Web Based Application Single Sign on With Enterprise Portal

Good day Developers,
My question is really a two part question so forgive me in advance for asking in one post as I think they are relative to each other. My project is currently exlporing the creation of functionality that will allow the following:
1. We want to allow a secure Web Based application possessing the abilitiy to auithenticate the user into Enterprise Portal and by passing the login screen to get to a landing page/iview in our Enterprise Portal instannce.
2. We want the abilitity to perform a check of the user and create the user in the enterprise portal on the fly if they do not already exist.
So far in my research I've come across tools and white papers mentioning the use rof oAuth and OpenID. Is that the right way to tackle these two items. Thanks for your help in advance.
JD

Hi
1. You can do SSO between you application and portal using Verisign or third party authentication tool. I am not pretty sure how landing page and all will work as you mentioned.
As portal is web based, you can deply your application in portal server. So that you will not need any other authentication tool.Also you can save effort , cost.
2. By deploying application in portal also you do not have to concentrate on User management, which is itself a huge effort you have to put. Else you can go for third party tools like Identity management or ADS.
-Yogesh

Similar Messages

How to integrate single sign on with third party system

we are in the process of implementing istore application. we already have home grown isupport application to contact support personnal for any issues. Now we are wondering how do we integrate oracle applications single sign on with our third pary system. Is there any recommendation provided by oracle to achieve the same.

We too are in the process of implementing iStore with SSO features.
And if you believe me it seems to me as nightmare.
In our scenerio we are intgrating this SSO with Third party access control too (AD and Siteminder). I would request you to please respond me on the following mail id , so we can share our experince which will help us in our implementation
[email protected]
regards and thanks in advance
Vikas Deep

How to pass credentials/saml token access sharepoint web service ex:lists.asmx when sharepoint has single sign on with claims based authentication

How to pass credentials/saml token exchange to the sharepoint web service ex:lists.asmx when sharepoint has single sign on with claims based authentication
Identity provider here is Oracle identity provider
harika kakkireni

Hi,
The following materials for your reference:
Consuming List.asmx on a claims based sharepoint site
http://social.technet.microsoft.com/Forums/sharepoint/en-US/f965c1ee-4017-4066-ad0f-a4f56cd0e8da/consuming-listasmx-on-a-claims-based-sharepoint-site?forum=sharepointcustomizationprevious
Sharepoint Claims based authentication and Single Sign on
http://social.technet.microsoft.com/Forums/sharepoint/en-US/2dfc1fdc-abc0-4fad-a414-302f52c1178b/sharepoint-claims-based-authentication-and-single-sign-on?forum=sharepointadminprevious
Sharepoint Claim Based Authentication Web Service issuehttp://social.msdn.microsoft.com/Forums/office/en-US/dd4cc581-863c-439f-938f-948809dd18db/sharepoint-claim-based-authentication-web-service-issue?forum=sharepointgeneralprevious
Best Regards
Dennis Guo
TechNet Community Support

Authentication between Single Sign-On and Web based applications

Hi everyone,
I need to create a way in Portal 10g (10.1.2.0.2) that allow me to do the following:
Once the user is logged on Portal (against Single Sign-On - SSO) he doesn't need to retype his username/password when he access a web based application throught the portal, in my case, an ASP application (not .NET, just ASP).
I made a test creating a External Application in SSO and after publishing this portlet (external application) inside portal.
It worked, BUT I was prompted to inform username/password to log on the aplication.
So, the user end up entering his password twice.
Does anybody know a way to acomplish this task?
The documentation I'm researching is:
Oracle Application Server Single Sign-On
Administrator's Guide
10g Release 2 (10.1.2)
B14078-02
Oracle Application Server Single Sign-On
Security Guide
10g Release 2 (10.1.2)
B13999-03
Thank you very much,
Diogo Santos.

