Oracle Access Manager 11g Basic with E-Business Suite

Hi gurus,
I was just wondering if anyone could tell me if the basic edition of Oracle Access Manager 11g is licensed for use with e-Business Suite 11i as a partner application? Or is it necessary to purchase the full license to use it with EBS?

925237 wrote:
Hi gurus,
I was just wondering if anyone could tell me if the basic edition of Oracle Access Manager 11g is licensed for use with e-Business Suite 11i as a partner application? Or is it necessary to purchase the full license to use it with EBS?You need a license for Oracle Access Manager. However, AccessGate is available at no charge to customers who have already licensed both Oracle E-Business Suite and Oracle Access Manager.
Oracle E-Business Suite AccessGate Release 1.0.2 Now Available
https://blogs.oracle.com/stevenChan/entry/ebs_accessgate_102
Oracle Access Manager 11.1.1.5 Certified with E-Business Suite 12
https://blogs.oracle.com/stevenChan/entry/oracle_access_manager_11_11
Oracle Access Manager 11.1.1.3 Certified with E-Business Suite 12
https://blogs.oracle.com/stevenChan/entry/oracle_access_manager_11_1
Please contact your Oracle sales representative (account manager), he/she is the best one to answer your license questions.
Global Pricing and Licensing
http://www.oracle.com/us/corporate/pricing/index.html
Thanks,
Hussein

Similar Messages

Oracle Access Manager 11g r2 with Oracle Entitlement Server 11g r2

Hello,
I would like to set up a configuration with Oracle Access Manager 11g r2 where Authentication is against Active Directory, and Authorisation is against Oracle internet Directory
Access Manager has to get authorizations from Oracle internet Directory via Oracle Entitlement Server
I cant find any document describing how to integrate Oracle Access Manager with Oracle Entitlement Server
could any one help ?
Regards

Hi all,
I am facing some issue with the distribution of the policy in the security module of OES.
The "application" distribution tab allows me to distribute the policy created but does not generate any distribution ID or address for webservice access.
I am using OES 11.1.5
Thanks in advance.

Integrating Oracle EBS R12 with Oracle Access Manager 11g

Hi Everyone ,
Oracle Access Manager version 11.1.1.5
Oracle Identity Management 11.1.1.6.0
Oracle Access Manager WebGate 11.1.1.5
Oracle E-Business Suite AccessGate patch p12796012
Apps Version : 12.1.1
DB Version 11.2.0.3
PLatform : OEL 5.8
We are trying to Integrating Oracle E-Business Suite Release 12 with Oracle Access Manager 11g using Oracle E-Business Suite AccessGate.We followed metalink id's
1309013.1 and 1543803.1 and some other documents.We have performed every step as documented , and everything seems to work fine untill user tries to log out from Oracle Applications i.e User
is able to login to Oracle Applications through access gate and everything is working fine. But as user click logout button an error messsage is diplayed like "*500*
*Internal Server Error Servlet error: An exception occured* " (The url at the time of this message is http://hostname:port/OA_HTML/AppsLogout ).
Apps Tier (oacore) Application log:-
+13/05/15 19:04:20.229 html: Servlet error+
java.lang.NoSuchMethodError: oracle.apps.fnd.sso.SSOManager.getAuthAgentLogoutUrl(Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String;
at oracle.apps.fnd.sso.AppsLogoutRedirect.doGet(AppsLogoutRedirect.java:193)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:743)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
+at com.evermind[Oracle Containers for J2EE 10g (10.1.3.4.0) ].server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:64)+
at oracle.apps.jtf.base.session.ReleaseResFilter.doFilter(ReleaseResFilter.java:26)
+at com.evermind[Oracle Containers for J2EE 10g (10.1.3.4.0) ].server.http.EvermindFilterChain.doFilter(EvermindFilterChain.java:15)+
at oracle.apps.fnd.security.AppsServletFilter.doFilter(AppsServletFilter.java:318)
+at com.evermind[Oracle Containers for J2EE 10g (10.1.3.4.0) ].server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:621)+
+at com.evermind[Oracle Containers for J2EE 10g (10.1.3.4.0) ].server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:370)+
+at com.evermind[Oracle Containers for J2EE 10g (10.1.3.4.0) ].server.http.HttpRequestHandler.doProcessRequest(HttpRequestHandler.java:871)+
+at com.evermind[Oracle Containers for J2EE 10g (10.1.3.4.0) ].server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:453)+
Apps Tier Apache Error log :-
+[Wed May 15 18:50:52 2013] [error] [client 192.168.0.2] [ecid: 1368624052:192.168.0.61:10798:0:44,0] File does not exist: /u01/eBiZR12/apps/apps_st/comn/java/classes//+
WE have set all required profile in Oracle Application as directed in documents , and users are able to login just fine , but they are not able to logout.
IS there something that we are missing , any help is highly appreciated.
Regards
Edited by: TheKop88 on May 16, 2013 11:39 AM

