OID integration with Kronos for implementing Single Sign On

We are looking at integrating our existing Kronos system on single sign on.
OID is our LDAP for integrating all the systems on SSO.
It would be of great help if anyone has done this kinda of integration before and can provide me some leads for this project.
Thank you,
Sangita

My understanding is that this web application will be deployed on some application server and you need to implement the SSO using OpenSSO for it. For this purpose, you will need to have folliwng modules:
- Idenitity Provider (IdP) that will provide SSO service to your application.
- Service Provider (SP) module that will interact with IdP and your application.
OpenSSO can be used to define both IdP and SP. While configuring IdP is easy but the SP part is a bit complicated as you will have to also use the Policy Agent to protect your application and interface with the SP part of OpenSSO. Once you configure the IdP and SP, you will need to configure the Policy Agent specific for the application server on which your application is deployed. For WebLogic, here is the link:
http://docs.sun.com/app/docs/doc/820-4580/6ng1lok82?a=view
There may be other easier solutions (in terms of architecture) which I'm not aware of. And maybe this is why I was destined to follow up on one of the issues at http://forums.sun.com/thread.jspa?threadID=5436607
Cheers

Similar Messages

How To Setup A Local Exchange Server Integrated With Office365 For A Single Mailbox

Hello,
We recently migrated to Office365 but had an issue since we need more than 16 simultaneous connections to a single mailbox. Because of this, we need to deploy a local Exchange Server that will be used to host a single mailbox that requires up to 500 simultaneous
connections for a Contact Center application. I'm looking for information on how to setup the local Exchange Server to basically create a local instance of a mailbox hosted on Office 365. So we can have our application open the numerous simultaneous connections
to our local server which will then connection to Office 365 to send/receive email through the mailbox hosted on Office365.
Please let me know if you have any information or resources you can direct me toward.
Thanks,
Chris

Hi,
To deploy local Exchange server integrated with Office 365, we can depend on Exchange Server Deployment Assistant:
http://technet.microsoft.com/en-us/exdeploy2013/Checklist?state=2419-W-AAAAAAAAQAAAAAEAAAAAAAA%7e
Please note that there may be 9646 error if there are many simultaneous connections at the same time.
Thanks,
Angela Shi
TechNet Community Support

Implementing Single Sign-On support for the Oracle E-Business suite

Implement Single Sign-On support for the Oracle E-Business suite
I want implement Single Sign-On support for the Oracle E-Business suite.
Operationg System : linux/Solaris
Oracle E-Business suite : 11.5.10
Oracle Application Server : 10gAS(latest availble)
Type of integration : SSO and OID with 11i
No third party SSO or LDAP
Qusetions
1.If my SSO Server is down can i login to applications(11i) using normal mode(default login http://servername.xxxx.com:8000/).
2. Is it possible to have appilications (11i) in Linux/Solaris and 10gAS in windows.
Please answer...
NOTE:
I am following Oracle METALINK Doc.Id 233436.1 and 261914.1.
Thank you.
MARK

You couldn't login into server But You can use the following login
http://servername.xxxx.com:8000/AppsLocalLogin.jsp
For this you need to enable the Appslocallogin Profile option

Sourcing 7.0: Email Link in Mail templates when implementing Single Sign on

Hello,
We are implementing Sourcing 7.0 SP02 On premise.
We are in the processing of setting up the single sign on with Enterprise Portal.
In E-Sourcing 5.1 - when we implement single sign on with portal - the mail links in the mail templates have to be replaced with the portal URL and also - in order to redirect the user from portal login to the correct object in E-Sourcing (contract/MA/RFX) - we had implemented a custom portal solution (par file) to redirect the user.
So when the user clicks on the link in the mail - it will take the user to Enterprise portal login. Once the login is done - user will be redirected to the E-Sourcing object like RFX/MA which the token %DOCUMENT_URL% contains.
I wanted to check if there is any standard solution to this issue in Sourcing 7.0 on p

Hi Vikram, Thanks a lot for your reply. I got a release note 1485253 that explains that this is resolved. Please find the text below
2011/0000612672
In user emails, %DOCUMENT_URL% token is used to generate the document
specific URL. This URL takes the user directly to the document. However,
when Sourcing is integrated with SAP Portal, using only this token will not
take the user to the document. In order to fix this, ENCODE function has
been introduced. Wrapping this around the URL, the URL can be encoded and
used as a "forcedURL" in the portal link.
Would you be able to explain to me how this can be achieved through configuration? I tried now with a portal user of Sourcing and the link was still showing up as the old link. Is this forcedURL generated using a system property?
Regards,
Srivatsan

