Access a partner application through an iframe without reauthenticating

I have an application (written using apex) that is an sso partner app. I want to be able to embed the application within a portlet (probably a dynamic page portlet generating an iframe) in my portal. When a user access the portal page that contains the iframe they are initially forced to reauthenticate within the iframe.
The problem lies in the sso session. I think when you access an application through an iframe it treats everything in the iframe as if it were in a separate browser session. This means that when you try to access the application in the iframe it still redirects you to the sso server even though you are already authenticated via portal.
So this is the problem, has anyone got any ideas on what the solution might be?

Hi,
Did you find any workaround of the above issue?
I am also struggling with it.
Regards,
Deepak Suri

Similar Messages

Cisco WAAS WAE-674 - Slow response in IE-7 PC's while trying to access the SAP application through cisco WEA

Hi,
From location A when we are trying to access the SAP application in location B through WAE-674 via internet Explorer there is a slow response in IE-7 PC's compare to IE-8 PC's,But when we try without WAE-674 the response is normal.
We also found that optimization in location A WAAS device as 70-90% but still users are facing slowness while opening the Webpage.
Please suggest how to address the problem ASAP.
Thanks & Regards,
P.Ramkumar

I would suggest that you open a case with the tac to look at this. Matthew

Creating a Partner Application through code

We have an Apex 3.1 application which is using SSO as its Authentication scheme (we have set it up as a partner application using the instructions contained in metalink article 353023.1).
I am now trying to create an install script so that our application can be installed with minimal user interaction.
The only step in the metalink article I mention above that I can't see how to automate through script is Step B, "REGISTER APEX AS PARTNER APP IN SSO" i.e. where you create the Partner Application from the UI found at http://<server>:7777/pls/orasso/
My question is: Is there any way that anyone can think of that I would be able to do this part through script / code? It would seem that it should just be a case of submitting the Name, Home URL, Success URL & Logout URL parameters to some procedure and getting, as output parameters, the Token and Encryption key...
Any and all comments/suggestions much appreciated,
Andy

Hi,
Did you find any workaround of the above issue?
I am also struggling with it.
Regards,
Deepak Suri

Register the partner application through SSO Administer Partner Application

When should I use the "Administer Partner Applications" link on the SSO Server Administration page to register the application among the following cases?
1. sign-on SDK integrated application
2. mod_osso integrated application

Were you able to resolve the issue???
Can you pls try Rerunning ssodatan/x with the correct data. The ssodatan script is located in the directory ORACLE_HOME/portal30/admin/plsql/ssodatan.
Refer following link for more info on SSODATAN , SSODATAX and DIAGNOSTICS scripts in Portal 3.0.x:
http://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=136138.1

Not able to access the application through URL in clustered environment.

Hi,
I recently depoyed my application on clustered environment of weblogic 8.1 SP4.
Now I am able to access the application through the managed server name with port number but not able to access through URL.
For ex
http://machine1:7001/test/login.do?m=begin
this is accessible
If I use
http://test.domain.com/test/login.do?m=begin
Then application is not accessible.
any HTML or JSP page page is in reach by both the URL.
Please suggest me what should I do in this regard.
thanks
singhV

Hi Syed,
I meant to ask are you able to see the application you created in Hyperion Planning Login page,if yes try accessing the created application through Hyperion Planning(Try restarting Planning Services once even if you are able to launch hyperion planning page) url "http://servername:8300/HyperionPlanning and selecting the application you created.
And also could you please let me know if you are logging in to workspace through admin username ? and also check if you are able to see the application in shared services and try to provision any group on that application.
(The Assumptions are if application is not created successfully then it will not be available in workspace to launch and if its in maintainance mode (Application Maintenance Mode) in Application Settings and last would be check OHS and Hyperion Planning Services)
Thanks
Amith

