Different partner apps share sso schema?

Sorry if this is a stupid question.
Part of the setup and configuration of a partner application is the creation of a database schema, one in which we install the sso pl/sql packages, etc...
I have several partner applications. Does each partner application need to have it's own unique sso schema? Or can all my partner applications share the same sso schema?
Any recommendations?
Thanks!
Phillip

To me it clearly looks like Resource forest scenario. The only difference is, you are Migrating the Mailbox into Own Forest, rather creating a New Mailbox for User in Partner AD.
http://www.msexchange.org/articles-tutorials/exchange-server-2007/planning-architecture/deploying-exchange-resource-forest-part2.html
http://social.technet.microsoft.com/Forums/exchange/en-US/3f020f35-df27-4a16-b3a9-9b0db7d95b61/exchange-2010-resource-forest-how-do-you-assign-permissions-to-share-linked-mailboxes
About Single Sign On
ADFS 2.0 should accomplish it.
Cheers,
Gulab Prasad
Technology Consultant
Blog:
http://www.exchangeranger.com    Twitter:
  LinkedIn:
   Check out CodeTwo’s tools for Exchange admins
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

Similar Messages

APEX as Partner APP in SSO - Post Authentication Process

I am trying to get APEX to work as Partner APP with SSO. It's almost working but a vitol piece doesn't cooperate.
In my old authentication scheme (built-apex) I have a Post-Authentication Process (see below) that needs to set my page 0 items. When I put this into my new authentication scheme for SSO and try to log-in, I get a blank screen.
If i take it out, my screen displays fine, but my page 0 items are not set with the correct values. What am I missing?
DECLARE CURSOR get_user_defaults IS
select B.fk_school, B.year, B.pk_id,
nvl(A.user_type,'N') user_type
from "#OWNER#".sis_user_roles B, "#OWNER#".sis_user A
where A.user_name = :APP_USER and
B.fk_sis_user = A.pk_id
order by decode(B.default_role,'Y',1,2);
BEGIN
FOR user_defaults_loop in get_user_defaults LOOP
:P0_LOGIN_SCHOOL := user_defaults_loop.fk_school;
:P0_LOGIN_SCHOOL_YEAR := user_defaults_loop.year;
:P0_LOGIN_ROLE := user_defaults_loop.pk_id;
:P0_USER_TYPE := user_defaults_loop.user_type;
EXIT;
END LOOP;
END;

not sure what the problem is. Are you sure that :app_user is set already?
However it looks as if you get an error (might result in blank screen) during your process.
btw: the pL/sqkl block could be rewritten into a single sql select without any loop.
BEGIN
SELECT fk_school, year, pk_id, user_type
INTO :P0_LOGIN_SCHOOL, :P0_LOGIN_SCHOOL_YEAR, :P0_LOGIN_ROLE, :P0_USER_TYPE
FROM (
    select B.fk_school, B.year, B.pk_id,
    nvl(A.user_type,'N') user_type, rownum rn
    from "#OWNER#".sis_user_roles B
        , "#OWNER#".sis_user A
    where A.user_name = :APP_USER
    and B.fk_sis_user = A.pk_id
    order by decode(B.default_role,'Y',1,2)
where rn <= 1
exception
when no_data_found then
     raise_application_error(-20001,'User "'|| :APP_USER ||'" not found!');
END;

