entry>

<key>LogonLoopGracePeriodMode</key>

<value>1</value>

</entry>

<entry>

<key>LogonLoopGracePeriodResetPerProcess</key>

<value>1</value>

</entry>

<entry>

<key>IDField</key>

<value>0,0,0,text</value>

</entry>

<entry>

<key>IDLabel</key>

<value>Customer ID/SSN</value>

</entry>

<entry>

<key>CategoryLvl1</key>

<value>WebApplication</value>

</entry>

<entry>

<key>Reference</key>

<value>1.0 dk</value>

</entry>

<entry>

<key>AT_ConfigType</key>

<value>WebApplication</value>

</entry>

<entry>

<key>AuthGrade</key>

<value>1</value>

</entry>

<entry>

<key>AT_Security4</key>

<value>10.232.8.229 9 ESSOAdmin4 cn=ESSOAdmin4,cn=users,dc=us,dc=oracle,dc=com 0 0 1</value>

</entry>

<entry>

<key>URLMatchType1</key>

<value>regex</value>

</entry>

<entry>

<key>AT_AppGUID</key>

<value>3789f8e2-881f-4d5f-9ab1-187e2c43733d</value>

</entry>

<entry>

<key>PassField</key>

<value>0,0,0,password</value>

</entry>

<entry>

<key>Context</key>

<value>y9vqmtjHXI1z6iFfx/uOqX9oaspR8IegpZsPhsrU7yOP1jvF</value>

</entry>

<entry>

<key>PassKeyLabel</key>

<value>PIN</value>

</entry>

<entry>

<key>IsSecureID</key>

<value>0</value>

</entry>

<entry>

<key>AT_Security3</key>

<value>10.232.8.229 9 ESSOAdmin3 cn=ESSOAdmin3,cn=users,dc=us,dc=oracle,dc=com 0 0 0</value>

</entry>

<entry>

<key>AT_ProvisioningRights1</key>

<value>10.232.8.229 9 OAMWebAuth11 cn=OAMWebAuth11,cn=Users,dc=us,dc=oracle,dc=com 0 0 65536</value>

</entry>

<entry>

<key>AT_Security2</key>

<value>10.232.8.229 9 ESSOAdmin2 cn=ESSOAdmin2,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

<entry>

<key>LogonLoopGracePeriod</key>

<value>8</value>

</entry>

<entry>

<key>AT_Security1</key>

<value>10.232.8.229 9 ESSOAdmin1 cn=ESSOAdmin1,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

<entry>

<key>AT_ProvisioningRights2</key>

<value>10.232.8.229 9 OAMWebAuth12 cn=OAMWebAuth12,cn=group,dc=us,dc=oracle,dc=com 0 0 65537</value>

