APEX not working with SSO

Question

I am trying to setup APEX 3.1 (fresh installation not upgrade) to work with SSO on Linux.
APEX and AP infrastructure are installed on separate servers and APEX is working with mid tier HTTP server.
I have followed the steps below and I don’t get any error messages at all but when I finally point the browser to an application I get an error:
ERR-7620 Could not determine workspace for application
Expecting p_company or wwv_flow_company cookie to contain security group id
I would appreciate any help
Regards,
Anna
alter user flows_030100 identified by xxxx;
alter user flows_030100 account unlock;
Loaded SSO SDK into the flows_030100 schema @APEX_DB
Registered ApEx as a partner application, supplied values:
HOME URL : http://serverABC.ypgstaging.local:7777/pls/apex
Success URL : http://serverABC.ypgstaging.local:7777/pls/apex/wwv_flow_custom_auth_sso.process_success
Log Out URL : http://serverABC.ypgstaging.local:7777/pls/apex/apex
Application Name APEX
As flows_040100@APEX_DB:
SQL> @regapp.sql
Partner Application Configuration
Enter value for listener_token: apex:serverABC.ypg.local:7777
Enter value for site_id: 6F20F2EF
Enter value for site_token: W201QS2F6F20F2EF
Enter value for login_url: http://serverABC.ypg.local:7777/pls/orasso/orasso.wwsso_app_admin.ls_login
Enter value for encryption_key: 3F7CD0E25D17A170
Enter value for ip_check: N
Registration successful.
Listener token: apex:serverABC.ypg.local:7777
Site id : 6F20F2EF
Site token : W201QS2F6F20F2EF
Encryption key: 3F7CD0E25D17A170
Login URL :
http://serverABC.ypg.local:7777/pls/orasso/orasso.wwsso_app_admin.ls_login
Logout URL :
http://serverABC.ypg.local:7777/pls/orasso/orasso.wwsso_app_admin.ls_logout
IP check : N
PL/SQL procedure successfully completed.
Commit complete.
No errors.
SQL> select * from wwsec_enabler_config_info$;
LSNR_TOKEN
SITE_TOKEN
SITE_ID
LS_LOGIN_URL
URLCOOKIE_VERSION
ENCRYPTION_KEY
ENCRYPTION_MASK_PRE
ENCRYPTION_MASK_POST
U
apex:serverABC.ypg.local:7777
W201QS2F6F20F2EF
6F20F2EF
http://serverABC.ypg.local:7777/pls/orasso/orasso.wwsso_app_admin.ls_login
v1.2
3F7CD0E25D17A170
C70C4A8B5227430F37EA0903E8A7C7BC
35B1659E7B2E5FB7BF1C0381B44E1FF9
N
Then on APEX_DB server I ran the following:
[oracle@ATC1SDBYM01 core]$ sqlplus
Enter user-name: / as sysdba
SQL> alter session set current_schema=flows_030100;
Session altered.
SQL> @custom_auth_sso_902.sql
...wwv_flow_custom_auth_sso
Package created.
No errors.
SQL> @custom_auth_sso_902.plb
...wwv_flow_custom_auth_sso
Package body created.
No errors.
SQL> grant execute on wwv_flow_custom_auth_sso to public;
Grant succeeded.
alter user flows_030100 identified by values ‘xxx’;
alter user flows_030100 account lock;
Here is a test application URL:
http:/serverABC.ypgstaging.local:7778/pls/apex/f?p=F101::&c=yellowmart
The application authentication schema is set to SSO.

Answer 1

Scott
I have restarted AS and rerun the regapp script successfully. I have noticed I entered the wrong domain name while registering it first time and I have corrected the error this time.
SQL> select * from wwsec_enabler_config_info$;
LSNR_TOKEN
SITE_TOKEN
SITE_ID
LS_LOGIN_URL
URLCOOKIE_VERSION
ENCRYPTION_KEY
ENCRYPTION_MASK_PRE
ENCRYPTION_MASK_POST
U
HTML_DB:serverABC.ypgstaging.local:7777
W201QS2F6F20F2EF
6F20F2EF
http://serverABC.ypgstaging.local:7777/pls/orasso/orasso.wwsso_app_admin.ls_lo
gin
v1.2
3F7CD0E25D17A170
C70C4A8B5227430F37EA0903E8A7C7BC
35B1659E7B2E5FB7BF1C0381B44E1FF9
N
However I still get the same error message in my browser when I point it to the application.
Regards,
Anna