Partner App OAS SSO integration does not work

Hi All,
I try to make OAS SSO work. I have app I built in HTML DB, I try to make it work as Partner Application for OAS SSO. I've done all requierments to install SSO SDK and try to make it work - it was fruitless.
Then I try to make Test App work (\ssosdk307_032101\demo\plsql\) - it was fruitless also.
I received the same error messages in Apache error_logs:
[Thu Nov 4 12:06:54 2004] [error] [client 192.168.83.43] [ecid: 1099562814:192.168.83.197:9461:0:1,0] mod_plsql: /test2/test_setup HTTP-503 ORA-6550 Call to WPG_SESSION API Failed.
[Thu Nov 4 12:06:54 2004] [error] [client 192.168.83.43] [ecid: 1099562814:192.168.83.197:9461:0:1,0] mod_plsql: ORA-06550: line 4, column 2:
PLS-00201: identifier 'FLOWS_010500.WPG_SESSION' must be declared
ORA-06550: line 4, column 2:
PL/SQL: Statement ignored
ORA-06550: line 5, column 16:
PLS-00201: identifier 'WPG_SESSION_PRIVATE.CREATE_SESSION' must be declared
ORA-06550: line 5, column 2:
PL/SQL: Statement ignored
ORA-06550: line 6, column 15:
PLS-00201: identifier 'WPG_SESSION_PRIVATE.GET_LW_USER' must be declared
ORA-06550: line 6, column 2:
PL/SQL: Statement ignored
ORA-06550: line 7, column 2:
PLS-00201: identifier 'FLOWS_010500.WPG_SESSION' must be declared
ORA-06550: line 7, column 2:
PL/SQL: Statement ignored
Could someone point me what to do in order to make it work? I guess I miss some step but I don't know what one I've missed :(((
Thanks,
Sergiy

Scott,
Thanks for your reply. I double check instruction and re-done all steps. I try to start demo application (I didn't even go further tneh step 4 in Install.txt!)
from ...\ssosdk307_032101\demo\plsql\Readme.txt 5. To verify the web server setup, go to the following URL to see the test page:
http://<hostname>:<port>/pls/<dad_name>/<schema_name>.test_setup
, but I receive the same error messages in IE and in Apache error_logs.
I see at this point one weak area - this is DAD. As I understand I need to create dad in dads.conf, am I right?
Maybe I didn't created it right?
Could you post some working dad for SingleSignOn?
Thanks,
Sergiy

Apex as Partner App using OID SSO

Hi
I have setup Apex as a partner App in OAS.
Registered the partner application.
Created a simple app that uses the builtin Apex auth as partner app using sso.
I get the OAS login appearing as expected for authentication however apon entering credentials successfully
The success url takes me to server:7777/sso/auth and displays page can not be found
My OAS Partner App success url registered is server:7778/dad/apex/wwv_flow_custom_auth_sso.process_success
app schema registered details
My lsnr token is HTML_DB:server:7778
other details cut and copied from OAS registration page.
lsnr login url is the oas sso login url is this correct?
Appears to work apart from the success url finding its way back to my app.
TIA
Richard.

Hello all,
I'm having somewhat of a similar issue, but I think our setup might be making it a bit more complex.
First question, simple one:
1.
In my authentication method in my apex app, when I set my logout URL to http://{myhost}:{myport}/pls/orasso/orasso.wwsso_app_admin.ls_logout?p_done_url=http://www.google.com
It doesn't automatically redirect. I have to press the Return button on the OAS Single Sign-Off page to redirect to www.google.com
Is the redirect not automatic? Is there a way to make it automatic?
2.
We have the issue where you login via SSO into an APEX application (APEX as a partner app). But the logout url does not truly log the user out. It redirects to our public page as we expect it to, but when they press the login button, it just goes straight back in (as if they were never logged out).
Now I know this has to do with the cookie, but here's the tricky part.
Our OAS server (that has Portal) is on a separate box. We've upgraded all our database servers, and they all have now a different domain than the OAS server. So now, OAS is in company1.com domain and our APEX apps are on company2.net domains.
Our DBA had setup us his own flavor of SSO logout (public synonym for all apex workspaces to use). He has an actually database procedure that used the owa_cookie package to look for the cookie and invalidate it on logout. With the new domains, his logic no longer works, because I believe the cookie is still in company1.com domain and the logout proceduce is running from the company2.net domain and cannot find the cookie (since it's not in it's domain).
After all that, I am thinking that since we can successfully login to SSO in company2.net domain via the OAS server, then we should also be able to logout of SSO successfully via the OAS server as well. Am I on the right track here? Is it possible with multiple domains?
Thanks,
Chris
Edited by: CDub on Oct 19, 2009 1:55 PM