</entry>

</attributes>

<Sections>

<Section>

<id>c47b3bce-28e7-4242-be74-6847e29591b0</id>

<attributes>

<entry>

<key>AT_PageName</key>

<value>Oracle Stock - Fidelity</value>

</entry>

<entry>

<key>AT_PageGUID</key>

<value>c47b3bce-28e7-4242-be74-6847e29591b0</value>

</entry>

<entry>

<key>URLReferrer</key>

<value>https://www.oraclebenefits.com/ess/home/SetPassword.wya</value>

</entry>

<entry>

<key>FormType</key>

<value>Logon</value>

</entry>

<entry>

<key>ParentKey1</key>

<value>Oracle 401k and Stock - Fidelity1</value>

</entry>

<entry>

<key>PassField</key>

<value>0,1,pin,password</value>

</entry>

<entry>

<key>IDField</key>

<value>0,0,ssn,text</value>

</entry>

<entry>

<key>Context</key>

<value>7LL/wpT3CXA0hpDqcmHbmHBxYfhPyU/p76rLEnUm7bxMi1FR</value>

</entry>

<entry>

<key>OffsetMatch1</key>

<value>8b4f0a64-d7a2-47ec-acdc-e8848c96bcb3,1</value>

</entry>

<entry>

<key>Match1</key>

<value>d790cb67-9647-4e81-81d5-94dc4810c001</value>

</entry>

<entry>

<key>MultiFrame</key>

<value>1</value>

</entry>

<entry>

<key>SubmitViaKeyboard</key>

<value>0</value>

</entry>

</attributes>

<Matches>

<Match>

<id>d790cb67-9647-4e81-81d5-94dc4810c001</id>

<attributes>

<entry>

<key>AT_GUID</key>

<value>d790cb67-9647-4e81-81d5-94dc4810c001</value>

</entry>

<entry>

<key>Context</key>

<value>oR+d8DWAudvivMDKDMmC6fXCcAKwsDqNbFJdghkl08btU4Di</value>

</entry>

<entry>

<key>Match2</key>

<value>all,tag1,text,exact,val1</value>

</entry>

<entry>

<key>Match1</key>

<value>all,tag1,text,exact,val1</value>

</entry>

</attributes>

</Match>

</Matches>

<OffsetMatches>

<OffsetMatch>

<id>8b4f0a64-d7a2-47ec-acdc-e8848c96bcb3</id>

<attributes>

<entry>

<key>AT_GUID</key>

<value>8b4f0a64-d7a2-47ec-acdc-e8848c96bcb3</value>

</entry>

<entry>

<key>Context</key>

<value>2zBvj/ujxaZ0JV84qNe0kg/I06IYZLw9vNlzx0vNnVb7dmYK</value>

</entry>

<entry>

<key>Match2</key>

<value>all,tag2,text,exact,val2</value>

</entry>

<entry>

<key>Match1</key>

<value>all,tag2,text,exact,val2</value>

</entry>

</attributes>

</OffsetMatch>

</OffsetMatches>

</Section>

<Section>

<id>147b3bce-28e7-4242-be74-6847e29591b1</id>

<attributes>

<entry>

<key>AT_PageName</key>

<value>Oracle Stock - Fidelity</value>

</entry>

<entry>

<key>AT_PageGUID</key>

<value>147b3bce-28e7-4242-be74-6847e29591b1</value>

</entry>

<entry>

<key>URLReferrer</key>

<value>https://www.oraclebenefits.com/ess/home/SetPassword.wya</value>

</entry>

<entry>

<key>FormType</key>

<value>Logon</value>

</entry>

<entry>

<key>ParentKey1</key>

<value>Oracle 401k and Stock - Fidelity1</value>

</entry>

<entry>

<key>PassField</key>

<value>0,1,pin,password</value>

</entry>

<entry>

<key>IDField</key>

<value>0,0,ssn,text</value>

</entry>

<entry>

<key>Context</key>

<value>gr/RovP/7tdxe5FNJGxjR3/F5UjKq8DJ8Zd1Tem+Kcg6XKMB</value>

</entry>

<entry>

<key>MultiFrame</key>

<value>1</value>

</entry>

<entry>

<key>SubmitViaKeyboard</key>

<value>0</value>

</entry>

</attributes>

</Section>

</Sections>

</ApplicationName>

</ApplicationConfiguration>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>15ec76a6-4574-4843-8e56-81325ebe514f</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<COConfigInfo>ApplicationConfiguration</COConfigInfo>

<ApplicationConfiguration>

<egoStore_SyncState>d2978ef5-0821-45c9-ad76-205066e57c27</egoStore_SyncState>

<ApplicationName>

<name>WebPolicy11 single form with Match_OffsetMatches1</name>

<attributes>

<entry>

<key>UID</key>

<value>15ec76a6-4574-4843-8e56-81325ebe514f</value>

</entry>

<entry>

<key>CaptureType</key>

<value>0</value>

</entry>

<entry>

<key>LogonLoopGracePeriodMode</key>

<value>1</value>

</entry>

<entry>

<key>IDField</key>

<value>0,0,0,text</value>

</entry>

<entry>

<key>CategoryLvl1</key>

<value>WebPolicy</value>

</entry>

<entry>

<key>OffsetMatch1</key>

<value>8b4f0a64-d7a2-47ec-acdc-e8848c96bcb3,1</value>

</entry>

<entry>

<key>URLMatchType1</key>

<value>regex</value>

</entry>

<entry>

<key>PassField</key>

<value>0,0,0,password</value>

</entry>

<entry>

<key>PassKeyLabel</key>

<value>PIN</value>

</entry>

<entry>

<key>IsSecureID</key>

<value>0</value>

</entry>

<entry>

<key>LogonLoopGracePeriod</key>

<value>8</value>

</entry>

<entry>

<key>URL1</key>

<value>.*?https://www\.oraclebenefits\.com/ess/home/login.*</value>

</entry>

<entry>

<key>LogonLoopGracePeriodResetPerProcess</key>

<value>1</value>

</entry>

<entry>

<key>IDLabel</key>

<value>Customer ID/SSN</value>

</entry>

<entry>

<key>Reference</key>

<value>1.0 dk</value>

</entry>

<entry>

<key>AuthGrade</key>

<value>1</value>

</entry>

<entry>

<key>AT_ConfigType</key>

<value>WebApplication</value>

</entry>

<entry>

<key>AT_Security4</key>

<value>10.232.8.229 9 ESSOAdmin4 cn=ESSOAdmin44,cn=users,dc=us,dc=oracle,dc=com 0 0 1</value>

</entry>

<entry>

<key>AT_AppGUID</key>

<value>15ec76a6-4574-4843-8e56-81325ebe514f</value>

</entry>

<entry>

<key>Context</key>

<value>oyUaN+6fxw6r4uTDiI3c6oD8rEjlUtp1R9/d3B3zsIPtTNyp</value>

</entry>

<entry>

<key>Match1</key>

<value>d790cb67-9647-4e81-81d5-94dc4810c001</value>

</entry>

<entry>

<key>AT_ProvisioningRights1</key>

<value>10.232.8.229 9 OAMWebAuth111 cn=OAMWebAuth111,cn=Users,dc=us,dc=oracle,dc=com 0 0 65538</value>

</entry>

<entry>

<key>AT_Security3</key>

<value>10.232.8.229 9 ESSOAdmin3 cn=ESSOAdmin33,cn=users,dc=us,dc=oracle,dc=com 0 0 0</value>

</entry>

<entry>

<key>AT_Security2</key>

<value>10.232.8.229 9 ESSOAdmin2 cn=ESSOAdmin22,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

<entry>

<key>AT_Security1</key>

<value>10.232.8.229 9 ESSOAdmin1 cn=ESSOAdmin11,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

</attributes>

<Matches>

<Match>

<id>d790cb67-9647-4e81-81d5-94dc4810c001</id>

<attributes>

<entry>

<key>AT_GUID</key>

<value>d790cb67-9647-4e81-81d5-94dc4810c001</value>

</entry>

<entry>

<key>Context</key>

<value>Ib76LpUMB/pexCFfs+Uagu2ZDMn6h0ADfXNrZESyx0BTfP6/</value>

</entry>

<entry>

<key>Match2</key>

<value>all,tag1,text,exact,val1</value>

</entry>

<entry>

<key>Match1</key>

<value>all,tag1,text,exact,val1</value>

</entry>

</attributes>

</Match>

</Matches>

<OffsetMatches>

<OffsetMatch>

<id>8b4f0a64-d7a2-47ec-acdc-e8848c96bcb3</id>

<attributes>

<entry>

<key>AT_GUID</key>

<value>8b4f0a64-d7a2-47ec-acdc-e8848c96bcb3</value>

</entry>

<entry>

<key>Context</key>

<value>wVLcSJbha/WghdHnBxITMQkc9B4oUjgr0wDruJCRfQmWL8kA</value>

</entry>

<entry>

<key>Match2</key>

<value>all,tag2,text,exact,val2</value>

</entry>

<entry>

<key>Match1</key>

<value>all,tag2,text,exact,val2</value>

</entry>

</attributes>

</OffsetMatch>

</OffsetMatches>

</ApplicationName>

</ApplicationConfiguration>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>f9af015b-1323-41d5-a01a-95d4b1e6686d</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<COConfigInfo>ApplicationConfiguration</COConfigInfo>

