Suggestions for Integrated Sign-On

I'm not specifically looking for implementation details, but more guidance as I work through a sign-on setup for my company...
We have a WIKI based intranet system (dokuwiki) which we want to back with APEX on OracleXE to provide employee services and act as a gateway to our larger Oracle back end database environment.
Our wiki auto-authenticates using NTLM(?) with our Microsoft Network Login. I'd like to avoid users having to login again when they go to the APEX system, but I haven't thought of a clean way for these two systems to share session details.
As I study the custom authorization details, I was hoping that you might be able to point me in a good direction on the general "type" of solution I might need to implement.
In researching messages I ran across Application Link which used a Public "wrapper" page to redirect requests internally and establish login credentials, and this seemed like a promising way for the WIKI to pass identity information, but still reach specific pages.
Any other thoughts are greatly appreciated.
Thanks,
Barney

Jes (others),
Based on feedback and research, I'm back on the NTLM line of research. All of the articles I have found here do not account for the Oracle XE "internal webserver".
I have found an off-site article on linking Apache and OracleXE using mod_owa which seems the most promising, but wanted to get confirmation it was the right route before I create additional problems:
http://rpbouman.blogspot.com/2006/02/webenabling-oraclexe-you-can-free-of.html
There is also an extensive discussion on the OracleXE site focused on detailed discussion of the Proxy option you reference, but I don't see anyway that proxying as implemented there would get the authentication details from NTLM into the APEX internal environment.
Change Database Homepage Port
Any thoughts you or others may have?
Some additional notes:
1) SSO isn't an option as we just started shutting down our main server and I won't have access to SSO (unless I install my own private copy) for 6-12 months.
2) I have "proxied" through our IIS system to do authentication in the past (for SSO and other apps), but I haven't understood how to reliably hook a redirect through another site into the manual authentication chain.
Thanks,
Barney

Similar Messages

  • Best Strategy for Integrating Crystal/Business Objects with OpenACS Environment

    Post Author: devashanti
    CA Forum: Deployment
    I'm working for a client that uses AOL server and OpenACS for their web services/applications. I need suggestions on the best strategy to integrate a reporting solution using Business Objects XI. Ideally I'd like to send an API call from our web application's GUI to the Crystal API with report parameter values to pass into specific reports called via the API - I can get it down to one integer value being passed - or if this is not possible a way to seamlessly, from the end user perspective, move into a reporting module. We are using an Oracle backend database. I'm experienced with creating stored procedures and packages for reporting purposes.
    Although I have many years of experience integrating the Crystal active X controls into n-tier client server applications, the past few years I have had little opportunity to work with Business Objects and the newer versions of Crystal or web based solutions with Crystal Reports. I signed up to try out crystalreports.com, but I doubt my client will find this solution acceptable for security reasons as the reports are for an online invoicing system we are developing. However we can set up a reports server in-house if necessary, so it gives me some testing ground.
    Can anyone provide suggestions for a doable strategy?

    Please post this query to the Business Objects Enterprise Administration forum:
    BI Platform
    That forum is monitored by qualified technicians and you will get a faster response there. Also, all BOE queries remain in one place and thus can be easily searched in one place.
    Thank you for your understanding,
    Ludek

  • Error:Unable to reserve .lok file for Integrated WLS server (DefaultServer)

    Hi,
    I am having jdev 11.1.1.1.0.
    Many times I get following error while running my application pages:
    Unable to reserve the .lok file for Integrated WLS server (DefaultServer). Typically this is because another instance of this server is already running in the WLS domain.
    The only way out is to close jdev, delete system11.1.1.1.33.54.07 folder and open jdev again.
    Why is this error dialog shown? Is there any permanent solution?
    TIA

    Thanks for quick reply!
    As suggested in the given thread, I logged into the weblogic console http://127.0.0.1:7101/console/ as 'weblogic' user.
    On the left hand side in the 'View changes and restarts' section, no pending changes are shown. It shows following text:
    Configuration editing is enabled. Future changes will automatically be activated as you modify, add or delete items in this domain.
    Please advise. I can share the application.zip if needed.
    Thanks

