Oracle Single Sign on Integration with Oracle EBS r12

Hello,
I am working on a project to integrate Oracle Single Sign On on Oracle r12. There is plenty of information available on Oracle Support but few inter-mixing and confusing terminology keeps popping up and I do not understand how all pieces together work. I am new to Oracle Single Sign On.
Here are few basic questions.
1. What is the difference between Oracle Internet Directory, Oracle Virtual Directory and Oracle Active Directory
2. Are the terms Identity Management and Oracle Single Sign On interchangeable? What is the difference between two?
3. What is Oracle Access manager and how different that is from Identity Management?
4. What is Oracle HTTP Server 11g webgate and how different that is from a normal traditional Oracle HTTP Server?
5. What is Oracle EBS Accessgate? Why do I need it? On metalink some notes do not indicate use of Accessgate at all for OSSO deployment while some makes it look like required.And advise on above will help.
Thank you
Darsh

Hi Darsh,
1. Oracle Internet Directory (OID) is Oracle LDAP storage solution (more here), Oracle Virtual Directory is Oracle solution that can read identity data (and filter it (mask it) based on policies) from Oracle/non-Oracle databases, Oracle/non-Oracle Directories and files and provide the user profiles as LDAP view (more here), There is nothing called Oracle Active Directory, you must be referring to Microsoft Active Directory.
2. No, Oracle Single Sign On (OSSO) is a feature in iAS (its obsolete), Identity Management is wide umbrella of solutions and concepts.
3. Oracle Access Manager is one component of Oracle Identity and Access Management suite of products.
4. Webgate is Oracle access Manager agent that is installed on a webtier, it intercepts the web requests and collect the credentails, send them to Oracle Access Manager for security evaluation (decide what Authentication is needed, verify collect credentials, etc), webgate then enforce the Access Manager decision.
5. Oracle EBS AccessGate is a java application that has the same use of OAM Webgate (it is OAM agent) but specific to E Business suite, EBS Access Gate is the new solution replacing OSSO agents, OAM is replacing OSSO server component, EBS and OSSO customers can use OAM server with OSSO agents, or with EBS AccessGate.
HTH.
Ghassan

Similar Messages

Integrating Oracle BI Publisher with Oracle Single Sign-on security.

I am trying to integrate BI Publisher with Oracle Single Sign-on running on a different machine.
The BI Publisher is installed with an Oracle application server 10.3.1 (includes a HTTP server). These are the steps I followed:
1) Registered BI publisher as a partner application in the Oracle SSO admin console which generated a single sign-off url.
2) Made the required modifications in the mod_osso.xml config file.
3) On the BI publisher admin page went to the securities tab and opted the SSO security and entered the single sign-off url generated in the previous step.
4) Restarted the Oracle ID mgt infrastructure and the BI pub server.
The BI pub login is not getting redirected to the SSO page.
Please let me know as what is that I am missing. I've been cracking my head with this for quite long - any help will be highly appreciated.

"user589320"
APEX is only using BI Publisher to transform the XML data of your report and the template you provide into PDF, Word or Excel. For this, APEX sends the XML data and the template to BI Publisher, and BI Publisher sends back to completed document. So there's nothing stored in BI Publisher, all templates, report definitions, etc are stored in the APEX schema. This has the advantage that you can reference item values and other information in your print documents, and it also ensures that you don't have to access the database again from within BI Publisher, i.e. you don't need to communicate any authentication information to BI Publisher.
Of course BI Publisher itself also provide the ability to store reports and to store templates. But those are not accessible from APEX through the built-in integration. You can however use the same templates you use for BI Publisher directly on load them into APEX for use there.
Lastly, if you want to use and print reports in both BI Publisher and your APEX applications, you can do that through web services, take a look at Tyler Muth's BLOG for more information on this topic:
http://tylermuth.wordpress.com/2008/03/31/call-bi-publisher-web-services-from-apex/
Regards,
Marc

OTM 6.3 Integration with Oracle EBS 12.1.3

Hi,
OTM 6.3 Integration with Oracle EBS 12.1.3 .
Please suggest me with Oracle MOS DOC ID / steps to achieve this.
Regards,

Hi,
This is a new Cloud community and not focused on EBS. We recommend you to place your question on the MOS community as I am sure they will be able to help you: Oracle Transportation Management (MOSC)
Regards,
Pablo.