have figured out how to secure any HTML, ASP, PHP, CFM, etc. web page again Portal / OID using the PDK toolkit.
Using AJAX (Asynchronous JavaScript and XML) and one Oracle Stored Procedure just adding a simple Javascript call to any HTML, ASP, PHP, etc. web page can secure it via Oracle SSO (OID). Access to any secured web page will require that it to be linked from an authenticated Portal session or a page opened in an authenticated Portal session.
This process can be easily modified to add in group security etc. This is just my starting point.
1) Create a stored procedure
# Make sure it has access to portal.wwctx_api.is_logged_on
CREATE OR REPLACE PROCEDURE login_ajax_check (
display_error IN number default NULL) AS
BEGIN NULL;
If portal.wwctx_api.is_logged_on = false then
htp.prn('DENY');
ELSE
htp.prn('ALLOW');
END IF;
Exception when others then htp.p('DENY');
END;
2) Use this Javascript in any page you wish to secure.
<-- Begin Paste Here -->
<script>
var allowgo=2
function ajaxCallRemotePage(url)
if (window.XMLHttpRequest)
// Non-IE browsers
req = new XMLHttpRequest();
req.onreadystatechange = processStateChange;
req.open("GET", url, false);
req.setRequestHeader("If-Modified-Since", "Sat, 1 Jan 2000 00:00:00 GMT");
req.send(null);
else if (window.ActiveXObject)
// IE
req = new ActiveXObject("Msxml2.XMLHTTP");
req.onreadystatechange = processStateChange;
req.open("GET", url, false);
req.setRequestHeader("If-Modified-Since", "Sat, 1 Jan 2000 00:00:00 GMT");
req.send();
else
return; // Navigateur non compatible
// process the return of the "ajaxCallRemotePage"
function CheckPortal()
ajaxCallRemotePage('[Your page calling the procedure from above]');
function processStateChange()
if (req.readyState == 4)
if (req.status == 200)
if (req.responseText.substring(0,4) == 'ALLO')
allowgo = 0;
else
allowgo = 1;
function doPage()
if (allowgo==1)
window.location='[Your login or error page]';
CheckPortal();
doPage();
</script>
<-- End Paste Here -->
That's it!!! Super easy. It works great too.
Larry Schenavar
[email protected]

How enabled Single Sign-On with a System SAP WAS ABAP (Run application BSP)

Hi.
I need to run any application BSP from a System SAP WAS ABAP, without entering SAP user and password. Using the windows authentication and without SAP Enterprise Portal.
What authentication methods I have to apply for enabled Single Sign-On with a System SAP WAS ABAP?.
And How can I enabled this method?.
Best regards.
Luis Gomez.

Hi Ticiano,
SAP WebAS ABAP supports a number of authenticaiton mechanisms. See
[http://help.sap.com/saphelp_nw04s/helpdata/en/02/d4d53aa8a9324de10000000a114084/frameset.htm]
A number of these authentication mechanisms can be combined with Windows authentication (e.g. SNC, client certificates, ...).
The decision what mechanism fits best depends on critieria like
- SAP server platform
- security requirements
- extensibility (should same authentication mechanism be used for future SAP environments, which will be E-SOA based)
- authentication from outside company domain
- Use of SAP security library (SAPcryptolib)
You may want to look at the SAP Software Solution Partner Catalog, if you look for certified SSO solution vendors for SAP.
Best regards,
Peter

Setting up BusinessObjects Enterprise 3.1 for Single Sign On with Xcelsius

Hi all
Does anyone have any documentation and/or whitepapers that documents the setting up BusinessObjects Enterprise 3.1 for Single Sign On with Xcelsius Dashboards (xcelsius accessing BusinessObjects universe data through QAAWS and Live Office..
Thank you for your help.
Kind regards,
Dean

Based on the replies in this thread I'm guessing that there is someone out there that has gotten SSO to work with Xcelsius? If so could you please post the details of how that was achieved?
When we purchased Xcelsius we were under the impression that it supported SSO but have never been able to get it to work and finally had SAP tell us that Xcelsius did not support SSO.
Our understanding is that in order to bypass a login for Xcelsius you have to use QaaWS as the datasource and hardcode an enterprise id and password.
LiveOffice supports SSO but not when it's used as a datasource within Xcelsius.

