Want to integrate Primavera P6 EPPM with Single Sign-on

Hi,
Please let me which product you are using to integrate Primavera P6 EPPM with Single Sign-on?
Thanks

Check out the security integration guide:
http://download-west.oracle.com/docs/cd/E10316_01/cs/cs_doc_10/documentation/admin/managing_security_10en.pdf
Integrating with Active Directory is easy... most Single Sign On solutions are similar, although some require custom code

Similar Messages

Want to add multiple idoc type with single message type.

Hi Gurus,
I have a problem. I want to add multiple idoc type with single message type in WE20.
How we can do this in WE20 or is there any other way to do that?
Please help me.
Thanks in advance.
Srimanta.

hi,
basically in partner profile i.e. in we20 , we add details to the receiver / sender port that we have created using we21.
so what exactly we do in that is that we first use the message type for those idocs that we have created.
now based on those message type we create a process code. now this is the reason why you cannot apply several message types with the same name in we20... as process code is unque for each message type.
so thats why you can only assign the same message name to several idocs in we82 and then in we20 define the process code for that message type.
it will solve your problem.
hope this will help you!!!
Thanks & regards,
punit raval.

Configuring JCo3 Connection Pool with single sign on on non SAP Java server

Hi Everyone,
i have configured a connection pool on JBoss as per JCo3 Documentation and is working great.
Now I need help to configure this connection pool with single sign on so that RFc on SAP ECC systems are executed using end users credential rather than using single user name password used to configure JCo connection pool.
On SAP Java stack I am sure its possible within Java WebDynpro and i assume using JCA resource adapter. But what if we don't want to use SAP Java App server.
Any help will be appreciated.
Thanks,
Divyakumar Jain

Eason, 你好！
I have exactly the same problem. Did you find a solution to this problem? If so, please let me know!

How to configure Exchange 2013 OWA with Single Sign On

Hi All ,
How to configure Exchange 2013 OWA with Single Sign On ?
Thanks .

Hi,
From your description, I am not quite sure what you really want to achieve. Could you explain it furthermore? If you need to set up Exchange 2013 OWA single sign on with Exchange 2010, here is a helpful thread for your reference.
Exchange 2013 OWA Single Sign on with Exchange 2010
https://social.technet.microsoft.com/Forums/en-US/2899ebfc-8622-4cdc-8d77-d76b607618f7/exchange-2013-owa-single-sign-on-with-exchange-2010?forum=exchangesvrdeploy
If that is not your case, please feel free to tell me.
Best regards,
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Amy Wang
TechNet Community Support

Changing of the standard port 1521 and afterward problems with Single Sign

System / Host Environment
Operating System: HP-UX 11i, Existing Oracle RDBMS Vers. 9.2 x, Listener on standard port 1521
9iAS System Architecture: 9iAS Infrastructure and Middle tier (AS Instance) on the same machine
Problem Environment:
-Before and during the installation of 9iAS infrastructure the Listener of the existing Oracle RDBMS was stopped
-The installation of 9iAS Infrastructure (db: IASDB) Version 9.0.2.0 works well
-Afterwards the port 1521 of IASDB changed to 1525. For a detail description of IASB port changing please refer to Doc. ID: 211 929.1 AFTER CHANGE 'IASDB' LISTENER PORT
-The installation of Patch Set 2 (Common Patch 2703110) follows (9iAS is now up to Release 9.0.2.2).
-The Installation of 9iAS Middle tier (AS Instance) Version 9.0.3 follows
Problem description:
-During the installation of 9iAS Middle tier problems with Single Sign On occurs.
The reason of this problems seems a communication problem between the Single Sign On login sequence and the IASDB. After a reset of the port changing (back to the standard port 1521) the installation of 9iAS Middle tier works well.
Through this incorrect and problematic behaviour we have some notes and questions:
-Well at first the description of the port changing in Doc. ID: 211 929.1 seems us incomplete. Some configuration still carry on the standard port 1521 and not the knew value of the port 1525.
-So we want to know all configuration files and parts where we have to change the port value manually ?
-What will happened to the Single Sign On function with this manually port changing. Does Single Sign On works later on correct or have we to change much more ?

Currently, changing the listener port is not supported. It must stay on 1521. I believe this is to be fixed in a latter release (perhaps 9.0.4)

Using multiple wireless networks with Single sign on?

