Authentication in Oracle Apps

Hi,
what authentication is used for all Application Users when they login into Applications. I mean, when we login, for each user, one Database connection should be there,
As far as i know, For each application user we dont have one database account in the Database?? (if we dont use Database Authentication)
Do they use APPS schema account for all the appps users connected. Please share your experience.

chetan0926 wrote:
Whats is Authentication Coloumn in FND_NODES table of Oracle Apps R12Please see (Tips and Queries for Troubleshooting Advanced Topologies [ID 364439.1]), "Understanding the FND_NODES Query Results" section.
Thanks,
Hussein

Similar Messages

Oracle Apps User Authentication with Active Directory

Greetings,
I am running Oracle Apps 12.1.1 using native login authentication. What I would like to do is set it up so that it uses our Active Directory to authenticate users. Does anyone know if there is an easy way to configure this or do I need to use OIM to accomplish it?
Thanks

Have a look here
http://www.oracle.com/products/middleware/identity-management/docs/db-users-roles-management-whitepaper.pdf

Migrating a Forms 6i custom application to Oracle Apps R12 custom bolt on

Hi,
I need to migrate an oracle forms custom application built in 6i to sit within oracle apps R12 (Forms 10g) and use Oracle Apps user authentication and session. It could become a custom bolt on to Oracle Apps and might be accessed from a custom responsibility in oracle applications.
a) How easy/difficult is this?
b) What are the challenges or things to look for to do this migration?
Thanks,
Ayyappa

979379 wrote:
Hi,
We have two node architecture for R12.1.1 on windows 2008 32 Bit. One node for Database and the other node for application.
As we are facing a lot of memory issues, we are planning to go for 64 Bit.
I Have already read the document
Migrating Oracle E-Business Suite R12 to Microsoft Windows Server 2008 R2 [ID 1188535.1]
The doc says in place OS upgrades are not supported....
So my question is...
While keeping the production, how can i migrate using the same servers. Coz my company does not want to buy new servers..
Please suggest.Complete all the steps in the doc for Rapid Clone and other steps, then take a backup of the files after you run preclone and create a trace file for the database. Once you have the backup ready, install a 64-bit version of the OS and install 11gR2 software and restore the files from the backup and complete the migration.
Thanks,
Hussein

Oracle Apps and HTML DB Integration Problems

Hi,
I have integrated Oracle Apps and HTML DB, using custom authentication schema so that HTML DB looks for APPS username and password for validation.
Also, i have created menu, responsiblity, functions, custom application etc, so that user can login from Oracle Apps login screen and then select the responsibility which will redirect to HTML DB Applications page.
My problem is, once the user clicks on the Responsbility and the function(which is nothing but HTML DB Page), it is redirecting to login page and i need to re-enter the apps user name and password again to access HTML DB applications.
Is there any way, can i redirect the user directly into my HTML DB application page, without taking him to login page of HTML DB application and also uses the APPS user name and password which he had entered in the Oracle Apps login page.
I need your help on doing the same. Please respond.
Thanks
Ram

Hi Scott,
Thanks for the quick reply. I agree with you in terms of validating the session but I haven't been able to get that to work - one of my earlier posts describes the issues I have experienced:
Authentication and SSO (non-Oracle)
I suppose my question is - is there a simple way for the APEX app to validate that there is an active Apps session cookie?
In terms of the encrypted password, what I have been trying to do was make use of the FND_WEB_SEC.VALIDATE_LOGIN method which is described in other posts and the Scott Spendolini presentation on integrating apps.
Thanks,
Stuart

Identify if a particular user is authenticated locally in Apps 11i/R12

Hi,
How to identify if a particular user is authenticated locally in Apps 11i/R12 or against OID?
I think FND_USER TABLE.
Thanks

Correct - if the USER_GUID in FND_USER is populated, then the user is authenticated via OID/SSO, else user is authenticated locally.
MOS Doc 444573.1 - Basic checks for user integration when using Oracle E-Business Suite 11i with Oracle AS 10g
HTH
Srini