Deploying OracleAS Single Sign-On Server Cluster setup with a Proxy Server

I have a question regarding setting up a OracleAS Single Sign-On Server in a cluster mode along with a Apache Proxy Server.
Step1 - I'm planning to install OracleAS Single Sign-On Server on two nodes sso1.oracle.com and sso2.oracle.com in a Cluster. Both the nodes in the cluster accesed via Load balancer i.e sso.oracle.com.
Step2 - Then I'm planning to setup two Apache Servers as Proxy Server i.e apache1.oracle.com and apache2.oracle.com. These two apache servers are accessed via Load balancer i.e apache.oracle.com
The question I have is
1)while setting up OracleAS Single Sign-On cluster I would provide Load balancer host i.e sso.oracle.com as part of the install. So that all the user requests coming to sso1.oracle.com/sso2.oracle.com get redirected back to Load balancer.
2)But as part of the Apache Server proxy setup I am also supposed to redirect from SSO server to apache.oracle.com
But using ssocfg.sh I can only provide either sso.oracle.com or apache.oracle.com NOT BOTH.
In this case what I should
1) avoid redirecting to sso.oracle.com instead redirect only to apache server OR are there any other methods to configure.
I have above setup working fine in DEV environment, where there is only one sso server and one apache proxy server. Problem really comes when I go for setting OSSO server as a cluster in this case I have to redirect to load balancer as well as proxy server?

why not using webcacheclustering between the apache and the 2 sso's?

ATG Integration with Oracle EBS

Anybody worked on ATG integration with Oracle EBS for Pricing, Inventory and Order Management? I would like get more detail on the approach on the integration.

Have you looked into the error log to see whats the error message ?
The sawlog file would be located here - C:\OBIEE\OracleBIData\web\log
Paste your instanceconfig.xml file here, specifically the Auth section
Also elaborate on what are the steps you have followed for Integration so we will be able to help !!

Third Party Application Integration with Oracle EBS Without any middleware

Hi,
Please give suggestions about the Third Party Application Integration with Oracle EBS
Without any middleware. Can we achieve this?
Thank you,
Muhammad Nasir
Edited by: User129 on Feb 4, 2013 3:45 AM

Muhammad,
You may get better response in Oracle EBS forum -
General EBS Discussion
Regards,
Anuj

OBIEE 11.1.1.3.0 integrated with Oracle EBS R12

Hi,
I have Oracle EBS Vision Instance v R12.1 installed on Redhat 5 and wanted to install OBIEE latest version. Can some please point to system architecture diagram as i am conflicted with installation. I do not have complete idea but writing here what i actually know.
Oracle EBS R12 on Linux
OBIEE V 11.X on Linux
Now install prepackeged analystical function on windows machine and using BI tool deploy/use them with Oracle EBS.
Please point me to a note which describes the components and what does it take to make up and running in conjuction with Oracle.
Thanks in advance
Prashant

Please see these docs.
Integrating Oracle Business Intelligence Applications with Oracle E-Business Suite [ID 555254.1]
What documentation do I need to review when installing and configuring a OBI Apps 7.9.6.x environment with EBS? [ID 1221764.1]
Master Note for OBIEE Integration issues with EBS, Siebel, SSO, Portal Server [ID 1248939.1]
Oracle SSO E-Business Suite Applications Integration with Oracle Business Intelligence [ID 553423.1]
Oracle EBS integration with OBIEE [ID 733137.1]
Document for implementing security OBIEE Apps with EBS and Siebel CRM as sources [ID 756851.1]
What Application must be chosen for Responsibility within EBS when integrating with OBIEE [ID 1246464.1]
Also, search Steven Chan's Blog and you should get couple of hits -- http://blogs.oracle.com/stevenChan/
Thanks,
Hussein