  • Suggestion for a needed Walkman app improvement

    Dear Sirs,
    Although I’ll sadly have to part from my Sony Z1 (for other issues reported on this forum and to Sony Xperia Care, namely the touchscreen issue), I would still like to leave a suggestion for the most underachieving app (imho) from a Sony Smartphone.
    With the long tradition on audio excellence and the Walkman brand, I would suspect that it would be a strong point on a Sony Smartphone. Strangely enough, the Walkman app made me buy a third party app (PowerAmp) to get some basic functionality like I had on my old iPhone 3GS.
    One of the most serious faults of the Walkman app is the lack of volume normalization between audio tracks. Although Sony does provide a workaround (which is nothing more than a dynamic range compressor), it doesn’t make any sense (imho) with today’s technology.
    Replaygain (for instance) is a free (but very effective) way of normalizing volumes without degrading the sound quality. Many apps like PowerAmp have it, and even iTunes has a proprietary version of it built in on every device for many years now.
    As I said before, this can be done with third-party apps and third-party media management software (like JRiver or the free Foobar), but by doing so, the user loses the integration provided by a unique manufacturer (Sony Media Go -> Sony Walkman).
    I’m really just trying to help, as it gets harder to understand why Sony lacks on such elementary things audio-wise, when the same company has Walkmans supporting the highest definition audio formats available today.
    I tend to relate Sony with high quality digital audio products, so it seems strange that this particular app is so rudimentary on these levels. The Walkman app is eye-candy, but it should also be “hear-candy”, which it isn’t.

    You need to pass this on to the Sony delvelopers site as this is a user support forum
    Contact details for Sony support http://developer.sonymobile.com/about/how-do-i-get-in-contact
    For a successful technology, reality must take precedence over public relations, for Nature cannot be fooled.   Richard P. Feynman

  • ArchWiki: suggestion for a new page layout

    Finally, I have some time to spare for ArchWiki improvement.
    I have modified my article on CMYK support in The GIMP as an example.
    Please take a look at it here:
    http://wiki.archlinux.org/index.php/CMY … n_The_GIMP
    The code to produce the box on the right is here:
    {{sn|'''Article summary:'''
    This article will show how to enable rudimentary CMYK support in The GIMP using the Separate plug-in, and explain how to use color proof filter to soft-proof your images.
    It will also cover more general topics on CMYK colors and DTP.
    '''Required software:'''
    *[http://www.gimp.org/ The GIMP The GIMP]
    *[http://www.littlecms.com/ lcms]
    *[http://download.adobe.com/pub/adobe/iccprofiles/win/AdobeICCProfiles_end-user.zip Adobe ICC profiles]
    *[http://www.blackfiveservices.co.uk/separate.shtml Separate plugin source]
    '''Related article:'''
    *[[Using lprof to profile monitors]]
    This is the best we can do with current ArchWiki setup. It would be even better if we could list categories in the box, as well as i18n links.