<ApplicationConfiguration>

<egoStore_SyncState>d2978ef5-0821-45c9-ad76-205066e57c27</egoStore_SyncState>

<ApplicationName>

<name>WebPolicy1 single form with Match_OffsetMatches1</name>

<attributes>

<entry>

<key>UID</key>

<value>f9af015b-1323-41d5-a01a-95d4b1e6686d</value>

</entry>

<entry>

<key>CaptureType</key>

<value>0</value>

</entry>

<entry>

<key>LogonLoopGracePeriodMode</key>

<value>1</value>

</entry>

<entry>

<key>IDField</key>

<value>0,0,0,text</value>

</entry>

<entry>

<key>CategoryLvl1</key>

<value>WebPolicy</value>

</entry>

<entry>

<key>OffsetMatch1</key>

<value>8b4f0a64-d7a2-47ec-acdc-e8848c96bcb3,1</value>

</entry>

<entry>

<key>URLMatchType1</key>

<value>regex</value>

</entry>

<entry>

<key>PassField</key>

<value>0,0,0,password</value>

</entry>

<entry>

<key>PassKeyLabel</key>

<value>PIN</value>

</entry>

<entry>

<key>IsSecureID</key>

<value>0</value>

</entry>

<entry>

<key>LogonLoopGracePeriod</key>

<value>8</value>

</entry>

<entry>

<key>URL1</key>

<value>.*?https://www\.oraclebenefits\.com/ess/home/login.*</value>

</entry>

<entry>

<key>LogonLoopGracePeriodResetPerProcess</key>

<value>1</value>

</entry>

<entry>

<key>IDLabel</key>

<value>Customer ID/SSN</value>

</entry>

<entry>

<key>Reference</key>

<value>1.0 dk</value>

</entry>

<entry>

<key>AuthGrade</key>

<value>1</value>

</entry>

<entry>

<key>AT_ConfigType</key>

<value>WebApplication</value>

</entry>

<entry>

<key>AT_Security4</key>

<value>10.232.8.229 9 ESSOAdmin4 cn=ESSOAdmin44,cn=users,dc=us,dc=oracle,dc=com 0 0 1</value>

</entry>

<entry>

<key>AT_AppGUID</key>

<value>f9af015b-1323-41d5-a01a-95d4b1e6686d</value>

</entry>

<entry>

<key>Context</key>

<value>sN2zt7/sPabPnj+2+No+e0zAHKhXcXD3ujBxLopSy92ye+rG</value>

</entry>

<entry>

<key>Match1</key>

<value>d790cb67-9647-4e81-81d5-94dc4810c001</value>

</entry>

<entry>

<key>AT_ProvisioningRights1</key>

<value>10.232.8.229 9 OAMWebAuth111 cn=OAMWebAuth111,cn=Users,dc=us,dc=oracle,dc=com 0 0 65538</value>

</entry>

<entry>

<key>AT_Security3</key>

<value>10.232.8.229 9 ESSOAdmin3 cn=ESSOAdmin33,cn=users,dc=us,dc=oracle,dc=com 0 0 0</value>

</entry>

<entry>

<key>AT_Security2</key>

<value>10.232.8.229 9 ESSOAdmin2 cn=ESSOAdmin22,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

<entry>

<key>AT_Security1</key>

<value>10.232.8.229 9 ESSOAdmin1 cn=ESSOAdmin11,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

</attributes>

<Matches>

<Match>

<id>d790cb67-9647-4e81-81d5-94dc4810c001</id>

<attributes>

<entry>

<key>AT_GUID</key>

<value>d790cb67-9647-4e81-81d5-94dc4810c001</value>

</entry>

<entry>

<key>Context</key>

<value>8IKzeEZpn9M/U6FhFDuD+YEg5SRRu3tT4D+qht3zLP4bWw9j</value>

</entry>

<entry>

<key>Match2</key>

<value>all,tag1,text,exact,val1</value>

</entry>

<entry>

<key>Match1</key>

<value>all,tag1,text,exact,val1</value>

</entry>

</attributes>

</Match>

</Matches>

<OffsetMatches>

<OffsetMatch>

<id>8b4f0a64-d7a2-47ec-acdc-e8848c96bcb3</id>

<attributes>

<entry>

<key>AT_GUID</key>

<value>8b4f0a64-d7a2-47ec-acdc-e8848c96bcb3</value>

</entry>

<entry>

<key>Context</key>

<value>dsKKfiADyPGZ3StgpslwGQJyXZSMeoqdBrUXATqglkCW390T</value>

</entry>

<entry>

<key>Match2</key>

<value>all,tag2,text,exact,val2</value>

</entry>

<entry>

<key>Match1</key>

<value>all,tag2,text,exact,val2</value>

</entry>

</attributes>

</OffsetMatch>

</OffsetMatches>

</ApplicationName>

</ApplicationConfiguration>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>079d6404-b973-42c9-9a8f-af33b58556df</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<COConfigInfo>ApplicationConfiguration</COConfigInfo>

<ApplicationConfiguration>

<egoStore_SyncState>d2978ef5-0821-45c9-ad76-205066e57c27</egoStore_SyncState>

<ApplicationName>

<name>WebPolicy11 section with Match_OffsetMatches1</name>

<attributes>

<entry>

<key>UID</key>

<value>079d6404-b973-42c9-9a8f-af33b58556df</value>

</entry>

<entry>

<key>CaptureType</key>

<value>0</value>

</entry>

<entry>

<key>URL1</key>

<value>.*?https://www\.oraclebenefits\.com/ess/home/login.*</value>

</entry>

<entry>

<key>LogonLoopGracePeriodMode</key>

<value>1</value>

</entry>

<entry>

<key>LogonLoopGracePeriodResetPerProcess</key>

<value>1</value>

</entry>

<entry>

<key>IDField</key>

<value>0,0,0,text</value>

</entry>

<entry>

<key>IDLabel</key>

<value>Customer ID/SSN</value>

</entry>

<entry>

<key>CategoryLvl1</key>

<value>WebApplication</value>

</entry>

<entry>

<key>Reference</key>

<value>1.0 dk</value>

</entry>

<entry>

<key>AT_ConfigType</key>

<value>WebApplication</value>

</entry>

<entry>

<key>AuthGrade</key>

<value>1</value>

</entry>

<entry>

<key>AT_Security4</key>

<value>10.232.8.229 9 ESSOAdmin4 cn=ESSOAdmin4,cn=users,dc=us,dc=oracle,dc=com 0 0 1</value>

