ESSO LM Agent

Hi Experts,
I am new to ESSO Components. I am using the version 11.1.1.5.
I need to achieve one functionality which is related to LM Agent. At present, when ever i login into LM Agent, it is asking for Active Directory Credentials.
I want to suppress this functionality, so that when ever i login into LM agent it should automatically fetch Active Directory credentials.
Thanks,
Sandeep D

Hi Fanton,
I have changed the parameters as per below:
Located in: Global Agent Settings -> Live -> Users Experience -> Setup Wizard
Select Authenticator: Windows V2
Located in: Global Agent Settings -> Live -> ADEXT
Servers: ADServer:389
Located in: Global Agent Settings -> Live ->ADEXT
Credential to use: Try computer local credential. If it fail, use Active Directory....
And published settings to HKLM Live.
are you selecting Windows Authentication in the FTU (First Time Use)?
For the above one, i am using Primary logon method as "Windows Logon". And i am not getting any other option to select. That is the only option available.
I restarted the system. Even after that i am facing the same issue. When i login into LM agent it is asking for AD credentials.
Thanks,
Sandeep D..
Edited by: user13476138 on Aug 9, 2011 10:06 PM
Edited by: user13476138 on Aug 10, 2011 6:33 AM

Similar Messages

ESSO LM Agent Settings

Hi Experts,
I am new to ESSO. During installation of ESSO LM Admin 11.1.1.5 , i selected the minimal required options for installation.
Once after installing ESSO LM Agent at User's Desktop, For the first time it is poping up for "PassPhrase". User need to the Answer for the Pass Phrase.
How to suppress the PassPhrase option in ESSO 11.1.1.5. Do i need to set in Global Agent Settings? If so what is the Parameter name in 11.1.1.5 Version?
Thanks in Advance.

Hi sandyb4u
Yes you have to do it via LM console in Global agent setting,
As right now I don't have image running now, can't provide exact steps.
But, best way to study about ESSO configuration go to help of LM console and search your option.
below are some metalink ID where you can get passphrase related topics.
https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&doctype=PROBLEM&id=1320064.1
https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&doctype=PROBLEM&id=778961.1
https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&doctype=PROBLEM&id=1314615.1

How to suppress initial authenication window in ESSO LM agent

Hi All,
Is there a way to suppress the initial authentication window in ESSO LM agent which the user encounter when launching ESSO LM agent for the first time ?
Env Details:
ESSO LM : 11.1.1.5.1
Repository: AD
Authenticator : Winv2
Thanks in advance.

Hi Kuldeep,
Thanks for the reply. We do have enabled local cache and ESSO is not prompting for password from second logon. But we need to surpress the initail window authentication for the first time. Is there any solution /workaround for this ?
Thanks

ESSO LM Agent Capturing application credential problem

Hi all,
In my test environment Am having the following
Oracle ESSO Logon Manager
ESSO-LM Administrative Console Version 11.1.1.5.1
IN Active Directory having two Organizational Units(OU) says
ESS , IMS
In both OU's am having 2 users.
In ESS says essuser01, essuser02
and in IMS says imsuser01, imsuser02
Domain Name : example.com
I have installed Admin Console in Windows 7 pro.
and LM Agent have been installed in another system also having Win 7.
In Left pane of my Admin console
Under
Global Agent Settings > Live > Synchronization > ADEXT
Base Location for Configuration Objects sets to
<li>OU=ims,DC=example,DC=com</li>
<li>OU=ess,DC=example,DC=com</li>
Location for storing user credentials sets to
Under respective directory user objects
Having Applications
ESS_yahoo - For yahoo mail login
IMS_Gmail - For Gmail login
Have published ESS_Yahoo(Application) and Live(Global Agent Settings) to target repository
OU=ess,DC=example,DC=com[example.com]
Similarly,
IMS_Gmail(Application) and Live(Global Agent Settings) to target repository
OU=ims,DC=example,DC=com[example.com]Problem is while login as IMS or ESS users LM Agent is capturing both applications.
Even I set
Global Agent Settings > Live > User Experience > Application Response > Initial credential Capture > Limit response to predefined applications for
All application Types & Web Applications set to
Predefined applications onlyMy need:
For ESS users Agent must capture only Yahoo credentials,
same as IMS user it must capture only Gmail not yahoo.
What i have to do. Am newbie to ESSO.
Response will be appreciated.
Bala:)