Logout URL for 9iAS SSO Partner App

Hi,
I've successfully set up an HTMLDB application as a Single Sign On partner APP. The login works perfectly, except I'm a little confused about the logout URL. Currently it is set to the default in the Authentication scheme, but it doesn't work too well - I get errors if I navigate back to the single sign on page from the default HTMLDB logout page. What I want it to do is to de-authenticate then automatically go back to the SSO login page. What do I change my logout URL to?
(curently it is wwv_flow_custom_auth_std.logout?p_this_flow=&APP_ID.&p_next_flow_page_sess=4155:PUBLIC_PAGE)
Thanks,
Steve

Steve - Here's a logout URL that unsets the app's
session cookie first, then goes to Single Sign-off,
then back to a public page in the app:
https://host:port/pls/DAD/wwv_flow_custom_auth_std.log
out_then_go_to_url?p_args=&APP_ID.:https://login.yourl
ogin.com/pls/orasso/orasso.wwsso_app_admin.ls_logout?p
doneurl=https://host:port/pls/DAD/f?p=&APP_ID.:PUBLI
C_PAGE
ScottI am quite new to Oracle Apex.
I have just looked read through your posts, because I am having a similiar problem. I simply want to be able to click the logout link on my application and be able to logout of single sign on.
I have tried your URL and I am sure it is accurate but I am unable to get it to work. I think the main problem I have is that I cant get to the logout URL on the single sign on page : http://host:port/pls/orasso/orasso.wwsso_app_admin.ls_logout
Please could you advise ?
Thanks
Numan

How to set up ApEx as a SSO partner app?

I seem to be stuck in something of an endless loop here.
I'm trying to set up the authentication for an ApEx app to use my Oracle AS SSO. When I start the wizard to create a new authentication scheme I choose "Based on a pre-configured scheme from the gallery". That shows me five choices (open door, ApEx credentials, database credentials, LDAP, and "no authentication"). When I click on the "Information" link at the bottom it displays some text for two more choices which aren't listed above: "Oracle Application Server Single Sign-On (Application Express engine as Partner App)" and "Oracle Application Server Single Sign-On (My application as Partner App)". Those descriptions also say that those choices aren't displayed because "This Application Express site must have already been registered as a partner application with the SSO server."
OK -- no big deal. I'll just register the ApEx site as a partner app. I found this link explaining how to do that: http://www.oracle.com/technology/products/database/application_express/howtos/sso_partner_app.html
Now, reading that page, I get to this step in the process: "Using the Application Express Application Builder, use the create authentication scheme wizard to create an authentication scheme based on the pre-configured
scheme Oracle Application Server Single Sign-On (Oracle HTML DB Engine as Partner App)."
And back to the top of my loop. The wizard in Apex tells me that I can't see the SSO choice when I'm creating my app's authentication because it's not registered as a partner application, and the instructions which tell me how to register ApEx as a partner application tell me to pick the SSO choice in the ApEx wizard.
Has anyone managed to break out of this Groundhog Day documentation loop?

Well,
There are 5 choices to choose from on the page. In the description of the choices at the bottom of the page there are 7, and the two additional choices talk about having to first have registered the site with SSO. So...I'm interpreting that as meaning that other 2 possible choices would be displayed if the site is registered with SSO. That, plus the fact that the page which describes how to add the site to SSO seems to think that the SSO choices are displayed in the wizard.
So, no, there's no "exact launguage" that says what the reason is for the choices not being displayed. Can you point me to some exact language that tells me how to get those choices displayed?

SSO Authentication Audit Information for Partner Apps ?

Hi,
Is it possible to get Audit Information to show when a users has been authenticated by SSO for a Partner Application ?
If I look at orasso.wwsso_audit_log_view I can see when a user has been authenticated and a row for Portal and each Partner App that gets authenticated. The question is can you tell which row relates to which Partner App or is there another table with this information ?
i.e I have two Partner Apps, a user logs onto Portal and only visits pages for one of them, When I log I see 2 rows, I need to know which Partner App they vistied (A or B).
Thanks
Simon.

