Using SAML secured webservice in ADF Application

I am looking for some tutorial/docs to use SAML secured webservice in ADF application. In my adf application, I am using the webservices using WebProxy and WebServiceDataControls.
Any pointers in this direction will be helpful.
Thanks,
Rajdeep

Take a look at the following blog posts - which provides some information regarding the SAML security in ADF
http://biemond.blogspot.com/2009/05/sso-with-saml-adf-security.html
http://biemond.blogspot.com/2009/05/sso-with-weblogic-103-and-saml.html
Thanks,
Navaneeth

Similar Messages

Using UCM data controls in ADF application

Using *.6 Jdeveloper/UCM/Protal Application/UCM
Calling all the experts in Webcenter/Spaces/UCM/ADF.
We have a requirement to design search inteface for Documents stored in UCM for Webcenter Portal and Spaces application.
Our approach is
Design simple ADF application (no security/templates)
Bounded task flows using fragments.
Framents to use UCM data controls (provided by oracle)
UCM data control definition is extended to use custom metadata.
package the application.
Added as ADF library jar to portal application
Added as Shared Library to Spaces application.
Question.
Is this approach sound?
Does UCM data controls provide all the functionality, for example if we want to read a option list for custom metadata or need custom metadata in return table?
Can we add other methods to UCM data control provided by Oracle or should we create different one?
Is there good documentation for such requirements. We have acces Webcenter developers guide which throws some light on UCM data controls.
Let me know if more clarity is needed...
Regards

Hi.
One of my last components was a custom "Document Explorer" and I used for first time JCR Data Control (Custom UCM Data Control provided by Oracle).
Sharing my experience I did something similar to you:
1) Create a ADF Bounded Task Flow and test it individually.
2) Add generated ADF JAR Library to WebCenter Spaces shared-lib.
3) Add your Task Flow to Resource Catalog.
Challenges that I found using custom Data Control:
1) When items retrieved are content/files all custom metadata can be retrieved OOTB.
2) When retrieving folders don't provide custom metadata like files. I used RIDC with JCR Data Control to provide all the information relative to folders. If you don't need more information about folders than the name, URI and icons then is OK :).
3) Using JCR Data Control registers in DataControls.dcx UCM Connection name used when generate JCR Data Control. After deploy your ADF JAR Library in WebCenter Spaces you'll have problems if you don't have a WebCenter Content Connection created with the same name. (Not talking about export UCM Connection with ADF JAR Library, Data Control uses a Connection name by itself :)).
I added extra functionallity with RIDC (not extending JCR Data Control).
I hope this help you.
Regards.

