Sso and sso2 functionlity test

Hello All,
I have one issue with sso and sso2 functionlity test.
How can be sure about sso and sso2 is working fine for any system.
Could you provide some test to insure sso and sso2 functionlity
Thanks in advance
Atul jain

Hi Atul,
SNC is a technology on which sso2 & sso is based.For configuring SNC follow the following link:
http://help.sap.com/saphelp_nw04/helpdata/en/c3/d2281db19ec347a2365fba6ab3b22b/content.htm
If one wants to enable sso with logon tickets sso2 should be used.Plz go through the following link for SSO2.
https://help.sap.com/saphelp_nw04/helpdata/en/14/252f4069702d22e10000000a1550b0/frameset.htm
For SSO to work,one needs to ensure that all the SNC parameters are maintained correctly in the Instance profile.
Regards,
Abhishek
If you have any queries Plz revert back.

Similar Messages

ADFS SSO and SharePoint 2013 on-premise Hybrid outbound search results from SharePoint Online - does it work?

Hi,
I want to setup an outpund hybrid search for SharePoint 2013 on-premise to SharePoint Online.
But I'm not shure if this works with ADFS SSO.
Has somebody experience with this setup?
Here's my guide which I'm going to use for this installation:
Introduction
In this post I'll show you how to get search results from your SharePoint Online in your SharePoint 2013 on-premise search center.
Requirements
User synchronisation ActiveDirectory to Office 365 with DirSync
DirSync password sync or ADFS SSO
SharePoint Online
SharePoint 2013 on-premise
Enterprise Search service
SharePoint Online Management Shell
Instructions
All configuration will be done either in the Search Administration of the Central Administration or in the PowerShell console of your on-premise SharePoint 2013 server.
Set up Sever to Server Trust
Export certificates
To create a server to server trust we need two certificates.
[certificate name].pfx: In order to replace the STS certificate, the certificate is needed in Personal Information Exchange (PFX) format including the private key.
[certificate name].cer: In order to set up a trust with Office 365 and Windows Azure ACS, the certificate is needed in CER Base64 format.
First launch the Internet Information Services (IIS) Manager
Select your SharePoint web server and double-click Server Certificates
In the Actions pane, click Create Self-Signed Certificate
Enter a name for the certificate and save it with OK
To export the new certificate in the Pfx format select it and click Export in the Actions pane
Fill the fields and click OK Export to: C:\[certificate
name].pfx Password: [password]
Also we need to export the certificate in the CER Base64 format. For that purpose make a right-click on the certificate select it and click on View...
Click the Details tab and then click Copy to File
On the Welcome to the Certificate Export Wizard page, click Next
On the Export Private Key page, click Next
On the Export File Format page, click Base-64 encoded X.509 (.CER), and then click Next.
As file name enter C:\[certificate
name].cer and then click Next
Finish the export
Import the new STS (SharePoint Token Service) certificate
Let's update the certificate on the STS. Configure and run the PowerShell script below on your SharePoint server.
if(-not (Get-PSSnapin "Microsoft.SharePoint.PowerShell" -ErrorAction SilentlyContinue)){Add-PSSnapin "Microsoft.SharePoint.PowerShell"}
# set the cerficates paths and password
$PfxCertPath = "c:\[certificate name].pfx"
$PfxCertPassword = "[password]"
$X64CertPath = "c:\[certificate name].cer"
# get the encrypted pfx certificate object
$PfxCert = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2 $PfxCertPath, $PfxCertPassword, 20
# import it
Set-SPSecurityTokenServiceConfig -ImportSigningCertificate $PfxCert
Type Yes when prompted with the following message.
You are about to change the signing certificate for the Security Token Service. Changing the certificate to an invalid, inaccessible or non-existent certificate will cause your SharePoint installation to stop functioning. Refer
to the following article for instructions on how to change this certificate: http://go.microsoft.com/fwlink/?LinkID=178475. Are you
sure, you want to continue?
Restart IIS so STS picks up the new certificate.
& iisreset
& net stop SPTimerV4
& net start SPTimerV4
Now validate the certificate replacement by running several PowerShell commands and compare their outputs.
