SIngle Sign On and Enterprise Java Beans

We are using mod_osso to sign on to a JSP application.
The JSP application then needs to invoke methods on EJBs residing in a different OC4J.
How does the JSP application bind to the EJB such that the security credentials of the user who logged in are inherited by the EJB.
Cheers,
Andy.

The best approach is to implement the Java applications as SSO partner applications so that they delegate their authentication to the Login Server, thereby leveraging the same credentials as used to login to the Portal.
The SSO-SDK which is required to implement a partner application is available from technet:
Portal Development Kit
SSO Software Development Kit
Example Java Application Written as an SSO Partner App
null

Similar Messages

The differents between Java Beans and Enterprise Java Beans

Please help me!
What is the differents between JavaBeans and Enterprise Java Beans (EJB) ?
Thank's for your answer

Enterprise Java Beans are special type of java beans.
EJBs invented to be used via remote VMs or remote computer
systems.They must be deployed on server to become accesible for remote
clients.

Single Sign-On and Data Visibility Rights

Hello,
I was wondering whether anyone has any best practices for implementing single sign on and user identification with Excelsius.
More specifically, I need to interrogate user role, and limit certain data visibility based on that role.
For example, a sales rep may only see certain data for their own territories, but the regional and national managers can see more.
With the emphasis in improving enterprise integration with the new version coming up, I'm also wondering if there are any improvements included for this aspect.
Thanks in advance.
Derick

Hi Derick,
I want to make our discussion into 2 parts
1) Sign on
2) Viewing data based on the Heirarchy
1)Before discussing about the Sign on i want to know which connectivity you are using ? Live offcie or QaaWS.
2) We can make the second point possible in two ways One is with providing restriction at universe level
and the other one is through the use of flash variables.
Using flash variables:
The main idea of using flash variables is reading the User ID from BO authentication and based on that we fetch the Heirarchy level of that user. Then we use some excel logic to hide the data from Low level heirarchy(Here we use Dynamic Visibility for components).
I hope this is what you ar looking for....
If so i have more points to acheive such scenario.
Please provide the your BO environment details, such that it will be easy to identify the better best wat to acheve it.
Regards,
AnjaniKumar C.A.

Single Sign-On and session information

I have an Oracle Portal application with many Java Web Applications. I wish to
provide Single Sign-On to this applications. I know how to configure Single
Sign-On and how to get the user login in Java. I want to store session
information such as: User First and Last Name, User Social Security Number. I
want to get this information from the database after authentication, store it
in session and then access this information from all my applications.

Are you familiarized with sys_context function?
Hope this is useful help.
BR,
Marcos

How to implement a single sign on feature using java.

Hi,
I have a question like , How to implement **single sign on** feature in java without using any third party framework or tool like LDAP or any other which is available in the market.
Actually the situation is i have all security information into the table and those information is used for single sign on . If a user logged in from a jsp loging page all the security role should be assigned to that particular user.
We can do this using LDAP but i am not supposed to use the LDAP or any third party tool . I have to write a java class for that .
please suggest me the method , how to implement this in a web application.
Edited by: Rakesh_Singh on Mar 19, 2008 11:55 AM

you could setup a token that specifies a user is authenticated. other applications that u want SSO can check for existance of this token
if it is HTTP - you can save the token as a cookie and downstream apps look for this token
yr code needs to validate that the token/cookie was indeed a valid one and not subject to man-in-the middle attack.