The university that I currently work for has switched from one wireless SSID to 2 separate SSIDs that separate the student users from the faculty/staff users. At this time only the Faculty Staff can log into STAFF and students can only log into STUDENT...
I have a few laptop carts that were setup for student use and have single sign on configured for the STUDENT wireless connection. The laptops are on the university's domain so that students have access to the home drives.
We run into problems when Faculty try to use a laptop to teach a class. They are unable to log in because their credentials are not authorized for the STUDENT wireless network.
So...Is it possible to setup 2 wireless profiles (STUDENT and STAFF) with single sign on and give the user an option to choose from?

Hi,
Based on your description, I would like to suggest you use Group Policy to configure Wireless Network Settings:
Using Group Policy to Configure Wireless Network Settings
http://technet.microsoft.com/en-us/magazine/gg266419.aspx
Please follow the information from the link above to check the issue.
If it doesn’t work, I recommend you initial a new thread in our Windows Server Forum for further assistance.
http://social.technet.microsoft.com/Forums/scriptcenter/en-US/home?category=windowsserver
Hope it helps.
Regards,
Blair Deng
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

IRecuritment: Resume Parsing with Single Sign on (SSO)

Application Version:11.5.9
RDBMS Version:9.2.0.7
Patch Level:IRC.D, HR_PF.G
Problem Description/Question:
Anyone successfully parsed resumes with Single Sign On enabled. We are unable to parse resume with SSO. If I disable the SSO the parsing is working fine. With the SSO enabled resume parsing giving the following error:
javax.net.ssl.SSLException: SSL handshake failed: X509CertChainIncompleteErr
Pl. let me know if you have any suggestions/work around to resolve the issue. Client is going to live in 3 weeks. Any help is appreciated.
Thanks,
V

Hi Rainer,
you can find this setting in your Internet Explorer. Use Tools -> Internet Options -> Advanced. In the section "Security", check "Enable Integrated Windows Authentication (requires restart)" and restart your browser.
If the error still persists Note
934138 might be useful.
Hope this will help out.
Regards,
André

OBIEE 11G with Single Sign-On and Active Directory

Hi guys,
Release Version: Oracle Business Intelligence 11.1.1.5.0
Patch applied: 11.1.1.5.0 BP3 (Patch 13832750)
OBIEE Server operating system: Windows Server 2008 SP2 (32-bits Operating System).
We are trying to configure Single Sign-On according to TechNote_WNA_SSO_AD_V4.0.doc.
Our krb5login.conf:
com.sun.security.jgss.krb5.initiate {
com.sun.security.auth.module.Krb5LoginModule required
principal="[email protected]"
keyTab=cgdkobi2.keytab
useKeyTab=true
storeKey=true
debug=true
com.sun.security.jgss.krb5.accept {
com.sun.security.auth.module.Krb5LoginModule required
principal="[email protected]"
keyTab=cgdkobi2.keytab
useKeyTab=true
storeKey=true
debug=true
We generate de keytab file:
C:\OracleBI11g\user_projects\domains\bifoundation_domain>C:\OracleBI11g\jrockit_160_24_D1.1.24\bin\ktab.exe -k cgdkobi2.keytab -a [email protected]
Password for [email protected]:XXXXXXX
Done!
Service key for [email protected] is saved in cgdkobi2.keytab
C:\OracleBI11g\user_projects\domains\bifoundation_domain>C:\OracleBI11g\jrockit_160_24_D1.1.2-4\bin\kinit -k -t cgdkobi2.keytab cgdkobi2
New ticket is stored in cache file C:\Users\cgdkobi2\krb5cc_cgdkobi2
C:\OracleBI11g\user_projects\domains\bifoundation_domain>C:\OracleBI11g\jrockit_160_24_D1.1.2-4\bin\klist -k -t cgdkobi2.keytab
Key tab: cgdkobi2.keytab, 1 entry found.
[1] Service principal: [email protected]
KVNO: 1
Time stamp: Mar 15, 2013 10:34
C:\OracleBI11g\user_projects\domains\bifoundation_domain>klist
Current LogonId is 0:0x406163f5
Cached Tickets: (0)
We re-start the services and logon into analytics web and SSO doesn't work but there's not an error. It runs successfully with and Active Directoy user and password. Seems like SSO wasn't enabled, but I checked is enabled.
Any suggestion?
Thanks in advanced