Integrating with Oracle EBS using XMLGateway issues

Hi all,
I'm trying to integrating with Oracle EBS using XMLGateway, and I meet some issues. Here are the steps I did.
1) Update DATA_MAP.xgm file and DATA_TEST.dtd file into XMLGateway repository
2) Define transactions in EBS client:
Party Type: Supplier
Transaction Type: Cat
Transaction Subtype: Dog
Transaction Description: test for cat and dog
Standard Code: OAG
External Transaction Direction: IN
External Transaction Type: Cat
External Transaction Subtype: Dog
Queue: APPLSYS.ECX_IN_OAG_Q
3) Define trading partners in EBS client
Operating Unit: Vision Operations
Trading Partener Type: Supplier
Trading Partener name: ****
Trading Partener site: ****
Company Admin email: [email protected]
... other transaction info defined in step 2)
4) Send inbound message using OTA send Inbound Page. It succeed.
a. The return page display status code 1000 with status discription OK.
b. From the transaction monitor, I can see the inbound message was processed successfully.
c. From the database, I can see that this inbound message first arrived in ecx_inqueue table, and then moved to ecx_in_oag_q_table. And last disappeared from the ecx_in_oag_q_table. That means XMLGateway process the inbound message in transaction queue successfully.
5) Send inbound message using SOAPUi. It failed.
a. The return page display status code 200. That means the inbound message has been sent to inbound message queue successfully.
b. From transaction monitor, I cannot see this request record.
c. From the database, I can saw that this inbound message first arrived in wf_ws_jms_in table, then disappeared. It didn't moved to transaction queue which I selected when defined transations, so I guess it wasn't processed by XMLGateway. Using the following SQL, but cannot find error reason.
select * from ecx_inbound_logs where process_id='******************'
select * from apps.ecx_error_msgs where error_id='*****'
I guess the reason is something happend to prevent inbound message to move from inbound message queue to transaction queue. So XMLGateway cannot process this inbound message.
From XMLGateway user guide, I understand that there are three kinds of inbound queues(ECX_INBOUND which OTA uses, WF_WS_JMS_IN which soap over https uses, WF_JMS_IN which JMS uses), does't mention what are the corresponding transaction queues? Can they share the same transaction queue? Also see from this user guide, ecx_in_oag_q (transaction queue) is only for ecx_inbound queue. But when I try to define a transaction in EBS client, it seems that only ecx_in_oag_q can be chosen. I wondered why my second senarios failed when I used the same transation and trading partner. The message already arrived at wf_ws_jms_in and then disappeared. Is that because I selected the wrong transaction queue when defining transactions? But it was really cannot select any other transaction queues there. Or I missed some steps when using SOAP over HTTP/S?
Appreciate you can give me some suggestions. Hope to hear your voice. Thanks in advance.

Hi,
Regarding the integration what type of integration you want.
Can you please elaborate?There are some integration tools releases by Oracle for the integration.
Regards
Pramod

E-Business Suite Integration with Oracle Business Intelligence

Hi,
To integrate E-Business Suite with Oracle Business Intelligence I have done all the configurations as specified in DocId. *552735.1* of Metalink. I have tested the configurations by logging in from EBS and navigating to OBIEE Presentation Services. I'm able to navigate with no errors but not able to view Subject Areas in the Answers link. I'm testing this with 'Administrator' user. When I directly login to Presentation Serivices with the Administrator user I'm able to see the Subject Areas.
Can anyone have idea what is the problem?
Thanks in Advance,