Hi there ,
Thanks for reply ,
We had already gone through that document earlier. We noticed that when Apllication Profile "*Apllications SSO Type* " is set to SSWA then OA_HTML/AppsLogout is
working fine , but when we set "*Applications SSO Type*" to SSWA w/SSO then OA_HTML/AppsLogout is not working(not redirecting) .Error thrown on web browser is "+500 Internal Server Error Servlet error: An exception occurred. The current application deployment descriptors do not allow for including it in this response+" . we believe that we might have missed some Profile settings that is causing this error.
Regards
Edited by: TheKop88 on May 16, 2013 12:03 PM
Edited by: TheKop88 on May 16, 2013 12:07 PM

Oracle 10G application server integrate with e-business suites 11i

Hello,
Server A:
i have one UAT server which is installed with e-business suites 11i. The users logon to discoverer from e-business suites using the username and password stored in e-business suites.
Server B:
then, i now hv to set up a 10G application server and 10G discoverer on a new server. The user request that they want to login to discoverer using the username and password as mentioned above. They reject to logon to database using 'connect directly', 'open connection' or 'private connection'.
what can i do in order to synchronize the username from Server A to Server B so that they can logon using the username and password they created in e-business suites.
thank you.

follow note 313418.1 it will let you use your oracle apps 11i with discoverer 10g, with the same user name and password, i did it before you may want to check my post after you check oracle note
http://oracle-magic.blogspot.com/2006/11/upgrading-discoverer-4i-to-10g-on-apps.html
fadi hasweh
http://oracle-magic.blogspot.com/
Oracle is not Magic, it just takes years of experience

How to Integrate Oracle Access Manager 11g with Siebel Call Center 7.8

I need to change the DB authentication to SSO for Siebel Call Center 7.8. I just found a document about integrationg OAM 10g with Siebel 7 (http://download.oracle.com/docs/cd/B28196_01/idmanage.1014/b25347/siebel.htm#Siebel). However, because it's mandatory to use OAM 11g, I don't know whether this doc is suitable for Siebel 7.8. In addition, is it the right way to configure Siebel SSO? I know, in this way, I need to install WebGate. Please give me some expertise. Thanks.

This should work as long as your web server and operating system support 11g. There may be some differences in how to set up OAM and the WebGate in 11g versus 10g (that is not my area of expertise), but from the Siebel side the integration is the same. You would pass in the user's Siebel ID (pulled from the LDAP directory) as an HTTP header. Then you just need to tweak a few of the parameters in Siebel:
For the Security Adapter Profile (LDAPSecAdpt most likely) you are using, set:
SingleSignOn = True
TrustToken = HELLO (or whatever value you choose)
In eapps.cfg or eapps_sia.cfg in the virtual directory section for the specific application object manager (e.g. [sales_enu]) set:
UserSpec = SIEBEL_USER (or whatever HTTP header name you set up in OAM)
UserSpecSource = HEADER
SingleSignOn = TRUE
TrustToken = HELLO (or whatever value you selected for the Security Adapter profile TrustToken parameter)
ProtectedVirtualDirectory = /sales_enu
The protected virtual directory will normally be the same as the virtual directory (in this example /sales_enu) unless you are using customer facing applications with anonymous browsing capabilities (for example a catalog that goes to a shopping cart at some point in the process).
Also in the [SWE] section of the eapps.cfg file the IntegratedDomainAuth parameter should be set to False.
Hope this information is helpful.
Best regards,
Stevan

Oracle Access Manager 11g

Hi,
I have a OAM 11g instance installed in Weblogic 10.3.3. After Starting the OAM Managed Server, i am getting the warning repeatedly.
Can some one suggest on this. And how to rectify that warning which is getting created repeatedly in the logs....
<Apr 29, 2011 2:36:43 PM IST> <Warning> <oracle.jps.policymgmt> <BEA-000000> <Current timer interval (600 seconds) is too short. Please set a longer interval in the configuration file.>
Thanks,
Sandy

Double post. See oam11g with forms 11g
--olaf

Oracle Access Manager 11g Logout :