Defining bc4j.xcfg for Webservice from ADF Application Module

Hi all,
I've already posted my previous question in JBO30003 while executing ADF Application Module WebService
but no replies at all :)
after thorough inspection, i found that why my client can connect to ADF AM and why my WebService Invocation is failed with JBO 300003. My J2EE Client application is connected to ADF AppModule with some configuration in CPX file.
<JboProject
   id="DataBindings"
   xmlns="http://xmlns.oracle.com/adfm/application"
   version="10.1.2.18.73"
   SeparateXMLFiles="false"
   Package=""
   ClientType="JClient" >
   <Contents >
      <DataControl
         id="AppModuleDataControl"
         SubType="DCBC4J"
         SupportsFindMode="true"
         SupportsTransactions="true"
         Package="package"
         FactoryClass="FactoryImpl"
         Configuration="AppModuleEmbeddedAS" >
         <Parameters >
            <Parameter
               name="Sync"
               value="Immediate" >
            </Parameter>
         </Parameters>
      </DataControl>
and so forththis CPX file define that this client connect to Application Module on my AppServer with "AppModuleEmbeddedAS" configuration, as stated in my BC4J.XCFG.
<AppModuleConfig name="AppModuleEmbeddedAS">
         <AppModuleJndiName>AppModuleBean</AppModuleJndiName>
         <java.naming.security.credentials>welcome</java.naming.security.credentials>
         <DeployPlatform>EjbIas</DeployPlatform>
         <java.naming.security.principal>admin</java.naming.security.principal>
         <jbo.internal.embedded>true</jbo.internal.embedded>
         <HostName>localhost</HostName>
         <jbo.ampool.dynamicjdbccredentials>false</jbo.ampool.dynamicjdbccredentials>
         <ApplicationName>AppModule</ApplicationName>
         <jbo.ampool.doampooling>false</jbo.ampool.doampooling>
         <java.naming.security.authentication>simple</java.naming.security.authentication>
         <java.naming.factory.initial>oracle.jbo.common.JboInitialContextFactory</java.naming.factory.initial>
         <ConnectionPort>23891</ConnectionPort>
         <JDBCDataSource>jdbc/DBGEBPOC_on_LOCALHOSTDS</JDBCDataSource>
         <java.naming.provider.url>ormi://localhost:23791/current-workspace-app</java.naming.provider.url>
         <jbo.server.internal_connection>jdbc/DBGEBPOC_on_LOCALHOSTCoreDS</jbo.server.internal_connection>
         <jbo.dofailover>false</jbo.dofailover>
         <ApplicationPath>current-workspace-app</ApplicationPath>
         <jbo.ampool.resetnontransactionalstate>false</jbo.ampool.resetnontransactionalstate>
      </AppModuleConfig>Now, how could I define configuration like my J2EE Client in my web service? as we know that web service's client is web browser. Does it mean that we can't define any CPX file?
FYI, My webservice's End Point pages is successly shown up. but when i invoke the method, it returns XML with faultmessage Error JBO30003.

Hi,
You can directly edit the bc4j.xcfg file. Note that the WebService binding is not created from the Am directly but from the deployed WSDL file.
Frank

How to use jquery.hotkeys.js in ADF application

Hello all,
I am developing an ADF application where i am trying to use jquery.hotkeys.js file. I have created a folder js inside ViewController\Web Content\js and i have added jquery.hotkeys.js file inside that folder.
Now i have created a jspx page and inside that i have 3 input text and 1 submit button now I am trying to use keyboard shortcuts say ALT+F8 to clear the form fields. Here is my full jspx form
<?xml version='1.0' encoding='windows-1252'?>
<jsp:root xmlns:jsp="http://java.sun.com/JSP/Page" version="2.1"
xmlns:f="http://java.sun.com/jsf/core"
xmlns:h="http://java.sun.com/jsf/html"
xmlns:af="http://xmlns.oracle.com/adf/faces/rich">
<jsp:directive.page contentType="text/html;charset=windows-1252"/>
<f:view>
<af:document id="d1">
<af:form id="f1">
<af:inputText label="First Name" id="it1" value="#{MyBean2.firstName}">
<af:clientListener method="clearAll" type="keyDown"/>
</af:inputText>
<af:inputText label="Last Name" id="it2" value="#{MyBean2.lastName}">
<af:clientListener method="clearAll" type="keyDown"/>
</af:inputText>
<af:inputText label="EmailID" id="it3" value="#{MyBean2.emailId}">
<af:clientListener method="clearAll" type="keyDown"/>
</af:inputText>
<af:commandButton text="Submit" id="cb1"
action="#{MyBean2.callSubmit}"
binding="#{MyBean2.cb1}">
<af:clientListener method="clearAll" type="keyDown"/>
</af:commandButton>
</af:form>
<f:facet name="metaContainer">
<af:resource type="javascript" source="/js/jquery.hotkeys.js"/>
<af:resource type="javascript">
function clearAll() {
$("*").bind('keydown', 'Alt+F8', function (evt) {
clearForm();
evt.stopPropagation();
return false;
function clearForm() {
alert('3');
curElm = document.activeElement;
var frm = $(curElm).closest('form');
var frmname = ($(frm).attr('name'));
document.forms[frmname].reset();
document.getElementById('frmname::content').reset();
document.getElementById('f1::content').reset();
$("input:visible:enabled:first").focus();
</af:resource>
</f:facet>
</af:document>
</f:view>
</jsp:root>
But that is not working. Can anyone help?
Thanks