Cannot access Siebel application through browser

Hi,
We have installed Siebel demo quickstart SIA 8.1.1 in one laptop.The Siebel application works fine. The only problem is that we cannot access the Siebel application through a browser. We have to launch the Siebel application from Windows program menu.We need to set up the Siebel application so that we can access it through IE browser. There are some settings that need to be set up in the .cfg files to make the application available trough Internet Explorer.
We have already tried using the url http://servername:8081/callcenter_enu/start.swe? But it returns "page cannot be displayed". We are accessing the application from the host computer.
Regards
CP

Are you able to connect with dedicate client?
if yes, then you just to need to verify setting/configuration for web server. Which can be found in installation guide.
Also could you please share logs. Error you are getting is quite generic and have multiple symptoms.
Have you tried to search on Oracle Support. There is complete article available for this error.
Regards,
Rajesh Kumar

Partner Application

1> I want to define a web-based application as partner application for portal.
and define a partner application in portal and set the Home URL and Success URL, the question is from where in portal it can be called ?
2> I want to get portal user within the application and run portal30.wwctx_api.get_user but it returns PUBLIC so I think the authentication is not done.
please let me know what can I do ?

1> I want to define a web-based application as partner application for portal.
and define a partner application in portal and set the Home URL and Success URL, the question is from where in portal it can be called ?The portal does not have any partner applications. Partner applications are written for the SSO server. If you want to access a partner application, a URL to any entry point in the application should be acceptable. A properly written partner application can be accessed through any of its entry points and it should automatically obtain authentication from the SSO server when it needs to.
2> I want to get portal user within the application and run portal30.wwctx_api.get_user but it returns PUBLIC so I think the authentication is not done.
please let me know what can I do ? The portal30.wwctx_api calls are only appropriate for identifying a user logged into the portal. If you have your own partner application, you will need to develop your own set of APIs to identify your users as the SSO server has authenticated them, and you have managed their session thereafter.

Error on registering Flights of Fancy application(Partner Application, JPDK) provide

Hi
When i try to add a provider for Flights of Fancy application i am getting this error
An error occurred when attempting to call the providers register function. (WWC-43134)
The following error occurred during the call to Web provider: Unable to initialize new provider instance: oracle.portal.provider.v1.ProviderException: Portlet PartnerFlightPortlet: Required Renderer not set. (WWC-43147)
i am able to access the URL (http://myhost/servlet/flightsprov) without any problem and is displaying the following information
Congratulations! You have successfully reached your Provider's Test Page.
Checking for components:
Oracle XML parser: detected
Oracle JSP: detected
Recognizing initArgs: Usual initArgs are provider_root and sessiontimeout.
dbhost: myhost
partnerAppCookieDomain: mydomain.com.qa
dbsid: mysid
onCancelUrl: http://myhost
partnerAppCookieDesc: SSO application cookie
partnerAppCookieScope: /
dbSchema: mypartner
requestedUrl: http://myhost/servlet/flights
provider_root: D:\port\partner
dbport: 1521
dbPassword: mypartner1
partnerAppCookieName: SSO_PAPP_SERVLET_ID
sessiontimeout: 1800000
listenerToken: myhost:80
ANd i make sure several times that i am using the same URL for Portal registration page.
In the jserv.log file i am getting the following information
[08/04/2001 13:08:24:642 GMT+03:00] flightsprov/javax.servlet.ServletException: Unable to initialize new provider instance: oracle.portal.provider.v1.ProviderException: Portlet PartnerFlightPortlet: Required Renderer not set.
at oracle.portal.provider.v1.http.HttpProvider.getProvider(HttpProvider.java:339)
at oracle.portal.provider.v1.http.HttpProvider.service(HttpProvider.java:246)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:588)
at org.apache.jserv.JServConnection.processRequest(JServConnection.java, Compiled Code)
at org.apache.jserv.JServConnection.run(JServConnection.java, Compiled Code)
at java.lang.Thread.run(Thread.java:479)
Can anybody help me in solving this problem
thanks in advance
Abdulla
null

You're not missing anything - it sounds like it's working perfectly.
If a provider is affiliated with a partner application, the provider is automatically authenticated when you authenticate to the portal - because it is also a partner application. You only need to authenticate yourself once.
Now, when you go to the partner application, the application session cookie that was created by the provider is passed to the partner application & so you are not challenged.
Now, if you close your browser and access the partner application first, the login server will challenge you. When you subsequently go to the portal, you will not be challenged - the portal contacts the login server behind the scenes, determines you have already authenticated yourself and proceeds as if you had logged in.
When you visit the partner provider portlet, it will detect the cookie created by the partner application and use that to tie into the same session.
This is the whole point of single sign on.

