Oracle Service Bus SSO with Proxy Service

Hi all,
I protect Proxy Service. It means only authenticated user can able to access it.
But when i want to access from my application server (weblogic), i don't want to authenticate again with OSB.
Is there any way to use SSO between application server and Oracle Service Bus ?
With Regards,
Wai Phyo

Hi Wai,
I think it is not supported with OSB. The doc says -
46.15 Is single sign-on supported in Oracle Service Bus?
Strictly speaking single sign-on (SSO) is not applicable to Oracle Service Bus messaging scenarios for several reasons. First, Oracle Service Bus is stateless; there is no notion of a session or conversation among multiple parties. Second, Oracle Service Bus clients are typically other enterprise software applications, not users behind a Web browser. Therefore, it is acceptable to require that these clients send credentials such as username and password on every request, provided that the communication is secured by means such as SSL or WS-Security. However, SSO between the Oracle Service Bus Console and the Oracle WebLogic Server Administration Console is supported. For more information, see "Single Sign-On" in "Security Fundamentals" in Oracle Fusion Middleware Understanding Security for Oracle WebLogic Server.http://download.oracle.com/docs/html/E15866_01/security_faq.htm#i1058723
http://download.oracle.com/docs/cd/E13159_01/osb/docs10gr3/security/security_faq.html#wp1053670
Regards,
Anuj

Similar Messages

  • OSB - Setting http Authorization header with Proxy Service

    Hi,
    I have the following scenario:
    PS1 -> PS2 -> BS (with a SA configured to pass through)
    I need to set the Authorization http header based on some information in payload, so:
    PS1 receives the payload and route to PS2, where username/password are extracted and using a java call out the base64 hash is generated.
    In the PS2 route i'm trying to set the Authorization header using the set Transport Headers option.
    When i do a request to test this operation, osb show me a beautiful CredentialNotFound exception.
    I have tryied to set the Authorization header in the route on the PS1, without success.
    Someone can help me ?

    I can't set the Proxy Service to do the authentication. I will try to explain better:
    I have a Business Service which have a Service Account associated to pass through the Authorization header to the service provider do the validation.
    I front of this business service i have a Proxy Service which route the requests to the BS.
    All partners send this Authorization header, but now, i have one that will not send no matter what.
    The username and passwrod will come into the payload (and will be variable).
    In some point before the proccess i need to extract the information from payload and set the Authorization header.
    Ty for you time.
    Edited by: GSanches on 09/07/2010 09:59

  • What are the differences between Azure(Cloud) Service Bus and On-Premises Service Bus (Windows Service Bus 1.0)?

    Hi,
    I want to know the exacts differences between Windows Azure(Cloud) Service Bus and On-Premises Service Bus (Windows Service Bus 1.0)
    Thanks
    mit

    Might ask them over here.
    http://social.technet.microsoft.com/Forums/en-us/home?category=biztalkserver
    http://social.msdn.microsoft.com/Forums/windowsazure/en-US/home?forum=windowsazuremanagement%2Cservbus%2Cazuremobile&filter=alltypes&sort=lastpostdesc
    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows]
    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

  • Oracle Service Bus: Monitoring/Tracking Consumer Services?

    Hi,
    since we have a Oracle Service Bus and a Oracle Service Registry, is there any standard solution for tracking which consumer services/applications are accessing which provider services? What we need is monitoring the applications (consumer) which are accessing an specific service (provider) registered in the OSB. Is it possible to have this information as monitoring/statistical data in the Oracle Service Bus console? if not, any suggestion to implement such behaviour ?
    Thank you in advance,
    Antonio.

    I would like to have (don't know where) a list with all my consumer services (outside OSB) and so map them with the accessed proxy services (providers on OSB). The aim for this functionality is being able to monitor which consumer services from outside the OSB (then I need a place where these services can be identified and listed) are accessing specific proxy services published as providers on the OSB. Is like "well, I have my proxies published on the OSB, but I need to know WHO (consumers outside the OSB) is accessing to them?". I don't know if such functionality is provided by the Oracle Service Registry or the Service Bus, or it's just a custom implementation without any Oracle product.
    Thank you for your help Manoj!
    Antonio.