Implementing single sign on across multiple web apps

Hi
I was wondering if somebody could help me. I need to implement single sign on
for multiple web apps deployed in separate WARs in a single EAR file. I need
to authenticate against an LDAP server and ensure that the user only has to sign
on once per user session even if the user navigates between web apps. The weblogic
docs only seem to go so far, i.e. "Single sign on works if each web app uses the
same cookie" etc. So I see that, apart from buying WebLogic Enterprise Security
there are only two ways of doing this:
1. Implement single sign on.
2. Create my own security realm with my own authenticator implementations.
So my questions are:
1. We don't want to effect the normal weblogic user/passwords used to access the
WLS console but need to have single sign on. Should we implement single sign on
(option 1,above) or create our own realm?
2. Can somebody point me to somewhere on the web/in the the WLS documentation
that shows me how to implement single sign on using session cookies?
TIA
Mik

"Mik Quinlan" <[email protected]> wrote in message
news:[email protected]..
>
Hi
I was wondering if somebody could help me. I need to implement singlesign on
for multiple web apps deployed in separate WARs in a single EAR file. Ineed
to authenticate against an LDAP server and ensure that the user only hasto sign
on once per user session even if the user navigates between web apps. Theweblogic
docs only seem to go so far, i.e. "Single sign on works if each web appuses the
same cookie" etc. So I see that, apart from buying WebLogic EnterpriseSecurity
there are only two ways of doing this:
1. Implement single sign on.
2. Create my own security realm with my own authenticator implementations.
So my questions are:
1. We don't want to effect the normal weblogic user/passwords used toaccess the
WLS console but need to have single sign on. Should we implement singlesign on
(option 1,above) or create our own realm?
2. Can somebody point me to somewhere on the web/in the the WLSdocumentation
that shows me how to implement single sign on using session cookies?
http://e-docs.bea.com/wls/docs81/security/thin_client.html#1039551
That also has a pointer to:
For more information, see session-descriptor in Assembling and Configuring
Web Applications.

" Path not found() "error when implementing single sign on

Hi,
We are implementing single sign on so that when users click on the "Reports Login" he is navigated to the obiee presentation services screen. For the reports login we have a .asp page which directs to the presentation services.
I have done the necessary changes in the instanceconfig and credentialstore xml files.
I have been receiving a strange error when I click on the reports login. I get the error
Path not found ()
Error Details
Error Codes: U9KP7Q94
I have checked the presentation server log file and I see the below error
Type: Error
Severity: 45
Time: Tue Mar 09 09:18:44 2010
File: project/websubsystems/ssportal.cpp Line: 1907
Properties: ThreadID-2672;HttpCommand-Dashboard;Proxy-;RemoteIP-127.0.0.1;User-;Impersonator-
Location:
     saw.subsystem.portal
     saw.httpserver.request
     saw.rpc.server.responder
     saw.rpc.server
     saw.rpc.server.handleConnection
     saw.rpc.server.dispatch
     saw.threadPool
     saw.threads
Path not found ()
Can anyone provide me an input how to resolve this issue?
This is bit urgent for me.
Thanks

Hi,
Please ensure that the navigational attribute is checked at the attribute level and also at the Infocube level and also check that correct mapping of this navigational attribute is done at the Multiprovider level.
Thanks,
Venkat

SAP HR Integration with KRONOS

Hi All,
Am looking for information on SAP Time mgmt integration with KRONOS time clock application. I understand that there are tools available in SAP HR for a seamless integration with KRONOS application (KRONOS being a certified ISV provider); So how does this work out? is there any documentation on how this can achieved etc?
regards
Chandra

Chandra,
We went with Kronos as our consulting partner at the time indicated as you said that they were SAP certified and it would be a seamless integration with standard IDOCS. That was very far from the truth and to this day we would love to get rid of Kronos in favor of a true dummy clock system for collecting IN/OUT punches simply.
In the end we had to custom code an interface to send a MINIMASTER (employee data) file to the Kronos server via FTP as well as an interface to create a flat .txt file containing the punch data on the Kronos server that gets picked up and processed via PI (or XI to some) and then processed as an IDOC that eventually become 2011 records. We used 3 developers in house as well as having to retain a consultant to do the interfaces on the Kronos server. In the end it works pretty well but the support from the Kronos side has been awful and when we wanted to clear up some of the SQL punch tables we where told by Kronos we would have to purchase a separate archiving product. Instead I wrote a custom delete program. It was a huge project and cost and took more time than anyone anticipated. The only good thing I guess I could say Is we have been able to use the same IDOC and PI interface to process punch files we have coming from other countries clock systems.
But personally here in the US we did not have a good experience with Kronos and still have unresolved issues with license/support fees today.
Good luck,
Martha.