Integrate Oracle Apps R12 with Microsoft Active Directory

Dear Friends,
I am using Oracle Apps R12.1.3 and alsoo we have Microsoft Activity Directory.
we need to integrate both so that any employee cretaed in Oracle Apps HRMS will be replicated in Microsoft Directory.
Please let us know the oracle 10g and 11g products we have to use to achieve this.
Please let us know both 10g and 11g products and is 10g products covered in Oracle support?
Regards,
DB

Please see these docs/links.
Integrating Oracle E-Business Suite Release 12 with Oracle Internet Directory and Oracle Single Sign-On 10gR3 (10.1.4.3) [ID 376811.1]
Using the Latest Oracle Internet Directory 11gR1 Patchset with Single Sign-on and Oracle E-Business Suite [ID 876539.1]
Registering Oracle E-Business Suite Release 12 with Oracle Internet Directory 11gR1 and Single Sign-On [ID 1370938.1]
External Authentication To Active Directory Integration With E-Business Suite [ID 429020.1]
Re: Integrating Active directory with oracle EBS 12.1.3 with 11g R2 database
Re: Oracle EBS with SSO
Re: Need to integrate AD with R12.1.3 with the most simplest architecture.
Re: EBS R12,how to use OID implement SSO without OAM/OID(with 3rd product)?
Thanks,
Hussein

Squid in Fedora 13 and Oracle Apps

Hello,
I hope I put this in a right forum. I'm trying to setup squid in Fedora 13 and get a problem with Oracle Apps. I'd setup so that only certain user can request http service by setup authentication. By default, there's already acl rule for port 1025-65535 and I'd created a rule to allow access to my domain for our local user.
For the port the acl is like this : acl Safe_ports port 1025-65535
For the domain the acl is like this : acl tstdomain dstdomain_regex \.testdomain.com$
Now what I want to have is if a user doesn't have authentication, he/she can still access local webpage in our server, such as webserver or Oracle E-Business Suite.
I'd tested, using a user that doesn't have authentication, and can access all my server if the domain doesn't have any port but it didn't work for Oracle E-Business Suite, because to access the format is like http://hostname.domain_name:port_number.
Is there anything I need to add/change? thanks.

TommyReynolds wrote:
Do you have squid listening on the {font:Courier}:port_number{font}? There is an entry for that in the squid config file.Hi Tommy,
you mean beside the standard port to listen I must add another port to listen? So instead of having :
http_port 3128
I must have :
http_port 3128
http_port 8000
in my squid.conf?
Thanks
Had tried but that thing didn't work.
If I bypass squid then the connection to oracle ok. Even I entered username and password still can't access oracle but other web is ok. So something need to be done in squid. Anyone can help? Thanks.
Edited by: user_apps on Jul 15, 2010 8:54 PM

Oracle Apps API

Hi Guys
Can anybody tell me where can i find tutorilals for
API s used in Oracle Apps Modules.
Thanx
Binu

What exactly is the purpose of authenticating user?
General check
select count(1) from fnd_user
where user_name= <Your User>
and end_date >= sysdate
if above query retrun result more than zero than your user is valid user.
Regards
Prashant Pathak

Integrating Oracle Apps, Peoplesoft, SAP and others using ADF(Portal), BPEL

Hi,
Our company has various system like Oracle Apps, Peoplesoft, SAP and some custom systems which uses microsoft active directory. All the system has a common User ID but diffrent password as set by the user. For now every user have to remember 4 different passwords and username(in some cases).
We wish to integrate the Authentication process using BPEL. Some thing like a SSO so the user will login into a new application(Build using ADF) like a portal, which will contain the links to all the above stated application. With this new application the user will have to remember only one user name and password and this user name and password will be sinked with all the other applications using BPEL.
Can you guys through some ideas as in how we can acchive this? Is it possible to integrate the Authentication process using BPEL?
Thanks in advance,
Deepak.

Why dont you synch ypur users in OPID and keep one username password there and then use external application or portal context to authenticate to all your other applications?