  • Oracle Service Bus 11g { for financial services }

    Latest version available of ORACLE SERVICE BUS FOR FINANCIAL SERVICES is 10gR3 (10.3.1.0) and that of ORACLE SERVICE BUS is 11.1.1.3.0
    Are features provided in OSB FOR FINANCIAL SERVICES { like support for specific message formats and protocols such as SWIFT and FIX }
    available in OSB 11g and if not, how to get these features with OSB 11g?
    Thanks, Yogesh
    Edited by: Yogesh Ketkar on Jun 24, 2010 11:36 AM

    It is normal practice to release OSB FOR FINANCIAL SERVICES shortly after release of OSB.
    So OSB 11gR1 for Financial services should be released any time soon, as OSB 11g R1 is already released.
    Please talk to Oracle Sales representative for exact dates.
    Thanks
    Manoj

  • Capturing service bus traffic with fiddler

    Hi,
    I'm using Node js to connect to Service Bus Topics and I'm having problems to get the Topic information programmatically. I'm trying to use fiddler to debug the problem. In order to see the node js traffic I'm setting the proxies in the command line shell
    to : https_proxy=http://127.0.0.1:8888
    http_proxy=http://127.0.0.1:8888
    NODE_TLS_REJECT_UNAUTHORIZED=0
    but in fiddler I can only see the tunneling to https.
    My question is how do I change the traffic to the Service Bus to HTTP so I can monitor it with fiddler.
    Also, if you think about other ways i can debug calls to Service Bus it will be helpful.
    Thanks.

    Hi,
    Thank you for reaching out to us. I am currently researching to gather more information with regards to your request. I shall revert back to you with an update at the earliest. Sincerely appreciate
    your patience.
    Regards,
    Azam khan

  • Oracle Service Bus 11gR1 - missing Web Services Security Configuration?

    I am trying to configure a web service which uses username token policy.
    The below option is missing in Proxy Service --> Security
    Web Services Security Configuration
    Process WS-Security Header     Yes     NoIs there anything that needs to be enabled for the above to show up in Proxy Service-->Security.

    This option was enabled by removing the username token policy from the wsdl file.
    Thanks for looking.

  • Calling an MFL business service from a WSDL proxy service

    Hi,
    I'm using Service Bus v2.6, and trying to call an MFL business service from a wsdl based proxy service.
    I have done the following so far:
    - Define an MFL-based business service that writes MFL messages to a JMS queue and reads reply messages off another queue, and it works when I debug this business service by itself.
    - Define a wsdl proxy service that routes requests to the MFL business service.
    Since the tutorials don't have MFL examples, I'm struggling to get this working. I've tried different ways, but no luck.
    Here's my definition of the route node in the Proxy Service at the moment.
    1. Call a custom XQuery (.xq file) to convert incoming message to an XML representation of the MFL message, and assign the result to a variable "param1"
    2. Use "Service Callout" to call the MFL business service, and set Request Document Variable to "param1" and Response Document Variable to "param2".
    When I debug the flow, param2 (reply) comes up as empty, and I don't know how to make it work.
    I've turned on the JMS trace etc and the JMS bit is working (i.e messages being written, and read by the business service).
    There seems to be something wrong with the way I call it from the proxy service.
    Any help would be much appreciated..
    Thanks

    Hello,
    Can you indicate the classpath that you use to run your client, version of weblogic and the version of jaxrpc api that you are using.
    As a quick experiment adding the jaxrpc jar files to your classpath one at a time.
    This [url http://www.javaworld.com/javaforums/showflat.php?Cat=&Board=Enterprisejava&Number=3801&page=12&view=collapsed&sb=9&o=&fpart=1]chap seemed to have a similar problem to you and solved it by adding the jaxprc-spi jar file to his class path. It may be that the jaxrpc-impl is causing you greif.
    Also see this thread:
    http://forums.bea.com/bea/message.jspa?messageID=200612003&tstart=0
    Hussein Badakhchani
    www.orbism.com

  • OSB example calling multiple business services using a single proxy service???