Has anyone integrated with PaymentTech for credit-card processing?

My client would like to capture credit-card payments using PaymentTech payment processor. We are using Oracles Apps 11i. I am aware that AR is integrated with iPayment for credit-card processing. However iPayment uses Cybercash as the payment system and it does not currently support voiceauth (i.e. ability to capture/settle payments based on an authorization not obtained via iPayment).
Has any one done any custom development to integrate directly to PaymentTech (or to a
3rd party application which integrates with PaymentTech)? I would appreciate if you can provide any directions.
Thanks.
- Tushar Khinvasara
Oracle Consulting, iServices Southwest
P.S.: If possible, please also cc your response to my internet email addr [email protected] which i can more easily access from the client site.

Authorize.net is a supported payment gateway, take a look here - Supported payment gateway providers and here - Authorize.net for the steps to configure it.
Thanks,
Mihai

SAP JAM integration with Cloud for Customer

I'm in the middle of the setup of the SAP JAM to C4C integration and using the guide here https://websmp109.sap-ag.de/~sapidb/012002523100002202222015E/C4C_JAM_WP_1502.pdf.
In section 2.4.1.1, it says "Contact your SuccessFactor, SAP Jam customer support or administrator to get the SuccessFactors Secured
Token Service certificate for your SAPJam company."
Since it is the first time I deal with SuccessFactors, I have no idea who to contact to get this "signing certificate". Do I need to contact the SF Cloud support team or is that something I can get on my own from our SuccessFactors instance?
Cheers

Hi Thierry,
in general the guide refers to opening a ticket in the SuccessFactors support portal to request the ticket. As this is your first implementation you probably don't have a registered user in here.
Question:
Do you have someone else on the project/at the customer to help with the basic implementation of the SuccessFactors Platform? If yes, please ask this person to open a ticket with SuccessFactors support.
If not, then you can also open the ticket directly in C4C and it should be internally routed to the appropriate support contact.
Please note: In addition you will also need to do some basic configuration of the SuccessFactors Platform and SAP Jam. More information about initial steps to access and setup
the SuccessFactors Platform for SAP Jam can be found in the document „Setting up SAP Jam for Integration with other SAP Solutions” included in the package “SAP Best Practice for SAP Cloud for Customer Integration” available at http://service.sap.com/rds-cfc-erp
If you are interested in more information, please check out the respective training offerings for SuccessFactors Platform and SAP Jam available as "Academy Courses".
Hope this helps,
Ingo

Implementing Single Sign-On in J2SE Application

I am developing a application which is going to do some Single Sign-On authentication.
For those who do not know what Single Sign-On is: For user who have multiple usernames and password for different web site, Single Sign-On offers them a way to authenticate to these different site without the need to remember all those passwords. It takes over the authentication process, and authenticates to these web sites for the user. The usernames and passwords are stored in a database.
I am going to develop such a program in Java. This program is going to fetch the web site which contains the login form. Find out what to send to the web server. Send the username and password stored for that web site and in return if authentication goes through the web site will send the web page to the Java program which when receive it will open it in a web browser.
Does anyone have any idea how I can implement this Single Sign-On feature? I know there exist several applications for windows which offers such Single Sign-On and which works with Internet Explorer. So somehow I should be able to make such a feature for a Java application.

Thanks for the reply
Should I read the following from the document you sent in Section 4.5? I just wanna confirm..
4.5 Configuring Custom SSO Environments
For information about configuring Oracle Business Intelligence to participate in custom SSO environments (for example, setting up SSO using Active Directory or SiteMinder), see articles 1287479.1 and 1274953.1 on My Oracle Support at:
https://support.oracle.com

2 AD domains with 1 exchange server, single sign in needed.

Hey guys, this is the scenario,
Company A has its own domain 2008 server with exchange 2007, users have email address [email protected]
Company B is a subsidiary with its own AD domain Server 2012 R2. trust is set up between the domains.
currently the users in Company B have email addresses [email protected] ( dont want to change this)
when users login to Company B's AD, they are then prompted to enter credentials for Company A's AD account.
I wan to enable a single sign on so that the email address [email protected] will authenticate using the company B credentials. thus eliminating the need for users in Company B to have 2 AD accounts.
not sure how to event start going about this process.

Use the resource forest concept
Check this out.
https://technet.microsoft.com/en-SG/library/bb124765%28v=exchg.80%29.aspx
Blog: http://theinfraguys.com
Follow me at Facebook
The Infra Guys Facebook Page
Please remember to click Mark as Answer on the answer if it helps you in anyway

Spliting a Message to reuse an Integration Process made for a single one.

