How to enable a partner application for Single Sign-On?

Can someone please advise me on how to enable my existing J2EE web application for the Oracle Single Sign-On?
My requirement is i want to provide the single sign-on authentication service to my J2EE web application. For this, I would like to make my application as a partner application similar like the OracleAS Portal.
I am using Oracle 10g ( OralceAS, Oracle Infra, OID ...)
I found the following service/APIs which Oracle provides. I am not sure which one is suitable for me.
1. mod_osso ( Static)
--- In this case, I have to make a entry in mod_osso.config file to protect the URL. should I have to register the URL again through single sign on admin page ("Administer Partner Application") after make a entry in config file?
2. mod_osso ( Dynamic directive)
-- in this case, I have to modify the code by providing the directives like 401, 499.. etc. So i don't prefer this as i don't want to touch my app.
--If I go with this option, should i have to register the URL with Single sign on server through SSO admin page ( as mentioned in the above step#1) ?
3. SSO SDK
- Since it was deprecated and need java coding, i am prefer this option.
-- however, if i go with this option, i will develop code by using SDK. in this case i need to register the URL in SSO server through admin page.. am i right?
Note:- OSSO server integrated with Active Directory for the authentication.
Thanks,
-Senthil

sharon38_74 wrote:
they said that our internal application needs to send a "login request" to etran via SSL with the user's information encoded in base 64 format. etran captures the HTTP header containing user authentication and authorization information, and parses the required information from the HTTP header.
My question is that how I set user information in HTTP header? From my understanding, once I am able to set the user information in HTTP header, it is in base 64 format?Your application need to act like a proxy. You can invoke a HTTP request programmatically using java.net.URLConnection. You can set request headers using URLConnection#setRequestProperty(). Also see the API docs: [http://java.sun.com/javase/6/docs/api/java/net/URLConnection.html]. You only need to know the header field name where to set the Base64-encoded value in. You need to Base64-encode the value yourself.

Similar Messages

How to set custom HTTP header for single sign on

Currently we just begin to use an application called "etran". This application requires user name and password to login. Now, my assignment is to integrate etran application in our internal application. This means that somewhere in our internal application, there is a link leads to the etran application.
It is going to be single sign on, that means that once user logs into our internal application, when he/she clicks on the etran link, no sign on to etran is needed.
I consult with the technical people in etran. they said that our internal application needs to send a "login request" to etran via SSL with the user's information encoded in base 64 format. etran captures the HTTP header containing user authentication and authorization information, and parses the required information from the HTTP header.
My question is that how I set user information in HTTP header? From my understanding, once I am able to set the user information in HTTP header, it is in base 64 format?
Thanks in advance for your help.

sharon38_74 wrote:
they said that our internal application needs to send a "login request" to etran via SSL with the user's information encoded in base 64 format. etran captures the HTTP header containing user authentication and authorization information, and parses the required information from the HTTP header.
My question is that how I set user information in HTTP header? From my understanding, once I am able to set the user information in HTTP header, it is in base 64 format?Your application need to act like a proxy. You can invoke a HTTP request programmatically using java.net.URLConnection. You can set request headers using URLConnection#setRequestProperty(). Also see the API docs: [http://java.sun.com/javase/6/docs/api/java/net/URLConnection.html]. You only need to know the header field name where to set the Base64-encoded value in. You need to Base64-encode the value yourself.

Use of multiple Applications for single webdynpro component in ABAP WEB DYNPRO

I am working on a object which have multiple webdynpro applications for single webdynnpro component.How to assign a different functionality to each application bcoz when we right click on webdynnpro component and select create webdynpro applications ,it just creates a application how so we assign diff functionality to each of them .Also in the parameter tab of the webdynpro applications ,there is a diff config id mentioned for each application.what is its relavance

Hi Sam,
Different functionalities for a single webdynpro component can be achieved by many ways. Among them is the use of multiple applications. Say for example if you want different views/windows to be displayed at the start up, you can achieve it by specifying at the default window, for each every webdynpro application.
And if you want control the fields, say for example you want to display input fields as editable for one application and read only for other application, you can achieve it through application parameters. Based on parameters, in HANDLEDEFAULT method of window controller , you can specify the type of behaviour , whether it has to editable or not based on parameters and same can be used at context binding of UI properties.
Application configuration can be used for personalization.Web Dynpro ABAP Application Configuration. This tutorial would help you understanding the concept much better. There can be multiple application configurations for a single application.
Regards,
Harsha