Well in that case i guess am in luck because i am working with oracle. The thing however is that I don't know where to fetch the information about the installation and all that in order to proceed ahead.
Besides it seems, the easier it was to make the application and deploy it on the apex, the harder it is to integrate it with the SSO.
Also i don't understand when you say "public apex.oracle.com", I always thought it was meant only for oracle employees as in it's not accessible through the internet.
You won't (unless you work for Oracle) be able to do
that on the public apex.oracle.com site as far as I'm
aware.

Partner Application in SSO logout does'nt synchronize

Hi All,
I've setup two separate application on different workspace and different server as partner Application. I've follow the instruction from http://www.oracle.com/technology/products/database/application_express/howtos/sso_partner_app.html
. And everything working fine, but the "logout" seen doesn't work correctly.
Example: I'm login to Application "A" from single sign on homepage, after enter username and password, it direct me to Application "A". After that, i've click on Application "B" which also located on single sign on homepage and direct me to application "B" (that's correct). When I clicked on the "logout" link in Application "A" it work fine, but the other Application (B) doesn't log me out. I can do the normal work on Application "B" even the Application "A" already logout.

Hi Scott,
Thank you for your reply. I've read the two link above and I don't figure out how to resolve my problem yet. From the link: Logout URL for 9iAS SSO Partner App
you said:
Steve - Here's a logout URL that unsets the app's session cookie first, then goes to Single Sign-off, then back to a public page in the app:
https://host:port/pls/DAD/wwv_flow_custom_auth_std.logout_then_go_to_url?p_args=&APP_ID.:https://login.yourlogin.com/pls/orasso/orasso.wwsso_app_admin.ls_logout?p_done_url=https://host:port/pls/DAD/f?p=&APP_ID.:PUBLIC_PAGECan set the authentication schema logout URL of application "A" something like: unsets app's session cookies first, then goes to Single Sing-off, then goes to Application "B" sign-off, and then back to a public page in the app. That way will be logout the Application "A", logout the Single Sign-On, and logout the Application "B" when i click on the "logout" link from Application "A". Am I correct?
The other question is how can i get the SSO cookie. I've used the owa_cookie.get('cookie_name') function, but it doesn't work for SSO.
Thanks,
Kevin

App and SSO SSL-ing with SSLconfigtool

hello ..
I need youtr help.
im trying to configure SSL for application. I read document about SSLconfigtool and it looks easy. First I select correct scenario and run configtool -> scenario Configuring SSL to OracleAS Web Cache for J2EE for SSLing http access with termination on webcache (with oracle sample wallet). It was configured correctly.
And now I needSSLing SSO. So I select scenario Configuring SSL to Oracle HTTP Server for OracleAS Single Sign-On/Oracle Delegated Administration Services
After running openssl the Http server cant start. in log I an find any error except owerwriting pid file.
So is this good idea for SSLing or the is problem in my head ?
solving technical problem is next step, firstly give me advice about ideas.
thanks for any help.

I've just created a new instance on the same server, installed Apex 3.2, created a single page test app, used Application Express as Partner Application as SSO authorisation scheme, accessed the app's url and exactly the same thing happens... I just get a 404 page where the URL http://OID_HOST:port/sso/auth
I must be overlooking something somewhere but as far as I know, I've followed all the guidance and have created this based on previous installs.
Again, any help would be greatly appreciated!
Thanks.

Is it possible to have custom PL/SQL signoff/logout pages per partner app?

Hello -
We are currently using one OID server as our SSO midtier for an Oracle portal and Oracle EnterpriseOne applications. Following document (342942.1) we have successfully been able to create a customized sign-off/logoff page. However this page defined is the same for all partner application. We would like the ability to send the users to one page if they logoff from the portal, and to another page if they logoff EnterpriseOne. Is there a way to determine which partner app is calling for a logoff, and we could populate the p_done_url variable from there?
Thank you.

Why not just wait for the request to complete in your PL/SQL?
function FND_CONCURRENT.WAIT_FOR_REQUEST
(request_id IN number default NULL,
interval IN number default 60,
max_wait IN number default 0,
phase OUT varchar2,
status OUT varchar2,
dev_phase OUT varchar2,
dev_status OUT varchar2,
message OUT varchar2) return boolean;
Trust iguru here.. the users will not notice.