Oracle Application Single Sign-On

Dear All,
We have a requirement that there should be single sign-on for the users to use both the Oracle and non-Oracle Applications. We are using Oracle Application Server 10g at the back end.
How to enable single sign-on. Is there any tool that we need to install.
Pls guide us as we are entirely new to this process.
Regards,
Rajani

Hi,
You need to install and configure Oracle Internet directory and Single Sign On compontents of Oracle Application server 10g in order to have the Single Sign On working with Oracle Applications. After the Oracle Application Server Infrastructure tier installation there is addition integration steps you need to follow to integrate the Single Sign on with Oracle E-business suite. You can use DIP features ( Directory Integration and Provisiotion) to integrate with Third party directory server like Micrososft AD, Sun directory server etc. for Integrating the non oracle based application i think you have to use oracle single sign on API and you need to do bit of coding as well. You can also enble single sign on for database users but this requires advance security option enabled on the Database side and finally you can integrate Single sign on for OS users as well.
Raj

Partner application single sign-on and Oc4j

hello,
I'm trying to test portal's partner application single sign-on, following the examples inside the "Oracle9 iAS Single Sign-On Application Developers Guide":
With Tomcat as jsp engine everything works fine, but with Oc4j when I try to enter the protected jsp page i have this exception:
oracle.security.sso.enabler.SSOEnablerException: java.lang.IllegalStateException: OutputStream already retrieved
     at SSOEnablerBean.getSSOUserInfo(SSOEnablerBean.java:153)
     at SSOEnablerJspBean.getSSOUserInfo(SSOEnablerJspBean.java:57)
     at /protetta.jsp._jspService(/protetta.jsp.java:37) (JSP page line 4)
Any suggestion?
Thanks in advance.

I get the same problem with my partner application. It runs fine on JServer but I get the following problem on oc4j:
oracle.security.sso.enabler.SSOEnablerException: java.lang.IllegalStateException: OutputStream already retrieved
at oracle.br.aerochain.sso.SSOEnablerBean.getSSOUserInfo(SSOEnablerBean.java, Compiled Code)
at oracle.br.aerochain.sso.SSOEnablerJspBean.getSSOUserInfo(SSOEnablerJspBean.java, Compiled Code)
at /jsp/papp.jsp._jspService(/jsp/papp.jsp.java, Compiled Code)
at com.orionserver[Oracle9iAS (9.0.2.0.0) Containers for J2EE].http.OrionHttpJspPage.service(OrionHttpJspPage.java, Compiled Code)
at com.evermind[Oracle9iAS (9.0.2.0.0) Containers for J2EE].server.http.HttpApplication.serviceJSP(HttpApplication.java, Compiled Code)
at com.evermind[Oracle9iAS (9.0.2.0.0) Containers for J2EE].server.http.JSPServlet.service(JSPServlet.java, Compiled Code)
at com.evermind[Oracle9iAS (9.0.2.0.0) Containers for J2EE].server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java, Compiled Code)
at com.evermind[Oracle9iAS (9.0.2.0.0) Containers for J2EE].server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java, Compiled Code)
at com.evermind[Oracle9iAS (9.0.2.0.0) Containers for J2EE].server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java, Compiled Code)     at com.evermind[Oracle9iAS (9.0.2.0.0) Containers for J2EE].server.http.HttpRequestHandler.run(HttpRequestHandler.java, Compiled Code)
at com.evermind[Oracle9iAS (9.0.2.0.0) Containers for J2EE].util.ThreadPoolThread.run(ThreadPoolThread.java, Compiled Code)
Did anyone get a solution for this?
TIA

Client/Server to Web-Based application Conversion

Hi! Everyone,
I have couple of questions for you guys.
Our Client had recently upgraded Forms 4.5 to 6i to move from Client/Server based application to Web based application.
They are using Forms Server 6i Patch Set 1, OAS 4.0.8.1, Windows NT Service Pack 5 and Oracle 7.3. They are facing the following error every now and then, when they run the forms,
"FRM-92100: Your connection to the server was interrupted. This may be the result of a network error or a failure on the server.You will need to re-establish your session."
Please let me know what might be causing the above error. The only problem i can think about might be Oracle 7.3. If i am right only Oracle 8 and above supports Forms 6i.
Can anyone let me know some tips and/or techniques to upgrade Forms 4.5 to 6i. If there are any important settings/steps which we might have over looked during the upgrade, please list them.
Any kind of help is greatly appreciated.
Thanks,
Jeevan Kallem
[email protected]

Most of the code is use with no changes at all.
See otn.oracle.com/formsupgrade
Regards
Grant Ronald