Enterprise Java Beans

Hi,
I am a java programmer. I have worked with applets,
servlets, jdbc, etc., but I have never worked with EJB's
Is there a good tutorial of it? Does it depend on certain
API's? Where can I find the classes? I would like to learn
and to develop some applications with EJB's. I will appreciate a lot if someone give me the 1,2,3... of EJB's.
Thanks in advance

There are suspisiously many tutorials and materials on the Web about EJB.
The principals ones are at Sun's J2EE site:
http://java.sun.com/j2ee/tutorial/doc/J2eeTutorialTOC.html
PetStore Demo
http://java.sun.com/j2ee/download.html#blueprints
JGuru Exercises:
http://developer.java.sun.com/developer/onlineTraining/EJBIntro/exercises.html
Also, look at TheServerSide.com
http://theserverside.com/home/index.jsp
Tutorial on Monson-Haefer "Enterprise Java Bean" book:
http://www.techquestion.net/ejbs/cabinbean1.html
Be careful, however, sometimes it is difficult to repeate
what you have in tutorial.
Good luck,
Jacob Nikom

Using Enterprise Java Beans

Hi Guys,
Ive built a system which uses 8/9 servlets and connects to a postgres database, reads csv files and a few other things, now Ive been asked to implement this using java enterprise beans, how easy/difficult is this? how would I go about it and whats the advantages of using enterprise java beans?
Thanks
Tzaf

Can anyone help?
Thanks
Tzaf

What is an enterprise java bean

Hi,
What is an enterprise java bean. How is it different from normal java means.
Thanks a lot,
Chamal.

Well an EJB is a object components that lives in the server's container's guts, there are 3 kinds of EJB:
* Session Beans: performs bussines operations
* Entity Beans: represents a table from a relational database
* Message Driven Beans: receives and controlls messages.
more information about it can be found at: http://java.sun.com/products/ejb/reference/docs/index.html

Missing Enterprise Java Beans Node

I downloaded the Studio Creator 30 day trial version.
But In the server navigator pane there is no Enterprise Java Beans node listed.
How can I enable the Enterprise Java Beans Node in Studio Creator? Or is it a limited version?
Please reply asap.
Thanks in advance

Hi.
Porduct version information was as follows....
Java Studio Creator(Build 040903).
Does this mean that I need to upgrade my IDE to update 7?
Thanks a lot for the reply. I almost spent half a day trying to enable the Enterprise Java Beans Node using creator options.
And can I deploy an ear file to creator which I have compiled using JDK1.5?
Thanx again.
Look forward to hearsing from u soon,
Kevin

Starting single sign-on and directory service

i am trying to install oracle 9i infrastructure on my clean win2000 box with 2.4 GHz proc and 1GB RAM.
i am getting falilure messages for the following:
infrastructure instance configuration assistant: failed
oracle 9i application server randomize password: failed
single sign on configuration assistant: failed
infrastructure mod-osso configuration assistant: failed
OPMN configuration assistant: failed
log file says:
Configuration failed for IAS
IAS Instance creation failed
Configuration failed for JAZN
JAZN configuration failed: unable to establish a directory context.
Configuration succeeded for IASProperty
Configuration failed for IAS
Configuration failed for JAZN
after which single sign-on and directory service dont start. which means no connectivity :(
can somebody please guide me about how to avoid this failure in installation or how to manually start these after installation.
it would be a great help
ashish

Hi,
we're having exactly the same problem.
Could you tell me what the problem is with the network ?
You say configure it properly but what do you mean ?
It's installed on a Windows 2000 Server machine, it's own DNS.
Thanks,
Yuri Arts

Oracle Single Sign on and Oracle Internet Directory

Hello Gurus,
What is the relationship between Oracle Single Sign on and Oracle Internet Directory.
To my understanding, OID is required to install SSO.
If OID already exist, can we just install SSO and go on integrating it to existing OID.
Great Thanks,
vimal jain.
[email protected]

Hi Tim,
I've been working on this and could reproduce the issue with anonymous binds. A fix will be ready in 4.2.1.
So what I really need is the password used for login to pass to the is_member call.The P101_PASSWORD item does not save state. However, you can access the value during submit processing of the login page, for example in the post authentication function of your authentication scheme. People sometimes put code in there to query the user's groups (e.g. with apex_ldap.member_of2) and save them in an application. This item value can then be used in the authorization schemes.
Regards,
Christian

