Timeouts of applications integrated with SSO

Hi,
We integrated two applications with 10gAS SSO (using SSO SDK), but we have one problem. The timeouts of the applications are different. One of them is 2h and the other one is 15 minutes. The timeout should be counted form the last access time of either of the applications.
Has anybody had a similar situation? If yes, how did you handle it?
I am thinking about using a domain cookie that would contain the last access time to the applications. I will have to reset the timestamp in the cookie with each application call...
But maybe there is a better way to do that?
Thanks,
Dmitry

can you plase check if note Subject: (How To Get Custom Portal Page After Click ''Logout'' Hyperlink )
Note:312126.1
work for your issue
fadi

Similar Messages

Browser back button not working with ADF Application integrated with SSO

I have integrated an adf application with Oracle SSO Authentication. Application is running fine.
Though, while navigating between pages, using browser back button , it is not redirecting the url properly
Should Redirect it to : http://<hostname>:<port>/<contex-root>/<servlet>/<id>
Presently Redirecting it to :http://<hostname>:<port>/<contex-root>
As, directory browsing is not allowed, there is Error 403--Forbidden .
Can anybody tell what changes needs to be made to make browser back button work.

In some of the documentation I have read, they have mentioned that using the back button in a browser doesn't work too well with any JSF type of application (not just ADF and Jdeveloper apps).
http://docs.oracle.com/cd/E15051_01/web.1111/b31974/web_form.htm#CFHHJGJH
Instead, they suggest using buttons on the form.
There is a video on using navigation between forms that may be of value: http://www.youtube.com/watch?v=bsPtmRID5XI&feature=plcp
Stuart
Edited by: Stuart Fleming on Sep 11, 2012 5:30 AM

Oracle E-business Suite 11i(11.5.10.2) integration with SSO/AD.

Hi,
Please suggest any note/info on Oracle E-business Suite 11i(11.5.10.2) integration with SSO/AD.
Thanks

Hi,
Please see these docs.
Integrating Oracle E-Business Suite Release 11i with Oracle Internet Directory and Oracle Single Sign-On [ID 261914.1]
How to integrate Active Directory with Applicactions 11i , with SSO/OID enable? [ID 437822.1]
Oracle Application Server with Oracle E-Business Suite Release 11i FAQ [ID 186981.1]
Thanks,
Hussein

Bi Publisher integration with SSO when users are in separate containers

Hi,
We have bi publisher 10.1.3.4 installed and setup to run with oas 10.1.3.3. Bi publisher as such works fine.
We need to get it integrated with sso and for that we have followed the steps in the bipub admin&ddeveloper guide, security model section:
http://download.oracle.com/docs/cd/E12844_01/doc/bip.1013/e12188/T421739T475591.htm#T434695
In our oid users are devided to 3 containers:
l=emea,dc=oracle,dc=com
l=amer,dc=oracle,dc=com
l=apac,dc=oracle,dc=com
If the "Distinguished Name for Users" in bi security configuration it set to e.g.
l=emea,dc=oracle,dc=com
and the admin user is created in the same container l=emea then login works fine for all users in l=emea container. They can login fine and they have the privileges defined in XMLP groups.
However this means any user in l=apac or l=amer container cannot login.
I've therefore created new admin user cn=bipadmin,dc=oracle,dc=com and change the user search base to be dc=oracle,dc=com. Now as the admin bipadmin user I can login fine and have the privileges as defined in XMLP groups.
Actual end users are in the l=emea, l=amer,l=apac containers and with the end users I can still login but the privileges are missing. So e.g. I can login as cn=xx.yy,l=emea,dc=oracle,dc=com or cn=aa.bb,l=amer,dc=oracle,dc=com but even though I've granted those users admin privileges the admin tab is not visible.
Distinguished name for groups has not changed. It has been the same all the time and the XMLP groups exists there:
cn=cappbb,cn=aitsys,cn=Groups,dc=oracle,dc=com.
But it seems if User search base is changed to higher level than where the users actually are the privileges are no longer found.
Is Bi Publisher supposed to search for users only from the container which is defined in the "Distinguished Name for Users" (in this case dc=oracle,dc=com) or is bi publisher supposed to search the users from all the subgroups also under the "Distinguished Name for Users" path?
If anyone has hit the same issue and has fond resolution please let me know.
Thanks!
Nina