A: ArchWiki: suggestion for a new page layout

dtw wrote:Doesn't display correctly in IE
I've been tinkering with the templates. It's fixed now, I think.
Anyway, the templates used for the job can be seen from the code:
{{Article summary start}}
{{Article summary text|This article will show how to enable rudimentary CMYK support in The GIMP using the Separate plug-in, and explain how to use color proof filter to soft-proof your images. It will also cover more general topics on CMYK colors and DTP.}}
{{Article summary heading|Translations}}
{{i18n_entry|Deutsch|CMYK support in The GIMP(Deutsch)}}
{{i18n_entry|English|CMYK support in The GIMP}}
{{i18n_entry|Español|CMYK support in The GIMP(Español)}}
{{i18n_entry|Finnish|CMYK support in The GIMP(Suomi)}}
{{i18n_entry|Français|CMYK support in The GIMP(Français)}}
{{i18n_entry|Nederlands|CMYK support in The GIMP(Nederlands)}}
{{Article summary heading|Required software}}
{{Article summary link|The GIMP (v2.0 and above)|http://www.gimp.org/}}
{{Article summary link|lcms (v1.15 ?)|http://www.littlecms.com/}}
{{Article summary link|Separate plugin (v0.10 and above ?)|http://www.blackfiveservices.co.uk/separate.shtml}}
{{Article summary heading|Related articles}}
{{Article summary wiki|Using lprof to profile monitors}}
{{Article summary end}}
As you can see, it's a bit more typing than before, but it sure looks better. I might shorten the names for the templates. I wanted to make them memorable so they are a bit long.
As you can see, the problem of i18n links integration was fixed, so you can use existing i18n template and combine with the new "Article summary" set.
I will modify the article about writing summaries to include those templates and examples.
EDIT:  :oops:  the i18n links in the article are just examples. Don't use them, since they lead to non-existing pages.
EDIT2: Okay, I've played around with the appearance of the summary box, but I'm at work now, so it's going nowhere. I'll play with it some more when I get home.

dtw wrote:Doesn't display correctly in IE
I've been tinkering with the templates. It's fixed now, I think.
Anyway, the templates used for the job can be seen from the code:
{{Article summary start}}
{{Article summary text|This article will show how to enable rudimentary CMYK support in The GIMP using the Separate plug-in, and explain how to use color proof filter to soft-proof your images. It will also cover more general topics on CMYK colors and DTP.}}
{{Article summary heading|Translations}}
{{i18n_entry|Deutsch|CMYK support in The GIMP(Deutsch)}}
{{i18n_entry|English|CMYK support in The GIMP}}
{{i18n_entry|Español|CMYK support in The GIMP(Español)}}
{{i18n_entry|Finnish|CMYK support in The GIMP(Suomi)}}
{{i18n_entry|Français|CMYK support in The GIMP(Français)}}
{{i18n_entry|Nederlands|CMYK support in The GIMP(Nederlands)}}
{{Article summary heading|Required software}}
{{Article summary link|The GIMP (v2.0 and above)|http://www.gimp.org/}}
{{Article summary link|lcms (v1.15 ?)|http://www.littlecms.com/}}
{{Article summary link|Separate plugin (v0.10 and above ?)|http://www.blackfiveservices.co.uk/separate.shtml}}
{{Article summary heading|Related articles}}
{{Article summary wiki|Using lprof to profile monitors}}
{{Article summary end}}
As you can see, it's a bit more typing than before, but it sure looks better. I might shorten the names for the templates. I wanted to make them memorable so they are a bit long.
As you can see, the problem of i18n links integration was fixed, so you can use existing i18n template and combine with the new "Article summary" set.
I will modify the article about writing summaries to include those templates and examples.
EDIT:  :oops:  the i18n links in the article are just examples. Don't use them, since they lead to non-existing pages.
EDIT2: Okay, I've played around with the appearance of the summary box, but I'm at work now, so it's going nowhere. I'll play with it some more when I get home.

  • "Posting with reference to pur. order only possible for integrated whse"

    When I try posting GR with mvmt type 101 wrt PO  I am receiving the error “Posting with reference to pur. order only possible for integrated whse”
    The scenario is  storage lcation is maintained  with the external warehouse management .
    Is there anything i need to maintain warehouse as decentralised one or should i need to maintain any moment types or is there anything else i should maintain in the customisation.
    Kindly guide me regarding this as I am new to WM ,Thanks in advance.

    Hi ,
    In my case i have not maintained as decentralised one.
    also the thing is  there is no warehouse house  data managed over here .the requirement is when connected to extended warehouse  the system has to create inspection lot after the GR has done ,
    whereas in normal scenario everything is normal,
    can you please suggest what should be done in this case.
    Also if possible can you please tell me what from the scratch so that it will be helpful to come through .