</entry>

<entry>

<key>URLMatchType1</key>

<value>regex</value>

</entry>

<entry>

<key>AT_AppGUID</key>

<value>079d6404-b973-42c9-9a8f-af33b58556df</value>

</entry>

<entry>

<key>PassField</key>

<value>0,0,0,password</value>

</entry>

<entry>

<key>Context</key>

<value>XmKl9+jQAdxaAExjpLX1P22X1xm3YwVZNqSTXxlfQ4sDlBT+</value>

</entry>

<entry>

<key>PassKeyLabel</key>

<value>PIN</value>

</entry>

<entry>

<key>IsSecureID</key>

<value>0</value>

</entry>

<entry>

<key>AT_Security3</key>

<value>10.232.8.229 9 ESSOAdmin3 cn=ESSOAdmin3,cn=users,dc=us,dc=oracle,dc=com 0 0 0</value>

</entry>

<entry>

<key>AT_ProvisioningRights1</key>

<value>10.232.8.229 9 OAMWebAuth11 cn=OAMWebAuth11,cn=Users,dc=us,dc=oracle,dc=com 0 0 65536</value>

</entry>

<entry>

<key>AT_Security2</key>

<value>10.232.8.229 9 ESSOAdmin2 cn=ESSOAdmin2,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

<entry>

<key>LogonLoopGracePeriod</key>

<value>8</value>

</entry>

<entry>

<key>AT_Security1</key>

<value>10.232.8.229 9 ESSOAdmin1 cn=ESSOAdmin1,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

<entry>

<key>AT_ProvisioningRights2</key>

<value>10.232.8.229 9 OAMWebAuth12 cn=OAMWebAuth12,cn=group,dc=us,dc=oracle,dc=com 0 0 65537</value>

</entry>

</attributes>

<Sections>

<Section>

<id>c47b3bce-28e7-4242-be74-6847e29591b0</id>

<attributes>

<entry>

<key>AT_PageName</key>

<value>Oracle Stock - Fidelity</value>

</entry>

<entry>

<key>AT_PageGUID</key>

<value>c47b3bce-28e7-4242-be74-6847e29591b0</value>

</entry>

<entry>

<key>URLReferrer</key>

<value>https://www.oraclebenefits.com/ess/home/SetPassword.wya</value>

</entry>

<entry>

<key>FormType</key>

<value>Logon</value>

</entry>

<entry>

<key>ParentKey1</key>

<value>Oracle 401k and Stock - Fidelity1</value>

</entry>

<entry>

<key>PassField</key>

<value>0,1,pin,password</value>

</entry>

<entry>

<key>IDField</key>

<value>0,0,ssn,text</value>

</entry>

<entry>

<key>Context</key>

<value>FzdEA8T0R1k0QaCQHOP5JIxcWdpyLtIkmhBSTRFYKF0wvZ7G</value>

</entry>

<entry>

<key>OffsetMatch1</key>

<value>8b4f0a64-d7a2-47ec-acdc-e8848c96bcb3,1</value>

</entry>

<entry>

<key>Match1</key>

<value>d790cb67-9647-4e81-81d5-94dc4810c001</value>

</entry>

<entry>

<key>MultiFrame</key>

<value>1</value>

</entry>

<entry>

<key>SubmitViaKeyboard</key>

<value>0</value>

</entry>

</attributes>

<Matches>

<Match>

<id>d790cb67-9647-4e81-81d5-94dc4810c001</id>

<attributes>

<entry>

<key>AT_GUID</key>

<value>d790cb67-9647-4e81-81d5-94dc4810c001</value>

</entry>

<entry>

<key>Context</key>

<value>lnI9YBSNYtmdsgpNxbV/LbkKjqyMAHsyEqpn0kvzk8cAJK7n</value>

</entry>

<entry>

<key>Match2</key>

<value>all,tag1,text,exact,val1</value>

</entry>

<entry>

<key>Match1</key>

<value>all,tag1,text,exact,val1</value>

</entry>

</attributes>

</Match>

</Matches>

<OffsetMatches>

<OffsetMatch>

<id>8b4f0a64-d7a2-47ec-acdc-e8848c96bcb3</id>

<attributes>

<entry>

<key>AT_GUID</key>

<value>8b4f0a64-d7a2-47ec-acdc-e8848c96bcb3</value>

</entry>

<entry>

<key>Context</key>

<value>fNTy7jYk7UMfS4DaPpc5hBDQB0iiqDUtPPdehiga4YDf3tKF</value>

</entry>

<entry>

<key>Match2</key>

<value>all,tag2,text,exact,val2</value>

</entry>

<entry>

<key>Match1</key>

<value>all,tag2,text,exact,val2</value>

</entry>

</attributes>

</OffsetMatch>

</OffsetMatches>

</Section>

<Section>

<id>147b3bce-28e7-4242-be74-6847e29591b1</id>

<attributes>

<entry>

<key>AT_PageName</key>

<value>Oracle Stock - Fidelity</value>

</entry>

<entry>

<key>AT_PageGUID</key>

<value>147b3bce-28e7-4242-be74-6847e29591b1</value>

</entry>

<entry>

<key>URLReferrer</key>

<value>https://www.oraclebenefits.com/ess/home/SetPassword.wya</value>

</entry>

<entry>

<key>FormType</key>

<value>Logon</value>

</entry>

<entry>

<key>ParentKey1</key>

<value>Oracle 401k and Stock - Fidelity1</value>

</entry>

<entry>

<key>PassField</key>

<value>0,1,pin,password</value>

</entry>

<entry>

<key>IDField</key>

<value>0,0,ssn,text</value>

</entry>

<entry>

<key>Context</key>

<value>e3pAe01QlmX4KJ5JX3KAdfCQB0wUaEAO2Qi8Q8caecY2On6j</value>

</entry>

<entry>

<key>MultiFrame</key>

<value>1</value>

</entry>

<entry>

<key>SubmitViaKeyboard</key>

<value>0</value>

</entry>

</attributes>

</Section>

</Sections>

</ApplicationName>

</ApplicationConfiguration>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

</ESSO_Policies>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

3.2.13 Policy List

Policy list operation.