# set the cerficates paths and password
$PfxCertPath = "c:\[certificate name].pfx"
$PfxCertPassword = "[password]"
# get the encrypted pfx certificate object
New-Object System.Security.Cryptography.X509Certificates.X509Certificate2 $PfxCertPath, $PfxCertPassword, 20
# compare the output above with this output
(Get-SPSecurityTokenServiceConfig).LocalLoginProvider.SigningCertificate
[/code]
## Establish the server to server trust
[code lang="ps"]
if(-not (Get-PSSnapin "Microsoft.SharePoint.PowerShell" -ErrorAction SilentlyContinue)){Add-PSSnapin "Microsoft.SharePoint.PowerShell"}
Import-Module MSOnline
Import-Module MSOnlineExtended
# set the cerficates paths and password
$PfxCertPath = "c:\[certificate name].pfx"
$PfxCertPassword = "[password]"
$X64CertPath = "c:\[certificate name].cer"
# set the onpremise domain that you added to Office 365
$SPCN = "sharepoint.domain.com"
# your onpremise SharePoint site url
$SPSite="http://sharepoint"
# don't change this value
$SPOAppID="00000003-0000-0ff1-ce00-000000000000"
# get the encrypted pfx certificate object
$PfxCert = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2 $PfxCertPath, $PfxCertPassword, 20
# get the raw data
$PfxCertBin = $PfxCert.GetRawCertData()
# create a new certificate object
$X64Cert = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2
# import the base 64 encoded certificate
$X64Cert.Import($X64CertPath)
# get the raw data
$X64CertBin = $X64Cert.GetRawCertData()
# save base 64 string in variable
$CredValue = [System.Convert]::ToBase64String($X64CertBin)
# connect to office 3656
Connect-MsolService
# register the on-premise STS as service principal in Office 365
# add a new service principal
New-MsolServicePrincipalCredential -AppPrincipalId $SPOAppID -Type asymmetric -Usage Verify -Value $CredValue
$MsolServicePrincipal = Get-MsolServicePrincipal -AppPrincipalId $SPOAppID
$SPServicePrincipalNames = $MsolServicePrincipal.ServicePrincipalNames
$SPServicePrincipalNames.Add("$SPOAppID/$SPCN")
Set-MsolServicePrincipal -AppPrincipalId $SPOAppID -ServicePrincipalNames $SPServicePrincipalNames
# get the online name identifier
$MsolCompanyInformationID = (Get-MsolCompanyInformation).ObjectID
$MsolServicePrincipalID = (Get-MsolServicePrincipal -ServicePrincipalName $SPOAppID).ObjectID
$MsolNameIdentifier = "$MsolServicePrincipalID@$MsolCompanyInformationID"
# establish the trust from on-premise with ACS (Azure Control Service)
# add a new authenticatio realm
$SPSite = Get-SPSite $SPSite
$SPAppPrincipal = Register-SPAppPrincipal -site $SPSite.rootweb -nameIdentifier $MsolNameIdentifier -displayName "SharePoint Online"
Set-SPAuthenticationRealm -realm $MsolServicePrincipalID
# register the ACS application proxy and token issuer
New-SPAzureAccessControlServiceApplicationProxy -Name "ACS" -MetadataServiceEndpointUri "https://accounts.accesscontrol.windows.net/metadata/json/1/" -DefaultProxyGroup
New-SPTrustedSecurityTokenIssuer -MetadataEndpoint "https://accounts.accesscontrol.windows.net/metadata/json/1/" -IsTrustBroker -Name "ACS"
Add a new result source
To get search results from SharePoint Online we have to add a new result source. Run the following script in a PowerShell ISE session on your SharePoint 2013 on-premise server. Don't forget to update the settings region
if(-not (Get-PSSnapin "Microsoft.SharePoint.PowerShell" -ErrorAction SilentlyContinue)){Add-PSSnapin "Microsoft.SharePoint.PowerShell"}
# region settings
$RemoteSharePointUrl = "http://[example].sharepoint.com"
$ResultSourceName = "SharePoint Online"
$QueryTransform = "{searchTerms}"
$Provier = "SharePoint-Remoteanbieter"
# region settings end
$SPEnterpriseSearchServiceApplication = Get-SPEnterpriseSearchServiceApplication
$FederationManager = New-Object Microsoft.Office.Server.Search.Administration.Query.FederationManager($SPEnterpriseSearchServiceApplication)
$SPEnterpriseSearchOwner = Get-SPEnterpriseSearchOwner -Level Ssa
$ResultSource = $FederationManager.GetSourceByName($ResultSourceName, $SPEnterpriseSearchOwner)
if(!$ResultSource){
Write-Host "Result source does not exist. Creating..."
$ResultSource = $FederationManager.CreateSource($SPEnterpriseSearchOwner)
$ResultSource.Name = $ResultSourceName
$ResultSource.ProviderId = $FederationManager.ListProviders()[$Provier].Id
$ResultSource.ConnectionUrlTemplate = $RemoteSharePointUrl
$ResultSource.CreateQueryTransform($QueryTransform)
$ResultSource.Commit()
Add a new query rule
In the Search Administration click on Query Rules
Select Local SharePoint as Result Source
Click New Query Rule
Enter a Rule name f.g. Search results from SharePoint Online
Expand the Context section
Under Query is performed on these sources click on Add Source
Select your SharePoint Online result source
In the Query Conditions section click on Remove Condition
In the Actions section click on Add Result Block
As title enter Results for "{subjectTerms}" from SharePoint Online
In the Search this Source dropdown select your SharePoint Online result source
Select 3 in the Items dropdown
Expand the Settings section and select "More" link goes to the following URL
In the box below enter this Url https://[example].sharepoint.com/search/pages/results.aspx?k={subjectTerms}
Select This block is always shown above core results and click the OK button
Save the new query rule

Hi Janik,
According to your description, my understanding is that you want to display hybrid search results in SharePoint Server 2013.