My requirement is the form should get cleared on pressing ALT + F8.
Here is my updated jspx page:-
<?xml version='1.0' encoding='windows-1252'?>
<jsp:root xmlns:jsp="http://java.sun.com/JSP/Page" version="2.1"
xmlns:f="http://java.sun.com/jsf/core"
xmlns:h="http://java.sun.com/jsf/html"
xmlns:af="http://xmlns.oracle.com/adf/faces/rich">
<jsp:directive.page contentType="text/html;charset=windows-1252"/>
<f:view>
<af:document id="d1">
<af:form id="f1">
<af:inputText label="First Name" id="it1" value="#{MyBean2.firstName}">
</af:inputText>
<af:inputText label="Last Name" id="it2" value="#{MyBean2.lastName}">
</af:inputText>
<af:inputText label="EmailID" id="it3" value="#{MyBean2.emailId}">
<af:clientListener method="clearAll" type="keyDown"/>
</af:inputText>
<af:commandButton text="Submit" id="cb1"
action="#{MyBean2.callSubmit}"
binding="#{MyBean2.cb1}">
<af:clientListener method="clearAll" type="keyDown"/>
</af:commandButton>
</af:form>
<f:facet name="metaContainer">
<af:resource type="javascript" source="/js/jquery.hotkeys.js"/>
<af:resource type="javascript" source="/js/jquery-1.4.4.min.js"/>
<af:resource type="javascript">
function clearAll() {
jQuery('*').bind('keydown', 'Alt+F8', function (evt) {
clearForm();
evt.stopPropagation();
return false;
function clearForm() {
curElm = document.activeElement;
var frm = $(curElm).closest('form');
var frmname = ($(frm).attr('name'));
alert(frmname);
document.forms[frmname].reset();
$("input:visible:enabled:first").focus();
</af:resource>
</f:facet>
</af:document>
</f:view>
</jsp:root>
But still I am not able to get the desired functionality. Am i missing something here?
Thanks

Using BIPublisher excel template in ADF application

Hi everyone,
Like the subject, I want to export excel reports from an **excel template** within ADF application. After searching around, I found **ExcelProcessor** class seem to be able to do the job, but it got no docs. And forums like this don't have much information. So I wonder if this job can be done smoothly using supported class, or we have to use another solution, like create a RTF template and use it instead?
Thanks in advance,
Regards,
VnMa

Hi Puthanampatti ,
RTF is fine. But it don't have features that excel format support: the multi-sheets reports, freeze cell ability, formulas, comments... Just thinking it's really great if we can use an excel template directly.
Edited by: minh_an on 19:43 21-02-2013

How to call OWSM secured web-service from ADF application

I have a OWSM secured web-service, which takes username/password.
I want to invoke this webservice from ADF application. ADF application has its own security and it takes its own username/password. End user can't provide the username/password for web-service call. My ADF application should call the webservice and provide it appropriate username/password.
What is the best practice to handle such scenario. I don't want to hardcode username/password in Java (ADF) code.
Thanks
Sanjeev.

it is not clear to me if you are having problems with calling java code from OIM or if the problem is the web service API.
Lets do some divide and conquer:
Can you create a simple java class that just writes a couple of lines to the log? Please attach this code to the OIM task and make sure it runs.
Once this works we can start looking at the web service call.
Best regards
/Martin

To make adf application secure(HTTPS)----------------urgent !!!!

Hi all,
I need to have my application run on HTTPS rather than http .i have used jdev 10 for my adf application and deployed on oracle application server 10 g .
so can someone help me out how to run or get my url in https.
Do i need to make settings in Jdev only or do customization in application server.
Thnks in advance.

In the app server. Consult the OC4J documentation.
CM.

HTTPS adf application ----urgent !!!!!!

