Since you have landed on this article, you will probably have at least heard about OPSS. OPSS is the underlying security platform that provides security to Oracle Fusion Middleware and its applications. OPSS provides an abstraction layer in the form of standards-based application programming interfaces (APIs) that insulate developers from security and identity management implementation details. To be honest, i never been able to fully understand the subject of the matter. There is documentation which states that OPSS provides security to Weblogic, which to my experience and understanding of OPSS is not correct. Instead, the Weblogic security providers and asserters can provide security to OPSS through the SPI. OPSS also should not be tied to a specific application server, which may be the general architecture, only architecture and daily practice may differ.
OPSS can provide security different security services like authentication, authorization, roles and entitlements, etc. These services are delivered by OPSS providers configured in the jps-config.xml. Read the complete article here.
For regular information on Oracle PaaS become a member in the SOA & BPM Partner Community for registration please visit www.oracle.com/goto/emea/soa (OPN account required) If you need support with your account please contact the Oracle Partner Business Center.