    Hi,
    I have three business services created using http urls i.e.
    1. LoginBS
    2. GetListBS
    3. LogoutBS
    My requirement is to get a list of names from GetListBS using a single proxy service and to call GetListBS I have to first call LoginBS then GetListBS i.e. after authentication and then finally logout.
    Kindly help with a detailed example for this and I am new to OSB.
    Thanks,
    Vik

    Hi Eric,
    Thanks for the response. We figured that it is possible to call multiple services with Split Join. However, we ran into the issue you described. We had a blocking call and had to wait until each of the services returned a response.
    However, we needed a Async model for our design and felt that this might not be a right fit.
    We are now looking at implementing the publish option with QoS configured as this fits our usecase better. Thanks for the help again.
    Rudraksh

  • SSIS Web Service Task Error with WCF Service

    I have read all the other posts on this site and have not been able to resolve my issue.
    For testing purposes i created a very simple WCF service that takes no arguments and returns true.  That is all it does.
    When i create a winform client and instantiate the service i can run my service method and get true back so i know the service works.
    I then create a test SSIS package with 1 task, a web service task. 
    I set the web service tasks properties as follows:
    http connection: http://localhost/WCF_SSIS_Prototype/Service1.svc
    wsdl file: C:\...\SSIS_WCF_Prototype\Service1.wsdl  (I know this is not a valid path, i changed it for posting to forum)
    Service: Service1
    Method: GetData
    Variable: User::BResult
    When i run the package i get the following error:
    [Web Service Task] Error: An error occurred with the following error message: "Microsoft.SqlServer.Dts.Tasks.WebServiceTask.WebserviceTaskException: Could not execute the Web method. The error is: Method 'ProxyNamespace.Service1.GetData' not found..    at Microsoft.SqlServer.Dts.Tasks.WebServiceTask.WebMethodInvokerProxy.InvokeMethod(DTSWebMethodInfo methodInfo, String serviceName, Object connection)    at Microsoft.SqlServer.Dts.Tasks.WebServiceTask.WebServiceTaskUtil.Invoke(DTSWebMethodInfo methodInfo, String serviceName, Object connection)    at Microsoft.SqlServer.Dts.Tasks.WebServiceTask.WebServiceTask.executeThread()".
    I'm not sure why it is saying "Method 'ProxyNamespace.Service1.GetData' not found.  It the web service task trying to create a proxy class and naming the proxy class namespace ProxyNamespace? 
    Any help is greatly appreciated.

    Hi,
    How  do you get around the same issue if your string type is based on a client token ?  I downloaded the .wsdl file, was able to see the service name, method and when selecting a method type, I am required to provide a client token which was given
    to me.  (Name column = clienttoken, Type = string, Value = 2227656 - ec8922 (client token numbers goes there)?  I am new to use ssis and need your help please
    error message:  Web Service Task] Error: An error occurred with the following error message:
    "Microsoft.SqlServer.Dts.Tasks.WebServiceTask.WebserviceTaskException: The web serrvice threw an error during method execution. The error is: An error occurred
    when verifying security fro the message..   
    at Microsoft.SqlServer.Dts.Tasks.WebServiceTask.WebMethodInvokerProxy.InvokeMethod(DTSWebMethodInfo methodInfo, String serviceName, Object connection)   
    at Microsoft.SqlServer.Dts.Tasks.WebServiceTask.WebServiceTaskUtil.Invoke(DTSWebMethodInfo methodInfo, String serviceName, Object connection) 
     at Microsoft.SqlServer.Dts.Tasks.WebServiceTask.WebServiceTask.executeThread()"
    Thank you and regards,
    Bili

