Retrieve username and password from Portal in external appl.

Hi All,
I have deployed an web application containing jsp into OC4J. I have registered this application as an external application in the portal. I need to capture the username and password required for the external application in the jsp (deployed as web application) after the external application has been authenticated by SSO server.
Can i get it from the request or is ther any other way to capture the user credentials in the jsp of the external application?
Thanks & Regards,
SY

Actually if the JSP is registered as an external Application then it is the JSP itself that is doing the
authentication not the SSO server. The credentials are sent to the External Application either as HTTP
header entries or on the URL depending on the type of method chosen to submit the request. In an external
application the SSO server is effectively building the URL that would have come from the Login Page of the
application.
So in this case, if the application is being called as an external application, then they already have the
username/password. Else it would not be an external application.

Similar Messages

Extracting username and password from security header

Hey all,
I'm writing a BPEL process that invokes two secured web services. One of them authenticates using Username Token and the other has a authenticate method in which the username and password are supplied as Strings. I have successfully propagated the credentials from the BPEL process to the web service using Username Token by doing the following:
1) I secured my BPEL process
2) I imported oasis-200401-wss-wssecurity-secext-1.0.xsd and from it created a variable of type Security
3) I added the security variable to the Header Variables for the BPEL process input
4) I added the security variable to the Input Header Variables for the web service's invoke operation
This worked fine. However, I need to be able to extract out the username and password and supply them as Strings to the authenticate method of the other web service. How can this be done? If it can't, what are some alternatives?
Environment:
JDeveloper 11.1.1.6.0
Thanks,
Bill

Hi Sri,
If I understand your steps correctly, I think the problem I'm having rests with the second step. I don't know how to get a hold of the username and password to assign to the local variables you mention. The BPEL process itself uses Username Token for authentication. These credentials need to be passed to the web services invoked within the BPEL process. If I assign the security header variable directly to the string output for the BPEL process, the string returned will be the complete XML security header, which includes the username and password. However, the security header variable itself doesn't expose the username and password directly. In other words, I can't expand the security header variable node in the dialog for editing the Assign operation and get to the username and password. I think one solution is to parse out the username and password from the complete XML security header using string operations (substring, index-within-string, etc). Also, regarding step 4, I'm not sure if passing the credentials in the header will work for this web service. I think the web service is expecting the credentials as parameters to its authenticate method.
Thanks,
Bill

Webdynpro application taking MDM username and password from LDAP

Hi All,
I am working on EP-MDM integration.
EP-LDAP , MDM-LDAP and EP-MDM have been integrated.
The requirement is :
When we run a webdynpro application from EP , it should take the user id and password of EP user who is currently logged in.(which is actually LDAP user and also exists for MDM) without hard coding it.
The application will work according to the roles guaranteed to the user in MDM for eg: the user will be able to write into MDM only if he has read/write permissions in MDM.
Please tell how the application will fetch the username and password from the EP details.
Regards
Shilpa

Hi,
You need to set a trusted connection between the EP and MDM System.
And use the trusted connection JAVA API in the Web Dynpro to make a connection to MDM Repository. Trusted connection JAVA API will ask you only the username and not the password.
Regards,
Amol

HT204085 removing icloud username and password from old iphone

I sold a previously owned iPhone and the person who purchased it cannot create an iCloud account on it. He said my iCloud account is still attached to the iPhone. Is there a way to remove any iCloud username and password from the device?

Read here: http://support.apple.com/kb/TS4515.

How to know username and password from existing PPPOE broadband connection?

Hi All,
I am using windows server 2008 R2, and now I've used PPPOE broadband connection to connect the internet. what I am asking is how to know the username and password from my PPPOE setting, I have the requirement to create same setting in the difference machine.
thanks.

You can get this info from your ISP. This one may help.
Create a Broadband connection using PPPoE in Windows Vista and Windows Server 2008
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Loading the username and password from database when login to xMII

Hi
can you explain briefly about how to configure the netweaver for loading username and password from database when the user login to xMII via netweaver platform?
In xMII 11.5 we are configuring xMII itself? but in xMII 12.0 configuring by netweaver platform. if anyone know please explain step by step

I am sending you some java code, which you can use in JSP.
import java.sql.*;
public class connectOracle{
public static void main(String[] args) {
System.out.println("Getting Column Names Example!");
Connection con = null;
String url = "jdbc:oracle:thin:@172.16.0.21:1521:orcl";
String driver = "oracle.jdbc.driver.OracleDriver";
String user = "scott";
String pass = "tiger";
try{
Class.forName(driver);
con = DriverManager.getConnection(url, user, pass);
catch (SQLException s){
System.out.println("SQL statement is not executed!");
catch (Exception e){
e.printStackTrace();
}

Forgot username and password from the email iCloud chozhe not know forgot. purchase the product, all documents have. What to do?

forgot username and password from the email iCloud chozhe not know forgot. purchase the product, all documents have. What to do?