Multiple webdynpro applications for single webdynnpro component

I am working on a object which have multiple webdynpro applications for single webdynnpro component.How to assign a different functionality to each application bcoz when we right click on webdynnpro component and select create webdynpro applications ,it just creates a application how so we assign diff functionality to each of them .Also in the parameter tab of the webdynpro applications ,there is a diff config id mentioned for each application.what is its relavance .
Rgds,
Praveen

Hi Saravanan,
I need to modify it from the portal end, not at the application level.
I need some configuration steps which specifies how to modify the Detail Navigation in PPM. Using SPRO we can do some configuration, i wanted to know whether its possible from portal end as well.
Regards
Shivas Bhan

HT3986 Does anyone know how to enable the "Delete" key for logging on the Windows 7 partition on the latest iMac, via the latest Apple wireless keyboard? Many Thanks

Hi All
Does anyone know how to enable the "Delete" key for logging on the Windows 7 partition on the latest iMac, via the latest Apple wireless keyboard - the standard wired apple keyboard works fine via this key but not the new wireless keyboard?
Many Thanks

Holy crap, this fixes the issue. At least temporarily it has. I should add that my issue was single finger forward/back swipe stopped working on the magic mouse in Firefox since Mavericks came along. I have been fighting this since I upgraded to Mavericks a few months ago. Thank you, tbirdvet. You have no idea how much easier you just made using my iMac again.
Message was edited by: wadems

How to install for Single Sign-on?

Hello Community
    When you install a Sharepoint 2013 Server farm
how do you install the Sharepoint 2013 Server farm
so that it is setup for "Single Sign-on (SOS)"?
    Thank you
    Shabeaut

Hi Shabeaut,
Yes, in this case if your users who are in different domain can are able to log in to SharePoint manually you can enable trust relation for all types
of browser, here are the links you can follow.
http://expressionsinweb.com/2011/05/17/allow-the-pass-through-of-window%E2%80%99s-credentials-to-sharepoint/
http://blog.fpweb.net/sharepoint-credentials-prompt-quick-tip/#.VKHarl4B4
and for understanding the concept of ADFS with SharePoint and what other claim provider to implement SSO see below.
http://www.slideshare.net/thomasvochten/spsuk2013-adfs-sp2013
Krishana Kumar http://www.mosstechnet-kk.com
Please mark the replies and Proposed as answer if they help and solve your issue

Configuring Lync Server 2013 to be a partner Application for Exchange 2013

Hello Guys,
I just want to share my experience while configuring Lync server 2013 to be a partner Application for exchange 2013 sever.
As mentioned on technet you need to run Configure-EnterprisePartnerApplication.ps1 script that ships with Exchange 2013.
But when I tried to run the script as described on the technet article, I found it always fails with " the accepted domain is not valid"
I have checked my accepted domains many times and i found that there's no issues with my configured accepted domain.
So I started to review the script to find the issue and I found that the script was configured as below
$acceptedDomains = Get-AcceptedDomain ;
if ($acceptedDomains -eq $null)
WriteError ("There is no accepted domain so user can not be created.")
$acceptedDomain = $acceptedDomains[0].Name;
if($UseDomainController -eq $true)
$user = New-MailUser -Name $username -DomainController $DomainController -ExternalEmailAddress $username@$acceptedDomain;
set-mailuser -Identity $user.Identity -HiddenFromAddressListsEnabled $true -DomainController $DomainController
else
$user = New-MailUser -Name $username -ExternalEmailAddress $username@$acceptedDomain;
set-mailuser -Identity $user.Identity -HiddenFromAddressListsEnabled $true;
which is totally wrong as below:
firstly it makes $AcceptedDomain variable to equal the Name of the accepted domain.
Not all customers configure the name of the Accepted Domain to be the Domain Name.
Secondly it makes $AcceptedDomain variable to equal the name of the first Accepted Domain.
The first domain may be not the default Accepted Domain.
So I have configured the script as below
$acceptedDomains = Get-AcceptedDomain | ? {$_.Default -eq "True"} ;
if ($acceptedDomains -eq $null)
WriteError ("There is no accepted domain so user can not be created.")
$acceptedDomain = $acceptedDomains.DomainName;
if($UseDomainController -eq $true)
$user = New-MailUser -Name $username -DomainController $DomainController -ExternalEmailAddress $username@$acceptedDomain;
set-mailuser -Identity $user.Identity -HiddenFromAddressListsEnabled $true -DomainController $DomainController
else
$user = New-MailUser -Name $username -ExternalEmailAddress $username@$acceptedDomain;
set-mailuser -Identity $user.Identity -HiddenFromAddressListsEnabled $true;
I hope This help.
Thanks
Ahmed Fouad

Hi,
This is helpful, thanks for sharing.
Best regards,
Belinda Ma
TechNet Community Support

How to load an Applet application for 1000cards?