Hi,
Can someone explain me the the logout process in OAM 11g ?
The document at [http://docs.oracle.com/cd/E28271_01/doc.1111/e15478/logout.htm] doesnt seem to clarify what I am looking for.
What exactly does the parameters Logout URL, Logout Callback URL, Logout Redirect UR, Logout Target URL do ? Which of these are mandatory ?
The default values for Logout Callback URL is +/oam_logout_success+ and Logout Redirect URL is http://oam_server.com:port/oam/server/logout
For eg lets say, I have application A which is protected by OAM11g. This lands me to a page where I have link to other apps say App B protected by OAM11g as well but with some temporal constraints configured.
Now can't I have the logout link in App B, which is configured to take me to http://oam_server.com:14100/oam/server/logout?end_url=http://MyServer.com:port/Loggedout.jsp*. The Loggedout.jsp just has a message saying You have successfully logged out and no logic to clear any cookies whatsoever.
Shouldn't that be enough to kill all the cookies as on the same browser if i copy the link to App A, it does take me back to the login page.
Could someone please explain and help me clear my doubts ?
Thanks,

I think the definitions in the document are quite clear still here's more simple definitions
Logout URL (both 10g and 11g webgate)- If this url appears the webgate will delete the webgate cookie i.e. obssocookie in 10g and OAMAuthnCookie in 11g
Logout Callback URL (11g) - In 11g by default this will trigger the webgate cookie deletion and display a clock image, you can do other cleanup stuff with this
Logout Redirect URL (11g) - OAM Server logout url where the user will be redirected after logout handler is invoked
Logout Target URL(11g) - Query parameter where the OAM server will send the user after logout
Now coming to your question...
The logout url from anywhere i.e. http://oam_server.com:14100/oam/server/logout?end_url=http://MyServer.com:port/Loggedout.jsp will work perfectly fine unless you have to do some cleanup from your applications. This process will clear the OAM session OAM_ID cookie and database session. Although webgate cookies are not deleted(in case of 10g webgate), they are invalidated because of the session deletion in OAM server.
However this will not work in case of persistent cookies where the webgate cookies can be persistent while OAM cookie(OAM_ID) is not. The above url in this case will never logout the user from the application.
Hope this helps,
Sagar

Configuring Oracle Access Manager to work with Oracle Web Tier (11.1.1.3)

I am trying to follow http://docs.oracle.com/cd/E14571_01/core.1111/e12035/oam_11g.htm to setup a load balanced OAM configuration. Following the documentation from the article (section 11.5) I'm not able to quite get this working. I believe there is a typo in 11.5.1 step 4 as admin.mycompany.com should be pointing to the IDMHOST1 and IDMHOST2, but please correct me if I'm wrong.
My question more comes in with 11.5.2. When you declare that the OAM Server Host is sso.mycompany.com and port to be 443 you are expecting that OAM makes a call back up to the webcache but I don't believe this is happening. When I define OAM Server Host as a single machine name with OAM installed it works but when I use the load balanced URL that points to the web tier it is unable to find the server. If the call was making it up to the webcache then it would have the definition of sso.mycompany.com but if it never makes it there then it will never have that definition and the 'no server' error makes sense. Can anyone please clarify this for me?

I am trying to follow http://docs.oracle.com/cd/E14571_01/core.1111/e12035/oam_11g.htm to setup a load balanced OAM configuration. Following the documentation from the article (section 11.5) I'm not able to quite get this working. I believe there is a typo in 11.5.1 step 4 as admin.mycompany.com should be pointing to the IDMHOST1 and IDMHOST2, but please correct me if I'm wrong.
My question more comes in with 11.5.2. When you declare that the OAM Server Host is sso.mycompany.com and port to be 443 you are expecting that OAM makes a call back up to the webcache but I don't believe this is happening. When I define OAM Server Host as a single machine name with OAM installed it works but when I use the load balanced URL that points to the web tier it is unable to find the server. If the call was making it up to the webcache then it would have the definition of sso.mycompany.com but if it never makes it there then it will never have that definition and the 'no server' error makes sense. Can anyone please clarify this for me?