A few key element :
In the admin console : Navigate to Global Agent Settings -> Live -> Synchronization
Disable role/group security support.
Note : Database Synchronization will not work with this option enabled
Then :
Navigate to Global Agent Settings -> Live ->
Synchronization->DBEXT ->Required
Specify the database servers with one of the following values:
Provider=OraOLEDB.Oracle;Data Source=orcl;Extended
Properties='OSAuthent=1';
Provider=OraOLEDB.Oracle;Data Source=orcl;User
Id=SYSTEM;Password=Manager1;
orcl
Then : Navigate to Global Agent Settings-> Live -> Synchronization
-> DBEXT -> Advanced and enable Append Domain when naming objects
To connect to the DB to distribute Application Use :
Connection String : Provider=OraOLEDB.Oracle;Data
Source=orcl;User Id=SYSTEM;Password=Password1;
Repository Type : Generic Database
Then you can deploy application the the DB, using the configure SSO support....
Good luck

ESSO-Provisioning Gateway

Hi All,
I'm trying to test 'delegation' option in ESSO-LM Agent. I have configured PG and LM-Admin console as per the documentation, LM-Client is working fine and also i'm able to provision user logons for account in AD using Provisioning Gateway... but Delegation option is not working as expected, can anyone help me out with their valuable information.
Thanks & Regards,
AK

Hi Marius
It seems to be a known bug. As a workaround you can delete the adapter tasks printdata and printset from the PasslogixChangePassword adapter. After doing that, it works fine.
Regards

Internet Explorer Java app problem when ESSO client runs on machine

Hi,
I face following situation:
User is working with web application. It is a kind of interface for Document Management System. This application logon is not managed by Oracle Enterprise SSO client (or agent).
When an Oracle ESSO services run on user's computer, user cannot open PDF files from DMS Internet Explorer page with error: UNABLE TO DOWNLOAD APPLET DUE TO SECURITY ISSUE.
When an Oracle ESSO services do not run on user's computer, user can always open PDF files from DMS Internet Explorer page with no errors.
I checked the Internet Explorer security settings and there I can see no limitations on Java, scripts or ActiveX.
My question is:
how Oracle ESSO client/agent affects other Java-based applications or applets?
is there any possible reason while Oracle ESSO client is installed to user computer with package including "Java helper" item?
is there any known and described issue within?
Thank you very much for any answer.
Regards, Kamil
Message was edited by: KamilBrzak
Addition: Described behaviour was under IE8 and IE9. Firefox 22.0 and IE10 works correctly. Java version is 6.21. Operation system is Windows 7 x64.

Say your stub is in a jar called stub.jar.
You need to put that stub somewhere that it can be reached through a protocol for which Java has a URL type - so you can put it on a shared file system and use a file URL or behind an http server and use an http URL.
Let's use http - put stub.jar at the docroot of a web server.
Then, when you start your SERVER code, include this VM parameter:
-Djava.rmi.server.codebase="http://<serveraddress>stub.jar"
Now your client will be able to use http to load the stub file out of stub.jar through http.
If you do use a file URL, make sure the shared directory you put your jar in is not on the client's classpath.

ESSO FTU Wizard Passpharse

Hi All,
I am trying to do ESSO LM setup on windows 2008 64 bit server. I have installed ESSO LM-Admin console and ESSO LM Agent successfully. I got ESSO Agent FTU wizard after restarting the server. When i proceed with that after entering the credential it is giving the passpharse screen to select the question and setup the answer. After setting up the question and answer only i can proceed further. But in that screen i am not getting any questions. What i am missing here.
Please advice on me this.
Regards,
Deena.

Hi,
How are you saying its not running on win 2008 R2 m/c, did you test something?
if tested something, post here what kind of testing has been done.
Have you created application templates and published to central repository?
Also what is you central repository? If its AD, are able to connect/ping AD domain controller from LM agent's machine.
Finally you can run the tracecontroll utility to find out is there any problem in connecting to central repository to download app templates.
Please check and let me know what is error in events.
Regards,
Raghav.

ESSO FTU Wizard Passpharse is not coming

Hi All,
           I am trying to do ESSO LM setup on windows 2008 64 bit server. I have installed ESSO LM-Admin console and ESSO LM Agent successfully. I got ESSO Agent FTU wizard after restarting the server. When i proceed with that after entering the credential it is giving the passpharse screen to select the question and setup the answer. After setting up the question and answer only i can proceed further. But in that screen i am not getting any questions. What i am missing here.
         ESSO Suite version - 11.1.1.5.1.
          Please advice me on this.
Regards,
Deena.