Hi all,
I need to have my application run on HTTPS rather than http .i have used jdev 10 for my adf application and deployed on oracle application server 10 g .
so can someone help me out how to run or get my url in https.
Do i need to make settings in Jdev only or do customization in application server.
Thnks in advance.

hi user11159690
Maybe this can help:
"Oracle® HTTP Server Administrator's Guide 10g Release 3 (10.1.3) B25211-02"
"10 Enabling SSL for Oracle HTTP Server"
http://download.oracle.com/docs/cd/B25221_04/web.1013/b25211/ssl.htm
Or maybe you are looking for this:
"Oracle® Containers for J2EE Security Guide 10g Release 3 (10.1.3) B14429-01"
"11 Integration with SSL and ORMIS"
http://download.oracle.com/docs/cd/B25221_04/web.1013/b14429/configssl.htm
(tip : You can use "Your Control Panel" to make your name visible in forum posts.)
succes
Jan Vervecken

How to give the file path in adf application

Hii all,
I want to use castor xml framework in adf application..
for which i have to un- marshaller the xml file..
by using following method-
Person person = (Person)
Unmarshaller.unmarshal(Person.class,
new FileReader("src/com/person.xml"));
if i use this method in a java class inside a main method directly it works fine,
but when i try to initiate the java class through a jspx page deployed on integrated server..
it gives the file not found exception..
how to define the file path so it can be properly used even when application is deployed on server.
Thanks

duplicate {thread:id=2418158} ?
I guess the path you are using is wrong. It works on your mashiene as the src path is available. When you run the app on a server (jspx file) there is no src path as long as you don't include it in your WAR wich you should not do anyway.
If you need to access such data you can create a folder in your webroot folder and the the resources from there as /xml_folder_name or if the xml files shouldn't be visible from the outside put the folder under hte web-inf folder.
Timo
Edited by: Timo Hahn on 23.07.2012 16:20

SAML in webservice to BPM scenario

Hello,
I have read the the "How to configure SAML..." but I am not sure if it works in my scenario.
We have a "SOAP(XML) to BPM to IDOC scenario"
and there is the request to secure the "SOAP to BPM" part with SAML.
The scenario works asynchron, so the SOAP(XML) is sent to the BPM.
And in the BMP there are several actions, messages sent and also an IDOC is sent to the R/3 system then
So in our case the WS provider is the BPM or the PI itself.
Do I just have to change from SOAP SENDER adapter to WS SENDER Adapter????
Or does the BPM also have to provide some SAML functionality or something like this.....
Who has implemented a scenario like this with using SAML security???
best regards
Werner Magerl

Werner,
So in our case the WS provider is the BPM or the PI itself.
BPM has nothing to do with it. All the configuration for SAML is done at the server level.
Do I just have to change from SOAP SENDER adapter to WS SENDER Adapter????
Or does the BPM also have to provide some SAML functionality or something like this.....
Use WS Sender adapter. No setting in BPM is required. Any security / certificate related setting is done at the server level. Worth reading:-
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/b04408cc-f10e-2c10-b5b7-af11026b2393?quicklink=index&overridelayout=true
Regards,
Neetesh

Do we require to install ADF on weblogic for ADF applications

Hi All,
For deploying and running ADF applications do we require to install ADF on weblogic? Can only weblogic installation domain be used to deploy and run ADF applications or we have to install ADF on top of weblogic installation for deplying and running ADF applications?
Please guide!!

Roshni,
You may have to install Application Development Runtime.
The detailed instructions are available here.. http://www.oracle.com/webfolder/technetwork/jdeveloper/howto/11114/managedserver/wlsadfms.html

Portal Security with existing JSP Applications

Hello,
we have some existing JSP Applications an want to include them into out portal. They are currently running on iAS as standalone applications. But we also want to protect them using portal security.
How is it possible to use Portal Security for those JSP Applications.
Regards,
Frank

Hello,
currently I don't need to include them as portlets.
I included the first Page as jsp Report... because of that, this jsp is secured. But my application has more jsps.
Probably I could set an sessionvariable in the first protected jsp and check it in all other jsps. If this sessionvar is not existing, the user is not allowed to see this application.
Currently I have no other idea.
Regards,
Frank

ADF applications automated testing

Is there an automated test tool used by the the ADF team at Oracle? Or any one out there, have successfully used an automated tool for ADF applications?