Web clipping a partner application in 10.1.2

Hi,
if i clip a partner application protected by mod_osso the portlet shows the sso-server's login page and asks the user to authenticate again.
The documentation says: "When you integrate with partner applications (through the use of mod_osso), you cannot clip directly through those partner applications in an authenticated manner. However, you can use the partner applications through the external application framework."
I tried out several things with external applications but was not able to achieve authentication with my partner application. I appreciate any help.
Regards,
Thomas

Thanks everyone for your help :)
The problem turned out to be that Oracle application server 10.1.2 is unlike the others servers, it uses 2 ports:
- port (19100) is dedicated for the console.
- port (7779) is to view your applications.
So the URL needed turned out to be "http://acteos-109.beirut.acteos:7779/beanTest" instead of "http://acteos-109.beirut.acteos:18100/beanTest"
Hope this info is useful
Lana

Unable to connect backend applications through EP in DMZ1 firewall?

Dear all,
To brief our landscape, its look like below.
Internet -> DMZ1(Webservers)->Portal(DMZ2)->Internal(Backend Systems).
We tried to access the backend systems through portal in DMZ2..its working fine. When we tried to access the portal in DMZ1...its coming perfectly, when we access the backend applications through portal in DMZ1...its not coming...it says...operation timed out...
Kindly suggest me what would be the problem...all the ports are open in DMZ1 and DMZ2... But we hav not done reverse proxy in DMZ1(Webservers), Can we try after doing Apache reverse proxy in DMZ1. Pl suggest me
Rgds
PRadeep

Hi Netanel,
Thanks for ur reply...
See, we hv writen a rewrite rule for all three systems like R/3, BW and SCM
RewriteRule ^/sap(.)/public(.) http://myr3sever.company.domain.com:r3port/R3$1 [P]
RewriteRule ^/sap(.)/bc/bsp/sap(.) http://myscmsever.company.domain.com:scmport/SCM$1 [P]
etc..
We are differentiating the systems with their names...but when it rewrites..its taking R3 string as well in the path...
Like
http://webserver.company.domain.com/R3/sap/bc/gui/sap/its/webgui.
I think if we remove R3 string at the time of rewrite, then we should be able to get i belive.
kindly suggest me
Rgds
PRadeep

Partner application access to portal login info

How can an SSO partner application (Java) tell whether or not a user has logged in to Portal?
I need to log activity in a public application servlet, so I'd like to log the user as PUBLIC if not logged in or as their actual userid.
I don't seem to have access to this info until the user has visited a secure part of the app.
Any pointers would be appreciated.
Thanks
Rob

DIY answer ...
The cludge I used to get round this was ...
Make a PL/SQL item which displays a Login or Logout link as appropriate, based on the current userid from portal.wwctx_api.get_user.
The login link goes to a secure portal page called FORCE_LOGIN, passing a URL parameter called nextPageURL which contains the URL of the next page to show after the login is complete. You can use portal.wwpro_api_parameters.get_value( '_pageid', 'a'); to help build the current page URL if you want to retun to the current page.
The FOIRCE_LOGIN page contains a PL/SQL item which builds an IFRAME whos src is a URL to my app servlet ForceLoginServlet, passing on the nextPageURL parameter. Use portal.wwpro_api_parameters.get_value( 'nextPageURL', 'a'); to help with that.
The ForceLoginServlet is a secure servlet (set up in web.xml) so that forces a silent authentication to my app. All the servlet does is display HTML to redirect back to the URL in nextPageURL.
Horrible! But it does the job.
Anyone who know a better way of doing this, please tell me.
Rob