How is the Oracle apps 10g is integrated with e-business suite

Gurus
I am new to oracle.i don't have any knowledge about oracle apps versions and its releases. please tell me something very basic about these.
Regards
Nitin

"Oracle Applications Concepts Manual" should be helpful
http://download-uk.oracle.com/docs/cd/B25516_14/current/acrobat/11iconcepts.pdf

Error during execution of SSO with Oracle Access Manager 11gR2

Hello friends,
I have a problem with SSO using Oracle Access Manager 11g R2, then describes the steps taken in this test:
1. Is accessed by the OAM protected application through IE browser, Chrome and Firefox for testing purposes.
2. The OAM protected application, here is redirected to the OAM page to enter the credentials for the application.
3. Shows the application, and again reorders authentication credentials.
Here the details of the cookie:
a. cookie1: ADMINCONSOLESESSION
b. cokkie2: OAMAuthnCookie_webgate11g.domain.com: 7777
We also found an error when starting the node oam_server in WebLogic Server 11g (10.3.6)
Log:
[2012-11-29T18:16:02.411-05:00] [oam_server1] [ERROR] [JPS-03156] [oracle.jps.authorization.framework] [tid: [ACTIVE].ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: <anonymous>] [ecid: 0000JhEStpUFW7WFLzRL8A1GhylJ000002,0] [APP: oam_server#11.1.2.0.0] The exception has been thrown by ARME. The authorization result is set to deny.[[
com.bea.security.providers.authorization.asi.InvocationException: ArmeRUNTIME Exception: null
     at com.bea.security.providers.authorization.asi.AuthorizationProviderImpl.isAccessAllowed(AuthorizationProviderImpl.java:396)
     at com.bea.security.ssal.micro.MicroAuthorizationManagerWrapper.isAccessAllowed(MicroAuthorizationManagerWrapper.java:73)
     at com.bea.security.impl.AuthorizationServiceImpl.isAccessAllowed_internal(AuthorizationServiceImpl.java:914)
     at com.bea.security.impl.AuthorizationServiceImpl.isAccessAllowed(AuthorizationServiceImpl.java:745)
     at com.bea.security.impl.AuthorizationServiceImpl.isAccessAllowed(AuthorizationServiceImpl.java:668)
     at com.bea.security.impl.AuthorizationServiceImpl.isAccessAllowed(AuthorizationServiceImpl.java:622)
     at com.bea.security.AuthorizationService.isAccessAllowed(AuthorizationService.java:365)
     at oracle.security.am.common.policy.runtime.provider.oes.proxy.OESRuntimeProxy.wait4OESRuntimeDBPolicyRefreshCompletion(OESRuntimeProxy.java:263)
     at oracle.security.am.common.policy.runtime.provider.oes.proxy.OESRuntimeProxy.init(OESRuntimeProxy.java:193)
     at oracle.security.am.common.policy.runtime.provider.oes.OESPolicyRuntimeProvider.init(OESPolicyRuntimeProvider.java:167)
     at oracle.security.am.common.policy.runtime.PolicyRuntimeFactory.getNewInstance(PolicyRuntimeFactory.java:162)
     at oracle.security.am.common.policy.runtime.PolicyRuntimeFactory.init(PolicyRuntimeFactory.java:93)
     at oracle.security.am.common.policy.runtime.PolicyRuntimeFactory.getPolicyRuntime(PolicyRuntimeFactory.java:84)
     at oracle.security.am.common.policy.util.PolicyComponentLifecycle.initialize(PolicyComponentLifecycle.java:100)
     at oracle.security.am.lifecycle.ApplicationLifecycle.initComponentBootstrap(ApplicationLifecycle.java:156)
     at oracle.security.am.lifecycle.ApplicationLifecycle.contextInitialized(ApplicationLifecycle.java:86)
     at weblogic.servlet.internal.EventsManager$FireContextListenerAction.run(EventsManager.java:481)
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
     at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
     at weblogic.servlet.internal.EventsManager.notifyContextCreatedEvent(EventsManager.java:181)
     at weblogic.servlet.internal.WebAppServletContext.preloadResources(WebAppServletContext.java:1868)
     at weblogic.servlet.internal.WebAppServletContext.start(WebAppServletContext.java:3154)
     at weblogic.servlet.internal.WebAppModule.startContexts(WebAppModule.java:1518)
     at weblogic.servlet.internal.WebAppModule.start(WebAppModule.java:484)
     at weblogic.application.internal.flow.ModuleStateDriver$3.next(ModuleStateDriver.java:425)
     at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:52)
     at weblogic.application.internal.flow.ModuleStateDriver.start(ModuleStateDriver.java:119)
     at weblogic.application.internal.flow.ScopedModuleDriver.start(ScopedModuleDriver.java:200)
     at weblogic.application.internal.flow.ModuleListenerInvoker.start(ModuleListenerInvoker.java:247)
     at weblogic.application.internal.flow.ModuleStateDriver$3.next(ModuleStateDriver.java:425)
