Single sign on for multiple organization with one base application (multiple InssuerNameregistry)

1.
I am going to host this as a service and dont want to add IssuerNameRegistry in
web.config every time whenever i am adding new organization. I Need to pull the details from DB and set it dynamically (token, url etc). I tried to do that based on the return URL . But this fails because FederationConfiguration can be only updated in Application_Start
Event. I cant do that because i cant access my HTTPContext to know the return url in my App_Start.So
i kept a separate Config file and had all my authorities configured for all Organizations in it. But our client raising a question on security and the performance. Is it advisable to keep the sensitive data in XML for all the organizations and also we are
concerned about performance. if the return token go and read all the keys to validate against it’s token, will the system be Slow
Please advise me with some sample code to achieve this..
2. I tried to implement ValidatingIssuerNameRegistry but unable
to success since it is talking about updating the tenent id based on the Metadata.xml.
All i have is the following info for all the organizations
<authority name="http://test123.login.edu/adfs/services/trust">
<keys>            <add thumbprint="{Thumbprit}" />
          </keys>
          <validIssuers>
            <add name="http://test/adfs/services/trust" />
          </validIssuers>
        </authority>

Hello,
For issues regarding ASP.NET, I suggest you post it to:
http://forums.asp.net
There are asp.net experts who will help you better.
Thanks for your understanding.
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Similar Messages

If i sign up for itunes match with one apple id can i get the other apple id songs

if i sign up for itunes match with one apple id can i get the other apple id songs

I'm assuming you mean can you access the purchased songs from another apple id. No you cannot. You will need to download these on another computer and then transfer the hard files into your itunes library that you are using icloud with and let icloud match them.
You cannot access two different id's from one match account. Also, if you sign out of the match account that you are signed into to another to download purchases you will not be able to sign back into your match account for three months. So do not do this either. Just use a friends computer or another way.

How to do single sign on for multiple webservices in flex application

Hi Experts,
I have created a flex application and using few webservices in that application. When I run the application its asking logon details for each and every webservice I used. However I want to do single sign On without providing logon details for each and every webservice.Please suggest me.
Thanks and advance.

Hi,
if yout projects are deployed in their own Java EE context root then you have multiple applications, though logically you count them as one. Use OSSO or Oracle SSO (where OSSO should be fine since all deployments share the same instance)
Frank

Use single sign on for multiple portal domains

Is it possible for a user to sign on once to a domain, and then be able to access other domains. What I'm trying to do is have one user registration page/login page, but use different portal server domains to present different sites, while at the same time having a type of single sign on, once a user has entered his credentials. Thus my registration process will create a new ldap user in an external directory, and i can then just point all the different domains to that External Ldap directory.

I wouldn't recommend this because it would affect performance plus there are potential other issues like conflict that you would run into ..
Everytime a user logs into a new session is created for him and this means a user might have multiple sessions on the server. The cookie that is also set is dependent on per portal domain so it might not work ..
An alternative approach might be to have multiple roles and then customize the role for different views. You can modify the membership code in such a way that based on certain criteria you can assign him to a particular role, equivalent to your domain. However the problem could be if you want to provide delegated admin, currently the delegated admin is only at a domain level.

Implementing single sign on across multiple web apps

Hi
I was wondering if somebody could help me. I need to implement single sign on
for multiple web apps deployed in separate WARs in a single EAR file. I need
to authenticate against an LDAP server and ensure that the user only has to sign
on once per user session even if the user navigates between web apps. The weblogic
docs only seem to go so far, i.e. "Single sign on works if each web app uses the
same cookie" etc. So I see that, apart from buying WebLogic Enterprise Security
there are only two ways of doing this:
1. Implement single sign on.
2. Create my own security realm with my own authenticator implementations.
So my questions are:
1. We don't want to effect the normal weblogic user/passwords used to access the
WLS console but need to have single sign on. Should we implement single sign on
(option 1,above) or create our own realm?
2. Can somebody point me to somewhere on the web/in the the WLS documentation
that shows me how to implement single sign on using session cookies?
TIA
Mik

"Mik Quinlan" <[email protected]> wrote in message
news:[email protected]..
>
Hi
I was wondering if somebody could help me. I need to implement singlesign on
for multiple web apps deployed in separate WARs in a single EAR file. Ineed
to authenticate against an LDAP server and ensure that the user only hasto sign
on once per user session even if the user navigates between web apps. Theweblogic
docs only seem to go so far, i.e. "Single sign on works if each web appuses the
same cookie" etc. So I see that, apart from buying WebLogic EnterpriseSecurity
there are only two ways of doing this:
1. Implement single sign on.
2. Create my own security realm with my own authenticator implementations.
So my questions are:
1. We don't want to effect the normal weblogic user/passwords used toaccess the
WLS console but need to have single sign on. Should we implement singlesign on
(option 1,above) or create our own realm?
2. Can somebody point me to somewhere on the web/in the the WLSdocumentation
that shows me how to implement single sign on using session cookies?
http://e-docs.bea.com/wls/docs81/security/thin_client.html#1039551
That also has a pointer to:
For more information, see session-descriptor in Assembling and Configuring
Web Applications.