  • OWSM user name token service policy for a proxy service at OSB

    Hi Friends,
    I am facing an issue while trying for the OWSM user name token service policy Authentication for a proxy service at OSB. I am using the PS4 SOA suite with AIA foundation pack. very first I am login into the EM console and choose the domain<soaosb_domain> form web logic domain I moved to security->security provide configuration. Inside the security provide configuration we have to key store section and I expand that and we have a configure button inside the keys tore. I click that button and it open a new page. In that page I got the Java key store (JKS) as the default key store and in the access Attributes I keep the default key store path and fill password and confirm password fields. Then in Identity certificates I fill the signature key and Encryption key with key Alias as 'orakey' and same password which I am mentioned at access Attributes. I got the message like the key store is created successfully. Then I restarted the server and again I am login into the EM console and choose the domain<soaosb_domain> form web logic domain I moved to security. In security I choose the credentials. In credentials we have create key. In the create key I add the key as hari-key and provide the hari as a user and his password.
    While trying to test the proxy service i am getting the [OSB Security - OWSM: 387253] Failed to initialize OWSM Credential Manager. Please validate the Key store Configuration.
    can anyone please look at this and suggest me how can I proceed for this.
    Thanks
    Hari

    anyone please respond to the above request.
    Thanks
    Hari

  • OWSM 11g: Invoking a secured web service through a java proxy service

    Hi All,
    I am trying to call a secured bpel service which is expecting a username token password. I have created a java proxy service for the same. I now need to add the username token to the same. Can anyone please guide me in this regard.
    Thanks in advance.

    Just to add some pointers,
    I added the following code to the proxy still the soap headers is not getting propagated.
    OrderBookingAndShipment orderBookingAndShipment = orderbookingandshipment_client_ep.getOrderBookingAndShipment_pt();
    String username = "OWSM_11g";
    String password = "password";
    List credProviders = new ArrayList();
    //client side UsernameToken credential provider
    CredentialProvider cp = new ClientUNTCredentialProvider(username.getBytes(),password.getBytes());
    credProviders.add(cp);
    Map<String,Object> context = ((BindingProvider) orderBookingAndShipment).getRequestContext();
    context.put(WSSecurityContext.CREDENTIAL_PROVIDER_LIST,credProviders);

  • Oracle Forms 11g SSO with OID and IAM

    What versions of OID and Access Manager are required to get an Oracle Forms and Reports 11.1.1.2 application
    on Weblogic 10.3.2 configured for Oracle SSO using OID authentication?
    We want the OID to store and authenticate Users for username and password logins to the database, then
    ultimately by user Certificate authentication in OID. I have OID 11.1.1.2 installed and SSO enabled for Forms
    in Enterprise Manager.
    Is Access Manager required for Forms SSO with OID authentication to work or just to allow user interaction
    for registration and Password reset?
    Things mention OAM 10.4.3 and others talk about IAM 11g for Forms 11.1.1.2 SSO to work with OID.
    We did this back in Oracle Forms and OID 10g with JSP and LDAP to setup users but I understand 11g is
    different and IAM can help or is required for this type of SSO to work.
    Any help?
    Edited by: Kirch on Apr 30, 2013 7:39 AM