     at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:52)
     at weblogic.application.internal.flow.ModuleStateDriver.start(ModuleStateDriver.java:119)
     at weblogic.application.internal.flow.StartModulesFlow.activate(StartModulesFlow.java:27)
     at weblogic.application.internal.BaseDeployment$2.next(BaseDeployment.java:671)
     at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:52)
     at weblogic.application.internal.BaseDeployment.activate(BaseDeployment.java:212)
     at weblogic.application.internal.EarDeployment.activate(EarDeployment.java:59)
     at weblogic.application.internal.DeploymentStateChecker.activate(DeploymentStateChecker.java:161)
     at weblogic.deploy.internal.targetserver.AppContainerInvoker.activate(AppContainerInvoker.java:79)
     at weblogic.deploy.internal.targetserver.BasicDeployment.activate(BasicDeployment.java:184)
     at weblogic.deploy.internal.targetserver.BasicDeployment.activateFromServerLifecycle(BasicDeployment.java:361)
     at weblogic.management.deploy.internal.DeploymentAdapter$1.doActivate(DeploymentAdapter.java:51)
     at weblogic.management.deploy.internal.DeploymentAdapter.activate(DeploymentAdapter.java:200)
     at weblogic.management.deploy.internal.AppTransition$2.transitionApp(AppTransition.java:30)
     at weblogic.management.deploy.internal.ConfiguredDeployments.transitionApps(ConfiguredDeployments.java:261)
     at weblogic.management.deploy.internal.ConfiguredDeployments.transitionApps(ConfiguredDeployments.java:220)
     at weblogic.management.deploy.internal.ConfiguredDeployments.activate(ConfiguredDeployments.java:169)
     at weblogic.management.deploy.internal.ConfiguredDeployments.deploy(ConfiguredDeployments.java:123)
     at weblogic.management.deploy.internal.DeploymentServerService.resume(DeploymentServerService.java:180)
     at weblogic.management.deploy.internal.DeploymentServerService.start(DeploymentServerService.java:96)
     at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
Caused by: com.wles.InternalException: ArmeRUNTIME Exception: null
     at com.wles.arme.Credentials_ca.exceptionTransport(Credentials_ca.java:606)
     at com.wles.arme.Credentials_ca._accessAllowed(Credentials_ca.java:343)
     at com.wles.arme.CredentialsImpl._accessAllowed(CredentialsImpl.java:400)
     at com.wles.arme.CredentialsImpl._accessAllowed(CredentialsImpl.java:422)
     at com.wles.arme.CachingCredentialsImpl._accessAllowed(CachingCredentialsImpl.java:225)
     at com.wles.arme.CredentialsImpl.accessAllowed(CredentialsImpl.java:452)
     at com.wles.arme.CachingCredentialsImpl.accessAllowed(CachingCredentialsImpl.java:68)
     at com.bea.security.providers.authorization.asi.AuthorizationProviderImpl.ARMEisAccessAllowed(AuthorizationProviderImpl.java:977)
     at com.bea.security.providers.authorization.asi.AuthorizationProviderImpl.isAccessAllowed(AuthorizationProviderImpl.java:347)
     ... 52 more
causal exception is:
com.wles.InternalException: ArmeRUNTIME Exception: null
     at com.wles.arme.Credentials_ca.exceptionTransport(Credentials_ca.java:606)
     at com.wles.arme.Credentials_ca._accessAllowed(Credentials_ca.java:343)
     at com.wles.arme.CredentialsImpl._accessAllowed(CredentialsImpl.java:400)
     at com.wles.arme.CredentialsImpl._accessAllowed(CredentialsImpl.java:422)
     at com.wles.arme.CachingCredentialsImpl._accessAllowed(CachingCredentialsImpl.java:225)
     at com.wles.arme.CredentialsImpl.accessAllowed(CredentialsImpl.java:452)
     at com.wles.arme.CachingCredentialsImpl.accessAllowed(CachingCredentialsImpl.java:68)
     at com.bea.security.providers.authorization.asi.AuthorizationProviderImpl.ARMEisAccessAllowed(AuthorizationProviderImpl.java:977)
     at com.bea.security.providers.authorization.asi.AuthorizationProviderImpl.isAccessAllowed(AuthorizationProviderImpl.java:347)
     at com.bea.security.ssal.micro.MicroAuthorizationManagerWrapper.isAccessAllowed(MicroAuthorizationManagerWrapper.java:73)
     at com.bea.security.impl.AuthorizationServiceImpl.isAccessAllowed_internal(AuthorizationServiceImpl.java:914)
     at com.bea.security.impl.AuthorizationServiceImpl.isAccessAllowed(AuthorizationServiceImpl.java:745)
     at com.bea.security.impl.AuthorizationServiceImpl.isAccessAllowed(AuthorizationServiceImpl.java:668)
     at com.bea.security.impl.AuthorizationServiceImpl.isAccessAllowed(AuthorizationServiceImpl.java:622)
     at com.bea.security.AuthorizationService.isAccessAllowed(AuthorizationService.java:365)