Integrating Oracle Apps, Peoplesoft and SAP

Hi,
Our company has various system like Oracle Apps, Peoplesoft, SAP and some custom systems which uses microsoft active directory. All the system has a common User ID but diffrent password as set by the user. For now every user have to remember 4 different passwords and username(in some cases).
We wish to integrate the Authentication process using BPEL. Some thing like a SSO so the user will login into a new application(Build using ADF) which will contain the links to all the above stated application. With this new application the user will have to remember only one user name and password and this user name and password will be sinked with all the other applications using BPEL.
Can you guys through some ideas as in how we can acchive this? Is it possible to integrate the Authentication process using BPEL?
Thanks in advance,
Deepak.

Why dont you synch ypur users in OPID and keep one username password there and then use external application or portal context to authenticate to all your other applications?

Squid and Oracle Apps

Hello,
I hope I put this in a right forum. I'd put in the Linux (Non OEL) forum but still not solved yet.
I'm trying to setup squid in Fedora 13 and get a problem with Oracle Apps. I'd setup so that only certain user can request http service by setup the authentication.
By default, there's already acl rule for port 1025-65535 and I'd created a rule to allow access to my domain for our local user.
For the port the acl is like this : acl Safe_ports port 1025-65535
For the domain the acl is like this : acl tstdomain dstdomain_regex \.testdomain.com$
Now what I want to have is if a user doesn't have authentication, he/she can still access local webpage in our server, such as webserver or Oracle E-Business Suite.
I'd tested, using a user that doesn't have authentication, and can access all my server if the domain doesn't have any port but it didn't work for Oracle E-Business Suite, because to access the format is like http://hostname.domain_name:port_number.
I'd tested to put the port & allow http access specifically like this:
acl oratest_port port 8000
http_access allow oratest_port
and even removed the port restrictions
but still not worked.
If I take out the squid proxy and connect directly to Oracle Apps it worked without any problem.
Is there anything I need to add/change/misplaced? thanks.
Edited by: user_apps on Jul 15, 2010 9:47 PM

Hi,
Please mention your application release along with the database version and OS.
Are you trying to setup a web cache? If yes, please refer to:
Note: 306653.1 - Installing and Configuring Web Cache 10.1.2 and Oracle E-Business Suite 11i
Note: 380486.1 - Installing and Configuring Web Cache 10g and Oracle E-Business Suite 12
Thanks,
Hussein

When accessing the any tasks from Fusion Applications homepage, "An error was received for the task Manage Worker Goal Setting Lookups. This task is identified with the code HRG_MANAGE_WORKER_GOAL_SETTING_LOOKUPS that invokes program /WEB-INF/oracle/apps/

We have installed HCM and CRM modules on Fusion Application 11.1.7 version.
This is 2 node architecture ie IDM components installed in one node and Fusion components installed in another node.
We are able to start the IDM components and Fusion components successfully, but when users are trying to access any task from Fusion application home page, they are getting the below error
A portlet consumer error was received for the task Manage Worker Goal Setting Lookups. Report the error details to the following owning product Goal Management.
An error was received for the task Manage Worker Goal Setting Lookups. This task is identified with the code HRG_MANAGE_WORKER_GOAL_SETTING_LOOKUPS that invokes program /WEB-INF/oracle/apps/fnd/applcore/lookups/publicUi/flow/ManageCommonLookupsTF.xml#ManageCommonLookupsTF of module code fndSetup. Review the consumer and producer logs for more details on this error.

This may be related to the other issue regarding "FUSION_APPS_WSM_APPID-KEY" as the logs contains exceptions like:
oracle.wsm.policymanager.PolicyManagerException: WSM-02081 : Failed to login to perform requested action.
Please refer to document Fusion Application Service Account Password Expiration Causes Portlet Producer Errors (1486388.1) for steps on how to verify and set the password. There is also exception:
javax.security.auth.login.FailedLoginException: [Security:090302]Authentication Failed: User FUSION_APPS_PROV_PATCH_APPID denied
This is also likely caused by an expired password, please see Fusion Apps Servers Are Not Starting Up - Password Policy Error :9000: GSL_PWDEXPIRED_EXCP :Your Password has expired (1629927.1).
Jani Rautiainen
Fusion Applications Developer Relations
https://blogs.oracle.com/fadevrel/