Hi,
Think I spotted the problem - probably specific to OBIA 7.9.5.
There is no "Authorization" initialization block: in previous incarnations (e.g. OBIA 7.9.4 and earlier I guess) there was a FndGetResp intialization block that assigned a value to the OBIEE "GROUP" system variable.
So I did the following and now I'm getting Subject Areas and Answers answers, but Dashboards still not working for me - maybe another issue.
1. Create system variable GROUP, temporarily with initialization block "Authentication"
2. Create initialization block "EBS Responsibility to Group" with query (note I've modified based on new session variable name RESP_ID goes to OLTP_EBS_RESP_ID in 7.9.5):
SELECT RESPONSIBILITY_KEY
FROM FND_RESPONSIBILITY
WHERE RESPONSIBILITY_ID = 'valueof(NQ_SESSION.OLTP_EBS_RESP_ID)'
Set the execution precendence to include EBS Security Context and EBS Single Sign-On Integration
NB: Had to create dummy variable GROUP_TMP for the "OK" button to come up, will replace that with real GROUP in next steps
3. Go back and edit System variable GROUP and change initialization block to EBS Responsibility to Group
4. Go back and edit initialization block EBS Responsibility to Group and remove variable GROUP_TMP
5. Created an OBIEE Group with name = responsibility key e.g. for my "SBA Administrator" responsibility, key = "SBA_ADMIN_KEY", so I created group named "SBA_ADMIN_KEY"
6. Made your new group (e.g. SBA_ADMIN_KEY) a member of the Administrators Group
7. Copy across rpd and restart sa / saw
Still awaiting response from Oracle Support ... so no guarantees this is correct and no guarantees that it won't break something else that Oracle suggests later!
Regards,
Gareth

Oracle single sign-on scenario. pls help.

Hi,
I have following basic Oracle single sign-on setup in place along with integration with Active Directory 2003.
All the users are provisioned in AD, which is then synchronized with OID. The OID users is then manually synchronized to Oracle
E-business suite (FND_USER table).
So, the flow is like this :
AD > OID > Ebiz suite
Problem :
We are now migrating users in AD 2003 to AD 2008 and i am being asked to perform impact analysis on Oracle Single sign-on environment while this AD migration is in process.
Any clues or your inputs on impact that this will create on single sign-on will be much appreciated.
Thanks in advance

Hi Darsh,
1. Oracle Internet Directory (OID) is Oracle LDAP storage solution (more here), Oracle Virtual Directory is Oracle solution that can read identity data (and filter it (mask it) based on policies) from Oracle/non-Oracle databases, Oracle/non-Oracle Directories and files and provide the user profiles as LDAP view (more here), There is nothing called Oracle Active Directory, you must be referring to Microsoft Active Directory.
2. No, Oracle Single Sign On (OSSO) is a feature in iAS (its obsolete), Identity Management is wide umbrella of solutions and concepts.
3. Oracle Access Manager is one component of Oracle Identity and Access Management suite of products.
4. Webgate is Oracle access Manager agent that is installed on a webtier, it intercepts the web requests and collect the credentails, send them to Oracle Access Manager for security evaluation (decide what Authentication is needed, verify collect credentials, etc), webgate then enforce the Access Manager decision.
5. Oracle EBS AccessGate is a java application that has the same use of OAM Webgate (it is OAM agent) but specific to E Business suite, EBS Access Gate is the new solution replacing OSSO agents, OAM is replacing OSSO server component, EBS and OSSO customers can use OAM server with OSSO agents, or with EBS AccessGate.
HTH.
Ghassan

Oracle Single Sign on and Oracle Internet Directory

Hello Gurus,
What is the relationship between Oracle Single Sign on and Oracle Internet Directory.
To my understanding, OID is required to install SSO.
If OID already exist, can we just install SSO and go on integrating it to existing OID.
Great Thanks,
vimal jain.
[email protected]

Hi Tim,
I've been working on this and could reproduce the issue with anonymous binds. A fix will be ready in 4.2.1.
So what I really need is the password used for login to pass to the is_member call.The P101_PASSWORD item does not save state. However, you can access the value during submit processing of the login page, for example in the post authentication function of your authentication scheme. People sometimes put code in there to query the user's groups (e.g. with apex_ldap.member_of2) and save them in an application. This item value can then be used in the authorization schemes.
Regards,
Christian

Can Microsoft active directory integrated with Oracle Applications

Hi,
Can anyone provide me any document on Microsoft Active Directory Integration with Oracle Applications(12.0.6)
Manish