     at oracle.security.am.common.policy.runtime.provider.oes.proxy.OESRuntimeProxy.wait4OESRuntimeDBPolicyRefreshCompletion(OESRuntimeProxy.java:263)
     at oracle.security.am.common.policy.runtime.provider.oes.proxy.OESRuntimeProxy.init(OESRuntimeProxy.java:193)
     at oracle.security.am.common.policy.runtime.provider.oes.OESPolicyRuntimeProvider.init(OESPolicyRuntimeProvider.java:167)
     at oracle.security.am.common.policy.runtime.PolicyRuntimeFactory.getNewInstance(PolicyRuntimeFactory.java:162)
     at oracle.security.am.common.policy.runtime.PolicyRuntimeFactory.init(PolicyRuntimeFactory.java:93)
     at oracle.security.am.common.policy.runtime.PolicyRuntimeFactory.getPolicyRuntime(PolicyRuntimeFactory.java:84)
     at oracle.security.am.common.policy.util.PolicyComponentLifecycle.initialize(PolicyComponentLifecycle.java:100)
     at oracle.security.am.lifecycle.ApplicationLifecycle.initComponentBootstrap(ApplicationLifecycle.java:156)
     at oracle.security.am.lifecycle.ApplicationLifecycle.contextInitialized(ApplicationLifecycle.java:86)
     at weblogic.servlet.internal.EventsManager$FireContextListenerAction.run(EventsManager.java:481)
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
     at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
     at weblogic.servlet.internal.EventsManager.notifyContextCreatedEvent(EventsManager.java:181)
     at weblogic.servlet.internal.WebAppServletContext.preloadResources(WebAppServletContext.java:1868)
     at weblogic.servlet.internal.WebAppServletContext.start(WebAppServletContext.java:3154)
     at weblogic.servlet.internal.WebAppModule.startContexts(WebAppModule.java:1518)
     at weblogic.servlet.internal.WebAppModule.start(WebAppModule.java:484)
     at weblogic.application.internal.flow.ModuleStateDriver$3.next(ModuleStateDriver.java:425)
     at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:52)
     at weblogic.application.internal.flow.ModuleStateDriver.start(ModuleStateDriver.java:119)
     at weblogic.application.internal.flow.ScopedModuleDriver.start(ScopedModuleDriver.java:200)
     at weblogic.application.internal.flow.ModuleListenerInvoker.start(ModuleListenerInvoker.java:247)
     at weblogic.application.internal.flow.ModuleStateDriver$3.next(ModuleStateDriver.java:425)
     at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:52)
     at weblogic.application.internal.flow.ModuleStateDriver.start(ModuleStateDriver.java:119)
     at weblogic.application.internal.flow.StartModulesFlow.activate(StartModulesFlow.java:27)
     at weblogic.application.internal.BaseDeployment$2.next(BaseDeployment.java:671)
     at weblogic.application.utils.StateMachineDriver.nextState(StateMachineDriver.java:52)
     at weblogic.application.internal.BaseDeployment.activate(BaseDeployment.java:212)
     at weblogic.application.internal.EarDeployment.activate(EarDeployment.java:59)
     at weblogic.application.internal.DeploymentStateChecker.activate(DeploymentStateChecker.java:161)
     at weblogic.deploy.internal.targetserver.AppContainerInvoker.activate(AppContainerInvoker.java:79)
     at weblogic.deploy.internal.targetserver.BasicDeployment.activate(BasicDeployment.java:184)
     at weblogic.deploy.internal.targetserver.BasicDeployment.activateFromServerLifecycle(BasicDeployment.java:361)
     at weblogic.management.deploy.internal.DeploymentAdapter$1.doActivate(DeploymentAdapter.java:51)
     at weblogic.management.deploy.internal.DeploymentAdapter.activate(DeploymentAdapter.java:200)
     at weblogic.management.deploy.internal.AppTransition$2.transitionApp(AppTransition.java:30)
     at weblogic.management.deploy.internal.ConfiguredDeployments.transitionApps(ConfiguredDeployments.java:261)
     at weblogic.management.deploy.internal.ConfiguredDeployments.transitionApps(ConfiguredDeployments.java:220)
     at weblogic.management.deploy.internal.ConfiguredDeployments.activate(ConfiguredDeployments.java:169)
     at weblogic.management.deploy.internal.ConfiguredDeployments.deploy(ConfiguredDeployments.java:123)
     at weblogic.management.deploy.internal.DeploymentServerService.resume(DeploymentServerService.java:180)
     at weblogic.management.deploy.internal.DeploymentServerService.start(DeploymentServerService.java:96)
     at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
     at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
     at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
We appreciate your support in solving the case. Thanks...
JLK
Edited by: JLK on Nov 30, 2012 9:43 AM