If you don't know your ID, you can try to find it as explained here: http://support.apple.com/kb/HT5625. If you don’t know your password you can reset the password as explained here: http://support.apple.com/kb/PH2617.

Im trying to listen to a book and it keeps telling me I need to enter my audible account username and password. I used my apple id and it is not working anyone know what to do?

Im trying to listen to a book we downloaded from amazon. When we click on it it says we need to enter out audible username and password. I used my apple id username and password and it says it is not correct. I reset this and used it again and it still does not work. Any ideas?

Launch iTunes. From the menu bar click Store / View My Account then click Edit Payment Information.
Make sure the Security Code for you credit card is available and the expiration date is correct, then click Done.

How to connect an apple tv to an enterprise network with a username and a password? I need to use it over my university's wifi. theres no option to enter username and password. how to connect the apple tv to such enterprise network?

How to connect an apple tv to an enterprise network with a username and a password?
I need to use it over my university's wifi. theres no option to enter username and password. how to connect the apple tv to such enterprise network?

Contact the University's IT dept, they may be able to set something up on the network to allow the ATV to connect without the need for a user name/password.

How to access to SSO username and password from JPDK

Hello
Does anybody know how to access, from Java PDK, to SSO username
and password of user, currently connected to portal.
Thank's,
Tomaz Podbersic

The portal user's password is one way hash algorithm (MD5) that
cannot be reversed.
What you'll have to do is setup a "External Application" and
save an alternate username/password profile in that area. It
requires the user to first enter that data (but only 1 time) the
first time into that application.
===========================================
<HELP NOTE>
If anyone knows of an API to populate those tables when seeding
or creating the user names to also seed or create the "external
applications" user /pass this would be helpful.
============================================
JSP java code:
====================
PortletRenderRequest portletRequest = (PortletRenderRequest)
request.getAttribute (HttpProvider.PORTLET_RENDER_REQUEST);
ProviderUser myUser=(ProviderUser) portletRequest.getUser();
=====================
From this object instance you can get the user's name, and other
Portal session info. NOT password.
The External Application username & password is a bit more
tricky to get.
see:
SQL Login Problems

Obtaining a Subjects username and password from a servlet

Ok probably an easy one for people out there. I don't even know if it is
possible.
I have a servlet that has BASIC authentication going on (lets say it's using
WebLogic 7.0 default security realm). From the servlet I need to explicitly
obtain the user's username AND password. I have no problem retrieving the
principal it's the password I can't get a hold of. I've tried all sorts of
things like:
javax.security.auth.Subject subject =
weblogic.security.Security.getCurrentSubject(); and then trying to get the
private credentials. No luck though.
Any ideas? Is it possible?
Mich

Thanks for the response Neil.
I need the password because my servlet is accessing a secure Web service.
When connecting to the Web service I need to provide the username and
password of the user (these are passed in String format) and I don't want to
have the user provide username and password again when accessing the
external Web service. So really I need to access the WLS security realm
(where my servlet is executing) to obtain the current user's username and
password. Will the default credential mapper in WLS give me the username
and password in text format...from the limited documentation I have read it
doesn't appear to. Is this correct?
Mich
"Neil Smithline" <[email protected]> wrote in message
news:[email protected]..
The password is not stored in the Subject. We do this to reduce the
risk of the password being snooped from WLS's memory. If you wish you
could write a LoginModule that puts the password in the private
credentials and then creates an authentication provider that uses that
LoginModule and make it part of the current realm.
In general there is no way to get the password from within WLS. The
passwords are stored in a salted one-way hashed format that is not
reverse decryptable except via exhaustive search.
Why do you need the password? If it is for a remote access can you use
the credential mapper?
- Neil
Michel Crichton wrote:
Ok probably an easy one for people out there. I don't even know if it
is
possible.
I have a servlet that has BASIC authentication going on (lets say it'susing
WebLogic 7.0 default security realm). From the servlet I need toexplicitly
obtain the user's username AND password. I have no problem retrievingthe
principal it's the password I can't get a hold of. I've tried all sortsof
things like:
javax.security.auth.Subject subject =
weblogic.security.Security.getCurrentSubject(); and then trying to getthe
private credentials. No luck though.
Any ideas? Is it possible?
Mich

How do I retrieve bookmarks and passwords from a Windows backup, after OS re-install?I have a full Windows backup of my machine, pre re-installl

I had to reinstall Vista 7 OS. I have a full Windows backup of my machine, prior to the re-installation. How do I retrieve the bookmarks and passwords from the backup? I understand they're stored in various files a ".default" folder in C:\users\username\appdata\roaming\mozilla\firefox\profiles. When I try restoring the folder, the files get skipped... When I try browsing for the individual files, I don't see them!