User is locked in R/3 but still access the application through portal

We are currently on NW2004s SP10 .
We locked the User A in R/3 SRM backend system and from Enterprise Portal the same User A login and try to access the SRM application in backend . The system is allowing to access which we want to prevent .
The authentication ticket type is "SAP Logon Ticket" . The User A is trying to access ITS services through Portal.
Do we have specific SSO parameter which needs to set in backend SRM application .
Thanks
Chandrashekhar K

Hi
We have maintained the following profile parameter for SSO in our SRM system . From portal we are accessing the SRM system
login/accept_sso2_ticket          1
login/certificate_request_ca_url     https://tcs.mySAP.com/invoke/tc/usercert
login/certificate_request_subject     CN=&UNAME, OU=&WPOU, O=mySAP.com User, C=DE
login/create_sso2_ticket          0
login/disable_cpic               0
login/disable_multi_gui_login          0
login/disable_multi_rfc_login          0
login/disable_password_logon          0
login/failed_user_auto_unlock          0
login/fails_to_session_end          3
login/fails_to_user_lock          3
login/isolate_rfc_system_calls          0
login/min_password_diff               1
login/min_password_digits          0
login/min_password_letters          0
login/min_password_lng               6
login/min_password_specials          0
login/multi_login_users               HP
login/no_automatic_user_sapstar          1
login/password_change_for_SSO          0
login/password_charset               1
login/password_expiration_time          60
login/password_logon_usergroup
login/password_max_new_valid          0
login/password_max_reset_valid          0
login/system_client               400
login/ticket_expiration_time          60
login/ticket_only_by_https          0
login/ticket_only_to_host          0
login/ticketcache_entries_max          1000
login/ticketcache_off               0
login/update_logon_timestamp          m
Please suggest as to change any parameter value . We want to restrict the user to access SRM system from portal if he is locked int e SRM system.
Thanks

Can Partner Application Access to Login Page's Information ?

Hi.
I wanna write a Partner Application to Access User's Information(UserName, subscriberName or Company Name)
This information represented by user In login Page.
I am not specialist in Oracle Sigle Sign-On ,for this reason Please Let me have a Sample .
Thanks.

Please see the Single Sign-On Application Developer's Guide. If you write a partner application, this information that you mentioned is passed to you in your success URL.

How to capture userinfo after a partner application is authenticated through SSOSDK?

I have successfully installed and deployed the Partner application for Portal using SSOSDK. My question is, once the user is authenticated through SSOPartnerServlet.java and gets thrown back to the partner app(PAPP), how do we get the user info(i.e. username) from the PAPP?
Is there an API?
I have already asked this question from oracle tech and they told me to post it
Thanks,
Hamid

Pass the name of a subrotine to handle your user commands to the fm parameter.
I_CALLBACK_USER_COMMAND = 'USER_COMMAND'.
Then code for the user command function,
form user_command using r_ucomm type sy-ucomm.
case r_ucomm.
when '<FCODE of your button>'.
Code your logic....
endcase.
endform.
To add your button using your own pf-status, you should copy a standard gui status and modify it.
To trigger this pf-status you should pass routine name to I_CALLBACK_PF_STATUS_SET.(I_CALLBACK_PF_STATUS_SET = 'SET_PF_STATUS..)
form set_pf_status.
set pf-status 'ZSTAT'. "THis ZSTAT must be created by copying a STANDARD pf-status of say some std program like SAPLKKBL. and then modifying it.
endform.

How can I set a third party application to access my organizations intranet through my organizations network

how can I set a third party application to access my organizations intranet through my organizations network . I am using blackberry bold 9700 OS 6

Hi deepajithesh
This feature is not available. Applications access the BlackBerry Network using the connection to BIS.
Thanks
-CptS
Come follow your BlackBerry Technical Team on twitter! @BlackBerryHelp
Be sure to click Kudos! for those who have helped you.Click Solution? for posts that have solved your issue(s)!

Access a partner application through an iframe without reauthenticating

Similar Messages

Maybe you are looking for