This depends on the kind of test you want to make and the technology stack your app is using.
JUnit is always worse a try (it integrated in JDev after some updates and give you rudimentary test classes).
This [blog entry|http://one-size-doesnt-fit-all.blogspot.com/2009/06/stress-load-testing-web-applications.html] from Chris Muir handles load and stress testing.
This [blog entry|http://biemond.blogspot.com/2009/07/unit-test-your-composite-application.html] from Edwin Biemond covers BEPL and SOA.
Timo

Authenticate ADF application using adf security wizard against LDAP OID

I have an adf application which i intend to authorise using LDAP. For now , i have actually hand coded in java for authenticating the users of my application. Using JNDI I directly connect to LDAP and authenticate users. However , recently it came to my notice that i can also do that using ADF sercurity wizard , but i am unable to do so. which securing the ADF application ,no where in the wizard LDAP configuration is mentioned. do i have to change some file manually ? i have no idea on how to proceed on that.

i have setup wls , making th OIDAuthentication as Sufficient. but i dont know how to configure from ADF side so that it can authenticate against LDAP. when i try the ADF sercurity wizard option , it tells me to create new Roles . Is there any way where i can import the ldap credentials to the security wizard ..?

Deploying ADF application to a managed weblogic server - ADF security error

Hi,
Our group has written an ADF web application, which we are attempting to deploy to a managed weblogic server. Thus far, we have been unsuccessful. The application does successfully deploy to the AdminServer. Our setup:
Weblogic version is 10.3.0. Domain name is adf_domain. We have installed the ADF (ADF version is 11.1.1.0.0), JSTL(1.2.0.1), and JSF(1.2.7.1) runtime libraries, and they are targeted to both the admin server AND the managed server, which is called CollabServer. This server communicates with the node manager and can be started and stopped via the admin console successfully. The AdminServer is on port 7101, and the CollabServer is on port 7104. We are not using SSL.
application.xml:
<?xml version = '1.0' encoding = 'windows-1252'?>
<application xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/application_5.xsd"
version="5" xmlns="http://java.sun.com/xml/ns/javaee">
<display-name>OracleRetailCollaboration</display-name>
<module>
<web>
<web-uri>orc.war</web-uri>
<context-root>orc</context-root>
</web>
</module>
</application>
weblogic-application.xml (as taken from the ear file):
<?xml version = '1.0' encoding = 'windows-1252'?>
<weblogic-application xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.bea.com/ns/weblogic/weblogic-application.xsd" xmln
s="http://www.bea.com/ns/weblogic/weblogic-application">
<listener>
<listener-class>oracle.security.jps.wls.listeners.JpsApplicationLifecycleListener</listener-class>
</listener>
<library-ref>
<library-name>adf.oracle.domain</library-name>
</library-ref>
</weblogic-application>
weblogic.xml (as taken from the war file):
<?xml version = '1.0' encoding = 'UTF-8'?>
<weblogic-web-app xmlns="http://www.bea.com/ns/weblogic/weblogic-web-app" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://ww
w.bea.com/ns/weblogic/weblogic-web-app http://www.bea.com/ns/weblogic/weblogic-web-app/1.0/weblogic-web-app.xsd">
<container-descriptor>
<prefer-web-inf-classes>true</prefer-web-inf-classes>
</container-descriptor>
<security-role-assignment>
<role-name>valid-users</role-name>
<principal-name>users</principal-name>
</security-role-assignment>
<library-ref>
<library-name>jstl</library-name>
<specification-version>1.2</specification-version>
</library-ref>
<library-ref>
<library-name>jsf</library-name>
<specification-version>1.2</specification-version>
</library-ref>
</weblogic-web-app>
As I said, there are no deployment errors when we deploy to the admin server. However, we always see the following errors when deploying to the managed server:
java.lang.ClassNotFoundException: oracle.security.jps.wls.listeners.JpsApplicationLifecycleListener
etc.
This error occurs when deploying via the <wldeploy> ant task included with weblogic, and when deploying the application manually via the admin console.
So I removed this from weblogic-application.xml:
<listener>
<listener-class>oracle.security.jps.wls.listeners.JpsApplicationLifecycleListener</listener-class>
</listener>
Which resolved the initial error (I assume there is some sort of bug that causes this workaround to be necessary). The next error is this:
java.lang.ClassNotFoundException: oracle.adf.share.security.authentication.AuthenticationServlet
Again, we don't get this error when deploying to the AdminServer - ONLY the managed server CollabServer.
web.xml:
<servlet>
<servlet-name>adfAuthentication</servlet-name>
<servlet-class>oracle.adf.share.security.authentication.AuthenticationServlet</servlet-class>
<load-on-startup>1</load-on-startup>
</servlet>
<servlet-mapping>
<servlet-name>adfAuthentication</servlet-name>
<url-pattern>/adfAuthentication/*</url-pattern>
</servlet-mapping>
I then added some adf jar files to the ear file, finally get this error message:
java.lang.ClassNotFoundException: oracle.adf.share.jsp.ADFLibUtils
Any ideas on how to resolve this? Thanks.
Edited by: user10451099 on Apr 15, 2009 12:10 PM

