http://onlineAppsDBA.com

Hi Atul. Nice to read this brief document on SSO. Can you provide me any metalink DOC ID or any other pointer where i could see more basic to implementation level information.

Thanks,
Praveshgupta@rediffmail.com

 

Hi Pravesh,
Thanks a lot. You need implementation of SSO which 10g Application Server or E-Business Suite or any other oracle product ?

Regards
Atul Kumar

 

Hi
If you want to configure SSL then use OWM Oracle wallet manager & in ssl.conf use directive

SSLWallet file {locationOfWallet}



If this is for OCA , Oracle Certifying Authority this is compltere separate component on Application Server

Atul

 

Hi Atul,
Can we avoid using SSO and let application automatically recognize user id we type when starting our computer ?
Thanks

 

Neto,
Yes you can do by implementing windows Native Authentication via kerbros . This is mentioned in SSO Administration Guide.

Atul

 

Hi Atul,
Can you tell me where I can find SSO Administration Guide ?
I didn't find it on OTN with other books.
Thanks.

 

http://download-uk.oracle.com/docs/cd/B14099_19/idmanage.1012/b14078/toc.htm


Atul

 

Hi Atul,
Thanks, I've seen this document but is there a pdf document?
It will be easier to find string (like Kerberos for example).
Are you heart that someone has successfully implemented windows Native Authentication via Kerberos so that anyone can connect to eBusiness Suite without entering user name or user password?

 

Neto,
To be frank I have not seen anyone implemented windows native authentication or better to say zero sign on on E-Business suite login but you can try on Test Server

 

Hi Atul,

i am Priya working as Apps DBA.I have implemented Windows native authentication with oracle where you can lgoin directly to applicationw ithout username/password.

 

Hi Priya,
Thats a good thing. Cheers ... Is this for 10g Application server only or also intergrated this with E-Business suite ?

 

Hi Pervesh,

Some Info Integrating Oracle E-Business Suite Release 11i with Oracle Internet Directory and Oracle Single Sign-On can be had from Note:261914.1

 

Hi Atul,

Can you give me some guide lines on Implementing SSO with other "Applications like Mail, 3rd party appl, WNA etc"

Yathish

 

Yatish,
Each application has its own sso mechanism another check is if that application support SSO or not . Most of Oracle application use mod_osso for sso access. Kindly check each application's document for configuring it with SSO Server

 

Hi, Atul,

What is I have different passwords in in different applications (supposed I have the same user name for all apps), will SSO validates all these passwords?

Thanks,

Hank

 

If various applications share same SSO instance then they will have same password (Though different username can be mapped to single account in various applications )

 

Hi Atul,

Can we integrate a single Oracle 10gAS for SSO with peoplesoft,JD Edwards and E-business suite? If yes, can you suggest me any doc. or white paper on this topic and how to implement the same?

 

For Integrating 10g AS SSO with E-Business Suite check

233436.1 Installing Oracle Application Server 10g with Oracle E-Business Suite Release 11i

https://metalink.oracle.com/metalink/plsql/docs/10g-Implementation.pdf (11i with SSO build 4)



For integration with peoplesoft and Siebel I'll cover in near fture here

 

Hi Atul,

A very good brief doc on SSO.It helped me to understand the basics.
Can u help me for how to login to portal which is SSO enabled. When i try to login it asks me for SSO login/pwd. what should i enter. I am using 10gAS(9.0.4) with OID running on separate host(infra server). I tried with username=orcladmin and password=deafult passwd(manager1) but it is givin error as "Your password has expired. Please contact administrator to reset it"

 

Hi Atul,
I want SSO put in login the last username entered, how can do this?

 

hi can u guide me how to install SSO SDK iam not clear in that part

 

Hi Atul,

I have Installed 10g Application server 10.1.2 and SOA. Now my user wants me to use SSO Fot Authentication all the components of SOA. Any Suggestions on How to Integrate them I am Quite new to this and your suggestion would be most helpful.

Thanks,
Poornima.

 

Can you point me to IOD user management Doc.

Thanks,
Poornima.

 

Check OIDDAS for OID user management .

http://download.oracle.com/docs/cd/B28196_01/idmanage.1014/b15996/das_admin.htm#CHDGFFGG

 

http://download.oracle.com/docs/cd/B28196_01/idmanage.1014/b15996/toc.htm

 

For installing SSOSDK check metalink Note

182701.1 Install and Configure SSO SDK and Servlet Partner Application

 

Hello Atul,
We have 9i AS and 11.5.10.2, and we are planning to implement SSO. Is that possible to do "SSO" on 9iAS? If so, how can we do that?
I read somewhere that, for "SSO", minimum requirement is 10g AS.
Thanks in Adv,
Miriyala

 

Atul,

Two questions:
1) o you usually install SSO on a separate host or on the same host as the middle tier?
2) In the second case, if you use SSL, you'll need to have separate ports for SSO and middle tier web servers. Correct?

Thanks,

Massimo

 

Massimo,
Default installation of sso is with OID (infrastructure tier)

but for security point of view I would prefer SSO on middle tier.

2) In the second case, if you use SSL, you'll need to have separate ports for SSO and middle tier web servers. Correct?

Yes, thats right.

 

Atul,

I am using 10.1.2 as my 10g AS. So does this doc hold good for it ???

regards,
Poornima.