Hi,
I have a Integration Process that works well for a XML message of the type:
<EMESSAGE>
<PERSON>
    <TAG_1>
    <TAG_2>
</PERSON>
</EMESSAGE>
My BPM process the data for the Person correctly.
Now I want to be able to tried more than one person per input message, some thing like:
<EMESSAGE>
<PERSON>
    <TAG_1>
    <TAG_2>
</PERSON>
<PERSON>
    <TAG_1>
    <TAG_2>
</PERSON>
<PERSON>
    <TAG_1>
    <TAG_2>
</PERSON>
</EMESSAGE>
I build a 1:n Interface Mapping that creates me the following structure:
<Messages>
<Message1>
<EMESSAGE>
<PERSON>
    <TAG_1>
    <TAG_2>
</PERSON>
</EMESSAGE>
</Message1>
<Message2>
<EMESSAGE>
<PERSON>
    <TAG_1>
    <TAG_2>
</PERSON>
</EMESSAGE>
</Message2>
<Message3>
<EMESSAGE>
<PERSON>
    <TAG_1>
    <TAG_2>
</PERSON>
</EMESSAGE>
</Message3>
</Messages>
But when I use a ForEach Block in my new BPM, it doesn't work if there is more then 1 person in the input. The error message I got is:
<?xml version="1.0" encoding="utf-8" ?>
- <MappingTrace>
<Trace level="1" type="T">Mapping-Namespace:http://domain.com/xi/domain_4</Trace>
<Trace level="1" type="T">Mapping-Name:IM_CPM_AbsSync_to_N_CPM_AbsSync</Trace>
<Trace level="1" type="T">Mapping-SWCV:3E235261F43111DDB40AC952C0A80C15</Trace>
<Trace level="1" type="T">Mapping-Step:1</Trace>
<Trace level="1" type="T">Mapping-Type:XSLT</Trace>
<Trace level="1" type="T">Mapping-Program:CPM_to_N_ContextPersonMessage</Trace>
<Trace level="3" type="T">Mapping has one input message.</Trace>
<Trace level="3" type="T">Dynamic Configuration Is Empty</Trace>
<Trace level="3" type="T">Multi mapping required.</Trace>
<Trace level="3" type="T">Creating XSLT mapping CPM_to_N_ContextPersonMessage.</Trace>
<Trace level="3" type="T">Load 3e235261-f431-11dd-b40a-c952c0a80c15, http://domain.com/xi/domain_4, -1, CPM_to_N_ContextPersonMessage.xsl.</Trace>
<Trace level="3" type="T">Search CPM_to_N_ContextPersonMessage.xsl (http://domain.com/xi/domain_4, -1) in swcv 3e235261-f431-11dd-b40a-c952c0a80c15.</Trace>
<Trace level="2" type="T">Call XSLT processor with stylsheet CPM_to_N_ContextPersonMessage.xsl.</Trace>
<Trace level="2" type="T">Returned form XSLT processor.</Trace>
<Trace level="3" type="T">XSLT transformation: CPM_to_N_ContextPersonMessage.xsl completed with 0 warning(s).</Trace>
<Trace level="3" type="T">Dynamic Configuration Is Empty</Trace>
<Trace level="1" type="T">Content Type application/xml</Trace>
<Trace level="1" type="T">No interface specified for parameter 2</Trace>
</MappingTrace>
Does someone have any idea or a suggestion on how to reuse my BPM that works for a single person?
Thanks in advance for your suggestions.
greg

ok no success for the moment, so I will try to describe my BPM more precisely:
The DT I use can contain up to 1'000 PERSON record inside a unique EMESAGE reccord (the root element)
My containers: (all are of type Abstract Interface of my DT)
Input (Process)
requestList(Process) Multiline
request(block)
response(block)
Receive Request Step
Message: input
Start Process: Yes
Mode : Async.
Split (Transformation) Step
IM: My Interface that does the 1Message with N PERSON records to N Messsages with 1 PERSON record
Create new transaction: Yes
Source: input
Target: requestList
Block Step
Mode: ForEach
Block Start: New transaction
Block End: New transaction
Multiline_Element: RequestList
CurrentLine: request
No end condition
Inside the block
My Sync Send call to a BAPI
Source: request
Target: response
A final Async Send step
Message: response.
The workflow stop at the Transform step, as if hte fact that many messages come in result could not be handled back. Here are the details for the Interface mapping used in the transformation step:
Source: MyDataTypeAbstractAsynchroneInterface
Occurrence: 1
Destination:
Occurrences: 0:unbounded
Mapping program: the following XSLT:
<?xml version="1.0" encoding="UTF-8"?>
<xsl:stylesheet version="2.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
     <xsl:output method="xml" version="1.0" encoding="UTF-8" indent="yes"/>
     <xsl:template match="EPERSON">
     <ns0:Messages xmlns:ns0="http://sap.com/xi/XI/SplitAndMerge">
               <xsl:for-each select="CONTEXTPERSON">
               <xsl:element name="ns0:Message{position()}">
               <EPERSON xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="ContextPersonMessage">
                    <xsl:element name="CONTEXTPERSON">
                         <xsl:attribute name="personid"><xsl:value-of select="@personid"/></xsl:attribute>
                    </xsl:element>
                    