Hi Friends..
I want to know How to load an Applet application for 1000cards?..
Assume that, i have an Applet application that need to loaded into 1000cards..
So, how to solve this?
Do i must to load an application manually for each card?
Is there any another way?
Thanks in advance..

for 1000 cards you can use a "small" printer like an evolis "dualis" or something like that
we've produced thousands of cards with this method in my company.
the pro is that you can also print the cards in the same time.
they usually have simple APIS like get_new_card_from_loader(), put_card_on_contacts(), eject_card()
you can connect any reader on the printer , the raw card contacts are available on a connector.
some printers also have contactless couplers.
but remember that deploying cards in the field is not just loading an applet.
it's also a cryptographic challenge, you need to change the card keys or anyone will be able to play with your cards, adding and removing applets as they want.
typically this is achieved by using an ultra secret mother key and whatever derivation algorithm you like using data from INIT UPDATE as diversifier. example, you can TDES cipher part of the INIT UPDATE data using the mother key as TDES key, or use something involving SHA1, using a HSM if you are serious, etc.
for your entertainment here is a high volume card personnalization machine. That's amazing.
http://www.youtube.com/watch?v=6ZBF_yKRF5w

How to change the permission of a folder of a website hosted on Microsoft Azure. I would like to know how to enable read write permission for this folder

How to change the permission of a folder of a website hosted on Microsoft Azure. I would like to know how to enable read write permission for this folder
Regards,
John

Hi,
Please try to setting Folder Permissions on Web Publish, and then deploy it with Web Deploy, as far as I know, if we do that, Web Deploy will use the SetAcl operation to change permissions. Please have a look at the article below.
#http://sedodream.com/2011/11/08/settingfolderpermissionsonwebpublish.aspx
Best Regards,
Jambor
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

How to compile your flex application for Iphone Using Adobe Flash CS5?

How to compile your flex application for Iphone Using Adobe Flash CS5?

I'm so sorry, I'm not really familiar with the codes.

How I can make an application for android from director?

I have a project done in Director 11.5 how I can convert an application for android?
What I have to do?

Estas en el Foro de Usuarios en Español.
Consultando esta página:
Adobe Director
Parece ser que se crean ejecutables que requieren Shockwave Player:
What is Adobe Director 12?
Adobe® Director® 12 and Adobe Shockwave® Player software help you create and publish compelling interactive games and eLearning courses for the web, iOS devices, Mac and Windows® desktops, DVDs, and CDs. Integrate virtually any major file format, including FLV, swf and native 3D content.
No veo que sea compatible con Android.

How will i configure partner determination for customer master

how will i configure partner determination for customer master data.