Dan,
thanks fro reminding me :-)
Here are the steps we had to take to get a managed WLS to run an adf application without copying any jar in the domain/lib directory:
1. you still have to install the adf runtime to any server you want the adf application to deploy to
2. open the admin console, select the managed server, and select the 'server start' tab in configutation settings.
3. add /u01/bea/patch_wls1030/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/u01/bea/patch_jdev1111/profiles/default/sys_manifest_classpath/weblogic_patch.jar:
/u01/bea/patch_cie660/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/u01/bea/jrockit_160_05/lib/tools.jar:/u01/bea/wlserver_103/server/lib/weblogic_sp.jar:
/u01/bea/wlserver_103/server/lib/weblogic.jar:/u01/bea/modules/features/weblogic.server.modules_10.3.0.0.jar:/u01/bea/wlserver_103/server/lib/webservices.jar:
/u01/bea/modules/org.apache.ant_1.6.5/lib/ant-all.jar:/u01/bea/modules/net.sf.antcontrib_1.0.0.0_1-0b2/lib/ant-contrib.jar:/u01/bea/jdeveloper/modules/features/adf.share_11.1.1.jar:
/u01/bea/wlserver_103/common/eval/pointbase/lib/pbclient57.jar:/u01/bea/wlserver_103/server/lib/xqrl.jar:
/u01/bea/patch_wls1030/profiles/default/sysext_manifest_classpath/weblogic_ext_patch.jar to the classpath edit box you have to change '/u01/bea/' with your bea home. The classpath should be on one line without the CR/LF i put in to make it readable.
4. add -Xms256m -Xmx512m -da -Dplatform.home=/u01/bea/wlserver_103 -Dwls.home=/u01/bea/wlserver_103/server -Dweblogic.home=/u01/bea/wlserver_103/server
-Ddomain.home=/u01/bea/user_projects/domains/naa_qs -Doracle.home=/u01/bea/jdeveloper -Doracle.security.jps.config=/u01/bea/user_projects/domains/naa_qs/config/oracle/jps-config.xml
-Doracle.dms.context=OFF -Djava.protocol.handler.pkgs=oracle.mds.net.protocol -Dweblogic.management.discover=false -Dweblogic.management.server=http://localhost:7001
-Dwlw.iterativeDev=false -Dwlw.testConsole=false -Dwlw.logErrorsToConsole=
-Dweblogic.ext.dirs=/u01/bea/patch_wls1030/profiles/default/sysext_manifest_classpath:/u01/bea/patch_jdev1111/profiles/default/sysext_manifest_classpath:/u01/bea/patch_cie660/profiles/default/sysext_manifest_classpath
-Dweblogic.management.username=weblogic -Dweblogic.management.password=******** -Dweblogic.Name=GESTIS_QS
-Djava.security.policy=/u01/bea/wlserver_103/server/lib/weblogic.policy to the 'Arguments' edit box. As with the calsspath change '/u01/bea' to your bea home and change the domain name (in our case 'naa_qs') to your domain name. change the managementuser and passwort to your needs. As whith the classpath I put some CR/LF into the code section to make it readable.
5. save the changes and restart the server
Essentially all we copied the arguments from the admin server start script in addition to adding the class path.
Timo

Using SAML secured webservice in ADF Application

Similar Messages

Maybe you are looking for