Oracle Access Manager 11.1.1.5 Certified with E-Business Suite 12

For those of you to whom I had the pleasure of speaking at Oracle OpenWorld last week, I promised you would likely see good news by the time you returned home from the conference. Never one to miss out on making people smile, I am happy to announce that Oracle Access Manager 11g Patchset 1 (OAM 11.1.1.5) is now certified for use with Oracle E-Business Suite Release 12.

As with our original 11g certification, there are two possible ways to integrate with Oracle Access Manager 11g.

First Time Users and Existing Users

If you are implementing single sign-on for the first time, or are an existing OAM 11g user, you may integrate with Oracle Access Manager using OAM WebGate and the Oracle E-Business Suite AccessGate Java application, which has now been upgraded to version 1.1.1.0.


The new version of EBS AccessGate contains bug fixes and enhancements over 1.1.0.0. As always, this component is free of charge for licensed EBS customers.

The architecture remains exactly the same as it was for Oracle Access Manager 11.1.1.3, so if you have already integrated EBS with OAM 11.1.1.3, the upgrade will be very quick and straightforward.

Users Upgrading from Oracle Single Sign-On Server 10g

If you are currently using Oracle Single Sign-On Server 10g (OSSO 10g) with E-Business Suite Release 12.0.6 or later, you may choose to migrate your existing single sign-on infrastructure to OAM 11g PS1. In this scenario, you will continue to use the mod_osso agent for authentication against OAM, and no changes are required to your Oracle E-Business Suite or other partner applications. This is a great way to quickly migrate from OSSO 10g, but this approach is only available if you have already implemented single sign-on for EBS using OSSO 10g.


If you are still using OSSO 10g, now is definitely the time to migrate to OAM 11g. At the time of this writing, OSSO 10g is scheduled to drop into sustaining support at the end of this year -- less than three months from now. This migration can be done very quickly and with minimal impact. If you had problems with the migration to OAM 11.1.1.3, we have found that most of those issues are fixed in OAM 11.1.1.5, and the process is now much smoother.

The Latest and Greatest

We strongly recommend all OAM 11.1.1.3 users upgrade to this release at their earliest convenience, as this first OAM patchset includes many enhancements and stability fixes that greatly improve the Oracle E-Business Suite integration, especially if you are using Microsoft Active Directory or Windows Native Authentication.

In addition, we recommend applying BP01 (11.1.1.5.1) for the latest set of fixes which have also been validated with Oracle E-Business Suite.

Oracle Access Manager 10gR3

If you are among those customers who are still using OAM 10g with Oracle E-Business Suite, while waiting for a more direct migration to OAM 11g, there's good news for you, too. The latest release of E-Business Suite AccessGate, version 1.1.1.0, is now certified for use with OAM 10g, and brings the same fixes and enhancements -- including a new and improved global logout architecture -- to your environment, as well.

However, if you are on Release 11i, we still have no plans at this time to certify OAM 11g with that release. Hopefully your plans to upgrade to 12.1.3 are well underway by now.

Requirements

The requirements for OAM 11.1.1.5 integration are otherwise the same as for our earlier OAM 11.1.1.3 integration:

  • Oracle E-Business Suite Release 12.1 RUP 1 (12.1.1) or higher; or Release 12.0 RUP 6 (12.0.6)
  • Oracle Access Manager 11g PS1 (11.1.1.5), with BP01 (11.1.1.5.1) recommended
  • Oracle Internet Directory 11g PS2 (11.1.1.3) or higher; PS4 (11.1.1.5) recommended
  • Oracle WebLogic Server 11g (10.3.1) or higher, if using Oracle E-Business Suite AccessGate; PS4 (10.3.5) recommended

Note that Oracle Internet Directory 11g PS4 (11.1.1.5) is also certified, if you prefer to keep your identity management and access management tools at the same level.

References

For more information, refer to our My Oracle Support documents detailing the various integrations:

Related Articles


Comments:

Thanks a lot for keeping up the promise :)and thanks #2 for yet another informative session @ OOW. Truly enjoyed it. Please let us know if you hear anything interesting on Firefox certification against EBS.
$unthar....

Posted by Sunthar on October 12, 2011 at 07:25 AM PDT #

Thank you, Sunthar!