Hi Viju,
Did you executed the python script to register OPSS. If not then you will get the mentioned error:
I have mentioned couple of workarounds. Can you try those and let me know the results. Take the backup of your entire environment before you follow the steps:::
1. For the ARME issue patch can be applied for 11.1.2
OAM Bundle Patch Release History (Doc ID 736372.1)
Yes. This is a benign message. ( the ARME issue)
OAM 11R2 After Upgrade The Managed Server Start With Error ArmeRUNTIME Exception: Null (Doc ID 1509559.1)
The other issue is under investgation and is benign.
<oracle.adfinternal.view.faces.renderkit.rich.RegionRenderer> WARNING when accessing oamconsole (Doc ID 1511967.1)
The final message is spoken to here:
WLS 10.3.3: "Auto-Ref-By: WebApp" deployed as shared library is affecting other web applications. (Doc ID 1210393.1)
Action Plan:
=========
1. For the ARME issue patch can be applied for 11.1.2
OAM Bundle Patch Release History (Doc ID 736372.1)
Hope this helps.

How to Migrate 10g sso integrate with EBS 11.5.10.2 to 11g OAM(oracle access manager) with R12.1.3

How to Migrate 10g sso integrated with EBS 11.5.10.2 to 11g OAM(oracle access manager) with R12.1.3
Os:Linux 64 bit
database:11.2.0.3 Rac

Hi,
You could try working through the EBS -> APEX integration article on the Apex community site (http://www.oracle.com/technetwork/developer-tools/apex/apex-ebs-wp-cabot-consulting-169064.pdf)
Rod West

Oracle 11g for Oracle access manager, OID version details

At present we have 1og db for sso and oid. I have checking in db that our exsisting OID and SSO versions are
Oracle9iAS Single Sign-On 10.1.2.0.2
Oracle9iAS Internet Directory
OID 10.1.2.1.0
We are moving to diff hosting solution and vendor is recommanding to have 11g Oracle access manager(in 11g sso is replaced by OAM) and OID.
What is the version of OID with 11g or please refer me to the documentaion where i can greb 11g OAM, oid etc versions

Kapardhi wrote:
Where can i find oracle 11g server for windows7 home basic 64bit version...Oracle 11gR2 is certified on Windows 7 x64 - Professional, Enterprise, and Ultimate editions -- http://docs.oracle.com/cd/E11882_01/install.112/e24283/toc.htm#BGBEEBAD
You can download 11gR2 from http://www.oracle.com/technetwork/database/enterprise-edition/downloads/index.html
Thanks,
Hussein

Extending Domain with Oracle Access Manager 10g

Oracle® Fusion Middleware Enterprise Deployment Guide for Oracle Identity Management
11g Release 1 (11.1.1)
Part Number E12035-05
http://download.oracle.com/docs/cd/E14571_01/core.1111/e12035/toc.htm
Chapter 10 - Extending the Domain with Oracle Access Manager 10g
- Section 10.4.3 Installing WebGate on OAMADMINHOST, WEBHOST1, and WEBHOST2
Question:
How many webgate instances should be created?
1) Is there only on instance and the three installation share the same ID?
2) Is there two instances? one for the web cluster, the other for the OAM Admin Console server?
3) Is there three separate webgates and instances?
Thanks

It should be this way:
Ebiz:
1. Integrate OAM with OASSO
2. Register OASSO and OID with Ebiz11.5.10.2
3. Protect the resource in OAM
4. Verify if authentication is successful for this resource.
Obiee:
1. Integrate OBIEE with OAM
2. Verify if authentication is successful for this resource.
IWA:
1. Install IIS webser and webgate
2. Create authentication scheme which protects / of IIS web server.
Create a Form Authentication Scheme(this scheme should protect OBIEE and EBiz resource) which will have challenge redirect to IIS web server where IWA is configured and / is protected.
Login Flow:
1. User tries to access ebiz or obiee resource.
2. Form Authentication Scheme will challenge redirect to IIS web server where IWA is configured.
3. As IWA is configured. User will be automatically get ObSSOCookie.
4. User gets redirected back to the requested resource.
There is a My oracle support doc which talks in details about this setup.