3.2.13.1 Request

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_RepositoryID>3d8d102e-d31d-4223-9ddb-ef154e5f8c45</ESSO_RepositoryID>

<ESSO_Data>

<ESSO_Policies>

<ESSO_PolicyType>

<name>Federated</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>609e0d44-3815-4064-a204-7061b2be917f</ESSO_ID>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>SSOProtected</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>948806ed-9391-4947-ab93-129db72724ac</ESSO_ID>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>SharingGroup</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>1c81852e-4910-4a95-8f1c-77CSG</ESSO_ID>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>11128fbf-6242-48ac-8714-2b2234a36e119</ESSO_ID>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>PasswordPolicy</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>3458-fafcd-3829-adfe-4822</ESSO_ID>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>fa0f3b29-9b74-49e3-a15a-2d5978ce3a31</ESSO_ID>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>AdminOverrides</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>b745083b-bb50-4a64-94a8-d791f346413b</ESSO_ID>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>WebApplication</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>079d6404-b973-42c9-9a8f-af33b58556df</ESSO_ID>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>14f8c37d-9030-4429-b1f5-5965e7df8af1</ESSO_ID>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>cc184535-33c9-4afa-a62d-70981e4f6f01</ESSO_ID>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>WindowsApplication</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>c81852e-4910-4a95-8f1c-77cc4600a6cb</ESSO_ID>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>OpamTemplateMap</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>cn=OpamTemplateMap</ESSO_ID>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

</ESSO_Policies>

</ESSO_Data>

</ESSO_Request>

</ESSO_Requests>

</ESSO>

3.2.13.2 Response

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Response>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_Policies>

<ESSO_PolicyType>

<name>Federated</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>609e0d44-3815-4064-a204-7061b2be917f</ESSO_ID>

<ESSO_Result>9</ESSO_Result>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>SSOProtected</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>948806ed-9391-4947-ab93-129db72724ac</ESSO_ID>

<ESSO_Result>9</ESSO_Result>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>SharingGroup</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>1c81852e-4910-4a95-8f1c-77CSG</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<COConfigInfo>TargetUserCSG</COConfigInfo>

<section>

<id>TargetUserCSG</id>

<attributes>

<entry>

<key>UID</key>

<value>1c81852e-4910-4a95-8f1c-77CSG</value>

</entry>

<entry>

<key>Logo</key>

<value>img/logos/sq_oracle.png</value>

</entry>

<entry>

<key>SharedFields</key>

<value>Password;UserID</value>

</entry>

<entry>

<key>AT_GUID</key>

<value>1c81852e-4910-4a95-8f1c-77CSG</value>

</entry>

<entry>

<key>KeyCredentialsFields</key>

<value />

</entry>

<entry>

<key>Context</key>

<value>3xyO3EiNNMxOY1Wf8bCoVRKLTH08T8R5FJAezD/qOEHz95Gb</value>

</entry>

<entry>

<key>IsPreFillSharedFields</key>

<value>1</value>

</entry>

<entry>

<key>Group</key>

<value>TargetUserCSG</value>

</entry>

<entry>

<key>AT_Security2</key>

<value>10.232.8.229 9 ESSOAdmin2 cn=ESSOAdmin2,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

<entry>

<key>IsCreatePreDetAccountsAuto</key>

<value>0</value>

</entry>

<entry>

<key>AT_Security1</key>

<value>10.232.8.229 9 ESSOAdmin1 cn=ESSOAdmin1,cn=users,dc=us,dc=oracle,dc=com 0 0 0</value>

</entry>

<entry>

<key>AT_ConfigType</key>

<value>SharingGroup</value>

</entry>

</attributes>

</section>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>11128fbf-6242-48ac-8714-2b2234a36e119</ESSO_ID>

<ESSO_Result>9</ESSO_Result>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>PasswordPolicy</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>3458-fafcd-3829-adfe-4822</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<COConfigInfo>TargetUserPGP</COConfigInfo>