As for Firefox certifications, I believe we're still finalizing our strategy there. Part of it will depend on what Mozilla decides regarding their Extended Support Release (ESR) proposal. We'll keep everyone posted on this blog as soon as we have a more concrete direction from Mozilla.

Cheers,
Keith

Posted by Keith M Swartz on October 12, 2011 at 07:36 AM PDT #

Hi Keith,
Thank you so much for this valuable information. I would appreciate If you could throw some light on the following my queries?

- Is OID a mandatory component in the Oracle eBusiness Suite SSO implementation with OAM.
- Can ODSEE or OVD be used in-place of OID ?
- In the OAM-EBS integration, does OID play any important Role other than being the OAM user store? And I believe that OAM 11.1.1.5 supports ODSEE and OVD as its user stores.

Thanks.
Ashok

Posted by Ashok on October 12, 2011 at 04:27 PM PDT #

Ashok,

The answer to all three of your questions can be found in the related article in the list at the bottom of the post, titled "Why Does E-Business Suite Integration with OAM Require Oracle Internet Directory?"

It is specifically EBS that requires OID to be the used as the user store. OAM does support other LDAPs, and you can use those for the default store, the system store, or other authentication policies. But you must use OID as the identity store for the authentication policies used to protect EBS.

Cheers,
Keith

Posted by Keith M Swartz on October 12, 2011 at 06:47 PM PDT #

Hi Keith,

Thanks for your response. It helps me a lot.

-Ashok

Posted by Ashok on October 13, 2011 at 03:56 AM PDT #

Hi,

I'm working on setting up a SSO for kerberos authentication using the links "http://download.oracle.com/docs/cd/E12840_01/wls/docs103/secmanage/sso.html" or the part#E13707-05 - chapter 6, here we are trying to set up weblogic server for cross-platform authentication with MS-AD.
My Question is, R12.2 has weblogic server instead of OC4J, so does this mean the above solution of implementing SSO with kerberos authentication works for R12 too??
If yes then, OAM wouldn't be of benefit except for Policy management, external user authentication(Oracle Identity federation) etc.
Please help me understand this solution in bit more detail.

Regards,
Rajiv.

Posted by Rajiv on October 17, 2011 at 02:40 PM PDT #

Hi Rajiv,

What you are describing applies to WebLogic Server console authentication; however, Oracle E-Business Suite has its own authentication, and does not use WLS authentication or its embedded LDAP, so this will not work for EBS.

The purpose of E-Business Suite AccessGate is to provide a mapping between an LDAP user and an EBS user; that requirement continues to exist in Release 12.2. (I can't go into further details than this, as Release 12.2 has not yet been released.)

Thanks,
Keith

Posted by Keith M Swartz on October 17, 2011 at 03:11 PM PDT #

Hi Keith,

I have a requirement here to implement SSO between the following applications using the OAM 11.1.1.5

1. Oracle e-Business Suite 12.1.3 (iSupplier, iReceivables and iStore)
2. VCP ( Value Chain Planning )
3. Demantra
4. APCC ( Advanced Planning Command Center )

I am following the below url for configuring the OAM with Oracle e-Business Suite to implement SSO.
https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&doctype=BULLETIN&id=1309013.1

And VCP, demantra and APCC applications have been deployed independently on it’s own weblogic application servers (except Demantra whcih is deployed on Tomcat) on three different hosts.

I am trying to figure it out the SSO implementation approach for these 3 applications. I would like to know whether Oracle has got any out of box SSO implementation techniques for these applications like EBS.

I would appreciate if you could provide your valuable suggestion on this.

Thanks.

Posted by Ashok on October 18, 2011 at 11:14 AM PDT #

Hi Ashok,

At this time, Demantra does not support single sign-on integration using Oracle E-Business Suite AccessGate. (This is something I should add to our exceptions list.) As far as I know, VCP and APCC /should/ support it, however, but the details to configure those products to use OAM would be up to them to document, since they have their own deployment and login pages.

I suggest you raise an SR with EBS support to ask for a pointer to this documentation. In the meantime, I will also try to identify some additional information here and add it to our documentation in a future iteration.