Application Server and Oracle Apps - basic doubts

Hello
I am pretty new to Oracle 9iAS and Oracle Apps 11i
Please clarify my basic doubts
Read that Oracle9i AS Components are :
- J2EE and Internet Applications (sub-components are Oracle HTTP Server, OC4J, Web services etc)
- Portals
- Wireless
- Web cache
- Business Intelligence
- E-Business Integration
Read that middle tier of Oracle Apps has following servers
- Web server
- Forms server
- Concurrent Processing server
- Reports server
- Discoverer server (optional)
- Admin server
My doubts are -
1. When Oracle Apps 11i is installed, Oracle 9iAS becomes the middle tier of it
Yes / No / Partailly ?
2. If partially, then only the 'J2EE and Internet Applications' component is installed
Yes / No / Partially ?
3. If partially, then Web server (Oracle HTTP Server) and Forms server come from Oracle 9iAS and Report Server, Concurrent Processing server, Admin server etc seperate components only specific to Oracle Apps 11i ?
Yes / No
Please let me know the answers with the explanation
Thanks a ton

Oracle Applications 11i uses Oracle 9iASv1 (10222, specifically) as the underlying midtier technology stack. The latest release of 11i (11.5.10), to be released this summer, can leverage specific features of Oracle AS 10g (904), namely SSO authentication and OID user management, Portal, and Discoverer. This capability will be backported to 11i releases 11.5.8 and 11.5.9, and is currently available now to limited customers through the Early Adopter program. When installed in this configuration, there is a 9iASv1 tech stack installed as part of the 11i installation, and a separate AS 10g installed for SSO, OID, Portal, Discoverer, and any other AS products the customer may be using. Aside from SSO, OID, Portal, and Disco, 11i does not yet run on other components of 9iAS or 10g (e.g., OC4J). Applications plans to move to 10g as the underlying tech stack in a future release.
John

Error while installing Oracle Apps server 10.1.3 with Oracle DB 11.2.0.2

Error while installing Oracle Apps server 10.1.3 with Oracle DB 11.2.0.2 residing in the same server and being used by Apps server as it's metadata.
bash-3.00$ export ORACLE_HOME=/data/ora11g/app/ora11g/product/11.2.0
bash-3.00$ cd /data/OAS/install/soa_schemas/irca/
bash-3.00$ ./irca.sh
Integration Repository Creation Assistant (IRCA) 10.1.3.1.0
(c) Copyright 2006 Oracle Corporation. All rights reserved.
ERROR: Cannot find library - /data/ora11g/app/ora11g/product/11.2.0/jdbc/lib/ojdbc14.jar
Please verify that the ORACLE_HOME is set correctly.
bash-3.00$

Hi Craig,
Database 11gR2 could be used for Installing Application Server 10.1.3.x but with some limitation.
So please review the note:-887365.1 Oracle Database 11g Release 2 (11.2) Certification for Oracle Application Server 10g (10.1.2, 10.1.3, 10.1.4)
Section :- Oracle Application Server 10g Release 3 (10.1.3)
Regards,
Praaksh.