For achieving your demand, please have a look at the article:
http://technet.microsoft.com/en-us/library/dn197173(v=office.15).aspx
If you are using single sign-on (SSO) authentication, it is important to test hybrid Search functionality by using federated user accounts. Native Office 365 user accounts and Active Directory Domain Services
(AD DS) accounts that are not federated are not recognized by both directory services. Therefore, they cannot authenticate using SSO, and cannot be granted permissions to resources in both deployments. For more information, see Accounts
needed for hybrid configuration and testing.
Best Regards,
Eric
Eric Tao
TechNet Community Support

Need to be able to use both SSO and manual login to the WAS

Hi,
we are currently on NW7 SP20 (SPS18) but we are still using 3.x queries and web applications extensively. We have SSO enabled on all systems and that works fine. However, this does not give us the possibility to test for example roles by logging on as a test user. How can we keep SSO but also allow us to log on as a different user to the WAS when running queries or web templates.
Typical test scenario:
1) Open WAS3.x or Query Designer 3.x and log on as a test user
2) Close all browser windows
3) Execute web template or query in browser
4) At this point SSO takes over and logs the tester on as him/herself. What we would like here is to have the option of either logging on manually /by for example clicking a log on button) or using SSO (say by not clikcing the login button within 5 seconds or clikcing a SSO button). How can we get this to work?
Kind regards
Kenneth Eriksen

Actually, we want both...
Most of the time, SSO is desired, but when testing role changes etc we need to be able to log on with a test user.
The desired scenario:
When you try to run a web report/query and have not logged on, the system should offer you two options:
1) Manual log on
2) Single sign on
If you wait for a specified time (say 3 seconds) without selecting an option then SSO is used automatically (to avoid having to select SSO every time you need it).
If you click manual log on then you should be prompted for a username/password and be logged on as the specified user.
Can this be done at all?
Kind regards
/Kenneth

Setup and Configure IM Components SSO and DAS on Replica RMS Node

Dear All,
I was trying the step
Step 5: How to Setup and Configure IM Components SSO and DAS on Replica RMS Node In Multimaster Replication (MMR) with Identity Management (IM) Cluster in High Availability Env
But, at the stage to connect to OID, it is not connecting to the RMS database.
When I checked login through ODM, it is connecting fine. also, ldapbind is also binding fine.
How to solve this ? What will be the issue and where to check it ?
Also, from the RMS, when I am connecting through EM console, I am not getting any output on Infrastructure link to change the passwords. its showing
Identity Management
Error retrieving information of default metadata repository.
Unable to establish secure connection to Oracle Internet Directory Server ldap://devportal.paaf.gov.kw:636/ Base Exception : javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]
If there is any experts, pls reply. Because, last time I created a TAR and it took months to resolve and ultimately nothing happened they closed the TAR after some time as I was busy with some other works and not able to proceed with the synchronization.
Thanks in advance,
With Regards,
Sheeja Anil

Rule [ 47 ]: fuser link
~~~~~~~~~~~~~~~~~~~~~~~
Description:
Check if the fuser symbolic link /sbin/fuser -> /bin/fuser exists or
not. This is required for Suse 8.0 and Suse 9.0.
Test [ PASSED ] :
Not required =~ Exists|Not required
Action:
fuser link exists or not required.
Rule [ 48 ]: orarun package
~~~~~~~~~~~~~~~~~~~~~~~~~~~
Description:
Check if the orarun package is installed and if the oracle user
environment need to be reset. This is only required for Suse 8.0 and
Suse 9.0.
Test [ PASSED ] :
Not applicable =~ Not installed|Installed correctly|Not
applicable|Environment reset not required
Action:
orarun is not installed or installed correctly.
Rule [ 49 ]: semmsl
~~~~~~~~~~~~~~~~~~~
Description:
Check if semmsl kernel parameter is 256 or higher. For more details on
how to configure this parameter, refer to Oracle Application Server
10.1.2 Installation Guide - Chapter 4 - Section 4.3.2 Configuring the
Kernel Parameters on Linux.
Test [ PASSED ] :
Adequate = Adequate
Action:
semmsl kernel parameter is 256 or higher.