Thanks,
Keith

Posted by Keith M Swartz on October 18, 2011 at 03:21 PM PDT #

Keith,

I see that you mention that OID 11.1.1.5 is certified as well. Is it certified with EBS 12.1.3? (in the ceritification matrices I just see that OID 11.1.1.4 is certified).

I'd like to keep things on the same level, and not have to have multiple version of WebLogic. I understand that OAM 11.1.1.5 requires WebLogic 10.3.5, while OID 11.1.1.4 just supports WebLogic 10.3.4

Am I correct with these assumptions? :)
Zach

Posted by Zach May on October 19, 2011 at 05:41 AM PDT #

Hi Zach,

You are correct in your assumptions, and yes, Oracle E-Business Suite 12.1.3 is certified with OID 11.1.1.5. The certification matrix is still in the process of being updated for both Oracle Access Manager 11.1.1.5 and Oracle Internet Directory 11.1.1.5, but yes, both of those versions are now certified, and they do use the same version of WebLogic Server.

However, it may be hard to go for a long time without having multiple versions of WebLogic Server, in general. Many of the Fusion Middleware products evolve at different rates, and each one is typically built on the version of WebLogic corresponding to that patch level. For example, OID 11g Patchset 4 requires WebLogic Server patchset 4 -- not PS 3 and not PS 5. (I've heard that this may be changing for the next round of patchsets, but I can't say whether or not that is definite.)

As a result, the Fusion Middleware folks recommend that you maintain separate middleware homes for each of these components -- OID and OAM -- so that they may be upgraded independently. For example, if you want to upgrade to OID 11.1.1.6, which may be available before OAM 11.1.1.6 is available, you would typically need to deploy that on top of WebLogic Server 10.3.6. So if OAM and OID share the same middleware home and the same WebLogic Server, you may be unable to upgrade one without the other.

Cheers,
Keith

Posted by Keith M Swartz on October 19, 2011 at 06:08 AM PDT #

Keith,

Thanks for the clarification, that makes sense. So I'll be better off just creating 2 middleware homes and keeping them separate.

And I see that the EBS AccessGate can/should go on the OAM instance of WLS.

Thanks,
Zach

Posted by Zach May on October 19, 2011 at 06:14 AM PDT #

Hi Zach,

"And I see that the EBS AccessGate can/should go on the OAM instance of WLS."

Can -- yes. Should -- that's harder to say. There are many other considerations to make here: network architecture, number of EBS instances, performance, administration siloing, future upgrades, and so on. It definitely will work, but there are too many variables for me to comfortably say whether this is a better choice over, say, having a dedicated server for your Oracle E-Business Suite AccessGate deployments, or even co-locating them with each corresponding EBS instance.

We strive to be flexible!

Keith

Posted by Keith M Swartz on October 19, 2011 at 06:24 AM PDT #

Keith,

Is it possible to run multiple AccessGates through one WebGate? We have multiple E-Business Suite environments that we'd like to configure. I see the steps for configuring multiple AccessGates in Note 1309013.1, but am unclear on how to make them all run in one WebGate.

Thanks,
Zach

Posted by Zach May on November 02, 2011 at 07:29 AM PDT #

Zach,

Absolutely. It's one EBS AccessGate per EBS database, but only one WebGate is required for your entire company.

Each EBS AccessGate deployment has a corresponding configuration section on the web server where WebGate is installed that redirects the request to the right deployment, based on the context root. (This is step 3a in the My Oracle Support note.) So webgatehost:port/ebsauth_fin01 will redirect to the ebsauth_fin01 deployment, and webgatehost:port/ebsauth_test01 will redirect to the ebsauth_test01 deployment. The section you mentioned in the My Oracle Support document explains how to do this.

If you still don't understand the specifics, the best course of action would be to open an SR with one of our Support Analysts, and they can talk you through it in more detail.

Cheers,
Keith

Posted by guest on November 02, 2011 at 07:35 AM PDT #

Keith,

Thanks, I think I understand that part. The only section that I'm fuzzy on is in the Protected Resource Policy, and the Authentication Scheme setup, it asks for a "Challenge URL" and a "Failure URL". In the doc it says to put your context in there (ebsauth_sid), but I don't see where you can put multiple URLs.

