Cannot log into Business Process Workspace using Custom Authenticator

Question

Hello,
I have set-up a SQLAuthenticator on my WL10.3.5 and defined a number of users which can successfully login to console and em.
My problem is that these users are not able to login to Oracle BP workspace.
Note 1: Control flags are all set to sufficient (In addition to DefaultAuthenticator I have only the custom SQLAuthenticator in providers list).
Note 2: Ordering of Authenticators is: SQLAuthenticators, DefaultAuthenticator
Note 2: user 'weblogic' can login to workspace without any problem.
Any help would greatly be appreciated as this problem has taken more than a week of my time.
Regards
Edited by: user3106291 on Feb 23, 2013 4:27 AM

Answer 1

Hi
1. I hope workspace you are refering is: http://soahost:soaport/bpm/workspace.
2. User "weblogic" can login. And I hope he can see adminstrator link on top right hand corner etc.
3. Others Users say "userxyz" CANNOT login. NOW what do you mean with this. What Error do they get.
a) Does it say invalid username/password. If so, check the user account and verify the details.
b) Do they login, BUT do NOT see any link on Left Side to initiate a new instance. If so, is this User in the Role of Initiator. See below notes
NOW, what application is Deployed and what exactly are you trying to test
1. For any BPM Application, you will have a Start Node and End Node. Usually there will be a first Human Task (generally but not always) who can Instantiate or create a new prrocess Instance. And there are Swimlanes where we put all Tasks.
2. Then we map these Swimlanes to bunch of Users or AD Groups or Roles etc etc. Quick test is, create some users in Default Authenticator itself like weblogic1, weblogic2, weblogic3 etc and map these Users to these Roles.
3. If you have EXTERNAL Authenticator, that is also fine. This is how most of the times. Within JDeveloper itself, for Each Role you can Map users or groups from this External Authenticator. this means your application should be deployed and SOA Server is Up and Running. Only theny you can fetch the list of users and groups. Generally I do NOT recommend this. Do not do any mapping at JDeveloper side.
4. Instead, after you Deploy your application say to bpmDomain1. Go to EM Console and there under application BPMProcessRoles, map the application roles to each User or AD Group from your SQL Authenticator. See docs for detailed steps.
In EM Console, if you do NOT see your Swimlanes or Roles thats ok. You should see them by default after deployment. If not, create manually Each Role and name should Match exactly with what you gave in JDeveloper BPM Application. Find it under Organization.xml file under your soa project folder. And for each Role map users or ad groups. Also, Initiator Role should have a Human Task of type like Initiator.
So have you done anyof the above things. But most important, what Errors or Exceptions are you facing. Look at the log files and specially the output file or log where you start your soa server.
Thanks
Ravi Jegga