Rule [ 50 ]: semmns
~~~~~~~~~~~~~~~~~~~
Description:
Check if semmns kernel parameter is 32000 or higher. For more details
on how to configure this parameter, refer to Oracle Application Server
10.1.2 Installation Guide - Chapter 4 - Section 4.3.2 Configuring the
Kernel Parameters on Linux.
Test [ PASSED ] :
Adequate = Adequate
Action:
semmns kernel parameter is 32000 or higher.
Rule [ 51 ]: semopm
~~~~~~~~~~~~~~~~~~~
Description:
Check if semopm kernel parameter is 100 or higher. For more details on
how to configure this parameter, refer to Oracle Application Server
10.1.2 Installation Guide - Chapter 4 - Section 4.3.2 Configuring the
Kernel Parameters on Linux.
Test [ PASSED ] :
Adequate = Adequate
Action:
semopm kernel parameter is 100 or higher.
Rule [ 52 ]: semmni
~~~~~~~~~~~~~~~~~~~
Description:
Check if semmni kernel parameter is 142 or higher. For more details on
how to configure this parameter, refer to Oracle Application Server
10.1.2 Installation Guide - Chapter 4 - Section 4.3.2 Configuring the
Kernel Parameters on Linux.
Test [ PASSED ] :
Adequate = Adequate
Action:
semmni kernel parameter is 142 or higher.
Rule [ 53 ]: shmall
~~~~~~~~~~~~~~~~~~~
Description:
Check if shmall kernel parameter is 2097152 or higher. For more
details on how to configure this parameter, refer to Oracle
Application Server 10.1.2 Installation Guide - Chapter 4 - Section
4.3.2 Configuring the Kernel Parameters on Linux.
Test [ PASSED ] :
Adequate = Adequate
Action:
shmall kernel parameter is 2097152 or higher.
Rule [ 54 ]: shmmax
~~~~~~~~~~~~~~~~~~~
Description:
Check if shmmax kernel parameter is 2147483648 or higher. For more
details on how to configure this parameter, refer to Oracle
Application Server 10.1.2 Installation Guide - Chapter 4 - Section
4.3.2 Configuring the Kernel Parameters on Linux.
Test [ PASSED ] :
Adequate = Adequate
Action:
shmmax kernel parameter is 2147483648 or higher.
Rule [ 55 ]: shmmni
~~~~~~~~~~~~~~~~~~~
Description:
Check if shmmni kernel parameter is 4096 or higher. For more details
on how to configure this parameter, refer to Oracle Application Server
10.1.2 Installation Guide - Chapter 4 - Section 4.3.2 Configuring the
Kernel Parameters on Linux.
Test [ PASSED ] :
Adequate = Adequate
Action:
shmmni kernel parameter is 4096 or higher.
Rule [ 56 ]: msgmax
~~~~~~~~~~~~~~~~~~~
Description:
Check if msgmax kernel parameter is 8192 or higher. For more details
on how to configure this parameter, refer to Oracle Application Server
10.1.2 Installation Guide - Chapter 4 - Section 4.3.2 Configuring the
Kernel Parameters on Linux.
Test [ PASSED ] :
Adequate = Adequate
Action:
msgmax kernel parameter is 8192 or higher.
Rule [ 57 ]: msgmnb
~~~~~~~~~~~~~~~~~~~
Description:
Check if msgmnb kernel parameter is 65535 or higher. Refer to Oracle
Application Server 10g Installation Guide 10g - Chapter 4 - Section
4.3.3 Configuring the Kernel Parameters on Linux for more details on
how to configure this.
Test [ PASSED ] :
Adequate = Adequate
Action:
msgmnb kernel parameter is 65535 or higher.
Rule [ 58 ]: msgmni
~~~~~~~~~~~~~~~~~~~
Description:
Check if msgmni kernel parameter is 2878 or higher. For more details
on how to configure this parameter, refer to Oracle Application Server
10.1.2 Installation Guide - Chapter 4 - Section 4.3.2 Configuring the
Kernel Parameters on Linux.
Test [ PASSED ] :
Adequate = Adequate
Action:
msgmni kernel parameter is 2878 or higher.
Rule [ 59 ]: file-max
~~~~~~~~~~~~~~~~~~~~~
Description:
Check if file-max kernel parameter is 131072 or higher. For more
details on how to configure this parameter, refer to Oracle
Application Server 10.1.2 Installation Guide - Chapter 4 - Section
4.3.2 Configuring the Kernel Parameters on Linux.
Test [ PASSED ] :
Adequate = Adequate
Action:
file-max kernel parameter is 131072 or higher.
Rule [ 60 ]: ip_local_port_range
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Description:
Check if ip_local_port_range kernel parameter is between 10000 and
65000 or higher. For more details on how to configure this parameter,
refer to Oracle Application Server 10.1.2 Installation Guide - Chapter
4 - Section 4.3.2 Configuring the Kernel Parameters on Linux.