Follow the posts : OBI 11.1.1.6.SSO and You are not currently signed in to Oracle BI Server" for OBIEE 11.1.1.6 SSO do the troubleshooting mentioned there.
Also check your logs for error like the one below:
[2012-03-09T16:42:36.000-05:00] [OBIPS] [NOTIFICATION:1] [] [saw.securitysubsystem.checkauthentication.runimpl] [ecid: 6c98b5cce1f24814:2a613331:135f95fbdff:-8000-0000000000005b7a,0:1:1] [tid: 5932] Authentication Failure.
Odbc driver returned an error (SQLDriverConnectW).
State: 08004. Code: 10018. [NQODBC] [SQL_STATE: 08004] [nQSError: 10018] Access for the requested connection is refused.
[nQSError: 43113] Message returned from OBIS.
[nQSError: 13039] The impersonator does not exist in the BI Security Service. (08004)[[
If you are getting this when you login to OBIEE : You are not currently signed in to Oracle BI Server"
then you need to apply this patch : 13553428 QA:BLK:DELIVER TO CORP. OID LDAP USERS FAILED WITH IMPERSONATOR DOES'NT EXIST. 11.1.1.6.0 Generic Platform (American English) General Oracle BI Suite EE Apr 5, 2012 799.4 KB
Let us know the updates. Hope this helps. Mark if it does.!
Thanks,
SVS

Slow report viewer/rdlc performance in local mode with Single Sign On

Hi Team,
We have recently enabled Single Sign On to our application and after that our rdlc reports loading got extremely slow.
Please find the below configuration that we are using.
1. Report Viewer 11.0.0.0
2. running rdlc file in local mode (not using Report Server)
3. System.IdentityModel.Services 4.0.0.0
The query behind the reports is returning result in 5-10 sec but report is taking 1-4 min to load (sometimes getting timeout) (as per the complexity of the report).
We have tried a lot of workaound but nothing worked.
i saw performance improvement in reports by addding <trust legacyCasModel = "True" level="Full" /> in config file, But using this we are getting "Dynamic operations can only be performed in homogenous AppDomain" error
in many pages of our application.
Without SSO reports are running completely fine.
We are stucked here and not able to proceed. Is there any issue with the SSO and rdlc in local mode ? Is there any hot fix available for the same ?
Please help !!!
Regards,
Pranav Sharma

This problem is probably related to :
[http://blogs.oracle.com/stevenChan/2010/03/ebs_jre_issues_16018.html]
Oracle problem ID : 1054293.1
Loginpage / Error in Browser for Export and Attachments after upgrading to Sun JRE 1.6.0_18 [ID 1054293.1]
Sun bug : 6927268
ShowDocument calls results in new iexplorer process

Oracle identity federation 10g--error while login with single sign

Hi...
I installed oif10g using microsoft ad2003.now i am integrating with salesforce.com to provide single sign on...but while signing authentication is failed...so for that we need to search for assertion which will be under federation-mssg.log..
but no error messg is under it...so can any one help to enable all debug settings in oif..

Hello,
I think its not possible to mix and match authentication once you have set OBIEE to use EBS ICX cookie based authentication, you would not able to use the DefaultAuthenticator Provider.
Let me know the updates.
Thanks,
SVS.

OpenDocument Problem with single sign on

Hi,
We have implemented single sign on for our BO environment.
We have a report saved under Public Folders\test folder and this report is called thru Java application by users. I have written below code using OpenDocument Function.
<a href="<boservername>/enterprise115/desktoplaunch/opendoc/
openDocument.jsp?&sDocName=test report&sDocType=wid&sPath=[PublicFolders],[testfolder]&sRefresh=Y">Test Report</a>
But when I click on the link, it brings up the Login screen instead of opening the report. Since we implemented Single Sign on, I am guessing it should directly open up report bypassing login screen.
Please let me know if my code is wrong and how I bypass the login screen.
Thanks,
Ven Men