Many thanks for your responses... After a little scouting on the web, I have found THE solution... This is all due to the way Windows 7 Backup works, and will NOT let restore apps...
("File restore in Windows7 is not designed to restore back applications. This is because the application state is spread across potentially multiple folders, files & registry. Windows7 file backup is not aware of where all the state is spread to be able to restore the entire application accurately as such information is internal to the application. Restoring application partially might corrupt the application and render the application unusable. So we do not allow restoring applications from file backup.
In case files under C:\Program Files etc. are chosen for restoring, we block restoring files from backup to such locations as it might cause the applications to not function.'')
What one has to do when restoring is to NOT attempt to restore to the original location, but to select the radio button which allows you to type a path where you want the files restored and type in the path of the original location!!! Then select copy and replace...A little quirky (and tedious), but it works!

Using NT username and password with Portal??

I want to have a pulling mechanism between the Portal application and the component that holds the NT username and password. If I were to log onto my NT box with username:XXX password: YYY and bring up the Portal application.. I wouldn't have to go through the Portal login process because the Portal application already pulled my username & password. Any thoughts?

Oracle9iAS Portal Knowledge Exchange has a community contribution that describes how to get the portal to authenticate users against their NT credentials, and subsequently, how to facilitate the transparent login of NT users to the Portal.
This contribution is from Damian Edwards and can be found in his community folder (labelled "DAEDW1"). Damian is one of the top rated contributors and his article on NT authentication with portal is one of the top rated community items. So you should be able to find links to his folder from the Knowledge Exchange portlets for "top rated community items" and "top rated community contributors".
To access this article and other contributions from the portal developer community, you must be a subscriber to Oracle9iAS Portal Developer Services (subscription is free!). To sign up, just go to http://portalcenter.oracle.com and follow the directions on how to subscribe to the Oracle9iAS Portal Developer Services.
James

Get DB Username and password from current connection

Hi folks,
I'm presuming this is something absurdly simple, i therefore offer my apologies in advance. my requirement is quite different from the very famous dynamic JDBC credentials example.
I'm using Struts on a 10.1.2 implementation. We have numerous Oracle reports that we wish to call from Jdev (through a report server call). To provide the credentials to the Report server I need to provide the DB connection's username, password and SID. This I intend to do in a helper class in my web module.
Is there a plain vanilla simple way of getting this done. I know "context.getApplicationModule().getTransaction().getConnectionMetadata().getUserName()" gives me the Database Username- just like that. Is there a similar way to obtain the password and SID as well. While getTransaction().getConnectionMetadata().getJdbcURL is also quite useful, how "for the life of me" do i get the password of the current DB connection (assuming I have an application module that is already connected). I basically wish to directly use connections from the application module directly without the need to manually specify/hard-code these credentials in my code.
I've searched the forums and haven't been able to get the answer I was looking for (that or I;m searching in the wrong areas). Any help would be GREATLY appreciated.
Cheers

Hey Timo,
thanks for that. I still have a couple of doubts.
One the nature of the application is slightly different. we use independent usernames and passwords which are stored in the DB (different from DB username and password). The request(for the report-server call) comes only after the user is authenticated. Like you rightly said it's not a good idea to store the password and I'm pretty sure that option is completely ruled out.
My questions is, given that the user already has an application module at hand which would mean he has a valid connection to "a" DB- (once again we have multiple DB scenario), I merely wish to use the information from the Connection that the application module is using to issue the request to the report server call. I take it the call to oracle reports server wouldn't accept a connect string, you necessarily have to provide the DB username/password and SID.
My question now, is there anyway to obtain the password(or merely point my report server to this without requiring to store it) from the application module connection.
I hope my query is clear, please let me know if what i'm saying needs to be clarified or doesn't make sense.

Trying to pass Login username and password from a non-Oracle Form

I have a form that I am trying to use to pass a login username and password to an Oracle form. The problem is I know Oracle 10g web reports can take login parameters in a URL, but I can't seem to figure out how to encode/hide it and have Oracle read it. I want to be able to hide the username and password (obviously for security) and I also want to be able to pass special characters... does anyone have suggestions? It seems even in Oracle forms there are some issues passing login info because I have built in parameter forms... I have given myself quite a headache either way! We are trying to upgrade from an old, old version of forms and reports and are trying to use as much orginal code as possible. It all works if I pass plain text user name and password... any help would be sooooo appreciated. By the way on the Oracle side I am still pretty much an infant developer... please talk slow and use simple words... ;-p
Thanks again for any help!
Va

...asking me to enter username and password on a non-secured website, or else thy will destroy my account. Is it legit ?
It is definitely a scam. Delete it immediately.
For more information, see this document:
Identifying fraudulent "phishing" email

Retrieve username and password from Portal in external appl.

Similar Messages

Maybe you are looking for