Custom Identity Service - E-Business Suite

Hi
Just wondering if anyone has looked into creating a custom BPEL Identity Service Plug-in for E-Business Suite?
I'm not sure if we need to do this yet for a client, but if anyone had tried it would be great to here about any issues you came across or whether you got it to work....
Any help greatly appreciated.
Chris

The easiest integration with DB repository is to use Oracle Virtual Directory ( OVD) database adapter.
You can write custom Plug-ins code using IdentityService APIs for 10.1.2 and 10.1.3 releases.
But we deprecated the approach and recommend to use OVD for customization for 11 release.
I have tested OVD with BPEL IdentityService LDAP provider. It works well even for 10.1. release.
That approach simplifies the mapping between LDAP inetOrgPerson and groupOfUnuiqueNames objectClasses and DB schema.
I can help you with OVD configuration.

Similar Messages

  • Custom Identity Service configuration in SOA Suite 11g

    Has anyone been successfull in using custom identity service (available in 10.1.3.X) as a identity store in soa suite 11g human workflow component? If yes, please guide me.

    Can you make sure your helloworld is using adf bindings as mentioned in thread Re: Urgent :: 11g Invoking Composite from Java/From Webservice Proxy

  • Issue in setting custom identity service for soa 11.1.1.4

    Hello,
    I am facing issue in setting custom identity service for soa 11.1.1.4
    It is not picking up the implemented UserManager (in custom IDM) implemented via ServiceProvider and IdentityStoreService.
    This is configured in jps-config.xml
    The same setup was working in soa 11.1.1.2
    I believe there is a change done in JpsProvider in bpm-service.jar to authenticate via default login context from oracle.security.jps.internal.jaas.module.authentication.JpsUserAuthenticationLoginModule
    If my uderstanding is correct,
    Please guide me in implementing custom identity store and services for bpm services for soa 11.1.1.4
    Tried various work arounds but no luck.
    Thanks
    Bala

    Hi...
    Can u tell me how did u set up custom identity service for 11.1.1.2 ?
    Thanks

  • Integration of custom identity services with JDeveloper BPEL designer

    Hi,
    I'd like to know if a custom user repository plugin will cause the 'Identity Lookup Dialog' (Step 6 of Human Workflow Wizard to generate a user task) to utilize the list of users and groups from a third party provider, when used as the Custom Identity Service provider.
    I'd like to have the custom list of users and groups at 'design time' of the BPEL process itself, as well as process runtime. Is this possible?
    This is with respect to both BPEL PM v10.2.0.2 and v 10.1.3.1.0.
    Regards,
    Vineet

    ok, thank you for the reply.
    But the installation of the Oracle BPEL Process Manger for Developers which includes the JDeveloper and the BPEL Designer doesn't come with 10.1.3.1.0?
    I have to install the JDeveloper and the BPEL Process Manager seperate?
    Thx

  • User Task: Custom Identity Service

    Hi my friends
    Have anyone tried to use a custom Identity Service with BPEL User Tasks (I meam other than LDAP or JAZN)? Problems? Issues? Limitations?
    I know I have to implement a set of interfaces (BPMIdentityService interface and others)...
    Thanks.
    Message was edited by:
    mmenezes

    Pablo;
    I just read your post and hearing that you have the basic methods working has me very interested - I implemented all the Interfaces (BPMIdentityService, BPMProvider, BPMUser, BPMRole, BPMGroup) and changed the is_config.xml file. My realm showed up, and the connection pool I'm using seemed to work just fine, but when I tried to setup a Human Workflow using the new realm, I get an error on my searchUsers method (just hardcoded).
    I read that you need to add your classes to the application.xml file and that makes sense - but when I add them, no realms show up at all - one step backward - AND the method still doesn't work.
    Could you spare a desperate developer some advice on how you got yours working - a brief description of how to register your classes, if there's more than adding them to application.xml would be wonderful!
    Cheers -

  • Simple Custom Identity Service running on windows OK, but not on linux, y?