Public and Authenticated App with Authorization Scheme once per session

I have a question . . .
Let's say I have an application and at the application level I have an authorization scheme (auth1). If auth1 is set up to evaluate once per session, does it authenticate for the public user, then pass me back to the page and then check then evaluate the auth1 scheme. Or does it evaluate the auth1 scheme, then log in, then return to the page. Is it the same regardless of authentication scheme (e.g. Oracle SSO).
It may make a big difference. If the authorization sheme is based upon the user (most will be) then setting it to evaluate once per session can be a real problem. If it evaluates before the user logs in, then it won't really work.
This is an even bigger question when the application does not have a authorization scheme at the application level and allows public pages. If a page that is not public has an authorization scheme set, and the user goes directly to that page, it seems to authenticate the authorization scheme and then logs you in, but does not re-evaluate authorization scheme after you are logged in. Is this accurate? I realize that I could set it up to evaluate for every page view, but I really only need it once after login.
Is this clear?

Anton,
It seems that all authorization schemes that are set to evaluate once per session are evaluated with the beginning establishment of a session.Sort of correct. Authorization schemes don't get evaluated until the component that uses them is considered for rendering or processing. So if the authorization scheme is attached to a page, it won't fire until the page is requested. If another component uses that scheme first, the evaluation will happen then and will not happen again during the session.
What if I have another page that is not public. If it is the first page I go to, what happens. Obviously, I get redirected to login, then login. Do the authorization schemes get evaluated at this point?Yes, assuming the authorization scheme is used by the page, the scheme is evaluated during the first rendering or processing of the page in the session, after the authentication step.
Now, what if I have a page that is public, but also has an auth scheme (odd, but could happen). Now what happens, does the auth scheme get evaluated before or after login?During the rendering or processing of the page after the authentication step. For a public page, the authentication step is performed up to the point where it determines that no authentication is required.
OK, now let's add in Application level auth scheme. I can have public or private pages. If I go to a private page, when does the app level auth scheme kick in? How about for a public page?When an application uses an authorization scheme, it gets evaluated before the authorization scheme (if any) for the page that is being requested, so the public/private property of the page doesn't matter.
General advice: when an authorization scheme uses :APP_USER, it doesn't work well to have it fire once per session because it'll get run before authentication to the application occurs, which sets APP_USER. You can have such schemes fire once per page view and for PL/SQL function-type schemes, have them give a "pass" when the current page is the login page, that kind of thing.
In addition, if the overhead of running a scheme is high, one can set an application-level item to indicate that a once-per-page scheme has already run satisfactorily. The PL/SQL-type schemes can access the value of such an item to skip the expensive part of the evaluation and return true immediately.
Finally, the htmldb_application.reset_security_check API can be called in order to reset the "fired" status of all authorization schemes in the session, allowing them to be re-evaluated if/when they are encountered again in the session.
Hope this helps,
Scott

Export and Import of APPS and Applsys Schemas in R12

Hi ,
Can you please let me know Export and Import of APPS and Applsys Schemas in R12 will cause any issue ?
Thanks and Regards,
Jagadeesha.

Can you please let me know Export and Import of APPS and Applsys Schemas in R12 will cause any issue ?If you mean exporting/importing only those two schema between different instances then this is not supported (due to other schema dependencies) and the only supported way to export those two schema is by exporting/importing the complete database.
Export/Import Process for Oracle E-Business Suite Release 12 using 10gR2 [ID 454616.1]
Export/import process for R12 using 11gR1 or 11gR2 [ID 741818.1]
Thanks,
Hussein

Oracle.apps.xdo.oa.schema.server.TemplateHelper docs?

Hi
I didn't get a reply to my query about using fonts from XDO_LOBS.
So I have another question - is the documentation for the class mentioned in the subject available? It seems that this class gets fonts, data templates and templates from XDO_LOBS automatically...