Single ERS Invoice for multiple POs with different GS and same IP

Dear All,
I have a Requirement as per the below scenario:
We need to have single invoice created using ERS (MRRL) functionality in the below scenario:
Two POs created with different Partner function GS (goods supplier) and same IP (Invoice party partner function).
Ex:
GS IP PO GR ERS
vendor1 10001 4500001 500001 Yes ( GR-IV-Yes, GR done- Yes, same payment terms - 001)
vendor2 10001 4500002 500002 Yes ( GR-IV-Yes, GR done- Yes, same payment terms - 001)
When I run ERS for last 1 week (GR) and select the option (Doc selection – per IP or other criteria like GRs posted in last one week) , system should create 1 invoice document. Standard SAP posts 2 documents for each GS.
I have tried using 2 user exits for MRRL, but none of them work for this functionality.
Thanks,

Hi,
Go for MIRO without MRRL.
Instead ERS, you can post single Invoice(MIRO) for multiple POs for one vendor.
OR
Check with Technical consultant and go for development to have single ERS output for multiple ERS invoice documents for single vendor.
Regards,
Biju K

Can we use single DB Adapter for multiple tables

Hi,
I have 3 tables. ONE is the Master table and other 2 tables having Primary and foreign key relationships with the Master Table.
Data is enter in the Tables 2 & 3 (based on Master Table Primary key)
I have to use a DB Adapter in BPEL Process which will be in Transaction (what type of Transaction is Best in such a Scenario).
- How do i implement it in BPEL.
- Can i use a Single DB Adapter for Multiple Tables ? (*Views* should not be created for tables 1, 2 & 3),
as we want to avoid using multiple DB Adapters, as in future Tables may increase or decrease...
- while in Transaction if Table 2 fails in Inserting / Updating, it should roll back on error and also if Table 3 fails in Inserting / Updating, it should roll back table 2 and Table 3.
- how access to concurrent users is maintained / managed in such a scenarios.
But everything should be done using Single DB Adapter without creating a separate view.
Is this Possible in BPEL..
If not, How do we design, Implementation such a BPEL Process in Transaction with a best in Performance (both BPEL Process & DB Resources)
thanks in advance
thanks & regards,
anvv sharma

Hi,
Thanks for your quick response.
I have few quires.
If we use PL/SQL, how do we implement transaction and Exception Handling appropriately based on the Error / Exception in BPEL.
If the Table 2 or Table 3 gives out Error / Exception, i have to handle it separately and intimate accordingly.
Suppose, if Table 2 got Error / Exception - Error Handling would be 'Roll back due to error in Table2'
Thanks & regads,

Single Sign on for 2 Web Applications deployed on Web Logic Server

We want to implement single sign on for our application.
We want to deploy 2 applications(JSF/ADF) on web logic server say
webapp1 and webapp2.
If user already logged into webapp1 with valid userid and password and
then he access the link for webapp2 he should not be asked to provide
the credential details userid and password.
How we can implement this
1. If user credentials are maintained/authenticated against LDAP
2. If user maintained/authenticated are from database

you are in the wrong forum. This one is related to Oracle forms. Try the ADF-forum instead.

Single idoc generation for multiple sales orders

Hi,
Pls let me know how do we generate single idoc for multiple sales orders.
Its not collecting idoc. As we know we can generate an idoc for one sales order correspondingly
my requirement is to generate single idoc number for multiple sales orders.
Do we need to write a program.

Amar,
To understand take HRMD_A04 as example. Root segment has Maximum 9999999999 defined.
Segm.type E1PLOGI
Minimum number 1
Maximum number 9999999999
Parent segment
Hier.level 2
This means that this IDOC types has capability to hold multiple HR Master data objects. PFAL program creates this IDOC and it has facility to mention the Objects per process, check selection screen.
I checked for INVOICE01/02 its not possible there. Hope this clarifies.

Single Transfer Order for Multiple Handling Units

I have been researchig the ability to create a single transfer order for multiple handling units. My assumptions are if it can be done that:
1) A transfer order can have a single source, so if the source document for the handling unit (delivery) is different, that means different transfer order
2) A TO can have multiple materials (line items) with different destination bins and quantities per bin
I looked at the configuration for TO Split, but it's not clear that this will handle my requirement.
I also saw this http://aq33.com/material-management/Articles-005798.html and it also says that my requirement can't be meant. I'm just checking before I tell my customer this cannot be done.