Test [ PASSED ] :
Adequate = Adequate
Action:
ip_local_port_range kernel parameter is between 10000 and 65000 or
higher.
Rule [ 61 ]: limit processes
~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Description:
Check if the limit of max processes is set to 16384 or higher. For
more details on how to configure this parameter, refer to Oracle
Application Server 10.1.2 Installation Guide - Chapter 4 - Section
4.3.2 Configuring the Kernel Parameters on Linux.
Test [ PASSED ] :
Adequate = Adequate
Action:
The limit of max processes is set to 16384 or higher.
Rule [ 62 ]: limit descriptors
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Description:
Check if the limit of file descriptors is set to 65536 or higher. For
more details on how to configure this parameter, refer to Oracle
Application Server 10.1.2 Installation Guide - Chapter 4 - Section
4.3.2 Configuring the Kernel Parameters on Linux.
Test [ PASSED ] :
Adequate = Adequate
Action:
The limit of descriptors is set to 65536 or higher.
Rule [ 63 ]: Port 1521
~~~~~~~~~~~~~~~~~~~~~~
Description:
Check if port 1521 is free or not. If port 1521 is used by an Oracle
listener version 10.1.0.2 or later, then the existing listener will be
used by the existing database and the Oracle Application Server 10g
Metadata Repository. The installer will perform this configuration
automatically. If port 1521 is used by an Oracle listener version
earlier than 10.1.0.2, then the existing listener need to be stopped.
After the installation is complete, the new 10.1.0.2 listener can be
configured to listen to the existing (pre 10.1.0.2) databases. If port
1521 is used by non-oracle programs, then this program need to be
configured to listen to ports other than 1521. Refer to Installation
Guide, section 4.4.4 for more details.
Test [ PASSED ] :
TNS Listener 10.1.0.2 or higher is running =~ TNS Listener 10.1.0.2 or
higher is running|Free
Action:
Port 1521 is not used, or is used by TNS*Listener version 9.0.1 or
higher.
Rule [ 64 ]: Environment Variables
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Description:
Check if the following environment variables are not set: TNS_ADMIN,
ORA_NLS, and LD_BIND_NOW. In addition, the following environment
variables must not references to any existing Oracle Home: PATH,
CLASSPATH and LD_LIBRARY_PATH.
Test [ FAILED ] :
Has reference to existing Oracle Homes = Properly defined
Action:
Refer to the following table for the necessary action to take:
<PRE>
Return Value          Action
Has reference to existing     Remove any reference to existing
Oracle Homes          Oracle Homes from PATH, CLASSPATH
                    and LD_LIBRARY_PATH.
Some variables are set     Unset TNS_ADMIN, ORA_NLS, and
                    LD_BIND_NOW.
Cannot access /etc/oratab     Grant read permission on
                    /etc/issue to the current user.
</PRE>
Rule [ 67 ]: DNS Lookup
~~~~~~~~~~~~~~~~~~~~~~~
Description:
Check if the host is properly registered in the DNS.
Test [ FAILED ] :
nslookup IP_address = Host correctly registered in DNS
Action:
Refer to the following table for the necessary action to take:
<PRE>
Return Value          Action
nslookup host.domain     The DNS server failed to resolve the
                    nslookup using host.domain.
nslookup IP_address     The DNS server failed to resolve the
                    nslookup using IP address.
Cannot determine IP address Fix any problem with host IP address.
Cannot access          Grant execute permission on
/usr/bin/nslookup      /usr/bin/nslookup to the current
                    user.
</PRE>
Rule [ 68 ]: /etc/hosts format
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Description:
Check if /etc/hosts file contains a line with "ip_address
fully_qualified_hostname short_hostname".
Test [ PASSED ] :
Contains host.domain = Contains host.domain
Action:
The Fuly Qualified Domain name has been set correctly.
Rule [ 69 ]: Oracle Home length
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Description:
Check that the path to the Oracle home directory is not longer than
127 characters.
Test [ PASSED ] :
Less than 127 char = Less than 127 char
Action:
Oracle Home directory is not longer than 127 characters.
Rule [ 70 ]: Memory for Dev Kit
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Description:
Check if the machine has enough memory to install Developer Kits
install type. The minimum requirements is 256 MB.
Test [ PASSED ] :
Available = Available
Action:
The machine has enough memory to install J2EE & Webcache install type.
Rule [ 71 ]: Memory for BI&Forms
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Description:
Check if the machine has enough memory to install Business
Intelligence & Forms install type. The minimum requirements is 1 GB.
Test [ PASSED ] :
Available =~ Available|Install type not available
Action:
The machine has enough memory to install Business Intelligence & Forms
install type.