Does this mean there needs to be multiple Authentication Schemes per AccessGate instance?

Zach

Posted by Zach May on November 02, 2011 at 07:51 AM PDT #

Zach,

From the document: "If you have multiple instances of Oracle E-Business Suite that you want to secure using Oracle Access Manager, you will need to repeat the steps ... for each additional Oracle E-Business Suite instance, starting with Step 1e."

That means ALL of the steps from 1e and onward; so yes, you need a separate authentication scheme and policies for each EBS AccessGate deployment.

Keith

Posted by Keith M Swartz on November 02, 2011 at 08:37 AM PDT #

Ok, great, thank you!
Zach

Posted by Zach May on November 02, 2011 at 08:38 AM PDT #

Hello Keith,

Is IBM tivoli access manager is certified as third party lDAP with Oracle access manager 11g on oracle ebusiness suite 12.0.6 ???

Thanks in advance.

Posted by mahesh on November 28, 2011 at 10:17 AM PST #

Mahesh,

Keith has moved to a different group within Oracle.

We do not explicitly test IBM Tivoli Access Manager with Oracle Internet Directory and Oracle Access Manager. This may be technically feasible, but your best bet would be to verify that IBM Tivoli Access Manager can be integrated with Oracle Access Manager with both IBM and the Oracle Access Manager groups directly.

Regards,
Steven

Posted by Steven Chan on November 29, 2011 at 09:06 AM PST #

thanks for the info steve
mahesh

Posted by mahesh on November 29, 2011 at 09:28 AM PST #

Steven, Keith,

I've successfully integrated 11g OAM single sign-on with EBS R12 with AccessGate and OID. My question is, is it possible now to use WNA for user authentication?

The documentation I've seen states that WNA requires the identity store to be Active Directory, but EBS requires the OID to be the identity store.

Is this possible today?
Thanks,
Zach

Posted by Zach on December 10, 2011 at 02:18 AM PST #

Zach,

My apologies for the delayed response.

It is possible to use WNA for user authentication. Both AD and OID are required for this integration. The two directories must synchronize user data. In OAM you will configure AD as the primary store and OID as the identity store for the EBS AccessGate authentication scheme. Please refer to the OAM documentation and support for additional instructions on how to integrate with WNA. NOTE: OAM 11.1.1.5.1 is required for WNA support.

Thanks.
~ep

Posted by Elke Phelps (Oracle Development) on December 27, 2011 at 08:54 AM PST #

Is WNA supported with OAM 11.1.1.?.? and EBS 11.5.10.2?

Posted by Glen on January 05, 2012 at 06:35 AM PST #

Glen,

Thanks for the inquiry. OAM 11.1.1.x is not certified with Oracle E-Business Suite R11i; therefore, WNA is not certified with this configuration either.

Regards,
~ep

Posted by Elke Phelps (Oracle Development) on January 06, 2012 at 08:31 AM PST #

Steven, Keith,

Earlier in the documentation in Note 1309013.1, it recommended using a 10g WebGate with AccessGate, OAM 11.1.1.5.1, etc...
I don't see that recommendation any longer. Are there any advantages or disadvantages of going with 11g WebGate?

Thanks,
Zach

Posted by Zach May on April 27, 2012 at 07:46 AM PDT #

Hi, Steven. Hi, Elke.

With respect to the EBS R12.1.3 / OID 11.1.1.5 / OAM 11.1.1.5 / WNA integration: I'm trying to follow Elke's advice:
1) OAM main identity store: AD (for WNA).
2) OAM AccessGate identity store: OID (for EBS integration).
3) Configure DIP to synch identity information from AD to OID.
4) Have AD be the source of record for identities and passwords. Other components would pull info from AD, but nothing external would write to AD.

If AccessGate is authenticating to OID, is it a requirement to synch passwords (i.e. Password Filter) from AD to OID so that AccessGate can authenticate? Would WNA fallback authentication (without Password Filter) be sufficient / acceptable / desireable?

My preference would be to have AD do the password validation, so I don't have to do the Password Filter, SSL the OID-AD connection, etc.

Thank you,

Jeff

Posted by Jeff on June 06, 2012 at 11:24 PM PDT #

Jeff,

Have you been able to implement as you describe?
I'm trying to figure out the installation steps for using OAM/OID 11.1.1.6 to provide SSO/WNA authentication to EBS 12.1.3 using AD sync to OID.

