In the “6 Integrating with Oracle Access Manager” section of OIM’s “Best Practice Guide” it says:

Locate the following Single Sign-On configuration (the following are the default settings without Single Sign-On):

< web-client>
< Authentication>Default< /Authentication>
< AuthHeader>REMOTE_USER< /AuthHeader>
< /web-client>

Edit the single sign-on configuration as follows.

Replace < SSO_HEADER_NAME> with the appropriate header configured in your  single sign-on system:

< web-client>
< Authentication>SSO< /Authentication>
< AuthHeader>< SSO_HEADER_NAME>< /AuthHeader>
< /web-client>

Most users will leave this value because it is the default.  It should be mentioned in the document that this default value *MUST* be changed.

Slightly important detail left out… sheesh!

.: Adam