Hi gtrdownload,
What version of esso are you using?
Try the follwing
1. Define the putty application as a new windows app
2. And make sure to select "Use Send Keys" .
let me know if that works.

ESSO - Citrix Integration

Hi IDM experts,
I have a small question regarding ESSO - Citrix integration.
According to my knowledge, ESSO LM Agent can handle requests from only one user at a time.
But when we install ESSO - LM on a citrix server, how will it handle the requests from concurrent users ??
Regards
Sai

When you are using the ESSO-LM admin console, go to the help files and search for the term "Citrix_Environment_Install".
By default, the ESSO client has a setting to check for a parent process so that only one instance of the client can be running at a time. The setting outlined in that help page will allow multiple concurrent instances of the ESSO client run on the same machine at the same time. It also gives a sample of how to modify a citrix launcher to launch an application with the ESSO client so that the client loads prior to the application to automatically log it in.
I hope this helps get you on your way!

Esso-LM (Administrative Console)

Hi Experts!
I Have a problem with ESSO-LM Agent, isn´t loading applications of Repository (Active Directory)
In my version of ESSO-LM (11.1.1.5) I verified that when right-click in Global Agent Setting - > Import -> From Live HKLM (This option is disabled)
This affects anything?
And . . .
In the Administrative Console:
Global Agent Setting -> Live -> Synchronization->ADEXT (I Don´t have this option)
I Have Global Agent Setting -> Live -> Synchronization-> (AD symbol + IP address Server)
Synchronization: AD 192.168.201.3
-Data Storage Configuration
Connection information
User interface
Credential Sharing
My problems are related with this ?
Best Regards

I'm experiencing the same. ESSO Version is: "ESSO-LM Administrative Console Version 11.1.120 (Build 2010.10.28)"
I can't provide user credentials. What could be wrong?

SAP integration with Oracle eSSO LM

Hi All,
While adding SAP as windows application, eSSO LM agent not able to detect the field of SAP GUI.
How can we integrate SAP 710 with oracle eSSO LM for SSO.
Request to all please help me out and provide the resolution steps for integrating the SAP with LM.
Regards,
Santosh

Dear Experts,
Request your assistance in integrating SAP with oracle eSSO for single sign on.
How can we create a SAP template in Admin console.
Thanks in advanced.
Regards,
Santosh

Esso Agents 11.1.1.2.0 with Legacy Logon manager and PG

Hi
I have many applications that fail on single sign-on.Although the eso services are started I have many pcs having to be re-installed because of esso not working. I have tried the troubleshooting methods on repair and un/re-installation of the esso software with no success
The components I have currently installed are:
1. Esso Server
Logon Manager Console 10.1.410 (unpatched)
Provisioning Gateway server 10.1.410 (unpatched)
Microsoft ADAM repository on windows
2. Windows XP esso Client
Logon Manager Agent 10.1.410 (unpatched)
Provisioning Gateway Client 10.1.410 (unpatched)
My question is can I upgrade the clients to the latest version 11.1.1.2.0 now while having the Esso server version software remain the same. The upgrade of the Esso server will happen only during the latter half of the year.
Will the esso clients still continue to work connecting to the legacy software on the esso server.
We have a few sites that have been upgraded fully ( server and clients) to the 11.1.1.2.0 version and esso has been stable there ever since .
Thanks
Minesh

This is an SSL handshake problem of Websphere - has nothing to do with AM.
Websphere�s JDK does not trust the Signer / Cert of AM�s deployment container.
Either configure a truststore (or use an existing webshpere truststore) where you import the Cert of the Signing CA of your AM DC�s cert.
Other option - import the mentioned cert in cacert file of IBM JDK - but be aware that this might get lost when applying an Websphere fixpack/refreshpack.
BTW what have you configured for server.port,server.host and server.protocol in your AMConfig.properties?
If you have not changed that settings agent will use the port/protocol specified to communicate with AM.
-Bernhard

Problem with the agent console created in the ESSO-Logon Manager 64 bits

Friends,
When I use the installer that I created in the console ESSO-Logon Manager for 32-bit, this I install it on the client side and when I synchronize with the console-Logon Manager ESSO brings me and I can see the agent all the templates I configured.
I have a problem with the agent console created in the Logon Manager ESSO-64bit.
When I use this installer on the client stations and then by the agent does not envision the applications that I have configured in the console.
This causes you can not do single sign on to applications that I have configured in the client stations
To generate this installer use the source name: ESSO-LMx64.msi
Can someone please help me with this problem, this only happens when I use the msi installer on 64-bit client stations.
Thanks.