Hi,
It is possible, please refer to the following documents for details.
Note: 376811.1 - Integrating Oracle E-Business Suite Release 12 with Oracle Internet Directory and Oracle Single Sign-On
Note: 415007.1 - Oracle Application Server with Oracle E-Business Suite Release 12 FAQ
Regards,
Hussein

Oracle Single Sign on JSP Database Connection

I am writing a JSP Search Screen that launches off of Oracle Portal (behind SSO). What I'm looking to do is have the JSP connect to the database as that user, and then show the information available to that user (we have this handled by a VPD). I was wondering how I could get access to the single signon RAD in order to connect to the database from within my JSP. Any help would be greatly appreciated.

Hi Darsh,
1. Oracle Internet Directory (OID) is Oracle LDAP storage solution (more here), Oracle Virtual Directory is Oracle solution that can read identity data (and filter it (mask it) based on policies) from Oracle/non-Oracle databases, Oracle/non-Oracle Directories and files and provide the user profiles as LDAP view (more here), There is nothing called Oracle Active Directory, you must be referring to Microsoft Active Directory.
2. No, Oracle Single Sign On (OSSO) is a feature in iAS (its obsolete), Identity Management is wide umbrella of solutions and concepts.
3. Oracle Access Manager is one component of Oracle Identity and Access Management suite of products.
4. Webgate is Oracle access Manager agent that is installed on a webtier, it intercepts the web requests and collect the credentails, send them to Oracle Access Manager for security evaluation (decide what Authentication is needed, verify collect credentials, etc), webgate then enforce the Access Manager decision.
5. Oracle EBS AccessGate is a java application that has the same use of OAM Webgate (it is OAM agent) but specific to E Business suite, EBS Access Gate is the new solution replacing OSSO agents, OAM is replacing OSSO server component, EBS and OSSO customers can use OAM server with OSSO agents, or with EBS AccessGate.
HTH.
Ghassan

Oracle Single Sign-On: Use NTLM inside LAN

hi,
i want to configure oracle single sign-on to use NTLM authentication when accessing a protected resource from the LAN (specific IP-range). when a user is accessing a protected resource from the internet it should still show up the login-page.
how can i achieve that?
regards,
matthias

Hi Darsh,
1. Oracle Internet Directory (OID) is Oracle LDAP storage solution (more here), Oracle Virtual Directory is Oracle solution that can read identity data (and filter it (mask it) based on policies) from Oracle/non-Oracle databases, Oracle/non-Oracle Directories and files and provide the user profiles as LDAP view (more here), There is nothing called Oracle Active Directory, you must be referring to Microsoft Active Directory.
2. No, Oracle Single Sign On (OSSO) is a feature in iAS (its obsolete), Identity Management is wide umbrella of solutions and concepts.
3. Oracle Access Manager is one component of Oracle Identity and Access Management suite of products.
4. Webgate is Oracle access Manager agent that is installed on a webtier, it intercepts the web requests and collect the credentails, send them to Oracle Access Manager for security evaluation (decide what Authentication is needed, verify collect credentials, etc), webgate then enforce the Access Manager decision.
5. Oracle EBS AccessGate is a java application that has the same use of OAM Webgate (it is OAM agent) but specific to E Business suite, EBS Access Gate is the new solution replacing OSSO agents, OAM is replacing OSSO server component, EBS and OSSO customers can use OAM server with OSSO agents, or with EBS AccessGate.
HTH.
Ghassan

Can OBI EE be integrated with Oracle Coherence

Can we have Oracle Coherence as one of the data sources?
Regards,
Vikram R

Hi Srinivas ,
Yes , ECM can be integrated with Oracle EBS (enterprise business suite) and other Oracle Apps as well like Peoplesoft , Siebel etc .
Details can be read from the following link : http://docs.oracle.com/cd/E23943_01/doc.1111/e17953/toc.htm
Thanks
Srinath

Oracle Single Sign on Integration with Oracle EBS r12

Similar Messages

Maybe you are looking for