Registering the Web based application as a Partner Application

Good day
I went through the suggested documentation of registering a
web based application as a partner application of the SSO Login Server.
I installed the SSOSDK.JAR and went through the demo application (JSP Demo)
which consists of the following programs :
papp.jsp
ssoinclude.jsp
ssoEnablerJspBean
SSOEnablerBean
SSOSignon
As per the technical documentation,I register this demo application as a
partner application.
1 - The source code of the papp.jsp checks for the existence of the user
through method of ssoEnablerJspBean [getSSOUserInfo(request, response)] which
calls method of SSOEnablerBean [getSSOUserInfo (request, response) and this
method calls getUserInfo(p_request) of SSOEnablerBean (the same program) to
check the existence of the application cookie.
2 - If it doesn't exit , it redirect it to the SSO Login page for user
authentication.Once the user is authenticated, a SSO login cookie is created on
the client's browser and redirects back to the SSOSignOn.
3 - The SSOSignOn program creates the application cookie and redirects back to
the entry point of the demo application which is papp.jsp.
My Questions are as follows :
1 - Instead of creating a session object within my web based application to hold some
information used between the different pages, can I define them in the
application cookie? kindly advise? Is there any limitation for the length of
the application cookie? If yes, what will be the risk?
2 - The SSOSignOn program is calling a method in the SSOEnablerBean
[setPartnerAppCookie(response, request). Within this method , it is retrieving
the parameters values of the request object as :
request.getParameterValues("urlc")[0];
What is the role of this [urlc]? Is it hard coded? Can I change it?
3 - In order to ensure that I am still dealing with the same user, shall I put
the above security check procedure on each page of my weeb based application? Kindly advise?
Thanks in advance for your prompt feedback
regards

Dear Paul
I think there is a misunderstanding regarding the last correspondence.
I am talking about the customized home page of the PORTAL and not the home page of my web based application (JSP) .So in this case, Am I able to use the customized home page which contains a login portlet instead of the default Login page of the SSO Login Server.Kindly advise!!!
On the other hand, I am facing a problem during the surfing of the web based application.
The web based application consists mainly of two packages :
Package I : Bank.counter which contains a set of jsp pages.
JSP_HOME_COUNTER (MAIN PAGE WHICH CONTAINS 2 FRAMES)
JSP_LEFT_FRAME_COUNTER
JSP_MAIN_FRAME_COUNTER
JSP_MAIN_FRAME_COUNTER_DETAIL
Package II : Bank.portfolio which contains a set of jsp pages.
JSP_HOME_PORTFOLIO (MAIN PAGE WHICH CONTAINS 2 FRAMES)
JSP_LEFT_FRAME_PORTFOLIO
JSP_MAIN_FRAME_PORTFOLIO
Please note that the SSO classes are residing under the first package.
As agreed on in the third question, I am including in each page of my web based application, a security check procedure as follows :
<%@ include file="ssoinclude.jsp" %>
<%
if(usrInfo == null)
response.getWriter().println("<center>User information not found</center>");
else
my jsp code.......
%>
Please note that all the jsp page of the portfolio package are pointing to the SSO classes as follows :
<%@ include file="../counter/ssoinclude.jsp" %>
<%
if(usrInfo == null)
response.getWriter().println("<center>User information not found</center>");
else
my jsp code.......
%>
Once I invoke the JSP_HOME_COUNTER , it will render the JSP_LEFT_FRAME_COUNTER page and
JSP_MAIN_FRAME_COUNTER page which invokes the SSO Login page. Once the user has been authenticate, the result of the JSP_MAIN_FRAME_COUNTER is rendered successfully. The result contains an hyperlink to the
JSP_MAIN_FRAME_COUNTER_DETAIL page. As the user has been authenticated , this page is rendering automatically the result without displaying the SSO Login page. (Perfect as of now!!).
Once I invoke the JSP_HOME_PORTFOLIO from the JSP_HOME_COUNTER, it runs the security procedure without any rendering of the SSO Login page (fine!!) but redirects me back to JSP_HOME_COUNTER instead of rendering the result of the JSP_HOME_PORTFOLIO.
please note that the m_requestUrl variable in the SSOEnablerJSPBean class has been assigned the folowing value : JSP_HOME_COUNTER
Kindly advise .