Single Sign on and Protect URL step

Hi,
I have successfully installed Oracle Internet Directory, Identity Server, Web Pass, Policy manager, Access Server and WebGate (attached to Oracle HTTP Server from Oracle Management Infrastructure).
My questions are:
- How do I protect URL so the user will need to login to access certain URL?
- How do I enable single sign on and test it?
- What are the general steps involve to enable URL protection (so if the url is protected it will prompt for username and password) and single sign on using Oracle Internet Directory?
Kindly help me if anyone know a solution or can point me to the right documentation. I have tried to read Oracle Access Manager - Access Administration Guide, but keep getting confused.
Thanks.
Regards,
Alfonso

Hi,
You can follow Oracle Access Manager Integration Guide (10.1.4.0.1) B25347-01, chapter 4, to achieve this. This document will answer most of your questions.
Regards,

Adding new enterprise java beans in STUDIO CREATOR

I downloaded the 30 days trial version of Studio creator.
In my server navigator pane there is no Enterprise Java Beans node. How can I enable this node

Hi,
Can we consider this a duplicate thread of :
http://swforum.sun.com/jive/thread.jspa?threadID=53446&tstart=0
Thanks,
RK

Difference between Federated single sign on and just Single sign on

Can anyone please give a clear definition of what is
1. Federated Single sign on?
2. Just Single Sign on ?
As a security expert if you were to Architect security what will you suggest ?
Lets take an example Landscape
NW1(ABAP + JAVA)- system, NW-2(ABAP+JAVA) system and EP( java only), LDAP
I am having a hard time convincing the customer to have both CONSUMER AND PRODUCER PORTAL for Federated single sign on? is this a bad idea. Customer says just give me SSO(with just one portal acting as CONSUMER/PRODUCER).
initial GOLIVE user load will be 700+ users.
Edited by: Franklin Jayasim on Jul 16, 2010 7:52 PM
Edited by: Franklin Jayasim on Jul 16, 2010 7:53 PM
Edited by: Franklin Jayasim on Jul 16, 2010 7:57 PM
Edited by: Franklin Jayasim on Jul 17, 2010 12:17 AM

Hi Denny Liao
The project is going to have BI(NW) and ECC/SRM/HR(NW) and sepparate portal ( EP - Java only )
I thought that normal SSO will help in the intranetwork, what happens if the employee(user) needs to work from home.
What about the external vendors suppliers etc...?

Single Sign-on and HTTP Server not started

I have installed oracle9iAS on SuSE Linux Enterprise Server 8 (SLES 8) which is certified by Oracle to run oracle9iAS. Everything was working propely after installation but when I restarted the server, the listener, the iasdb instance, and the EM started properly but when I went to http://servername:1810 and clicked on start all i got them all started but the HTTP Server and the Single Sign-on. When I tried to start the HTTP Server individually i got the following error:
oracle.sysman.emSDK.util.jdk.EMException: The opmn request has failed. From opmn: HTTP/1.1 204 No Content Content-Length: 0 Content-Type: text/html Response: 0 of 1 processes started. Check opmn log files such as ipm.log and ons.log for detailed.
I checked the log and its showing the following:
03/10/25 16:44:23 Connection 0,192.168.10.11,6200 message missing 'Content-Lengt
h'
GET /dms0/Spy?recurse=all&format=xml&operation=get&value=false&units=true&descri
ption=true&name=%2F HTTP/1.1
Host: linux2.future:6200
Connection: Keep-Alive, TE
TE: trailers, deflate, gzip, compress
User-Agent: RPT-HTTPClient/0.3-3
Cache-Control: no-cache
Pragma: no-cache
Accept-Encoding: deflate, gzip, x-gzip, compress, x-compress
I tried to start it from command line with the command
$dcmctl start -ct ohs
and it returned ADMN-906025
Anyone can help me solving this problem??

This error Can be caused by a syntax error in your httpd.conf file, check it / correct it try reloading OHS.
Ensure that emctl is not running when you run any dcmctl commands! If you have already run any dcmctl commands with emctl running that can cause your problem - if so to fix it solution is really to re-install.

SIngle Sign On and Enterprise Java Beans

Similar Messages

Maybe you are looking for