<section>

<id>TargetUserPGP</id>

<attributes>

<entry>

<key>UID</key>

<value>3458-fafcd-3829-adfe-4822</value>

</entry>

<entry>

<key>NUMERIC</key>

<value>1</value>

</entry>

<entry>

<key>AT_GUID</key>

<value>3458-fafcd-3829-adfe-4822</value>

</entry>

<entry>

<key>OTHER</key>

<value>1</value>

</entry>

<entry>

<key>NUMRPTMAX</key>

<value>7</value>

</entry>

<entry>

<key>SIZEMINUPPER</key>

<value>0</value>

</entry>

<entry>

<key>SCHARSIZE</key>

<value>13</value>

</entry>

<entry>

<key>LIMSAMECHARSAP</key>

<value>0</value>

</entry>

<entry>

<key>SIZEMINLOWER</key>

<value>0</value>

</entry>

<entry>

<key>ALPHA</key>

<value>UL</value>

</entry>

<entry>

<key>NUMCONSMAX</key>

<value>7</value>

</entry>

<entry>

<key>NUMSIZE</key>

<value>13</value>

</entry>

<entry>

<key>SCHARSIZEMIN</key>

<value>0</value>

</entry>

<entry>

<key>ConfigName</key>

<value>TargetUserPGP</value>

</entry>

<entry>

<key>SCHARFLAGLAST</key>

<value>1</value>

</entry>

<entry>

<key>NUMFLAGLAST</key>

<value>1</value>

</entry>

<entry>

<key>AT_ConfigType</key>

<value>PasswordPolicy</value>

</entry>

<entry>

<key>SIZE</key>

<value>13</value>

</entry>

<entry>

<key>SCHARS</key>

<value>1</value>

</entry>

<entry>

<key>NUMSIZEMIN</key>

<value>0</value>

</entry>

<entry>

<key>SIZEMIN</key>

<value>3</value>

</entry>

<entry>

<key>NOTSAMEASPREV</key>

<value>0</value>

</entry>

<entry>

<key>Context</key>

<value>BrmMYXKuk8sT8M6LwxOg5OgGAR1IT2ytcLRx+twCHEZyfa70</value>

</entry>

<entry>

<key>NUMLIMSAMECAP</key>

<value>5</value>

</entry>

<entry>

<key>NUMFLAGFIRST</key>

<value>1</value>

</entry>

<entry>

<key>AT_Security2</key>

<value>10.232.8.229 9 ESSOAdmin2 cn=ESSOAdmin2,cn=users,dc=us,dc=oracle,dc=com 0 0 0</value>

</entry>

<entry>

<key>AT_Security1</key>

<value>10.232.8.229 9 ESSOAdmin1 cn=ESSOAdmin1,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

<entry>

<key>SCHARFLAGFIRST</key>

<value>1</value>

</entry>

</attributes>

</section>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>fa0f3b29-9b74-49e3-a15a-2d5978ce3a31</ESSO_ID>

<ESSO_Result>9</ESSO_Result>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>AdminOverrides</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>b745083b-bb50-4a64-94a8-d791f346413b</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<COConfigInfo>b745083b-bb50-4a64-94a8-d791f346413b</COConfigInfo>

<section>

<id>b745083b-bb50-4a64-94a8-d791f346413b</id>

<attributes>

<entry>

<key>Extensions\AccessManager:AllowReveal</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>AT_GUID</key>

<value>b745083b-bb50-4a64-94a8-d791f346413b</value>

</entry>

<entry>

<key>Extensions\AccessManager\BHO:FeedbackColor</key>

<value>STRING:red 7px solid</value>

</entry>

<entry>

<key>Extensions\AccessManager\BHOIgnoredWebPages:WebPage1</key>

<value>STRING:</value>

</entry>

<entry>

<key>Extensions\AccessManager\BHO:ShowBorder</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>Extensions\AccessManager\BHO:ScrollIntoView</key>

<value>DWORD:0</value>

</entry>

<entry>

<key>Extensions\AccessManager:DefaultPolicy</key>

<value>STRING:TargetUserPGP</value>

</entry>

<entry>

<key>AT_ConfigType</key>

<value>AdminOverrides</value>

</entry>

<entry>

<key>Extensions\AccessManager:ReauthOnReveal</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>Extensions\AccessManager:UpperAlphaChars</key>

<value>STRING:ABCDEFGHIJKLMNOPQRSTUVWXYZ</value>

</entry>

<entry>

<key>AT_Description</key>

<value />

</entry>

<entry>

<key>Extensions\AccessManager:DNLevelsToMatch</key>

<value>DWORD:2</value>

</entry>

<entry>

<key>Context</key>

<value>5S6ugcVZcyIWK9XArxZjp27UTfszJWu4NVzM8kgp3SJxmdtF</value>

</entry>

<entry>

<key>Extensions\AccessManager:HideMaskedFieldLength</key>

<value>DWORD:1</value>

</entry>

<entry>

<key>Extensions\AccessManager:SpecialChars</key>

<value>STRING:!@#$î&amp;*()_-+=[]\|,?</value>

</entry>

<entry>

<key>Extensions\AccessManager:NumericChars</key>

<value>STRING:1234567890</value>

</entry>

<entry>

<key>Extensions\AccessManager\BHOAllowedDynamicWebPages:DynamicWebPage1</key>

<value>STRING:</value>

</entry>

<entry>

<key>AT_Name</key>

<value>TargetUserGAS11</value>

</entry>

<entry>

<key>Extensions\AccessManager:LowerAlphaChars</key>

<value>STRING:abcdefghijklmnopqrstuvwxyz</value>

</entry>

</attributes>

</section>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>WebApplication</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>079d6404-b973-42c9-9a8f-af33b58556df</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

<COConfigInfo>ApplicationConfiguration</COConfigInfo>

<ApplicationConfiguration>

<egoStore_SyncState>d2978ef5-0821-45c9-ad76-205066e57c27</egoStore_SyncState>

<ApplicationName>

<name>WebPolicy11 section with Match_OffsetMatches1</name>

<attributes>

<entry>

<key>UID</key>

<value>079d6404-b973-42c9-9a8f-af33b58556df</value>

</entry>

<entry>

<key>CaptureType</key>

<value>0</value>

</entry>

<entry>

<key>URL1</key>

<value>.*?https://www\.oraclebenefits\.com/ess/home/login.*</value>

</entry>

<entry>

<key>LogonLoopGracePeriodMode</key>

<value>1</value>

</entry>

<entry>

<key>LogonLoopGracePeriodResetPerProcess</key>

<value>1</value>

</entry>

<entry>

<key>IDField</key>

<value>0,0,0,text</value>

</entry>

<entry>

<key>IDLabel</key>

<value>Customer ID/SSN</value>

</entry>

<entry>

<key>CategoryLvl1</key>

<value>WebApplication</value>

</entry>

<entry>

<key>Reference</key>

<value>1.0 dk</value>

</entry>

<entry>

<key>AT_ConfigType</key>

<value>WebApplication</value>

</entry>

<entry>

<key>AuthGrade</key>

<value>1</value>

</entry>

<entry>

<key>AT_Security4</key>

<value>10.232.8.229 9 ESSOAdmin4 cn=ESSOAdmin4,cn=users,dc=us,dc=oracle,dc=com 0 0 1</value>