Hi Nina,
User privileges will work fine even though the user search base is pointing at the higher level...
In my application I have defined the User search base as,
Distinguished Name for Users : O=ABC
And my users are under, 1. ABC---> Users ---> US ---> and 2. ABC ---> Vendors...
All users could you able to login along with their privileges...
But in your case, i would want you to recheck,the users group/role mapping...
Also check, if not admin role could you able to atleast import other groups/roles mapped to the user when you login...
I mean any functional roles (other than XMLP*) mapped to the users are imported...
thanks..
regards,
dmaze

Webdynpro ABAP application integration with portal

Hi,
      Can someone provide me the complete documentation for
       1. webdynpro ABAP application development and
       2. webdynpro ABAP application integration with enterprise portal.
Thanks...
Kundan

hi Kundan ,
design pattern or paradigm followed by Webdynpro ABAP is
MVC concept
           M-Model
           V- View
            C-Controller
and cms with the advantages like Structuring the programming
     Creation of easily manageable application blocks
     Reusability of whole components
for more documentation about WD ABAP , refer
http://help.sap.com/saphelp_nw2004s/helpdata/en/7c/3545415ea6f523e10000000a155106/frameset.htm
https://www.sdn.sap.com/irj/sdn/nw-ui?rid=/webcontent/uuid/fed073e5-0901-0010-4eb4-c9882aac7b11 [original link is broken]
SAP netweaver provides the integrationof ESA , for integartion netweaver provides us wid the People Integartion
refer
http://help.sap.com/saphelp_nw70/helpdata/en/77/3545415ea6f523e10000000a155106/frameset.htm
as well
I hope it helps
rgds,
amit

Third Party Application Integration with Oracle EBS Without any middleware

Hi,
Please give suggestions about the Third Party Application Integration with Oracle EBS
Without any middleware. Can we achieve this?
Thank you,
Muhammad Nasir
Edited by: User129 on Feb 4, 2013 3:45 AM

Muhammad,
You may get better response in Oracle EBS forum -
General EBS Discussion
Regards,
Anuj

Integrating Application Express with SSO

Hi,
What's the difference between integrating Apex with SSO as a partner application, and integrating it as an external application. Are there any benefits / drawbacks to either? and in what situation would you use one or the other?
Thanks,
Lee

Hi, I have one more question related to this.
We are currently considering implementing the following:
We are designing a system where the majority of users will have read only access to data. The read only users will NOT have to sign into the system in order to use the system at this privilege level. Other users will have to sign in and once they have done so will then be able to edit and access other functions of the system that are not available to regular read only users. Login links will be available on a number of different screens and once logged in they will be returned to the screen from which they logged in.
We understand that we can use SSO or even Apex's own authentication to acheive this.
There is also another system built using portal, forms and SSO. Once a user signs into the portal there is a main menu where various links to different applications are available/hidden depending on the OID groups that the user is a part of.
Ideally we want to be able to provide a link from the portal system to the apex system from the portal main menu. If a user is signed into the portal then they should be able to enter the apex system without the requirement to sign in again, assuming that they have edit privileges for the apex system. However if the user is signed into the portal but they do not have edit privileges we want to be able to display the apex system in read only mode as we would for anybody else who is not an edit user complete with login links.
Would this be possible using SSO bearing in mind that we do not want to have to create users for the read only users?
Any help would be greatly appreciated.
Thanks,
Lee

Application Integrator and SSO by SAPLOGONTICKET

After the docs (e.g. "How to Use the Application Integrator") and blobs mainly focus on user mapping, I wonder how to configure SAPLOGONTICKET in com.sap.portal.appintegrator.sap.Generic efficiently.
Does combining "URL template" and "URL template fraction for SSO" give a chance for sending a Login Ticket to another server (distinct domain)? Or is the "authentication" part in "URL template" useless for Login Tickets (as stated in <a href="https://www.sdn.sap.com/irj/sdn/thread?threadID=21141">Thread 21141</a>)?
Thanks
Gerhard

Hi Gerhard,
If your system is set to log on with SAP logon tickets for authentication, you can specify an authentication template in parameter SSO2Template, e.g. MYSAPSSO2=<Request.SSO2Ticket>. That's all it takes on portal side to configure the SAP Logon Ticket when using application integrator. .
If you want to use SAP Logon Ticket for multiple domains (portal server and backend server are in different domains) you have to take special care. Have a look into the <a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/a0/88a340fa432b54e10000000a1550b0/frameset.htm">SAP Library</a> to find out how to configure logon tickets for multiple domains.
Hope I could help!
Best regards,
Martin