  • IWEB SUGGESTIONS FOR APPLE

    First, if Apple actually takes the time to read these Discussions, let me say, "Thanks!" I love Apple.
    Second, I don't claim to be an expert, nor do I consider myself a uber-geek with incredible technical prowess.
    I've just been playing around with iWeb, and have some suggestions for future updates, another 'Wish List' if you will;
    1. The improvements to iPhoto are numerous and impressive, but iPhoto could use just a more photo tweaking in the realm of jpeg sizing. This would help integrate it with many iLife apps, especially iWeb.
    2. GarageBand, likewise, also keeps getting better and better, but it too could use a little boost in the way it deals with file size and the overall affect on one's system. Just having the old 'go to GarageBand Help' popup gets a little frustrating. Optimizing should be more directly accessible in the user interface.
    3. Creating easy access to, and integration of third party 'add ons' would be a really great way to deal with the current iWeb blogging limitations. Just as with many other blog systems, users could choose which various plug in enhancements they want on their iWeb blog.
    If Apple made blog plug-ins easy to do, everybody would win. As with FireFox, for example, a community of iWeb enthusiasts could help develop and build iWeb into a super powerful app, via such user chosen add ons. Perhaps iWeb could be 'opened' up just a bit more, to let some more community light shine in?
    That's just my two cents.
    Feel free to correct me if I'm wrong or just plain crazy, or post your own suggestions.
    Thanks.
    iMac G5   Mac OS X (10.4.4)   iBook, Airport, Original iPod, Bondi Blue, what about you?

    Make sure you send your iWeb comments directed at Apple to them via the iWeb > Provide iWeb Feedback menu item. Ideas for Garage Band and iPhoto are better posted in the forums and feedback channels devoted to those programs than here.

  • Firefox always opens 2nd tab for Yahoo sign in

    I had to reset Firefox to try to fix another software issue (which it didn't fix btw) and after the reset every time I open Firefox I get a 2nd tab for Yahoo asking me to log in to my Yahoo account even though I never sign out. I check the Keep me signed in box, enter my password and click sign in and then the next time I open Firefox I have to go through the process all over again because the Yahoo tab opens up AGAIN! I'm using the Yahoo Mail Notifier extension for Firefox but I've used it for years with no problems. I saw somewhere else that someone suggested going into the Options and the Privacy tab and under History making sure it was set to Use Custom Settings for History and that Use Private Browsing Mode was NOT checked and that Keep Cookies was set to Keep Until Firefox Closed with an exception for Yahoo. But mine was set to Remember History. However, when I set it to Use Custom the Private Browsing Mode wasn't checked, the cookies are set to Keep Until they Expire and there's a box to Clear History when Firefox Closes and it's NOT checked. Does anyone have any suggestions for what might be causing this? It's really frustrating!

    Thanks, that was the culprit unfortunately. I really loved that button :-) But having to log in every single time is just too annoying.

  • Steps for integrating oracle E-business suite R12.1.3 with 11g OID.

    Hi All,
    Can anyone please let me know the Metalink document ID/Steps for integrating oracle E-business suite R12.1.3 with 11g OID.
    Thanks,
    Dinesh.

    Dineshkumar wrote:
    Hi All,
    Can anyone please let me know the Metalink document ID/Steps for integrating oracle E-business suite R12.1.3 with 11g OID.
    Thanks,
    Dinesh.Please refer to the following docs/links.
    Using Oracle Internet Directory 11gR1 Patchset 4 (11.1.1.5.0) and Single Sign-on with Oracle E-Business Suite [ID 1286596.1]
    Integrating Oracle E-Business Suite Release 12 with Oracle Access Manager 11gR1 (11.1.1.5) using Oracle E-Business Suite AccessGate [ID 1309013.1]
    https://blogs.oracle.com/stevenChan/entry/oracle_access_manager_11_11
    https://blogs.oracle.com/stevenChan/entry/why_does_ebs_integration_with
    Thanks,
    Hussein

  • Where Can we Download the "old" speedgrade ... so we can give better feedback for integration?