Rule [ 72 ]: Space for BI&Forms
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Description:
Check if the machine has enough disk space to install Business
Intelligence & Forms install type. The minimum requirements is 2 GB.
Test [ PASSED ] :
Available =~ Available|Install type not available
Action:
The machine has enough disk space to install Business Intelligence &
Forms install type.
Rule [ 73 ]: control-center
~~~~~~~~~~~~~~~~~~~~~~~~~~~
Description:
Check if the minimum required control-center package version is
installed. For RedHat AS/ES 4.0: control-center-2.8.0-12.
Test [ PASSED ] :
Adequate =~ Adequate|Not required
Action:
The required compat-db package version or higher is installed.
Rule [ 74 ]: xscreensaver
~~~~~~~~~~~~~~~~~~~~~~~~~
Description:
Check if the minimum required xscreensaver package version is
installed. For RedHat AS/ES 4.0: xscreensaver-4.18-5.rhel4.2.
Test [ PASSED ] :
Adequate =~ Adequate|Not required
Action:
The required compat-db package version or higher is installed.

SSO and how to Managing User Roles/Privileges with Forms using Oracle db

We are in the process of implementing Oracle Application Server SSO with our custom Forms application using Oracle database -- all 10.2.0.1.0 version.
In our Forms Applications, we have about a dozen roles we have assigned to various users. We need to identify each user using our Forms because we are using the GLOBAL USER throughout the application.
Questions:
-- Do we have to create users/passwords in both OID and application database?
-- Is there a way to easily manage the user and passwords between SSO and Forms App/database in one place? For example, how does a user change their password once, but actually change it in both the database and SSO?
Any advice and/or direction would be greatly appreciated.
Thank you,
Mika
Edited by: user11846198 on Sep 1, 2009 1:41 PM
Edited by: user11846198 on Sep 1, 2009 1:53 PM

Yes, you can have global roles in the DB and assign this roles to specific OID users, and the will heritage the privilages, you can do this using Oracle Identity Management Web Tool http://hostname:7777/oiddas is not complicated.
Greetings.

Java SSO and IIS

This is a repeat of this post: Java SSO and IIS
Noone answered there.
Hello,
my organization uses Java SSO authentication in Oracle Application Server. Now we want to "expand" SSO so that our IIS applications can benefit from Oracle SSO and user needn't print user name / password again. Is there any way to use Java SSO in IIS? In this project we use Java SSO, not Oracle Identity Management.
Thanks in advance

Hi ,
I was installed and configured policy agent successfully.while i am trying to access the application url i am getting following error.
I am using IIS6.0 and access manager 7.1.
Error 2824:15b9918 AuthService: AuthService::processLoginStatus() Exception message=[Application user ID is not valid.] errorCode='107' templateName=login_failed_template.jsp.
2009-03-10 00:03:05.828 Error 2824:15b9918 PolicyEngine: am_policy_evaluate: InternalException in AuthService::processLoginStatus() with error message:Exception message=[Application user ID is not valid.] errorCode='107' templateName=login_failed_template.jsp and code:3
2009-03-10 00:03:05.828 Warning 2824:15b9918 PolicyAgent: am_web_is_access_allowed()(http://fcs-ylwkuzfoz1q.ramesh.com:99/website.html, GET) denying access: status = Access Manager authentication service failure
2009-03-10 00:03:05.828 Debug 2824:15b9918 PolicyAgent: am_web_is_access_allowed(): Successfully logged to remote server for GET action by user unknown user to resource http://fcs-ylwkuzfoz1q.ramesh.com:99/website.html.
2009-03-10 00:03:05.828 Info 2824:15b9918 PolicyAgent: am_web_is_access_allowed()(http://fcs-ylwkuzfoz1q.ramesh.com:99/website.html, GET) returning status: Access Manager authentication service failure.
2009-03-10 00:03:05.828 Debug 2824:15b9918 PolicyAgent: HttpExtensionProc(): status after am_web_is_access_allowed = Access Manager authentication service failure (3)
2009-03-10 00:03:05.828 Error 2824:15b9918 PolicyAgent: HttpExtensionProc(): status: Access Manager authentication service failure (3)
2009-03-10 00:03:05.828 Debug 2824:15b9918 PolicyAgent: OnSendResponse(): HTTP Status code is 500
can any one please help me to resolve this.
Thanks
Ramesh Kumar GV

SSO and external applications

Hello folks,
Due to my inexperience with PS6, I'm looking for some high-level outline that will help me look in the right places and understand things better here.
I have an external application that requires authentication via a web form (or by attaching the username and password on the URL as parameters).
What I want to do is have a channel of this application and utilize information from the SSO mechanism to redirect the request to that remote app and provide the credentials for a transparent login.