The Web Dynpro application was called up with the wrong URL parameters

Hi all,
I am using the systems below:
ERP STACK :16
EHP : 4
EHP SP Stack :4
EA-HR * : 604(SP12)
SAP-HR * :604(SP12)
XSS JAVA components : SAP ESS 603 SP05
SAP MSS 600 SP16
PCUI_GP 603 SP05
Business Package : BP ERP05 ESS 1.41 SP04
BP ERP05 MSS 1.41 SP04
BP ERP05 COMMON PARTS 1.41 SP04
I am getting below error after clicking on the appraisal document:
App. Called Up Incorrectly
The Web Dynpro application was called up with the wrong URL parameters.
Note
Enter the URL parameters and their use.
You can find more information on the functions that you can perform in the catalog for appraisal templates in the Implementation Guide (IMG) for Objective Setting and Appraisals under Edit Forms.
I already applied the below notes also:
1468466 Performance Management Launchpad Configuration
1463821 Performance Management Portal Configuration
1416756 OBN Configuration in Performance Management
1408243 Configuration for object-based navigation
Plz advise me??
Thanks,
Anumit

can you paste the exact error. also you can take a HTTP trace and see which resourse or UWL is being launched!

My firefox crashed when upload file on our web based application. This happen on two PC, even during firefox safe mode the problem still exist. But the problem

Dear All,
My firefox (version 23 on win 7) crashed when upload file on our internal web based application. This happen on two PC, even in firefox safe mode the problem still exist. So, my first conclusion the problem nothing to do with extension. here the crash ID https://crash-stats.mozilla.com/report/index/81220865-36c0-4e10-a484-6d27e2131023 and https://crash-stats.mozilla.com/report/index/86d2b779-9730-4d2c-b276-a86d42131023. I wonder if this happen because jquery modul in our web based application. But when I tried on my laptop, the problem dissapear. I tried to replicate same situation on different server, I mean I put the exact same application source to other server, never meet the same problem. Thus, I suspect may be it related to antivirus that installed in our network which is kaspersky. I am googling, never meet the clue.
If you meet the same problem, please help me.
I am so sorry for my poor english.
Him Him

The crashes are a problem with the winhadnt.dll file (OCular Agent from TEC Solutions Limited) as you can see in the crash reports.
*http://www.freefixer.com/library/file/winhadnt.dll-52397/

Integrate Single Sign-On with Oracle E-Business Suite Release 12.

Hi
How to integrate oracle Single Sign-On with Oracle E-Business Suite Release 12 , give links and ideas about this ,
Thanks
Edited by: user12235518 on Feb 19, 2012 10:10 PM

How to integrate Single Sign-On with Oracle E-Business Suite Release 12 , give links and ideas about this ,Integrating Oracle E-Business Suite Release 12 with Oracle Access Manager 11gR1 (11.1.1.5) using Oracle E-Business Suite AccessGate [ID 1309013.1]
Integrating Oracle E-Business Suite Release 12 with Oracle Internet Directory and Oracle Single Sign-On 10gR3 (10.1.4.3) [ID 376811.1]
Troubleshooting Oracle Application Server 10g SSO and OID with Oracle E-Business Suite Release 12 [ID 380487.1]
Thanks,
Hussein

Developing Web based applications using developer 6.0

How best i can use developer 6.0 as a web based application. I
have oracle web application server 4.0. Is it possible to
develop forms in 6.0 and use through the web application server.
null

T.Pavan Kumar (guest) wrote:
: How best i can use developer 6.0 as a web based application. I
: have oracle web application server 4.0. Is it possible to
: develop forms in 6.0 and use through the web application
server.
Yes, it's possible and it runs.
You will need:
- Application Server 4.0.7 or above (with 4.0.7 without patch,
do not install it on Win NT with SP4, it doesn't run
- Developer Server (may be it is not on your distribution CD for
Developer, but you can download or order it from OTN)
- JInitiator (the Oracle Java PlugIn, also available from otn)
for your end user's browser
Tip:
look very carefully at the documentation AND readmes. Also, if
you do this job for the first time, be prepared for some days of
work before your first form runs as a java applet...
peter
null

Conversion of forms5.0 to web based application

dear folks,
i have an existing application which runs on forms 5.0. i want to
convert it to a web based application. i do not want to rewrite
the scripts.if some of you could tell me the details about how to
go about it.
null

I am not sure if there is any tool to do that.
You can delete WebSphere specific xml files from ear/jar and open it in Weblogic's builder tool. Weblogic Builder is a GUI tool. Helps you assign values for deployment parameters, Transaction attributes, JNDI names and so on. Then you can generate deployment descriptors. Subsequently you can modify the descriptors as and when you want.

Web Based Application Single Sign on With Enterprise Portal

Similar Messages

Maybe you are looking for