    Where can we download the "old" speedgrade, so we can give better feedback for integration with aftereffects and premiere.   I haven't used speedgrade, but I'm assuming it's like Davinci Resolve ... color grading is something you have to play around with a bit, to give decent feedback on integration.  On one extreme, I like the ease of aftereffect composites.  On the other hand, using graph operators (such as in Resolve and things like blender) ... is real nice ... but it's really not how i do work on the adobe side.   I'm looking for a color grading approach that isn't for tier 1 film, but more for tier 2, independant and/or corporate work.   I'd also love the ability to mix special effect compositing (like I currently do with AE), with coloring (which I currently have to do in in another program).   I also have two work streams I would like to test, one RED and another 1080p for normal corporate stuff (which i currently don't color grade btw).
    Anyway, I see some wierd links on downloading the old speedgrade, I don't see any download links on the speedgrade web page ... would be nice to see what the old speed grade does so I can comment competently.

    Adobe SpeedGrade CS6 is at the door, official preview will be held at NAB, I'm currently testing a preview version of SG CS6 and I want to say that it works very well, so stay tuned on the Adobe website.
    I tried to "stay tuned",  here on this Adobe Website ...and your post is the first confirmation that Adobe Speedgrade still has any sign of a beating heart.
    Totally dissapointed in Adobe for lack of SG communication to keep my interest up.
    Regardless of that, I am looking forward to seeing it.
    EDIT:
    Speedgrade In CS6...brilliant to see it is now "a reality" ...and so excited and looking forward to checking it out.

  • Distiller 8.0 / Word 2007: Loss of Summation and Integral Signs in Equations

    Software: MS Word 2007 and Acrobat 8.0 on Windows Vista. Issue: I have a huge word file with numerous complex equations produced by field codes (not the Word Equation Editor, which is too cumbersome for this task). Many of them feature integral and summation signs. When distilling the file, none of the integral and summation signs which are part of these equations show up. One relatively simple example: {EQ f(r) = \I\Su(h=-¥,¥, ah cos(2p hr) + bh sin(2p hr))}. The code \I\Su(,,) is supposed to produce a summation sign, and it shows up nicely in Word and when I print it with just about any printer, but distiller eats the S/Sigma (or the integral/ò) signs. It does convert any Sigma entered as plain Symbol Greek text, but not when produced by field codes.
    According to http://www.math.clemson.edu/~bmoss/math_on_web/math2C.htm, this issue isn't new but has been around in older versions of Distiller/Word.
    Question: is there a fix for this? (or if it has been addressed before in any forum and I missed it despite my searching for a long time, please indicate where I can find infos about this).
    Thanks in advance (had it misfiled(?) in the forum Distiller Server Windows...)
    GR

    I now found a fix for the problem. The problem is that Distiller does not convert any "Symbol" font characters beyond code no. 220, which is where the summation and the integral sign are located. It is advisable to use other math fonts instead, like, e.g., the "Unicode Symbols" font (free dowload from http://users.teilar.gr/~g1951d/download.html), and to NOT use Word's equation editor function \i to create integrals or sums, as it relies on above Symbol font. Instead, use a nested overwrite function: \o(\o(∑, h=-¥),¥).

  • Which CAPS 6 Project Type is best for integration purposes?

    Which CAPS 6 Project Type is best for integration purposes?
    CAPS 6 is the company standard for integrating applications so I'm looking to get started converting XML from one format to another.
    Which project type is best to use for this scenario?
    Thanks in advance.

    As John suggested you should properly post this question in an Visual Studio forum:
    https://social.msdn.microsoft.com/Forums/en-US/home?forum=visualstudiogeneral&filter=alltypes&sort=lastpostdesc
    Visual C++, C#, VB.Net are all running on the DOT.NET enviroment and are different languages that have no difference in functionality.
    C and C++ does not run on the DOT.NET platform, but directly on the CPU.
    C# does also deals with processes and threads, and you can load DLL's at runtime/compile time if you want.
    C# also have console applications.
    http://technicaltrix.blogspot.dk/

  • Any suggestions for an all-in-one "cable modem router print server" (N)

    any suggestions for an all-in-one "cable modem router print server" (N)?