    Hi,
    According to Oracle's certification matrix found at http://www.oracle.com/technetwork/middleware/downloads/fmw-11gr1certmatrix.xls, Oracle Forms 11.1.1.2 is not supported to use any Oracle Access Manager (OAM) version. OAM is a component of IAM. It is only supported with Oracle SSO 10.1.4.x. The best solution would be to upgrade the Forms and Reports environment to either 11gR2 (11.1.2.1) or to the latest 11gR1 patchset 11.1.1.7. Both versions are compatible with OAM 11.1.1.7.0 and OID 11.1.1.7.0 where only Forms 11gR2 (11.1.2.1) is compatible with OAM 11.1.2.0 and OID 11.1.1.7.0. That would be the best solution as we have ran into configuration problems in the past with using Oracle SSO 10.1.4.x.
    Since OID 11.1.1.2.0 is already installed, you should be able to patch it up to 11.1.1.7.0.
    For user authentication in OID, it is required to have OAM or Oracle SSO as both products use WebGate or mod_osso agents for authentication and authorization. For purposes of allowing end users to register accounts and password reset, you will either need to also install another IAM component called Oracle Identity Manager (OIM) or create a customized SSO login page that can be coded to perform these actions. I believe there are some examples available on the Internet.
    Thanks,
    Scott
    http://pitss.com/us

  • Service call exception with Web service

    Hello,
    we changed tonight the interface of the web service I use in the web dynpro as model. So I deleted the old model and created a new model (under the same name) importing WSDL file.
    The WSDL was created via XI which is the interface to a SAP R/3 system, calling in the end a RFC function module.
    Now I get this error message:
    <b>Service call exception; nested exception is: com.sap.engine.services.webservices.jaxrpc.exceptions.XmlUnmarshalException: XML Deserialization Error. The content with schema type [http://trw.com/uta][/wsdl:definitions/wsdl:types/xsd:schema/xsd:complexType[1]/xsd:sequence/xsd:element[1]/xsd:complexType/xsd:sequence/xsd:element/xsd:complexType/xsd:sequence/xsd:element[9]/xsd:simpleType] is not valid.</b>
    The error occurs while executing wdContext.currentWebServiceElement().modelObject().execute(); command to get data from R/3 (via XI). What I can see in XI protocol is that the data comes back from the R/3 function module. But in web dynpro I get this error.
    When no data are found there is no error executing command wdContext.currentWebServiceElement().modelObject().execute();
    What to do in this case?
    regards
    Frank

    Problem solved!
    One of the fields in interface of the R/3 function module interface was changed from length 2 to 18. The adjustment in XI was missing and in the end the web dynpro runtime raised this error.
    Nevertehless it is always very hard to find out the cause of such problems.

  • What is the best email service to use with Apple service?

    Hi to all,
    actually i'm using a local provider for email, but is full of spam and i have decided that is time to switch to a better email service.
    The most used email services are Gmail, Outlook/Hotmail and Yahoo.
    But what is the better? Or there are an alternative that is better?
    I have see that Apple offer an iCloud Mail address, but if I understand... this is not very reliable.
    What do you suggest?
    Thanks to everyone

    MobileMe was a suite of internet services for Mac, PC and iOS users.
    http://en.wikipedia.org/wiki/MobileMe
    It has been discontinued by Apple to be replaced by iCloud: http://www.apple.com/icloud/

Maybe you are looking for

  • Can you use a Iphone 3GS charger with an ipad2?

    I don't want to damage my new iPad that I bought over in the US that obviously came with a American charger!

  • Wired Guest in 5.x 4402 - Does it Work???

    Anyone get Wired Guest access working using the latest code 5.148 (or any code for that matter). In particular has anyone been sucessful using 1 WLC with ingress and egress on same controller. I have been trying for a week and does not work no matter

  • The battery-sucking Nomad from hell

    I have a brand new Nomad Jukebox Zen Xtra MP3 Player (40 GB). The fully charged battery, drains in 6 hours! It doesn't matter if I'm actually using it, or it is just on, or even if it's totally off... It drains in 6 hours no matter what. I understand

  • Latest Quicktime doesn't play films in browser

    Looks like the latest Quicktime has a bug or something, because it is not playing any animation what soever on my browser (firefox). Keep seeing the quicktime logo with a question mark.... is it a bug or something I can fix?

  • Picture library is missing _t and _w folders

    I have lots of existing picture libraries in the project. When I create a new picture library, _t and _w folders are not generated. When I upload a new image to picture library they are not generated in existing _t and _w folders so no priview is sho