Hi Hieu,
Can you explian me how to reslove the issue. am also facing problem.
How to add the Project libraries into my PC.
I download from server java/classes/oracle/apps/xdo/oa/schema/server,
But i don;t know how to add the libraries. Please share me how you resloved the issue.
Thanks
Venkat

Create Quotation by sending different partner data to header & item table in a Report

Hello all,
   Can any one please guide me how can I send different Partner data to Header & Item by running a Z Quotation Report in SE38. Actually Now I am able to create a Quotation which takes same Partner data of Header to Item data as well but my requirement is to send different Partner data to Header & Item in a quotation.
If you have sample code for the same please do share. I will be thankful to you.
Waiting for helpful suggestions.
Regards
-Ajay

Hi Ajay,
I was referring to CRM_PARTNER_MAINTAIN_MULTI_OW and CRM_PARTNER_MAINTAIN_SINGLE_OW function modules. A sample working code (written in badi) for an order below.
l_wa_partner_com-partner_no = l_v_bp_guid.
l_wa_partner_com-partner_fct = l_c_partner_fct.
l_wa_field_names-fieldname = l_c_field_partner.
INSERT l_wa_field_names INTO TABLE l_i_input_fields.
l_wa_field_names-fieldname = l_c_field_fct.
INSERT l_wa_field_names INTO TABLE l_i_input_fields.
** Update the order with new partners
CALL FUNCTION 'CRM_PARTNER_MAINTAIN_SINGLE_OW'
EXPORTING
iv_ref_guid                    = is_orderadm_h_wrk-guid
iv_ref_kind                    = l_c_ref_kind " Pass B here in u'r case
is_partner_com            = l_wa_partner_com
CHANGING
ct_input_field_names   = l_i_input_fields
EXCEPTIONS
error_occurred             = 1
OTHERS                      = 2.
IF sy-subrc <> 0.
ENDIF.
Thanks,
Faisal

When my instructor app shares, my connectivity status changes to poor and her voice becomes sporadic

I am training to be an at-home rep and learning on-line through AdobeConnect. Whenever the instructor app shares with the client's application (through secure VPN and Citrix) the connectivity status bar swings between poor to excellent and much of the time I lose her voice. The IT Support has not been able to figure out why -- my PC and technical requirements all meet their standards. I doubled my broadband speed, but that also didn't solve the problem. Any help would be appreciated. I will have to drop out of training if I can't get this fixed soon. Rosie

I am having the same problem as the person above. I have been working with my DSL provider for 2 weeks and have been unable to find anything that is causing the latency problems (although my DSL service has improved overall with the changes that were made). When I connect via my Verizon aircard, everything works great, but I will rapidly start getting charged for data overages in a week.
Because the aircard worked great, this led me to believe it was a problem with my DSL connection. I have done trace routes and there is no consistent issue with slower ping times or packet loss. Yes, I get the occasional 200-250ms ping times on one hop, but that is not unusual due to the reduced priority on ping traffic (ICMP, I think). Anyway, then I learned that routes are not always symetrical and that the return path may be different than the outgoing or request path. And the return path seems to be where the issue is.
How can I work with someone to troubleshoot my return path from adobeconnect.com? Can someone do a traceroute to 68.22.72.67? That is the hop just before my router.
FYI, here is what else I have done to try to narrow down the problem:
- use aircard and it works perfect, but that uses a different path which leads me to believe the path is the issue
- turn off all other devices connected to the router
- trace routes, endless ping tests, pathping, speedtest.net, pingtest.net, all tested good
- bridge tap was removed lessening my distance to the CO from 9000 ft to 8000 ft
- replaced corroded connectors
- reprovisioned line to the red back (ATT's term)
- changed pair from the CO
- attempted adobe connect sessions on multiple computers with both Windows 7 and XP
- instructor reduced connection speed from LAN to DSL and reduced frame rate at my request with no change
- she records the classes and the recordings are perfect except for the times when the class pauses.
The latency I am experiencing is when she shares a screen and then it can go as high as 8s, but mostly it is between 2 and 4s. That is enough to make the audio completely drop out or it is just uninteligible with the short bursts that come out.
Please help. If you can help identify where the problem is in the return path, I will attempt to take it from there. Scott

Different partner apps share sso schema?

Similar Messages

Maybe you are looking for