Push notifications with Oracle Mobile Authenticator

Question

Created Mar ’16

Replies 5

Boosts 0

Views 1.4k

Participants 2

I am currently working to configure the Oracle Mobile Authenticator to send push notifications to my Apple device when a user logs in to my web system as a second form of authentication. I am seeing the push notification go out to the APNS system, but I am getting no response back in terms of timeout, failure, or notification on my mobile device.

Is there any way I can enable logging on the APNS side, or troubleshoot why nothing is going out to my device? I have tried on several different device types with no luck.

Environment Specifics:

Oracle Mobile Authenticator 3.0 - Mose recent version of application from the Apple App Store, able to configure and connect with my system, but no push notifications received.
Oracle Access Manager 11.2.3 - I have successfully tested the configurations here using Android Push Notifications. I believe the problem is strictly on the Apple side, and is not an issue with connectivity between the OAM server and the APNS server
Developer Push Certificate - I am currently in developement, so I am using the Developer certificate instead of the Production certificate.

Log message excerpt showing connection to APNS:

...sendAPNSNotification oracle.security.am.sfa.SFAUtilsendAPNSNotification APNS push notification send took 3 ms

...sendAPNSNotification oracle.security.am.sfa.SFAUtilsendAPNSNotification returning status true

Answered by arjun.bajaj in 126164022

For anyone that finds this thread, it appears that even though the Oracle Mobile Authenticator is designed to support One Time Passwords for many different systems, in order to use push notifications you must use the cert that only Oracle has access to. (You can not create your own push notifications certificate and use their application). Oracle is willing to work with developers to help them use their API to develope their own custom application.

AB

Boost

Answer 1

jonchambers OP

Mar ’16

To clarify, are you a developer of Oracle Mobile Authenticator?

Are you using a push notification library that supports the latest HTTP/2-based APNs protocol? It can be tough to know what's going wrong with older versions of the protocol, since they don't acknowledge successful notifications. If you can use the HTTP/2-based protocol, you'll get a lot more information.

0

Answer 2

arjun.bajaj OP

Mar ’16

I am not a developer of Oracle Mobile Authenticator.

I am trying to do out of the box configurations between Oracle Access Manager and Oracle Mobile Authenticator. I followed the configurations steps documented by Oracle here docs(.)oracle(.)com(/)cd(/)E52734_01(/)oam(/)AIAAG(/)adaptive_auth_intro(.)htm#AIAAG89726. I've created a development certificate using the Apple Developer Console and added it into my server as detailed in the link above.

I don't have any access into the Oracle Mobile Authenticator application, so I can't check on which library it is using sadly. I'm currently trying to see if this issue is network related. When I run a curl -v api.push.apple.com:2195 from my server I get a "connection refused" back.

Any thoughts are helpful, thanks for your response!

AB

0

Answer 3

jonchambers OP

Mar ’16

…also, this tech note has some helpful debugging steps, if you haven't tried them already.

0

Answer 4

arjun.bajaj OP

Mar ’16

Thanks for the link, for some reason my previous post is still being moderated.

I enabled push logging on my device yesterday and found that a notification is seemingly being pushed to the device, but is not displaying anything on arrival. Here is a snippit of the log
<APSCourier: 0x14d552f0>: Received request from <APSConnectionServer: 0x14eb8d70> to generate token for topic "com.oracle.idm.mobileauthenticator" and identifier ""

And the pastebin link for the whole log dump - pastebin(.)com(/)zqtQngcF

This leads me to belive that the push notification is making it to the device, but perhaps has no content pushed with it? Any ideas why I might be seeing what I am in the logs?

0

Answer 5

arjun.bajaj OP

Mar ’16

Accepted Answer

For anyone that finds this thread, it appears that even though the Oracle Mobile Authenticator is designed to support One Time Passwords for many different systems, in order to use push notifications you must use the cert that only Oracle has access to. (You can not create your own push notifications certificate and use their application). Oracle is willing to work with developers to help them use their API to develope their own custom application.

AB

0