Yes you are right, if Source document is different, you need to go with different TO.
But you can choose the Handling unit split, while creating a TO itself. i.e., You can quantify the goods for each handling unit.
Edited by: Ganesh M on Feb 29, 2012 6:20 AM

Single Supplimentary Invoice for Multiple Invoices

Hi
We are having Standardmanufacturing sales Process
Ex: We did the sales of 1000 quantity of goods over the period of time for Price 100 Rs/ and we had created invoices also in the system .After 3 months with the customer on mutual undersating we have decided to hike the price 110 Rs on excisting sales, Now i want to create Single Supplimentary invoice for multiple Invoices for the hiked amount 10,000 Rs( 1000 *10=10,000) along with Excise duties.
Please help me out to map this senario in sap
Thanks
Mujubur
09967919351
Edited by: mujubur shaik on Nov 9, 2009 8:06 AM

Dear Mujubur,
It is generic feature of a business that price is changed for various reasons. So excise accounting is adjusted corresponding it.
What you do, please create a debit memo request which is a sale order type document by VA01 with reference of all commercial inovices against which you want to create the single supplementory invoice. Then create a debit memo which is a bimming document by VF01 with reference of that debit memo reuest and do the release to accounting.
Then part A/C will be debited and all other corresponding accounts with Excise provision A/C will be creadited. Now create a billing type as proforma invoice (Bill category U) in configuration and mainatin the copy control from debit memo document type.
It is better to do the configuration first. Then create the proforma invoice with reference of that debit memo. It will be like a image document of the debit memo. Then create excise invoice by J1IIN with refernce of that proforma invoice with different number series if you want tom maintain. Then excise account will take place - Ex provision Dr , ED payable Cr. That Excise document is your desired supplementory excise invoice. It will also come in the scope of excise utilisation in J2IUN. The proforma invoice is to be created other wise excise document with transaction type DLFC will not vecreated as it creates only from proforma inovice , not from any other type of billing document.
Don't go for Excise JV. Apparemntly it is seemed that will be easier but your accounting will be wrong and there will be no track of data which will lead a problem for long run.
Please do it. If more help required then inform. I have implemedted the same process.
Hope this will serve your purpose.
Regards
Indranil

How to use single sign-on for BCC and Experience Manager

Does anyone have experience in implementing single-sign-on for BCC and Endeca Experience manager for business users.

With the older versions of Endeca commerce stack there is no OOTB support for this. However with Oracle Commerce 11, SSO with BCC and Experience Manager are out of the box. Oracle Commerce 11 is released today.

Can we have a single inbound delivery for multiple po???

Hi
can we have a single inbound delivery for multiple po??? what are the steps to do it?
how to do spro settings??
please help me out.
regards
Arya

Yes you can have and for that you don't need any config.
just go to VL31N and from header hit the purchase order button and either enter the PO numbers or let system pulls the PO based on the selection adn than select all the POs adn hit adopt selected button and save.
this will create one inbound delivery

Apps for different clients with one creative cloud license

Can I publish apps for different clients with one single edition license on creative cloud?

Well, "should" is about as good as it gets, no one is going to enforce that, and it's certainly making me think very very hard about whether to bother with a pro licence again in August!
And yes I'm very much aware of the few advantages of the Pro Licence, I do need to see some much bigger differentiators to justify the extra cost though!
Just putting cards on the table :-)
Alistair

Using the Portal Single Sign-On for java applet clients

Hi
We have a task to build a java applet working within a portlet and comunicating to some session EJB(wrapped BC4J) running on the OC4J. The applet is presumably connecting to server via RMI. This connection should be restricted to some groups of portal users.
When a user is entering the applet he is supposed to be already logged into the Portal.
There is a lot of information on building custom secure portlets using only a pure HTML(same as JSP) client whith the help of the Portal Single Sign-On.
But, is it possible to use the Single Sign-On for establishing a secure RMI connection from applet to OC4J without entering a password in the applet once more?
Yuriy

Perhaps you can write a small JSP page or PLSQL
web procedure that will grab user name from
the SSO Server (via SSOSDK/mod_osso)
and invoke the applet with encrypted user name.
The applet will receive the encrypted username
and decrypt it to get the clear user name.
This help to get Single Sign-On.
To make sure that environment is secure, encrypted
user name parameter should have random salt,
user name, and time stamp to prevent replay attack.
Applet must make sure that the encrypted users name
time stamp set by the JSP/PLSQL page has value
within a reasonable time limit like 5 minutes

Single sign on for multiple organization with one base application (multiple InssuerNameregistry)

Similar Messages

Maybe you are looking for