From what I understand this can be done by having a servlet in that channel to retrieve the credentials of the user for that remote application from the SSO and then redirect to the external application, attaching the credentials to the URL.
Is the above correct? I would appreciate any pointers or considerations since my experience with PS is minimal.
Thanks in advance,
Manos

I don't see a way to that servlet to retrieve a password for the user - it's not stored in the session.
There are following options:
1. OpenText LiveLink way: You have some "hidden" password for every user (based on user's ID and a shared key) known only to your server and this servlet. Servlet will supply this password.
2. Normal way - web server: Implement login module to this application, which will trust REMOTE_USER variable provided by the agent on the web server.
3. Normal way - standalone app: Implement login module to this application which will validate DSAME session cookie on the DSAME server. You can use example code in the SUNWam/samples/ of your server.

Hi. I have a Dell PC running Windows 7 64 bit. I have the latest version of Adobe Reader, It worked yesterday. Today I have job training to do that is due tomorrow morning and I can't open PDF files. I have to open a guide and read it and take a test

Hi. I have a Dell PC running Windows 7 64 bit. I have the latest version of Adobe Reader, It worked yesterday. Today I have job training to do that is due tomorrow morning and I can't open PDF files. I have to open a guide and read it and take a test tomorrow. I have deleted and reinstalled the application. I have rebooted. I have made sure my PDF's are associated with the program. Every PDF on my computer won't open and I get the same error message. It simply says Attempt to access invalid address. How can I fix this? Thanks.

Hi Don,
I have seen this issue fixed for some users by modifying the following registry key:
The key is "HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management" MoveImages
Set the key to 1 instead of 0 then reboot the machine.
In case you still face the issue try the following registry key change:
The only thing you have to do is rename the following key at the REGEDIT, and everything will be fine !!
BEFORE:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.exe
AFTER:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iexplore.old
Note: Please take a backup of the registry before attempting this change.
Regards,
Rave

Unit testing and system integration testing for crystal report

Hi gurus,
I am creating crystal report by oracle procedure, will you please tell me how to do unit testing and system integration testing? appreciate very much.

The focus of this forum is report design. The actual testing of reports would be subject to your own internal policies and procedures.
Jason

Problem on ios 7.0.4 on iphone enable your mobile data uncheck to green (enambled) works great ring and shows who ringing may work on 4s and five not tested please try get back to me thanks

on iphone enable your mobile data uncheck to green (enambled) works great ring and shows who ringing may work on 4s and five not tested please try get back to me thanks

I'm sorry, but you are going to have to try a little better to explain your issue and what your question is, or post in your native language.

Forms and Reports: Automated Test tools - functionality AND performance

All,
I'm looking to get a few leads on an automated test tools that may be used to validate Oracle forms and reports (see my software configuration below). I'm looking for tools that can automate both functional tests and performance. By this I mean;
Functional Testing:
* Use of shortcut keys
* Navigation between fields
* Screen organisation (filed locations)
* Exercise forms validation (bad input values)
* Provide values to forms and simulate user commit, and go and verify database state is as expected
Performance Testing:
* carry out tests for fixed user load
* carry out tests for scaled step increase in user load
* automated collection of log files and metrics during test
So far I have:
http://www.neotys.com/
Thanks in advance for your response.
Mathew Butler
Configuration:
Red Hat Enterprise Linux x86-64 architecture v4.5 64 bit
Oracle Application Server 10.1.2.0.2 ( with patch 10.1.2.3 )
Oracle Developer Suite (Oracle Forms and Reports) V10.1.2.0.2 ( with patch 10.1.2.3 )
Oracle JInitiator 1.3.1.17 or later
Microsoft Internet Explorer 6

are there any tools for doing this activity like oracle recommended tools?
Your question is unclear. As IK mentioned, the only tool you need is a new version of Oracle Forms/Reports. Open your v10 modules in a v11 Builder and select Save. You now have a v11 module. Doing a "Compile All PL/SQL" before saving is a good idea, but not required. The Builders and utilites provided with the version 11 installation are the only supported tools for upgrading your application. If you are trying to do the conversion of many Forms files in a scripted manner, you can use the Forms compiler in a script. Generating new "X" files will also update the source modules (fmb, mmb, pll). See MyOracleSupport Note 955143.1
Also included in the installation in the Forms Migration Assistant. Although it is more useful to people coming from older versions, it can also be used to move from v10 to 11. It allows you to select more than one file at a time. Documentation for this utility can be found in the Forms Upgrade Guide.
Using the Oracle Forms Migration Assistant

SSO and WebUtil

Hi,
I have a form that was working with webutil. We implemented SSO on the server. Know the webutil jar file does not load - it can not find it.
