Enable OPSS Authorization ON Weblogic

When you are installing weblogic with EDG structure.
There is a documented bug with the approach. Your system jazn file get over write with each managed server you start.

First when you start the SOA managed server, all the roles will be mapped in the system jazn file.
then you go start a BAM server, It will overwrite the previous roles and adds only BAM Roles.

Oracle suggest to have OPSS Store to avoid missing the roles.

To have OPSS enable on Weblogic, You need to have RCU executed OPSS schemas.

1. Run RCU with OPSS.
2. Shutdown the AdminServer, Copy Security config from MGD_HOME to ADM_HOME
3. Start the AdminServer.

4.  Create A New Generic Data Source
      a.                        Name: opss-rac<RACn>

                        JNDI Name: jdbc/opss-rac<RACn>

                       Database Driver: *Oracle's Driver (Thin) for RAC Service-Instance Connections; Versions: 10 and later

                                              Uncheck ""Supports Global Transactions""

                             Select Targets

                Servers:

                        Check ""AdminServer""

                Clusters:

                        Check ""<<<env>>>OSB""

                        Check ""<<<env>>>SOA""

                        Check ""<<<env>>>WSM""

5. Create A New Multi Data Source

 Name: opss

                        JNDI Name: jdbc/opss

                        Algorithm Type: Load-Balancing

                        Click ""Next""

        Select Targets

                Servers:

                                Check ""AdminServer""

                Clusters:

                                Check ""<<<env>>>OSB""

                                Check ""<<<env>>>SOA""

                                Check ""<<<env>>>WSM""

                Click ""Next""

        Select Data Source Type

                Select ""Non-XA Driver""

                Click ""Next""

        Add Data Sources

                Check all ""opss-rac<n>"" in Available list

6. Reassociate OPSS security store with DB Schema

*********choose the WLST from Oracle_SOA/common/bin

connect() to adminServer

reassociateSecurityStore(domain=""<<<env>>>_domain"",servertype=""DB_ORACLE"",datasourcename=""jdbc/opss"", jpsroot=""cn=jps_<<<env>>>node"",join=""false"")

        exit()

7. Clear file based policy store

> cd $ADM_HOME/config/fmwconfig

> mv system-jazn-data.xml system-jazn-data.xml.opss.<<<yyyymmmdd>>>

> touch system-jazn-data.xml