    In <Oracle® BPEL Process Manager Developer's Guide 10g Release 2 (10.1.2)
    B14448-03>,
    Part III, 16<Oracle BPEL Process Manager Workflow
    Services, Identity Service, Creating a Custom Identity Service Plug-in>
    My pc, OS:windows 2003+BPEL PM Server10.1.2
    Server, OS:linux+ias+OC4J_BPEL, i can't make sure the version, may be:10.1.2
    In the Developer's Guide say:
    Identity Service has 3 provider:
    1, JAZN Provider
    2,Third-party LDAP Directories
    3,CUSTOM Repository LDAP-Based Plug-ins
    so i like the third one.
    1, i compile the project in Oracle_Home\integration\orabpel\samples\hw\isplugin\db.
    Then it create a jar file(IS-DBPlugin.jar) in Oracle_Home\integration\orabpel\system\services\lib
    2,Modify the provider config file: is_config.xml
    modify the config file: application.xml
    restart the Oracle BPEL server
    3,run the sql files it provider int the polsql.cmd
    OK, now the Identity Service work on Oracle lite database, it's my needs.
    add a user into the tables
    use the url:http://localhost:9700/integration/worklistapp/Login
    i can login the worklist service use my custom user and password.
    when the Identity Service use the JAZN Provider(XML), it's default choice.i add a user into the xml files, i mast restart my server if i want use the user login.
    use the database plugin,when i insert a user name into the tables,i can login the service use the username immediately.
    So i think it's easy to move it to my server(linux os). but when i copy the jar file to the folder,modify the config files,run ths sql files in the oracle database.
    but when i open the url :http://server_ip:port/integration/worklistapp/Login
    it can not work with a simple error message:Worklist service Identity Service error.
    in the log files i find some message like this :
    SOAP-ENV:Server.Exception
    BPEL-10551 can not load the Custom Identity Service Class:
    "IdentityServiceCustomPlugin.CustomIdentityService"
    it has wasted me one week time. and i can't find the reason now.
    who can help me ?
    thanks
    cnboy

    clemens,thanks.
    i'm sorry that my English is poor.so i can't understand you mean completely.
    you say it might be a linux jvm reason, can the metter be resolved?
    and you say extract the jar file .which files i would extract,can you say particular?
    thx!

  • Replacement of Custom Identity Service in 11g

    Hi,
    I have several BPEL processes (10.1.2) with workflow and have been using Custom Identity Service (configuring is_config.xml) which talks to my database for user and groups etc. What is the mechanism for this in 11g now that is_config.xml is gone?
    Any documentation will be great.
    Thanks in advance.
    Bipul.

    I have been able to successfully implement a custom identity service (pulls users from an Oracle DB). I can select it from the SOA Worklist Application realm drop down and log in with my users.
    I'm wondering, however, if there is a way to mimic this behavior from the BPEL Console and/or from a Java program that utilizes the Worklist APIs. From the BPEL Console, I can initiate my process with no problem but in the Audit trail, it complains about the task not being assigned to a user in the "jazn.com" realm. (That's because the user is defined in my Custom Realm.)
    In my Java application, although I created a workflowContext by passing in the name of my custom realm, I get the same error mentioned above.
    I ended up having to change the default realm in my local server's is_config.xml from jazn to my Custom Realm. Is there a way to specify what realm to use for each process without having to change the default each time?

  • Custom Identity Service for BPEL

    Hi
    Has anyone created a Custom Identity Service for BPEL workflow authentication.
    Please reply back.
    Thanks
    Mudassar

    Is there a document somewhere that actually describes how to add the plugin to the Process Manager Identity Service? More specifically, requirements for packaging up the plugin module, which folder to place the module in, ALL of the configuration files that need to be updated, etc.?
    So far documents such as the BPEL Developers Guide, BPEL Process Manager Administrator's Guide, and various online sources have been moderately helpful but it seems like there are a lot of missing details as to actually getting a custom Identity Service plugin module working.