               </EPERSON>
               </xsl:element>
          </xsl:for-each>
     </ns0:Messages>
     </xsl:template>
</xsl:stylesheet>
Still any suggestions ?
The trace of the error is the same as before, so I won't copy paste it again.

SAP Jam Integration with Cloud For Customer error

Hello Experts,
We are integrating SAP Jam with Cloud for Customer tenant. We have followed the instructions that are mentioned in 1311 guide for SAP Jam integration.
But right now we are getting an error on SAP FEED work center and Account View.
Error that we are getting is as follows:
You are not authorized to access /c/C0000209652T.com/widget/v1/feed?wid=1&auth=single_use_token&skin=gr&faces=true&type=follows&num_items=30&avatar=true&live_update=true&mobile=false&post_mode=inline&reply_mode=inline&single_use_token=&locale=en
Kindly help us understand the mistake or step that we might have skipped.
Thanks & Regards,
Chandan Bankar

My example in the document deals with User ID as key_identifier.
ie., we need a unique key which is common to both servers so that we can identify accounts. This is done through assertion attribute exchange.
For eg, if I have an account with userID vatsav in C4C, then I must have an account with same userID in JAM (or vice versa) provided I set UserID for "Account Name Origin" in Step 10.
Doing this way, I am telling JAM that I am using UserID as an assertion attribute which identifies both my accounts in C4c and JAM without any problem. When you login into C4C using vatsav as UserID, it automatically searches feeds for same userID in JAM and displays them in Mashup.
It's a big concept actually. Implementation's already done by SAP.
Hope, I am clear.

Implement Single Sign-On

Hi
What is the best way of implementing a single sign on in a clustered web based client server solution.
Thanks,
AA

I am looking for a seamless login to applications using windows credentials. So ESSO which is like a password vault is not a desired solution. ESSO saves the user id/ password to applications and retrieves them whenever the application needs login. The login information saved by ESSO Logon Manager is protected by windows login credentials.
I have tried to implement Windows Native Authentication as described in http://www.oracle.com/technology/obe/obe_as_10g/im/wna/wna.htm
It apparently requires the policy.properties to be modified to set MediumSecurity_AuthPlugin = oracle.security.sso.server.auth.SSOKerbeAuth. But the current applications require that it be set to 'SSOOblixAuth', i.e
MediumSecurity_AuthPlugin = SSOOblixAuth. Changing it to SSOKerbeAuth will break the applications on the server. Is there a work around?

Navigation problem in implementing Single Sign On

Hi,
I am a newbie to JSF.
One of the projects that i am currently involved in, has a requirement of single sign on (SSO) , where in the user will log into their windows workstation and they will open my Web Application deployed in JBoss AS. Now my web application should get only the username/userid of the logged-in user from ActiveDirectoryServer and authenticate them against Database(Only the users with userids stored in the database should have the access to application) entries.
If the user id is not in database, user should be taken to login page asking for the username and password. For this purpose, we are using JCIFS and have the necessary logic written in one class.
I need some help in how to invoke the method in this class as there wont be any action/event fired initially and how to provide the navigation to pages(login page/home page) depending on the user status.
Development environment::
Richfaces,SEAM,JPA,JBOSS AS
Thanks in advance,
Suresh

Hi,
" SSO logon not possible; browser logon ticket cannot be accepted "
I believe your SSO is not configured properly,
First test the connection between ECC and EP
1. login to portal -> system administration->system confgiuration->select the ECC system right click open->connection tests
make sure that you get a tick mark. againt all in particular for " connection test for connectors"
2. If your test conenciton is not working probably SSO is not confgiured properly.
3. try importing portal certificate to ECC and vice versa
4. in strustsso2 check whether you have added the logon tickets for the clients under ACL.
regards,
prakash

OID integration with Kronos for implementing Single Sign On

Similar Messages

Maybe you are looking for