 

Yes Poornima

 

Hi Atul,

Its nice to read details on Oracle products.

My question.
Can we upgrade OID database version from 10.1.0.5 to 10gR2?

(Oracle AS Infrastructure 10g 10.1.4.0.1)

Thank you.

 

Yes 10.1.4 OID is certified with 10.2.X database as well check certification track at

http://www.oracle.com/technology/software/products/ias/files/idm_certification_101401.html#BABIDJBH

We are moving to http://OnLineAppsDBA.com so in future kindly contact me on On Line Apps DBA site

 

Hello Atul,
We have 9i AS and 11.5.10.2, and we are planning to implement SSO. Is that possible to do "SSO" on 9iAS? If so, how can we do that?
I read somewhere that, for "SSO", minimum requirement is 10g AS.
and can you please adv. how to check the 9i AS version from backend.

Thanks in Adv,
Will be waiting

Rahman

 

Hello Atul,
We have 9i AS and 11.5.10.2, and we are planning to implement SSO. Is that possible to do "SSO" on 9iAS? If so, how can we do that?
I read somewhere that, for "SSO", minimum requirement is 10g AS.
can you please also advice how to check the 9i as version from backend
Thanks in Adv,


Rahman

 

Rahman,
You should have minimum 10.1.2.0.2 and with latest patchset of SSO-Apps Integration 10.1.4 Identity Management should be installed

For more info check our new site http://onLineAppsDBA.com

 

Hi Atul

I was successful in configuring Windows Native Authentication on a single node network of App-Infra Server. However I am unable to do so for a load balanced network.

I have 2 infra servers say server1.mydomain.com and server2.mydomain.com and the load balancer hostname is server.mydomain.com

Now the service account as well as the keytab should be created individually for the 2 servers i.e. server1 and server2 or for the load balanced one i.e. server

I tried with server because the Oracle 10.1.4 doc says so. However, this does not work. I am confused as to how will each server authenticate itself against the KDC i.e. how will the server decide that it needs to authenticate using the load balancer's credentials against the KDC ?

Regards,
Hitesh

 

Hi Atul,

We are trying to integrate Oracle EBS with IBM Tivoli Access Manager (TAM) using TAM's virtual junction. IBM does not support any other junction for EBS integration.

We have externalized the authentication module and implemented necessary interface (IPASAuthInterface).

From TAM/webSEAL we are passing iv-user http header which is user id. But in custom authenticaion module we are not getting http headers.

In custom auth class if we use hardcoded user it works.

In TAM/webseal log it is clear that user id is being passed as http header but somewhere its stripped off.

I would also share some URLs from Oracle forum, where other people also facing the issue:-
http://forums.oracle.com/forums/thread.jspa?threadID=692699&tstart=90
http://forums.oracle.com/forums/thread.jspa?threadID=374411

http://blogs.oracle.com/stevenChan/2006/05/indepth_using_thirdparty_ident.html

 

Hi Atul,

I have a question. I am integrating EBS with OSSO/OID. But the final authentication will be delegated to 2 Tivoli LDAPs. And all users will be in these 2 Tivoli LDAPs. So, how do I make DNs in OID,
a> Should I make 2 DNs in OID to store users from both the LDAPs separately?
b> Or should I just make 1 common DN container?

Now, why I am asking this is because I am unsure that if I make 2 different or 1 single DN in OID, how will OID decide that a particular user is in which Tivoli LDAP and delegate authentication to it?

Regards,
Harmeet

 

I have followed the steps APEX with SSO integration and getting error, any idea what to investigate
[OSSO] E34: Unable to assure integrity of communication with SSO server

 

Hi,

We are trying to integrate Oracle AS/Form Server (with RMS module) with IBM Tivoli Access Manager (TAM) using TAM's virtual junction.

We have externalized the authentication module and implemented necessary interface (IPASAuthInterface).

From TAM/webSEAL we are passing iv-user http header which is user id. But in custom authenticaion module we are not getting http headers.

When Id is hardcoded in custom auth class it works perfectly fine.

In TAM/webseal log it is clear that user id is being passed as http header but somewhere its stripped off.

I would also share some URLs from Oracle forum, where other people also facing the issue:-
http://forums.oracle.com/forums/thread.jspa?threadID=692699&tstart=90
http://forums.oracle.com/forums/thread.jspa?threadID=374411

http://blogs.oracle.com/stevenChan/2006/05/indepth_using_thirdparty_ident.html

Is there anyway we can circumvent OAS/SSO stripping out Http Header information. or do you recommend any other solution to overcome this issue.

You can send info at vikas_kadam@ahold.com or vikas_kadam@hotmail.com
Thanks.

 

Hi Hitesh,

I'm running into same issue,configuring WNA with LBR hostname.Could you please post if there are any updates on that issue.

Thanks,
kumar.

 

hi atul,
im new to OAS.im trying to configure OAS with SSO.But my basic questions are,
1)how to create partner application in OAS ?
2)After creating partner application
OAS creates Login/Logout URL how to use them?
3)when t(OSSO) will shows me single sign on window( login window)?

 

hi atul,
im new to OAS.im trying to configure OAS with SSO.But my basic questions are,
1)how to create partner application in OAS ?
2)After creating partner application
OAS creates Login/Logout URL how to use them?
3)when t(OSSO) will shows me single sign on window( login window)?