  • Error "REP-0788: Warning" on registering custom report to e-Business Suite

    Hi
    I done the register of custom report to Oracle e-Business Suite 11i got the below error
    +-----------------------------
    | Starting concurrent program execution...
    +-----------------------------
    Current NLS_LANG and NLS_NUMERIC_CHARACTERS Environment Variables are :
    American_America.AR8MSWIN1256
    Spawned Process 4579
    REP-3000: Internal error starting Oracle Toolkit.
    REP-0788: Warning: The value of restricted LOV parameter P_1 is not among the selectable values.
    Report Builder: Release 6.0.8.24.0 - Production on Tue Apr 14 10:25:34 2009
    (c) Copyright 1999 Oracle Corporation. All rights reserved.
    Enter Username:
    Program exited with status 1
    Concurrent Manager encountered an error while running Oracle*Report for your concurrent request 715975.
    Review your concurrent request log and/or report output file for more detailed information.
    Executing request completion options...
    Finished executing request completion options.
    please anyone help on this.
    regards,
    sva

    Hi,
    What is the type of the report? Is it bitmap? If yes, please make sure that the DISPLAY is set properly. Also, change the report type to text and see if you can submit the request successfully.
    Here are some additional troubleshooting documents to look at:
    Note: 200474.1 - Comprehensive REP-3000 Troubleshooting and Overview Guide
    http://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=200474.1
    Note: 364838.1 - Quick Checks for REP-3000: Internal Error Starting Oracle Toolkit.
    http://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=364838.1
    Regards,
    Hussein

  • Host a custom form on E-Business Suite Forms Servlet

    Hi.
    Is it possible to host my own form using the Forms engine integrated with E-Business Suite?. is this a good idea? or do i have to setup another forms servlet?
    I'm trying it with one form with a menu. I just Copied the mmx files and fmx files where all the fmx files of EBS suite reside. or do i need to recompile it inside linux forms compiler (adadmin) using .pll plx, fmb files?
    I manually type the url "domainname.com:8000/dev60cgi/f60cgi?formname.mmx?user=username?password=password"
    where user, password = database user (not apps user)
    when i did this, it still launched the applet but still goes to the main form of EBS? and the custom form doesn't get called..
    regards,
    anton

    I think you can do it.
    Should look in appsweb.cfg configuration file. usaually in $COMMON_TOP/html/bin
    ; 1) Runform Arguments
    ; The module argument defines the first form to be started.
    ; It is composed from parameters %prodTop%/forms/%lang%/%formName%
    ; The default looks like $APPL_TOP/fnd/<version>/forms/US/FNDSCSGN
    ; Following parameters and prodTop are used for composing module.
    ; Note: Personal Home Page modifies the lang setting automatically.
    formName=FNDSCSGN
    lang=US
    Forms servlet is just a mechanism to start the f60webmx processes on the application server (which also has the Forms listener servlet). So you will not need a seperate servlet in your case.
    HTH
    Bansi