Hi Ven,
When you click on the open OpenDoc Link from a infoview (webi report) it will give a login page and you need to provide login details and then the webi report is displayed.
To avoid this login credential page you can follow the below steps:-
To by pass the log on , we need to create logon token which can be pass to URL and in turn logs in BO server. This logon token is nothing but an alphanumeric key and is encrypted form. Logon token mainly comprises of,
1)BO server name
2)Username
3)Password
4)Authentication type
I am sending you "opendoc.jsp" code which will give you a fare idea on how to create logon token and pass it to openDocument.jsp. Place this file in same place where your u201CopenDocument jspu201D resides.
Restart Tomcat
Execute this file in browser
http://<Server Name>:<Port Number>/businessobjects/enterprise115/desktoplaunch/opendoc/opendoc.jsp
Please make sure you make necessary changes with regards to "USERNAME","PASSWORD",and "BO SERVER NAME" before you executing this file.
Below is the OpenDoc.jsp file detail
Under //CMS logon information provide the below details
String cms = "CMSServerName"; //Enterprise CMS Server
String webServer = "WebAppServer"; //Infoview Web Application Server
String userid = "Administrator";
String pwd = "";
String auth = "secEnterprise";
Thanks,
Madhu.

FC3 : Problem with Single Sign-On

Hi,
We are installing Oracle 10g (ias 10.1.2) on Federo Core 3 Operating system.
We installed successfully 'oracle Infrastructure' 10.1.2. We navigated to infrastructure home, the single sign-on status is'Down' and other components are 'Up'.
What could be the problem with SSO?.
Your help will be appreciated.
Regards,
Raj

Hello
I have the same problem. I installed succesfully Oracle10g on SLSE9 but the single sign-On is every down I followed all step but the problem isn't resolved.
I would like the infrastructure on Linux you have any idea?

APEX 3.0 with Single Sign On for single application

Hi All,
I have been playing around with SSO (IAS 10.1.2) and an APEX application for the past couple of days and am still having problems.
I have followed the instructions word for word in the various how to documents named in this forum and am now at the point where I successfully redirect to SSO login page > login using a username created in OID (which is the same username/password in my application) > then get redirected back to "http://<MY_SSO_HOST>:7777/sso/auth"..
Some things about my instance:
1. Oracle DB > 10g 10.1.2
2. Oracle IAS > 10g 10.1.2 (different server to above)
3. APEX 3.0 > trying to run SSO authentication against a single application rather than the whole APEX instance.
4. I have (after a lot of grief - figured out that the DAD MUST be /pls/somedad and that the port number 80 must be defined in the SSO token regardless - those two little gems got me as far as I am..
Now I know very little about SSO and am trying to evaluate it for my application (which uses a DB login/password and has to continue to do so for other reasons which I do not control). I am assuming there is some method of synchronizing the OID/SSO repository with my db accounts but haven't yet figured that one out.
I cannot for the life of me see what's wrong here. Any ideas??

Thanks Scott..
Okay let me go through the responses here..
...login using a username created in OID (which is the same username/password in my application)
My application overlays another Oracle application (old client server) which relies on physical database user accounts to perform its own internal grants etc. i.e. it uses where USER = blah all over the place.
Therefore my application is currently using the internal authentication scheme DATABASE (using DAD to resolve the credentials). In attempting to use SSO I am assuming that SSO must in some way be synched with my database (otherwise how does it pass any password changes applied in SSO to the database?)
Given that it's a base install (SSO) the only login I have there is the default orcladmin account. So I am trying to figure out how to get SSO to pass an acceptable login name/password to my application. My first attempt has been to create a user in OID that matches the DB login to see if SSO passes these on login - maybe I'm completely missing the point here??
...After login you get redirected to "http://<MY_SSO_HOST>:7777/sso/auth"? That's not right..
I have created/registered the application as per the how to guide using <my app name>.<my host>:<port> and setting the success URL to http://<my host>:<port>/pls/<mydad>/<my schema>.<custom success proc>
When I fire up my browser and go to http://<my host>/pls/<mydad>/f?p=9900:1 it sends me to the SSO login page. After entering my username and password I then end up with a HTTP 404 - not found page with the URL "http://<MY_SSO_HOST>:7777/sso/auth".
..You should think about getting to 10.2 at least, ..
Agreed but when I tried to upgrade the other day it fell in a big heap - so I backed it out to 10.1 again.
..I think I know what you mean. You installed the SSO SDK in a schema local to one workspace..
That is correct - had to do it as my instance has multiple applications and I want to check it works on this one before breaking anything else!
..No, that's not always the case. If you find that putting '80' in works in your configuration and leaving it out doesn't work then put it in..
I tried initially without the 80 but it threw errors whenever I tried to connect (these errors were APEX ones not SSO). On an off chance I put the 80 in there and presto it worked (in the sense that it redirected me to SSO anyway).
..Your application's use of a DB login/password is incongruous with using a different authentication method -- SSO or any other...
Given the constraints mentioned earlier (answer to first question above) I don't really have much choice. I have an Oracle application that uses DB accounts to authenticate users and authorize thier use of the app modules. What I need to do is 'wrap' and APEX application around this Oracle application to make it SOX compliant (it does not currently enforce password aging/structure etc.) So.. I was thinking that SSO might be the answer.
If SSO (used with OID) can enforce password aging and policies my intent is to have SSO 'manage' the user passwords for my APEX app (and it's underlying Oracle application). Hence the question about synching SSO with the underlying DB accounts. I thought the whole point of SSO/OID was to allow various enterprise apps to have thier authentication layers 'managed' by SSO - again maybe I'm misinterpreting this..
..if your application is working now with a non-SSO authentication scheme, then it should continue to work the same with SSO because after authentication, APP_USER is FRED in both cases..
Agreed - but how does SSO "know" to let a given user have access to that particular application?
Paul