</entry>

<entry>

<key>URLMatchType1</key>

<value>regex</value>

</entry>

<entry>

<key>AT_AppGUID</key>

<value>079d6404-b973-42c9-9a8f-af33b58556df</value>

</entry>

<entry>

<key>PassField</key>

<value>0,0,0,password</value>

</entry>

<entry>

<key>Context</key>

<value>XmKl9+jQAdxaAExjpLX1P22X1xm3YwVZNqSTXxlfQ4sDlBT+</value>

</entry>

<entry>

<key>PassKeyLabel</key>

<value>PIN</value>

</entry>

<entry>

<key>IsSecureID</key>

<value>0</value>

</entry>

<entry>

<key>AT_Security3</key>

<value>10.232.8.229 9 ESSOAdmin3 cn=ESSOAdmin3,cn=users,dc=us,dc=oracle,dc=com 0 0 0</value>

</entry>

<entry>

<key>AT_ProvisioningRights1</key>

<value>10.232.8.229 9OAMWebAuth11 cn=OAMWebAuth11,cn=Users,dc=us,dc=oracle,dc=com 0 0 65536</value>

</entry>

<entry>

<key>AT_Security2</key>

<value>10.232.8.229 9 ESSOAdmin2 cn=ESSOAdmin2,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

<entry>

<key>LogonLoopGracePeriod</key>

<value>8</value>

</entry>

<entry>

<key>AT_Security1</key>

<value>10.232.8.229 9 ESSOAdmin1 cn=ESSOAdmin1,cn=groups,dc=us,dc=oracle,dc=com 0 1 0</value>

</entry>

<entry>

<key>AT_ProvisioningRights2</key>

<value>10.232.8.229 9 OAMWebAuth12 cn=OAMWebAuth12,cn=group,dc=us,dc=oracle,dc=com 0 0 65537</value>

</entry>

</attributes>

<Sections>

<Section>

<id>c47b3bce-28e7-4242-be74-6847e29591b0</id>

<attributes>

<entry>

<key>AT_PageName</key>

<value>Oracle Stock - Fidelity</value>

</entry>

<entry>

<key>AT_PageGUID</key>

<value>c47b3bce-28e7-4242-be74-6847e29591b0</value>

</entry>

<entry>

<key>URLReferrer</key>

<value>https://www.oraclebenefits.com/ess/home/SetPassword.wya</value>

</entry>

<entry>

<key>FormType</key>

<value>Logon</value>

</entry>

<entry>

<key>ParentKey1</key>

<value>Oracle 401k and Stock - Fidelity1</value>

</entry>

<entry>

<key>PassField</key>

<value>0,1,pin,password</value>

</entry>

<entry>

<key>IDField</key>

<value>0,0,ssn,text</value>

</entry>

<entry>

<key>Context</key>

<value>FzdEA8T0R1k0QaCQHOP5JIxcWdpyLtIkmhBSTRFYKF0wvZ7G</value>

</entry>

<entry>

<key>OffsetMatch1</key>

<value>8b4f0a64-d7a2-47ec-acdc-e8848c96bcb3,1</value>

</entry>

<entry>

<key>Match1</key>

<value>d790cb67-9647-4e81-81d5-94dc4810c001</value>

</entry>

<entry>

<key>MultiFrame</key>

<value>1</value>

</entry>

<entry>

<key>SubmitViaKeyboard</key>

<value>0</value>

</entry>

</attributes>

<Matches>

<Match>

<id>d790cb67-9647-4e81-81d5-94dc4810c001</id>

<attributes>

<entry>

<key>AT_GUID</key>

<value>d790cb67-9647-4e81-81d5-94dc4810c001</value>

</entry>

<entry>

<key>Context</key>

<value>lnI9YBSNYtmdsgpNxbV/LbkKjqyMAHsyEqpn0kvzk8cAJK7n</value>

</entry>

<entry>

<key>Match2</key>

<value>all,tag1,text,exact,val1</value>

</entry>

<entry>

<key>Match1</key>

<value>all,tag1,text,exact,val1</value>

</entry>

</attributes>

</Match>

</Matches>

<OffsetMatches>

<OffsetMatch>

<id>8b4f0a64-d7a2-47ec-acdc-e8848c96bcb3</id>

<attributes>

<entry>

<key>AT_GUID</key>

<value>8b4f0a64-d7a2-47ec-acdc-e8848c96bcb3</value>

</entry>

<entry>

<key>Context</key>

<value>fNTy7jYk7UMfS4DaPpc5hBDQB0iiqDUtPPdehiga4YDf3tKF</value>

</entry>

<entry>

<key>Match2</key>

<value>all,tag2,text,exact,val2</value>

</entry>

<entry>

<key>Match1</key>

<value>all,tag2,text,exact,val2</value>

</entry>

</attributes>

</OffsetMatch>

</OffsetMatches>

</Section>

<Section>

<id>147b3bce-28e7-4242-be74-6847e29591b1</id>

<attributes>

<entry>

<key>AT_PageName</key>

<value>Oracle Stock - Fidelity</value>

</entry>

<entry>

<key>AT_PageGUID</key>

<value>147b3bce-28e7-4242-be74-6847e29591b1</value>

</entry>

<entry>

<key>URLReferrer</key>

<value>https://www.oraclebenefits.com/ess/home/SetPassword.wya</value>

</entry>

<entry>

<key>FormType</key>

<value>Logon</value>

</entry>

<entry>

<key>ParentKey1</key>

<value>Oracle 401k and Stock - Fidelity1</value>

</entry>

<entry>

<key>PassField</key>

<value>0,1,pin,password</value>

</entry>

<entry>

<key>IDField</key>

<value>0,0,ssn,text</value>

</entry>

<entry>

<key>Context</key>

<value>e3pAe01QlmX4KJ5JX3KAdfCQB0wUaEAO2Qi8Q8caecY2On6j</value>

</entry>

<entry>

<key>MultiFrame</key>

<value>1</value>

</entry>

<entry>

<key>SubmitViaKeyboard</key>

<value>0</value>

</entry>

</attributes>

</Section>

</Sections>

</ApplicationName>

</ApplicationConfiguration>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>14f8c37d-9030-4429-b1f5-5965e7df8af1</ESSO_ID>