Apex application registered with sso as partner application

We have 1 apex app registered with sso and working properly.
I just registered a new apex application with sso. when i authenticate through sso, it directs me to the originally registered application.
I went in through the portal administrator app and verified my settings all pointed to the new application. I verified that my dad is set up correctly.
Any ideas?
APEX 2.0

i did register and obtain the keys through portal admin.
to ensure i used the proper keys (i guess there is a possibility i used the keys from db1 registration) i re-ran regapp with the right keys but recieved the following output:
SQL> @regapp
Partner Application Configuration
Enter value for listener_token: HTML_DB:050iasphttp.xxx.na.xxx.com:7777
Enter value for site_id: EFBE3E14
Enter value for site_token: MSMXURH1EFBE3E14
Enter value for login_url: https://050iaspdb.xxx.na.xxx.com:4443/pls/orasso/orasso.wwsso_app_admin.ls_login
Enter value for encryption_key: 2EBDD126A3A40606
Enter value for ip_check: N
ERROR: Error in registration. Please try again
User-Defined Exception
Registration successful.
Listener token: HTML_DB:050iasphttp.xxx.na.xxx.com:7777
Site id : EFBE3E14
Site token : MSMXURH1EFBE3E14
Encryption key: 2EBDD126A3A40606
Login URL :
https://050iaspdb.xxx.na.xxx.com:4443/pls/orasso/orasso.wwsso_app_admi
n.ls_login
Logout URL :
https://050iaspdb.xxx.na.xxx.com:4443/pls/orasso/orasso.wwsso_app_admi
n.ls_logout
IP check : N
PL/SQL procedure successfully completed.
Commit complete.
No errors.
SQL>
...in spite of the error, i aske the app developer to try and use sso for db2. he now recieves:
User-Defined Exception
Error Error in wwv_flow_custom_auth_sso.process_success:l_sso_user_name:l_sess_id:: Please contact administrator.
OK
any ideas?

App-V 5 SP2 (RDS) application integration with multiple office versions - general question

So I have been testing Office 2013 with app-V 5 SP2 and the package size is a hefty 1+GB with Visio and Project thrown in and I am not convinced by the speed and efficiency of delivering office 2013 this way (shared content mode) so I am thinking of
pre-installing Office 2013 on my XenApp servers instead.
However, we have some applications that integrate with office 2007 as they are not yet certified with Office 2013. Am I right in thinking that if I package Office 2007 and add it to a connection group with the other application, then that app will use Office
2007 regardless of Office 2013 being installed on the local OS?
Thanks

Hello,
This depends on how it technically integrates with Office 2007. Without knowing, or testing, how that is done it is not possible to state which version will be used.
See this general article on howto nativelly install and use multiple versions of Office;
http://support.microsoft.com/kb/290576/en-us
I suggest you test your scenario and try to understand how your specific application interacts with Office.
Nicke Källén | The Knack| Twitter:
@Znackattack

Forms application fails with SSO PSP

Hi,
I am trying to invoke a forms application from a PSP page, both are configured behind SSO. But when i click the Forms application link it fails with
500 Internal Server Error
oracle.forms.net.ConnectionException at oracle.forms.servlet.FormsServlet.doRequest(Unknown Source) at oracle.forms.servlet.FormsServlet.doGet(Unknown Source) at javax.servlet.http.HttpServlet.service(HttpServlet.java:740) at javax.servlet.http.HttpServlet.service(HttpServlet.java:853) at com.evermind[Oracle Application Server Containers for J2EE 10g (10.1.2.0.2)].server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:824) at com.evermind[Oracle Application Server Containers for J2EE 10g (10.1.2.0.2)].server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:330) at com.evermind[Oracle Application Server Containers for J2EE 10g (10.1.2.0.2)].server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:830) at com.evermind[Oracle Application Server Containers for J2EE 10g (10.1.2.0.2)].server.http.AJPRequestHandler.run(AJPRequestHandler.java:224) at com.evermind[Oracle Application Server Containers for J2EE 10g (10.1.2.0.2)].server.http.AJPRequestHandler.run(AJPRequestHandler.java:133) at com.evermind[Oracle Application Server Containers for J2EE 10g (10.1.2.0.2)].util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:192) at java.lang.Thread.run(Thread.java:534)
We are not able to figure out why this is happenig. We followed all the steps as per metalink document 262686.1, but it also was of no use.
Has anyone solved this problem, pls let us know the fix?
Thanks,
OracleExpert