Multi URL-Based Portlet with Single Sign-On?

It seems I can get past part of my previously mentioned problem by using the method in the link below for 'basic authentication'.
http://portalstudio.oracle.com/pls/ops/docs/FOLDER/COMMUNITY/PDK/ARTICLES/HOW.TO.BUILD.URLBASED.PORTLET.WITH.SSO.TO.BASIC.AUTH.HTML
There they specify this link.
http://host.domain:port/servlet/metalink
Now if I should have
http://host.domain:port/servlet/metalink/pageA
http://host.domain:port/servlet/metalink/pageB
http://host.domain:port/servlet/metalink/pageC
It wouldn't be nice to have to add all of them.
Any ideas?
I should give it a rest. I'm tirD. bye.

Hi,
The pageURL under the showPage needs to point to the final destination URL that you need to render. The loginURL under authentication needs to point to the login page where you will submit the user/passwd.
You can view a step-by-step demo on the PDK from:
http://portalstudio.oracle.com/pls/ops/docs/FOLDER/COMMUNITY/PDKGENERAL/PDKHOME/PDKDEMOS2/DEMOSOURCE/PDKURL/FINANCEAUTHPORTLET/YAHOOFINANCEAUTHDEMO_VIEWLET.HTML
and other demos too from:
http://portalstudio.oracle.com/servlet/page?_pageid=350&_dad=ops&_schema=OPSTUDIO&9054_PDKHOME_39847486.p_subid=176584&9054_PDKHOME_39847486.p_sub_siteid=73&9054_PDKHOME_39847486.p_edit=0#PDKURLDEMO

BACK Button causing problem with Single Sign on using STS Service

Hi Our application is using federated claim based authentication, and after logging into our default page using STS Authentication, we click a link inside our page, we get the new page, then we click BACK button but the Browser shows a blank page, The link below is shown by the URL and it shows it as a Working page
http://bi-wif.biintegration.com/STS/?wa=wsignin1.0&wtrealm=http%3a%2f%2fBIIntegr ation3.biintegration.com%2fApps%2f&wctx=rm%3d0%26id%3dpassive%26ru%3d%252fApps%2 52fLogin.aspx&wct=2013-02-26T12%3a04%3a52Z
If we click the back button again then the page is shown
The Browser version is 5.1.7 running on windows
This happens intermittently, The screenshot is attached

<ORACLE_HOME>/opmn/bin/opmnctl status
Processes in Instance: asinst1.ssoserver.knaapo.ru
------------------------------------------------+---------
ias-component | process-type | pid | status
------------------------------------------------+---------
DSA | DSA | N/A | Down
LogLoader | logloaderd | N/A | Down
dcm-daemon | dcm-daemon | 2983 | Alive
OC4J | OC4J_SECURITY | 3221 | Alive
HTTP_Server | HTTP_Server | 2980 | Alive

Want to integrate Primavera P6 EPPM with Single Sign-on

Similar Messages

Maybe you are looking for