Unable to use flexfield lexical oracle.apps.fnd.flex.kff.segments_metadata

EBS 11.5.10.2
XMLP 5.6.3
ARXAGMW.rdf
Hello,
I am trying to convert an Oracle Report to XML Publisher, and I am having problems getting lexicals in the Data Template to work.
I raised an SR for this since both related threads in this forum from two years ago were unresolved. Oracle had no answers for me, and told me to ask the question here.
So anyone who has any ideas, please chime in!
Here is a simplified version of the data template, narrowed down to just the use of the lexicals:
<?xml version="1.0" encoding="utf-8"?>
<dataTemplate name="XXWLC_ARXAGMW"
              description="samples from doco"
              defaultPackage=""
              dataSourceRef="ORA_EBS"
              version="1.0">
<properties>
    <property name="xml_tag_case"       value="upper" />
    <property name="include_parameters" value="true" />
    <property name="debug_mode"         value="on"    />
</properties>
<parameters>
    <parameter name="P_ID_FLEX_NUM" dataType = "number" defaultValue="101" />
</parameters>
<lexicals>
    <lexical type="oracle.apps.fnd.flex.kff.segments_metadata"
             name="FLEX_GL_BALANCING_APROMPT"
             comment="Comment"
             application_short_name="SQLGL"
             id_flex_code="GL#"
             id_flex_num=":P_ID_FLEX_NUM"
             segments="GL_BALANCING"
             show_parent_segments="Y"
             metadata_type="ABOVE_PROMPT"/>
    <lexical type="oracle.apps.fnd.flex.kff.segments_metadata"
             name="FLEX_GL_ACCOUNT_LPROMPT"
             comment="Comment"
             application_short_name="SQLGL"
             id_flex_code="GL#"
             id_flex_num=":P_ID_FLEX_NUM"
             segments="GL_ACCOUNT"
             show_parent_segments="Y"
             metadata_type="LEFT_PROMPT"/>
    <lexical type="oracle.apps.fnd.flex.kff.segments_metadata"
             name="ACCT_BAL_LPROMPT"
             application_short_name="SQLGL"
             id_flex_code="GL#"
             id_flex_num=":P_ID_FLEX_NUM"
             segments="GL_BALANCING"
             show_parent_segments="Y"
             metadata_type="LEFT_PROMPT" />
</lexicals>
<dataQuery>
    <sqlStatement name="Q_DOCO_SAMPLE">
      <![CDATA[
        SELECT
           &FLEX_GL_BALANCING_APROMPT alias_gl_balancing_aprompt
          ,&FLEX_GL_ACCOUNT_LPROMPT   alias_gl_account_lprompt
          ,&ACCT_BAL_LPROMPT          alias_acct_bal_lprompt
        FROM dual
      ]]>
    </sqlStatement>
</dataQuery>
<dataStructure>
    <group name="G_DOCO_SAMPLE" dataType="varchar2" source="Q_DOCO_SAMPLE">
      <element name="sample_gl_balancing_aprompt" dataType="varchar2" value="alias_gl_balancing_aprompt" />
      <element name="sample_gl_account_lprompt"   dataType="varchar2" value="alias_gl_account_lprompt"   />
      <element name="sample_acct_bal_lprompt"     dataType="varchar2" value="alias_acct_bal_lprompt"     />
    </group>
</dataStructure>
</dataTemplate>The lexicals "compile" and run successfully, but they return String values that SHOULD be wrapped with quotes; but this doesn't happen, so the SQL that runs is:
SELECT
   COMPANY alias_gl_balancing_aprompt
,ACCT alias_gl_account_lprompt
,CO          alias_acct_bal_lprompt
FROM dualThus, the concurrent program ends with ERROR, due to java.sql.SQLException: ORA-00904: "CO": invalid identifier
The first two lexicals and their corresponding sql statement are samples directly from the user guide (which is full of errors). The third lexical is the one from ARXAGMW.rdf.xml that I am trying to make work.
Edited by: user650442 on Apr 30, 2010 3:58 PM

By the way, simply adding the quotes around the lexical names in the sql statement doesn't work. That causes the lexical references to be ignored as simple string values:
SELECT
   '&FLEX_GL_BALANCING_APROMPT' alias_gl_balancing_aprompt
,'&FLEX_GL_ACCOUNT_LPROMPT'   alias_gl_account_lprompt
,'&ACCT_BAL_LPROMPT'          alias_acct_bal_lprompt
FROM dualI turned on statement-level debugging via xdodebug.cfg and saw how it compiled the lexicals. By replicating the call to apps.fnd_flex_xml_publisher_apis.kff_segments_metadata that I found there, I was able to hack together a workaround for this issue.
Please point me to a better way of doing this if possible, as I had to GRANT EXECUTE on this apps package to my custom code schema. Is there a better lexical/flexfields reference than the XML Publisher documentation?
Here is the call I made in my before-report trigger:
--set ACCT_BAL_LPROMPT flexfield segment metadata lexical
begin
apps.fnd_flex_xml_publisher_apis.kff_segments_metadata(
'FLEX_ACCT_BAL_LPROMPT',
'SQLGL',
'GL#',
101,
'GL_BALANCING',
'Y',
'LEFT_PROMPT',
c_FLEX_ACCT_BAL_LPROMPT
end;

Authentication in Oracle Apps

Similar Messages

Maybe you are looking for