Hi everyone,
Alright, I solved the problem. It seems like the OID is very very very picky with the formsweb.cfg syntax. Especially with the quotes: don't use them!
For example, I had set the oid_formsid & formsid_group_dn values between double-quotes. Removing them fixed the error.
Here's an RCS output from the modifications.
[[email protected]] server {1008}$ rcsdiff formsweb.cfg
===================================================================
RCS file: RCS/formsweb.cfg,v
retrieving revision 1.10
diff -r1.10 formsweb.cfg
208c208
< oid_formsid="formsApp_osielle.notarius.com_47F26490FB4311DB8F3BBF0DDB09B635"
oid_formsid=formsApp_osielle.notarius.com_47F26490FB4311DB8F3BBF0DDB09B635214,215c214
< # formsid_group_dn=%GROUP_DN%
< formsid_group_dn="cn=Logical Application Group, orclApplicationCommonName=formsApp_osielle.notarius.com_47F26490FB4311DB8F3BBF0DDB09B635, cn=Forms, cn=Products, cn=OracleContext"
formsid_group_dn=cn=Logical Application Group, orclApplicationCommonName=formsApp_osielle.notarius.com_47F26490FB4311DB8F3BBF0DDB09B635, cn=forms, cn=Products, cn=OracleContextHTH,
David

ADF application integrating with Oracle Web Cache

Hello,
I am trying to integrated my ADF 11g application with Oracle Web Cache. I used this link http://andrejusb.blogspot.com/2010/06/oracle-webtier-11g-configuration-for.html for it.
I am able to access my ADF application using webcache port 7785.
I created few caching rules in the Oracle Web Cache. And in the popular request section of the Oracle Web cache i see jpg,png and other image files cached.
But the issue is when the application access images like /testapp/test/images/abc.jpg?_adf.ctrl-state=5b0s7lzfo_29 . I created a caching rule with regular expression ^/testapp/test/images/[A-Za-z0-9_]*\.(gif|jpeg|png|jpg)\?_adf\.ctrl-state=[A-Za-z0-9_]*$.
But when i access the popular request in em i don't see the URL given above as cached. The caching reason it specifies as URL contains query string.
I am not sure if i need to do anything additional to cache these URL's as well.
Thanks!
Ram

Yes that works. But my question is how to cache the urls which has querystring. I was trying to give a regular expression to match the url so that the url which contains parameters like _afrLoop which changes with each HTTP request can also be cached.

Webdynpro application integration with Webservices

Hi,
I developed few webdynpro RFC model application like ATP check; outstanding etc .Now i want to make available this application on webservices for mobile integration .What is the methodology we should follow to reach this requirement?
Any helpful answer will be highly appreciated.
Thanks,
Kundan

>
Selvaraj Gyanaraj wrote:
> Hi shaan sharma ,
>
> The following are excellent websites containing PDF & PPT docs providing complete documentation of integrating WDA with EP:
>
> boldEight Options for Developing and Deploying Custom Portal Content
> http://www.sappro.com/downloads/OptionComparison.pdf
>
> SAPu2019sUI Strategy -How do SAP Enterprise Portal, Web Dynpro,NetWeaverDeveloper Studio, PDK, and Visual,Composer Come Together?-
> https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/5303c390-0201-0010-e0b2-bfae018377f0
>
> SAP NetWeaver Portal Development Kits for .NET and Java
> https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/d0b3dcd1-0977-2910-a597-a82c639b07c7
>
> cheers!
> gyanaraj
Perhaps you should have a closer look at the links you provided. They don't have anything to do with WDA and Portal. The first one is a dead link. The second one is a 4 year old presentation on the Portal in general who's only mention of WDA is that it is "planned". Your third link is the PDF or .NET and Java and once again has absolutely nothing to do with WDA.