Jackson_Bill wrote:
What IDE are you using and what platform?Read first.
Moh Bob wrote:
I'm using J2ME platform SDK 3.0
db

ESSO: Agent not taking TitleBar properties

ESSO (nee Passlogix) v. 1.1.1.1.5. I'm testing some agent properties but the agent is refusing to respect the overrides that I am putting in the Global Agent Settings and then saving into the HKLM. In particular, the 'Show titlebar button' and 'Provide drop down menu' items. Other items that I have tested like changing the tooltip and displaying the tray icon work as advertised, but the ones related to displaying the titlebar or the menu. Showing the button isn't really an issue because we want it there, but even when I change those settings directly in agent, it doesn't seem to respect the settings in paricular the 'Show dropdown menu' setting. We REALLY want the button to initiate the log on process when that is clicked.
Thanks,
James

Apparently this is a new "feature" of 11.1.1.5. If you have the admin console open (which as a developer I always do) the titlebar button and menu will always be present regardless of any setting to the contrary. Shut down the console and it behaves correctly.

ESSO PG Connector Issue in OIM 11G

I setup ESSO Provision Gateway Connector in OIM 11G.
But during "add credential task" I get error:
"*The add_credential execution failed. Error: Error in sending instruction from provisioning manager in Api Command (400) Bad Request. Add Credential Command failed to get invoked*".
In Event Log of the Windows Server 2008 with the Provision Gateway I saw:
"*Unexpected end tag. Line 6, position 1015*", "*server cannot clear headers after http headers have been sent*".
It means a syntax error in xml request of connector to web-service of Provision Gateway.
Wireshark shows me sent xml-request:
"<?xml version="1.0" encoding="UTF-8"?>
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<soapenv:Header>
<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" soapenv:mustUnderstand="1">
<wsse:UsernameToken><wsse:Username>cn=adm,o=petro</wsse:Username><wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">12345678</wsse:Password><wsse:Nonce>QFJ903k1GFWnAoqZ/Npijg==</wsse:Nonce><wsu:Created xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">2010-12-07T11:47:02.502Z</wsu:Created></wsse:UsernameToken></wsse:Security></soapenv:Header><soapenv:Body><AddCredential xmlns="http://passlogix.com/UP/"><strRequest><?xml version = '1.0' encoding = 'UTF-8'?>
<addRequest><attributes><attr name="objectclass"><value>urn.oasis.names.tc:SPML:1:0#GenericString</value></attr><attr name="provisioningAgent"><value>Provisioning Agent</value></attr><attr name="ssoUserId"><value>SGP63234</value></attr><attr name="creationTime"><value>2010-12-07 11:47:02.491Z</value></attr><attr name="executionTime"><value>2010-12-07 11:47:02.490Z</value></attr><attr name="applicationId"><value>SAP</value></attr><attr name="userId"><value>EBELOV</value></attr><attr name="description"><value>SAP</value></attr><attr name="password"><value>Q123</value></attr><attr name="thirdField"><value>888</value></attr></attributes></addRequest></strRequest></AddCredential></soapenv:Body></soapenv:Envelope>*</#document>*"
I saved it to xml-file and opened in Internet Explorer and there was error.
Then I decided to watch the view of this request in OIM 9.1.0.2 to compare with request in OIM 11G.
I found out next one:
the main difference was in last tag "*</#document>*".
I take this tag off from xml-file, taken from request of OIM 11G and saved the file.
Edited xml-file was correct.
Is it error in connector or in OIM 11G?How to solve it?Can anyone help me?

Hi!
I get the same error during Add Credential task with the ESSO PG connector in OIM 11g.....
The add_credential execution failed. Error: Error in Sending instruction from the provisioning manager in API Command (400)Bad Request.
com.passlogix.integration.provision.client.CommandInvocationException: Error in Sending instruction from the provisioning manager in API Command (400)Bad Request
Where I can check the xml file?
You could solve the problem?
Thanks in advance!!!

ESSO LM Agent

Similar Messages

Maybe you are looking for