  • Java.sql.SQLException: Closed Connection from Custom Identity Service

    Hi,
    Here is an issue I am trying to resolve:
    Platform: Oracle BPEL 10.1.2
    OS: Red Hat Enterprise Linux ES release 4 (Nahant Update 4)
    Please note that the whole thing has been working in other same type of installations (e.g. RedHat, Windows, Developer BPEL on Windows & Linux) but this seems to be something special on this server. Any help will be appreciated:
    This actually work for sometime (2-3 hours) and then suddenly stops working even if we don't do any transaction on it.
    Thanks,
    Bipul Dutta.
    Error stack:
    09/08/17 12:45:25 CustomIdentityService::authenticateUser():: begin
    ############# inside authenticateUser
    09/08/17 12:45:25 CustomIdentityService::user authenticated
    ############# inside getUser()
    09/08/17 12:45:25 java.sql.SQLException: Closed Connection
    09/08/17 12:45:25      at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:137)
    09/08/17 12:45:25      at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:174)
    09/08/17 12:45:25      at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:239)
    09/08/17 12:45:25      at oracle.jdbc.driver.PhysicalConnection.prepareStatement(PhysicalConnection.java:930)
    09/08/17 12:45:25      at oracle.jdbc.driver.PhysicalConnection.prepareStatement(PhysicalConnection.java:826)
    09/08/17 12:45:25      at oracle.tip.pc.services.identity.FAMDBProvider.getUser(FAMDBProvider.java:418)
    09/08/17 12:45:25      at oracle.tip.pc.services.identity.FAMCustomIdentityService.lookupUser(FAMCustomIdentityService.java:101)
    09/08/17 12:45:25      at oracle.tip.pc.services.hw.worklist.WorklistService.authenticateUser(WorklistService.java:333)
    09/08/17 12:45:25      at com.famis.web.service.core.humanworkflow.service.AbstractTaskWebService.getBpelContext(AbstractTaskWebService.java:20)
    09/08/17 12:45:25      at com.famis.web.service.core.humanworkflow.service.GetTasksWebServiceImpl.process(GetTasksWebServiceImpl.java:51)
    09/08/17 12:45:25      at com.famis.web.service.core.humanworkflow.service.TaskWebServiceImpl.process(TaskWebServiceImpl.java:68)
    09/08/17 12:45:25      at sun.reflect.GeneratedMethodAccessor9.invoke(Unknown Source)
    09/08/17 12:45:25      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    09/08/17 12:45:25      at java.lang.reflect.Method.invoke(Method.java:324)
    09/08/17 12:45:25      at org.apache.axis.providers.java.MsgProvider.processMessage(MsgProvider.java:141)
    09/08/17 12:45:25      at org.apache.axis.providers.java.JavaProvider.invoke(JavaProvider.java:323)
    09/08/17 12:45:25      at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
    09/08/17 12:45:25      at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
    09/08/17 12:45:25      at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
    09/08/17 12:45:25      at org.apache.axis.handlers.soap.SOAPService.invoke(SOAPService.java:454)
    09/08/17 12:45:25      at org.apache.axis.server.AxisServer.invoke(AxisServer.java:281)
    09/08/17 12:45:25      at org.apache.axis.transport.http.AxisServlet.doPost(AxisServlet.java:699)
    09/08/17 12:45:25      at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
    09/08/17 12:45:25      at org.apache.axis.transport.http.AxisServletBase.service(AxisServletBase.java:327)
    09/08/17 12:45:25      at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
    09/08/17 12:45:25      at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:835)
    09/08/17 12:45:25      at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:341)
    09/08/17 12:45:25      at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:816)
    09/08/17 12:45:25      at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:231)
    09/08/17 12:45:25      at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:136)
    09/08/17 12:45:25      at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:192)
    09/08/17 12:45:25      at java.lang.Thread.run(Thread.java:534)
    <2009-08-17 12:45:25,877> <ERROR> <tmobilet.collaxa.cube.services> <PCException::<init>> User is not found.
    <2009-08-17 12:45:25,877> <ERROR> <tmobilet.collaxa.cube.services> <PCException::<init>> User "BSAUNDE4" is not found in realm "tmobilet".
    <2009-08-17 12:45:25,877> <ERROR> <tmobilet.collaxa.cube.services> <PCException::<init>> Check the error stack and fix the cause of the error. Contact
    Edited by: user11798418 on Aug 17, 2009 10:30 AM

    >
    I have my application jar on the server, and launch this JFrame application from the browser. ><zen question>
    Which particular 'the browser'? What version of what browser running on what OS?
    </zen question>
    The reason I ask is that it is up to the browser to call an applet's stop()/destroy() methods and if they do not do so - there is almost nothing we as developers can do about it.
    If you need such reliable shut down behaviour, it would be best to launch the applet or frame using Java Web Start.

  • Steps for Developing Custom Forms in E-Business Suite

    Hi have made many sample forms
    and now i want to deploy that custom forms in ebs
    how can I do it?