Getting the following message in java console:
Loading http://capps.cauto.com/forms90/webutil/webutil.jar from JAR cache
Loading http://capps.cauto.com/forms90/webutil/jacob.jar from JAR cache
Loading http://capps.cauto.com/forms90/java/f90all_jinit.jar from JAR cache
RegisterWebUtil - Loading Webutil Version 1.0.2 Beta
Loading http://capps.cauto.com/forms90/java/rolloverbutton.jar from JAR cache
Loading http://capps.cauto.com/forms90/java/hyperlink.jar from JAR cache
connectMode=HTTP, native.
Forms Applet version is : 90290
java.io.IOException: Could not connect to http://wadjet.cauto.com/forms90/webutil/webutil.jar
     at oracle.jre.protocol.jar.JarCache$CachedJarLoader.download(Unknown Source)
     at oracle.jre.protocol.jar.JarCache$CachedJarLoader.load(Unknown Source)
     at oracle.jre.protocol.jar.JarCache.get(Unknown Source)
Has anyone use SSO and webutil?
Thanks,
Mary Santry

Mary,
using single sign-On with Forms should not have an impact to webutil.jar.
Just to be sure: You configured webutil and it works if not running using single sign-on. You configured Forms to use singke sign-on (uncommenting th emod_osso directive in forms90.conf file) and from now on webutil.jar cannot be found.
What if you directly try and request the webutil.jar file from a Browser
http://wadjet.cauto.com/forms90/webutil/webutil.jar ?
Can you access jacob.jar using a Browser URL?
Fran

SSO and BiBeans

Hi,
i want to use SSO with Bi Beans. I have my BiBeans deployed on a 9iasR2 (9.0.2.3). I edit the mod_osso.conf with <Location /*appname*> require valid-user authType Basic </Location> and i have in BIController uncomment the sso blocks.
After authenticated to the SSO, i got always a NullPointerException. I looked in the code and i found that application.getBISession() is not initalized.
Please, have anybody an idea, or knows anybody a documentation about SSO and BIBeans.
best regards
Rene

cn=XXX information is missing for the SSO Server (orasso) when going to http://servername:7777/pls/orasso/orasso.home. Is that causing the problem? If so, how can I resolve it?
Thanks.
Andy

SSO and success URL with parameters

Hello
I have succeeded to configure HTML_DB engine as Partner App for Oracle SSO.
HTML_DB 1.5.0.00.33
Oracle IAS Release 1 ehk 1.0.2.2.2
I'm entering into HTMLDB application from outside directly to concrete page with concrete parameters. The calling outside app is authenticated with SSO.
Example URL: http://host/pls/DAD/f?p=103:3:::::PAR1,PAR2:VAL1,VAL2
I'm then authenticated checked against SSO and redirected to my requested page, but the parameters are lost. The URL looks like http://host/pls/DAD/f?p=103:3:987698769876098
It only happens at first try. Next time I have a session and I'm redirected together with parametes.
It seams that this http://host/pls/DAD/wwv_flow_custom_auth_sso.process_success is getting somehow wrong parameter URLC. Without parameters. Why?
Please help!
Yours,
jan lakspere

Hi
Thanks, Scott.
This patch 1.5.1 solved this problem. Now SSO redirect forwards the parameters together with URL.
Yours,
jan

SSO and LDAP no working after revokeing Territory selection choice of SSO

Hi i have 9ias 9.0.2 infrastructure on win 2k box.
earlier the territory selection choice was checked.
but when i unchecked that option. and i logged out of SSO.
Now the problem is i am not getting the SSO and Internet Directory home pages.
and in Enterprise manager web page shows both are up.
win 2k's task manager also shows the all the three process of Internet directory also running along with other essentianl processs.
any clue....
my whole work and intranet & extranet is not accessible due to this.... it will be great to me if i get any tip of hint...
thanks a lot... in advance...
regards
samir([email protected])

Well, this is certainly a case where I would be opening a tech support case. Your server is down, and you need help . .
I'll try what I can for you.
[18/Jun/2004:09:21:57 -0400] vipmail2 httpd[1560]: Account Debug: SASL [10.29.11.63] Cannot get namespace for domain vipmail2.kvcc.edu: Entry not found
This likely means that you've missed another, earlier error in the log. I suspect that what may have happened, is that the USER that Messaging Server connects to LDAP with has had a password change, and you're no longer able to BIND to LDAP to make queries.
I would start looking at your LDAP Access Log, and see what user you're attempting to BIND as, and see if that BIND is successful.
The contents of msg.conf and your other file is useful as information, but is not a user-editable file. You must use configutil to make changes, as this data is stored in LDAP, and on server startup, the files will be rewritten with ldap data.

Sso and sso2 functionlity test

Similar Messages

Maybe you are looking for