PAM-IDCS Integration Module - OCI Cloud Services

1

Install PAM on Linux servers where users can SSH. Download pam_cloud.rpm and authn_oracle_cloud.rpm.

2

Create one confidential application in Oracle Identity Cloud Service with POSIX viewer role to register the Oracle Identity Cloud Service Linux Pluggable Authentication Module (PAM) as a client application and note the client id and client secret of confidential application.

1

Configure a wallet on Linux servers to store client_ID and client_secret of the confidential application. Use the following commands: walletMgr add client_id walletMgr add client_secret

2

Configure (PAM) on Linux servers using SSSD service.

3

Configure group and users with POSIX attributes to allow end-users authenticate with Oracle Identity Cloud Service using PAM on Linux. This is a very essential step. Only users with Posix attributes can authenticate with PAM. And this is not possible via console. This can be done using the command line only.