Java Authentication + Authorization Services (JAAS) for E-Business Suite (OpenWorld 2008 Recap)

I'm highlighting OpenWorld 2008 presentations that cover some of the most popular E-Business Suite technology stack topics. A catalog of all of the Applications Technology track sessions with links to the presentations is available here:

Our Applications Technology Group announced an important set of new authentication capabilities for Java-based E-Business Suite extensions and custom programs at OpenWorld this year.  Veshaal Singh, Director in our Applications Technology Group, discusses the new capabilities and how they relate to the E-Business Suite's existing security model in this presentation:

Architecture diagram showing authentication and authorization flow for new JAAS LoginModule for E-Business Suite

Veshaal covers the following topics in his presentation:

  • Security for custom development using ADF
  • Implementation challenges and existing solutions:
    • Example: EJBs running in a separate OC4J instance on an external Healthcare platform
    • Getting access to the APPS schema
    • Using the existing EBS responsibilities and function security in custom programs or extensions
    • Developing or extending E-Business Suite using J2EE
  • Authentication vs. authorization
  • Overview of the existing E-Business Suite Security model
    • Function security
    • Data security
    • Role Based Access Control (RBAC) and use cases
  • Java Authentication and Authorization Services (JAAS)
    • Technical overview
    • New lightweight LoginModule for JDK or J2EE environments
    • Supports JAAS authentication via AOL Security
    • Supports JAAS Authorization via UMX roles
    • Architecture and flow
    • Works for Oracle E-Business Suite Release 11i and 12

Related Articles

Comments:

Hi Steven,

I looked at the presentation, but there is no details of where to get the LoginModule specific to EBS, or any examples - can you provide a link?

PS. Same question asked by someone else on Forums http://forums.oracle.com/forums/thread.jspa?threadID=845964&tstart=0

Regards,
Gareth

Posted by Gareth Roberts on January 15, 2009 at 02:58 PM PST #

Hi, Gareth,

Sorry for the delay in replying. This somehow got buried in my inbox.

This new JAAS authentication plug-in for the E-Business Suite was previewed at OpenWorld but isn't available publicly yet. I'm following up with Veshaal Singh, the ATG Product Manager who owns this product, for details on how you can get your hands on this plug-in when it's released.

You're welcome to monitor or subscribe to this blog for updates, which I'll post as soon as soon as they're available.

Regards,
Steven

Posted by Steven Chan on February 06, 2009 at 08:22 AM PST #

Post a Comment:
  • HTML Syntax: NOT allowed
About

Search

Categories
Archives
« April 2014
SunMonTueWedThuFriSat
  
1
4
5
6
7
8
9
10
11
12
13
14
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today