Integrating Oracle Access Manager with Kerberos (WNA)

Hi,
I have working Oracle Access Manager currently being able only to authenticate users against Active Directory. I want to enable WNA. But I am still having issues with correctly configure it:
I do not know what am I doing wrong.
I am logged as example.com\testuser into Windows XP, using firefox with WNA enabled for URI example.com. Then I enter http://oracle.example.com which is my Oracle HTTP Server's protected URL, then I am receiving ERROR from Oracle Access Manager: "The user account is locked or disabled. Please contact the System Administrator."
In OAM Log there is this: <Jun 19, 2012 4:14:15 PM CEST> <Error> <oracle.oam.controller> <OAM-02010> <User account is locked. Authentication failed.>
Interesting is when I disable WNA support in firefox, then this behavior occurs: fisrt there is this dialog shown "A username and password are being requested by http://oracle.example.com:14100. The site says: "OAM 11g"" --> here I enter example.com\testuser and password. After this new dialog is shown: A username and password are being requested by http://oracle.example.com:14100. The site says: "WebLogic Server", then after entering weblogic/password I receive "The user account is locked or disabled. Please contact the System Administrator."
In the OAM log this is logged:
<Jun 19, 2012 4:22:28 PM CEST> <Error> <oracle.oam.user.identity.provider> <OAMSSA-20023> <Authentication Failure for user : weblogic.>
<Jun 19, 2012 4:22:28 PM CEST> <Error> <oracle.oam.controller> <OAM-02010> <User account is locked. Authentication failed.>
Any ideas? I am really stuck here.
I am using this keytab file:
[root@oracle centos]# klist -ke /home/oracle/keytab.testuser1
Keytab name: WRFILE:/home/oracle/keytab.testuser1
KVNO Principal
7 HTTP/[email protected] (des-cbc-crc)
7 HTTP/[email protected] (des-cbc-md5)
7 HTTP/[email protected] (arcfour-hmac)
7 HTTP/[email protected] (aes256-cts-hmac-sha1-96)
7 HTTP/[email protected] (aes128-cts-hmac-sha1-96)
kinit passes fine:
[root@oracle centos]# kinit -V HTTP/[email protected] -k -t /home/oracle/keytab.testuser1
Using default cache: /tmp/krb5cc_0
Using principal: HTTP/[email protected]
Using keytab: /home/oracle/keytab.testuser1
Authenticated to Kerberos v5
Why and which user is locked? I can lock with the AD user into windows domain, so I assume it is not locked + I checked it in the Active Directory.

Ok, now I got it working. Sh~t! Why oracle documentation says I should set AD datasource with this parameter:
User Name Attribute: UserPrincipalName, when this does not work?!
After changing to User Name Attribute: sAMAccountName my WNA works!!!
I have been fighting all day with this! The question is why such behavior - if the problem is in wrongly written oracle documentation, or I have problem somewehere else.
Btw my user in AD looks like this:
distinguishedName:     CN=John Doe,CN=Users,DC=example,DC=com
sAMAccountName:     doejohn
userPrincipalName     [email protected]
It looks OAM takes "doejohn" from Windows via WNA/Kerberos and searches for this using UserPrincipalName and this is giving no match of course because "doejohn != [email protected]".
The question is why does it take doejohn and not [email protected] from Windows WNA/Kerberos ???

OBIEE Integration with Oracle Access Manager (OAM)

Hi All,
I am new to OBIEE and not familiar with Security part. We have one request from the client to have OBIEE Integration with Oracle Access Manager (OAM) through eternal identity management tool (OID/other LDAP).
I tried google and found some information, but non of them has Step-by-Step process.
Does anyone has document or know good portal which gives step by step information on how to Integrate OBIEE with OAM using external identity management tool?
Appreciate if you share the information.

Hi,
You can use this note/doc attached in the note to configure:
Oracle Access Manager (OAM) and Oracle Business Intelligence (OBI) Integration [ID 1217103.1]
Regards,
Jay

Oracle Access Manager 11g Basic with E-Business Suite

Similar Messages

Maybe you are looking for