<ESSO_Result>9</ESSO_Result>

</ESSO_Policy>

<ESSO_Policy>

<ESSO_ID>cc184535-33c9-4afa-a62d-70981e4f6f01</ESSO_ID>

<ESSO_Result>9</ESSO_Result>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>WindowsApplication</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>c81852e-4910-4a95-8f1c-77cc4600a6cb</ESSO_ID>

<ESSO_Result>9</ESSO_Result>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

<ESSO_PolicyType>

<name>OpamTemplateMap</name>

<ESSO_PolicyList>

<ESSO_Policy>

<ESSO_ID>cn=OpamTemplateMap</ESSO_ID>

<ESSO_Result>9</ESSO_Result>

</ESSO_Policy>

</ESSO_PolicyList>

</ESSO_PolicyType>

</ESSO_Policies>

</ESSO_Data>

</ESSO_Response>

</ESSO_Responses>

</ESSO>

3.2.14 Provisioning Create

Provisioning create operation.

3.2.14.1 Request

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_Data>

<ESSO_Instructions>

<ESSO_Identifier>abcd1234:transient identifier</ESSO_Identifier>

<ESSO_Type>DELEGATE</ESSO_Type>

<ESSO_TargetUser>marcOAM</ESSO_TargetUser>

<ESSO_CredId>{3fe6237d-023b-45ea-97ab-6b2d65430d4d}</ESSO_CredId>

</ESSO_Instructions>

</ESSO_Data>

</ESSO_Request>

</ESSO_Requests>

</ESSO>

3.2.14.2 Response

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_Instructions>

<ESSO_ID>{43041556-d7cd-4a10-b480-2d575f1e917e}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Instructions>

</ESSO_Data>

</ESSO_Responses>

</ESSO>

3.2.15 Event Add

Event add operation.

3.2.15.1 Request

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Requests>

<ESSO_Request>

<ESSO_Data>

<ESSO_Events>

<ESSO_Event>

<ESSO_Identifier>abcd1234:transient identifier</ESSO_Identifier>

<data>

<guid>guid</guid>

<prodVersion>prod version</prodVersion>

<prodName>product name</prodName>

<appName>app name</appName>

<appUserId>userid</appUserId>

<appRef>app reference</appRef>

<appThirdField>third field</appThirdField>

<appFourthField>fourth field</appFourthField>

<eventTimeServer>561261267889</eventTimeServer>

<eventTimeClient>7816219269178</eventTimeClient>

<ssoUserId>sso user id</ssoUserId>

<credType>cred type</credType>

<winUserName>win user name</winUserName>

<samAccName>sam acc name</samAccName>

<hashValue>hash value</hashValue>

<hashType>hash type</hashType>

<logonMethod>logon method</logonMethod>

<hostName>host name</hostName>

<hostFingerPrint>host finger print</hostFingerPrint>

<comments>comments</comments>

<serviceOperation>service operation</serviceOperation>

</data>

</ESSO_Event>

</ESSO_Events>

</ESSO_Data>

</ESSO_Request>

</ESSO_Requests></ESSO>

3.2.15.2 Response

<?xml version="1.0" encoding="UTF-8"?>

<ESSO>

<Context>uu-encoded, salted SHA2-256 payload hash</Context>

<ESSO_General>

<ESSO_Version>1</ESSO_Version>

</ESSO_General>

<ESSO_Responses>

<ESSO_Result>0</ESSO_Result>

<ESSO_Data>

<ESSO_Events>

<ESSO_Event>

<ESSO_ID>{43041556-d7cd-4a10-b480-2d575f1e917e}</ESSO_ID>

<ESSO_Result>0</ESSO_Result>

</ESSO_Event>

</ESSO_Events>

</ESSO_Data>

</ESSO_Responses></ESSO>

Oracle Legal Notices

Copyright Notice

Copyright © 1994-2016, Oracle and/or its affiliates. All rights reserved.

License Restrictions Warranty/Consequential Damages Disclaimer

This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.

Warranty Disclaimer

The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.

Restricted Rights Notice

If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, then the following notice is applicable:

U.S. GOVERNMENT END USERS: Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are "commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs. No other rights are granted to the U.S. Government.

Hazardous Applications Notice

This software or hardware is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.

Trademark Notice

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.

Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group.

Third-Party Content, Products, and Services Disclaimer

This software or hardware and documentation may provide access to or information about content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services unless otherwise set forth in an applicable agreement between you and Oracle. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services, except as set forth in an applicable agreement between you and Oracle.

Alpha and Beta Draft Documentation Notice

If this document is in preproduction status:

This documentation is in preproduction status and is intended for demonstration and preliminary use only. It may not be specific to the hardware on which you are using the software. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to this documentation and will not be responsible for any loss, costs, or damages incurred due to the use of this documentation.

Private Alpha and Beta Draft Documentation Notice

If this document is in private preproduction status:

The information contained in this document is for informational sharing purposes only and should be considered in your capacity as a customer advisory board member or pursuant to your beta trial agreement only. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described in this document remains at the sole discretion of Oracle.

This document in any form, software or printed matter, contains proprietary information that is the exclusive property of Oracle. Your access to and use of this confidential material is subject to the terms and conditions of your Oracle Master Agreement, Oracle License and Services Agreement, Oracle PartnerNetwork Agreement, Oracle distribution agreement, or other license agreement which has been executed by you and Oracle and with which you agree to comply. This document and information contained herein may not be disclosed, copied, reproduced, or distributed to anyone outside Oracle without prior written consent of Oracle. This document is not part of your license agreement nor can it be incorporated into any contractual agreement with Oracle or its subsidiaries or affiliates.

Documentation Accessibility

For information about Oracle's commitment to accessibility, visit the Oracle Accessibility Program website at http://www.oracle.com/pls/topic/lookup?ctx=acc&id=docacc.

Access to Oracle Support

Oracle customers that have purchased support have access to electronic support through My Oracle Support. For information, visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=info or visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=trs if you are hearing impaired.