hi
Check this
BUSINESS PARTNERS AND PARTNER DETERMINATION
In the partner determination procedure you can determine whether partner functions can or should occur in a partner object (Customer Master, Sales Document, Item Category etc.) For each object, in which partner function can be created, you can define partner procedures. This also means that
For Customer Master
For Sales Documents
For Sales Documents and Billing Documents: for items
We can define our partner determination procedure for each of these levels as shown below. In Blue are given the ones wherein the Partner Procedures are assigned to the Partner Objects
Customer Master Account Group
Sales Document Header Sales Document Type
Sales document Item Item Category in sales
Delivery Delivery Type
Billing Header Billing Type
Billing Item Billing Type
Sales Activity Sales Activity type
By assigning a procedure you determine for which account groups (for the customer master), which sales document types (for sales documents) and for which item categories this procedure would be valid.
In the partner determination procedure you can determine for each partner function
whether the partner function is an obligatory partner function
whether the partner function can be changed in the document
BUSINESS PARTNER FUNCTION
By assigning a business partner function to a partner you can determine which functions the partner fulfils in the business process. Partner Functions are classified using partner type. The partner type represents the roles played by the business partner within the business transaction.
Following partner functions exist in the standard process of Sales and Distribution
Partner Type Customer
Sold-to Party, Ship-to Party, Bill-to Party, Payer and Sold-to Party authorized to release against a contract. You can define the sold-to party authorized to release against a contract in the partner screen of a contract. This partner may only schedule orders with reference to this contract, even when he is not the sold-to party authorized against a contract.
Partner Type Contact Person
Contact persons are natural persons whom you must contact at the customers for business processing (e.g. purchasers) Contact person can be created directly in customer master record.
Partner Type Vendor
A forwarding agent is an example of a business partner on the credit side, who is included in a sales process. If you commission a particular forwarding agent for deliveries to a specific customer, you can define the forwarding agent in the customer master record as the partner.
The other possible partner functions on the credit side in the sale process are interpreters, auditors etc. The forwarding agent is an agent who performs transportation services. This includes organizing the shipment, delivery and receipt of the goods, arranging the carrier services and handling the customs issues.
Partner Type Personnel
Employee Responsible
Sales Personnel
You can enter an employee from your firm as the person responsible:
In the Customer Master If the employee is normally responsible for processing transactions with this customer.
In the Sales Document If the employee is responsible for processing the Business Transaction.
STEP WISE PROCESS FOR PARTNER DETERMINATION PROCEDURE
Sales and Distribution->Basic Functions->Partner Determination->set Up Partner Determination->Set up Partner Determination for Customer Master.
First go to OVT0 create customer account groups. Here you make new entries, click whether it is a one time customer, description. Also you can do the field selection here for general data, co. code data and sales area data.
Now go to IMG logistics general business partner customers control define & assign customer number ranges define the number. Here you range that you want and assign it to your customer account group.
Now go to VOPA here the selection will be on customer master, click on partner procedures, create the partner determination procedure. The following steps need to be done in partner determination area
Assign partner function to account group i.e SP,SH, BP, PY to account group (debit side ). Sales and Distribution->Basic Functions->Partner Determination->Assign Partner Functions on the debit side to account Groups.
Then create Partner Determination Procedure.
Assign the Partner Determination Procedure to Partner Function.
Then finally assign the Partner Determination Procedure to acc group.
Important Points in Business Partners and Partner Determination Procedure
Partner relationship maintained/defined in the customer master is proposed automatically in the document header when you create a sales document.
In customizing we can decide whether several partners can be assigned to one partner function in the customer master.
In sales documents, the system is configured so that only one partner can be assigned to each partner function.
We can define partners at item level in the sales documents.
Business Partners that are defined at the header level however cannot be changed at the item level.
You can prohibit anyone from changing a partner that has already been entered in a sales document.
It is also possible to manually change or enter the address of a partner, such as the Ship-to Party. This change does not affect the master record.

How to enable file size 2GB for linux RHEL4.0

Hi
I am on oracle 9.2.0.6 on linux RHEL 4.0. How do i enable large file size for filesystems.
When i query ulimit -a ulimit -f it is returning me unlimited.
But my database listener crashed as listener log file reached 2gb in size.
I couldnt find how to enable the largefile size for the filesystem.
Thanks
SV

Are you sure that the filesystem is limiting your listener log file size?
Please try to concatenate some lines into the logfile and see if the filesystem prevents it. I expect you to find out that the limit is only with the listener.
In any case, run a weekly/monthly job that creates an empty log file.
If the problem is with ext3 then you should check with someone more experienced because it does not sound to me like the proper (or default) behavior of ext3.

HOW to enable oracle advance compression for EXIST partitioned table

Hi All,
I have to enable oracle advance compression for existing table which PARTITION BY RANGE then SUBPARTITION BY HASH.
ORacle version: 11.2.0.2.0
Please provide me any relevant doc or any exp.
Thanks in advance.

could not see any text for how to enable oracle advance compression for EXIST partitioned table.RTFM.
From the resource above:
How do I compress an existing table?
There are multiple options available to compress existing tables. For offline compression, one could use ALTER TABLE Table_Name MOVE COMPRESS statement. A compressed copy of an existing table can be created by using CREATE TABLE Table_Name COMPRESS FOR ALL OPERATIONS AS SELECT *. For online compression, Oracle’s online redefinition utility can be used. More details for online redefinition are available here.
"

How to enable OHS compression/cache for OBIEE

Hi i have installed OHS (11.1.1.7) and webcache on OBIEE 11.1.1.7. Does any one know how to enable/configure compression/cache for OBIEE analytics? Also how to validate if compression is working?

Hi Anke,
all tables that have been created in V9.7 with attribute COMPRESS YES will be compressed statically .
db2 " select count(*) , rowcompmode from syscat.tables group by rowcompmode "
After the upgrade to 10.5 all tables created with attribute COMPRESS YES will get rowcompmode='A' but old tables created with V9.7 will stay with rowcompmode='S' .
You can change tables from rowcompmode='S' to rowcompmode='A' via ALTER TABLE . After this all new pages or old pages that are touched will be adaptively compressed. But old pages that are not touched will only be static compressed. To get all pages of an existinbg table adaptive compressed you need to move data. For example with DB6CONV.
Regards
Frank

How to enable a partner application for Single Sign-On?

Similar Messages

Maybe you are looking for