    If that's a problem with your cable company, change the company.
    If your cable company is not able to provide you with a cable modem which gets you full performance for their service why would you bother with that company or try to make it better than them?
    If you subscribe to a 100 Mbit/s service they must be able to provide you with a modem that does 100 Mbit/s and be able to demonstrate you 100 Mbit/s on your cable.
    If they are unable to provide you with a modem which does 100 Mbit/s and thus cannot demonstrate that the service they have installed in fact can do 100 Mbit/s but only give you a 50 Mbit/s because that's the best they have, why bother buying yourself a better modem to find out whether or not their service does what it promises or not??
    In addition, an integrated device won't get you better performance. On the contrary, consumer devices are generally single CPU (and core) devices. It's usually running some Linux or similar. If a single process gets overloaded it can drag down the performance of the whole device. For instance, let's say there is a bug in the print server software of the router. You print something and it hangs and the print server process on the router runs wild. Now the CPU is fully loaded and the routing performance will go down. If there is a bug in the routing software it will bring down the whole device and you can't even print.
    You'll get the best performance if you use dedicated devices because then one device cannot overload another. Get a modem. Get a wireless ethernet router. Get a printer with integrated print server. That's far better.
    It's like the all-purpose audio device compared to components...

  • Any suggestions for 3G service in Kenya?

    Any suggestions for 3G service in Kenya?

    If that's a problem with your cable company, change the company.
    If your cable company is not able to provide you with a cable modem which gets you full performance for their service why would you bother with that company or try to make it better than them?
    If you subscribe to a 100 Mbit/s service they must be able to provide you with a modem that does 100 Mbit/s and be able to demonstrate you 100 Mbit/s on your cable.
    If they are unable to provide you with a modem which does 100 Mbit/s and thus cannot demonstrate that the service they have installed in fact can do 100 Mbit/s but only give you a 50 Mbit/s because that's the best they have, why bother buying yourself a better modem to find out whether or not their service does what it promises or not??
    In addition, an integrated device won't get you better performance. On the contrary, consumer devices are generally single CPU (and core) devices. It's usually running some Linux or similar. If a single process gets overloaded it can drag down the performance of the whole device. For instance, let's say there is a bug in the print server software of the router. You print something and it hangs and the print server process on the router runs wild. Now the CPU is fully loaded and the routing performance will go down. If there is a bug in the routing software it will bring down the whole device and you can't even print.
    You'll get the best performance if you use dedicated devices because then one device cannot overload another. Get a modem. Get a wireless ethernet router. Get a printer with integrated print server. That's far better.
    It's like the all-purpose audio device compared to components...

  • Windows Store App can't verify the server is trusted for your sign in address

    I am aware this is (or was) an issue for the Lync 2013 client as well, as per
    http://terenceluk.blogspot.ie/2013/04/signing-into-lync-2013-client-presents.html
    This does seem to be fixed at this stage though, because after adding lyncdiscoverinternal.SIPdomain.com the Lync 2013 client does not prompt about the certificate.
    However, the Windows Store app does prompt "Lync can't verify that the server is trusted for your sign-in address. Connect anyway?" This presumably boils down to the same issue where our Lync 2013 Frontend is lyncfrontend.internal.domain.com which
    does not match the SIPdomain.com.
    Is there a fix for this other than forcing lyncdiscoverinternal to the reverse proxy? The TrustModelData registry key only applies to the Lync 2013 full client so does not affect the Windows Store app.
    Any suggestions would be welcome.

    Hi wagenveld,
    Create the DNS records as below:
    Internal SIPdomain.com zone:
    DNS A record:
    lyncdiscoverinternal.SIPdomain.com-> sip.SIPdomain.com
    DNS A record: 
    sip.SIPdomain.com-> IP address of Front End Server
    For details, you can refer to the following blog:
    http://blogs.technet.com/b/jenstr/archive/2011/02/10/lync-cannot-verify-that-the-server-is-trusted-for-your-sign-in-address.aspx
    Best Regards,
    Lisa
    Lisa Zheng
    TechNet Community Support

  • Maybe you are looking for