Custom worklist application integration with BPEL cluster

Hi all,
I've setup a BPEL cluster using the Enterprise installation guide for 10.1.3.3.0. Currently we have a custom worklist application which is works when deployed on an installation SOA suite (10.1.3.1.0). The integration of claiming or setting an outcome works fine. We use the remote EJB to integrate with the workflow services.
However when testing the application on a cluster, we are getting the following log message in the log file for the custom application:
Questions:
1) What should be the value of the host name in the server URL since in a cluster a remote HTTP server. The HTTP server uses a virtual URL via the loadbalancer.
2) What should be the port number? Should it be the opmn request port from the $ORACLE_HOME/opmn/conf/opmn.xml
Anything else that i'm missing, please let me knoe.
Thanks in advance.
Log message:
08/03/31 23:11:05 at java.lang.Thread.run(Thread.java:595)
08/03/31 23:11:05 Caused by: ORABPEL-30509
Error in invoking task query service.
A client side error occured in invoking the task query service.
Please check the exception error stack to identify the error. Contact oracle support if error is not fixable.
08/03/31 23:11:05 at oracle.bpel.services.workflow.query.client.TaskQueryServiceRemoteClient.authenticate(TaskQueryServiceRemoteClient.java:118)
08/03/31 23:11:05 at ca.bell.rcss.services.taskmanagement.client.RemoteTaskServiceClient.getWorkflowContext(Unknown Source)
08/03/31 23:11:05 ... 38 more
08/03/31 23:11:05 Caused by: java.rmi.UnmarshalException: Error deserializing return-value: java.io.InvalidClassException: oracle.bpel.services.workflow.verification.impl.WorkflowContext; local class incompatible: stream classdesc serialVersionUID = 6104875137687627481, local class serialVersionUID = 4086410548907188559
08/03/31 23:11:05 at com.evermind.server.rmi.RMICall.EXCEPTION_ORIGINATES_FROM_THE_REMOTE_SERVER(RMICall.java:109)
08/03/31 23:11:05 at com.evermind.server.rmi.RMICall.throwRecordedException(RMICall.java:125)
08/03/31 23:11:05 at com.evermind.server.rmi.RMIClientConnection.obtainRemoteMethodResponse(RMIClientConnection.java:517)
08/03/31 23:11:05 at com.evermind.server.rmi.RMIClientConnection.invokeMethod(RMIClientConnection.java:461)
08/03/31 23:11:05 at com.evermind.server.rmi.RemoteInvocationHandler.invoke(RemoteInvocationHandler.java:63)
08/03/31 23:11:05 at com.evermind.server.rmi.RecoverableRemoteInvocationHandler.invoke(RecoverableRemoteInvocationHandler.java:28)
08/03/31 23:11:05 at com.evermind.server.ejb.StatelessSessionRemoteInvocationHandler.invoke(StatelessSessionRemoteInvocationHandler.java:43)
08/03/31 23:11:05 at __Proxy1.authenticate(Unknown Source)

Some more information:
1) The integration from the integration/worklistapp works fine for the custom workflows.
2) I've tried using both the machine name and the http server name in the server url.
3) Snapshot of the wf_client_config.xml:
<servicesClientConfigurations xmlns="http://xmlns.oracle.com/bpel/services/client">
<ejb>
<serverURL>opmn:ormi://bangrcssdevsoa.sapient.com:6004:OC4J_SOA/hw_services</serverURL> 
<user>oc4jadmin</user>
<password>iasadmin1</password>
<initialContextFactory>oracle.j2ee.rmi.RMIInitialContextFactory</initialContextFactory>
</ejb>

Developing for a Oracle Application Server with SSO

Hello there,
I'm developing an application (Java) that will be deployed as a partner application within an Oracle Application Server 10g at my client. This Oracle instance has a SSO already configured, and my app will use this Identity Manager (consuming the cookie). The problem is that at my company we don't have a SSO system configured, not even an Oracle Application Server, just a simple Oracle XE 10g to hold data. So I'm wondering how can I do to develop my application and test it.
I was looking forward to install an OAS and configure an SSO to validate my implementation, but the download link provided by Oracle is broken (http://www.oracle.com/technology/products/ias/index.html). Another alternative that I thought of was to install an OC4J and configure a Java SSO to simulate the behavior of OSSO, and make my app the cookie set by it. But OC4J supports only til Servlet 2.4 and my app is using 2.5...
And to complete, I cannot access my client's environment. I'm supposed to write a Deploying document telling him how to deploy my app and then try to access it through Internet.
Does anyone have an idea of how can I develop and test my app in my company's environment?
Thanks in advance,
Bruno Krebs.

Apache 2.0 based OHS is located in Oracle Application Server Companion CD.
Pavna

Timeouts of applications integrated with SSO

Similar Messages

Maybe you are looking for