    Hi again;
    You can also see:
    Registering Forms in Oracle Apps 11i
    Forms Customization Steps in Oracle Applications
    http://apps2fusion.com/apps/21-technical/44-forms-customization-steps-in-oracle-applications
    Regard
    Helios

  • LDAP Identity Service

    Hi
    Another question. Is an LDAP version of the Identity service on the way? Is it possible to integrate a custom Identity service into the BPEL Designer/PM?
    Best wishes
    John Prince

    Hi John,
    Yes the BPEL PM 10.1.2 does support LDAP for Human Workflow as well as Engine. The documentation for the same is under construction. Please Send me a mail on collaxa_support_us.oracle.com, and I will reply as soon as the documentation is available.
    Dhaval

  • E-Business Suite 11i with ESSO and Identity Manager

    Hi,
    We want to use Identity Manager to provision user information to Active Directory, MS Exchange, and E-Business Suite. Also, intend to deploy e-sso to provide single sign-on experience for desktop and web based applications.
    Has anyone integrated Oracle E-Business Suite 11.5.10.2 with Enterprise Single Sign-On and Identity Manager (Identity Management)?
    Can we achieve it without using Oracle Internet Directory/OracleAS 10g Single Sign-On?
    Any relevant information or issues faced during integration, would be helpful.
    Regards.

    Hi,
    for this integration you will need Provisioning Gateway component of the ESSO suite, and the included OIM-ESSO PG Connector.
    The eBusiness Java interface can be integrated with eSSO, trough the java helper object.
    There are several metalink notes that describe the OIM-PG integration:
    NOTE: 550639.1 eSSO: Overview And Troubleshooting Of OIM Integration With Provisioning Gateway
    NOTE: 550642.1 eSSO: OIM PG Integration: ProvisioningInstructionException: The user is not authorized for the action
    NOTE: 550645.1 eSSO: OIM PG Integration: Error in Sending Request to web service
    NOTE: 550646.1 eSSO: OIM PG Integration: Unsupported major.minor version 49.0
    NOTE: 550641.1 eSSO: OIM PG Integration: Add_credential Execution Failed. Error: XPathFactory
    NOTE: 550643.1 eSSO: OIM PG Integration: Could not find IT asset value for Svr_key
    Yes, with eSSO-OIM you wont need Oracle Internet Directory/OracleAS 10g Single Sign-On.
    Octavian

  • E-Business Suite Integration with Oracle Identity Federation for SAML

    Has anyone developed a way to use OIF for e-Business Suite authentication through SAML rather than using the standard Identity Management stack of apps?
    Today we have Oracle e-Business Suite 115.10.2 using OSSO through OID with WNA for zero sign-on (no login, just pass-through, based on AD credentials). Our domain controllers are Windows 2003 but we are in the process of upgrading them to Windows 2008 R2, where the OSSO stack is not supported unless we globally set the 2008 R2 domain controllers to use DES encryption instead of the default AES encryption. (See Oracle note 1076018.1)
    When deploying OSSO, we encountered a similar issue with Windows 7 workstations would not work with OSSO unless we set the workstation policy not to use AES encryption. (See Oracle note 973190.1)
    We are not inclined to continue to use DES encryption and we have obstacles moving to 11g iDM/OAM/OID from OSSO. I am exploring the possibility continuing to keep one 2003 domain controller in production, and pointing OSSO to that, until we can move to the 11g iDM stack.
    Meanwhile, we have ongoing frustration with how complicated SSO is with the e-Business Suite. Sure, it works, once you climb the mountain to set it up, and we don't have that many issues in production. But the implementation of SSO for e-Business Suite is simply complex. The trip from the workstation back to an EBS session is operationally somewhat brittle. I guess some of us relish complexity. Certainly there is pride in understanding something like this. But, after a while, when the trickle of tickets from the Help Desk never completely dries up, you get tired of complexity and you seek something simpler.
    So, instead of this path:
    Workstation > EBS > OID > AD / Kerberos > Workstation
    (and I didn't even mention F5 switch with reverse proxy servers ...)
    Why can't we have this?
    Workstation with certificate > OIF with SAML > EBS session.
    Has anyone done that?
    Thank you for your help.

    Hello JJ,
    We are facing the same issue. Oracle has recommanded us to install
    HTML-DB on the same database as our Apps 11i.
    What we still have to figure out is whether is use APPS schema for the
    HTML-DB workspaces, or use a different schema.
    How is it configured at your site?
    Moshe

Maybe you are looking for