This is to replace an OSSO 10.1.4.3 SSO/WNA and odisrv AD to OID sync.

Thanks,
Glen

Posted by Glen Graffius on August 03, 2012 at 06:28 PM PDT #

Jeff,

I have implemented the same architecture except

1) OAM main identity store: OID (for WNA).- The same works without any password filter from AD-OID.

All my password authentication is happening from AD and authorization from OAM.

Let me know if you need any help.

Thanks
Saurabh

Posted by Saurabh Garg on August 16, 2012 at 08:24 AM PDT #

Any certification dates available for Oracle EBS with OAM + OIF 11gR2.

Posted by Mohamed Shahir on August 28, 2012 at 03:09 PM PDT #

Hello, Mohamed,

We're working on certifying Oracle Access Manager 11.1.2 with Oracle E-Business Suite Release 12 right now.

Oracle's Revenue Recognition rules prohibit us from discussing certification and release dates, but you're welcome to monitor or subscribe to this blog. I'll post updates here as soon as soon as they're available.

Regards,
Steven

Posted by Steven Chan on August 28, 2012 at 03:26 PM PDT #

Hi,

Our client is on EBS 11i currently. EBS 11i is integrated with OAM 10g through OSSO for Web SSO. The actual authentication/SSO is provided by OAM.

Now our client is upgrading to EBS 12. they want OAM also to be upgraded to OAM 11g.

I explored and found 2 methods (e.g. note ID 1388152.1) to integrate EBS 12 with OAM 11g:
1. with EBS AccessGate
2. using mod_osso agent (only for users upgrading from OSSO Server 10gR3)

Can you please throw some light on this ? Which method out of the above mentioned 2 methods is preferable (with pros & cons of both) ? Or suggest some other method, if you know.

Thanks
Andy

Posted by Andy on September 06, 2012 at 04:53 AM PDT #

Hi,

In one of the posts above, it is mentioned that "At this time, Demantra does not support single sign-on integration using Oracle E-Business Suite AccessGate.".

Does Demantra still does not support EBS AccessGate solution ?
If not using EBS AccessGate, then how to integrate Demantra with SSO ?

Thanks
Andy

Posted by Andy on September 10, 2012 at 03:51 AM PDT #

Hi, Andy,

I'm afraid that we don't have much visibility into Demantra certifications; this blog's authors are E-Business Suite specialists.

Demantra may have updated their certifications to include Oracle Access Manager by now. I would recommend logging a formal Service Request against the Demantra product to get an authoritative answer to this one.

Regards,
Steven

Posted by guest on September 10, 2012 at 08:58 AM PDT #

Hi

The above architecture works for EBS 12.1.3 with IDM 11g (OAM 11.1.1.5.1)for single node . The doc 1309013.1 also provides lot of details. But there is no reference or documents corresponding to High Availability solution IDM 11g with EBS Access Gate 1.1

For example
Two Node EBS with Loadbalancer and Two Node IDM Suite OAM11g with Loadbalancer and where would the AccessGate deployed. If I deploy the access gate on single server, then it becomes single point of failure. Also,oracle recommendation is not to use the EBS Midtier server, so it has to be in Oracle Access Manager Server. Is there architecture diagram depicting this.

There is the architecture in EDG for Webgate and not for AccessGate.
http://docs.oracle.com/cd/E21764_01/core.1111/e12035/whatis_im.htm#CHDCFJJC

We tested all the components in single server (OID / OAM / OIM / WebGate / AccessGate) in deveolopment. Similarly, trying to get all those in production in cluster with each server having all components (OID/OAM/OIM/Webgate/AccessGate). Is this supported? Is there any problem with this configuration.

Thanks
Chanth.

Posted by guest on October 17, 2012 at 04:40 PM PDT #

In the note 1309013.1, under section 9.2 there is a link for " create a JDBC multi data source" which points to creating the GridLink compared to multidatasource.
http://www.oracle.com/technetwork/middleware/weblogic/wls-jdbc-gridlink-howto-333331.html

Is this GridLink certified / supported with Accessgate 1.1.1 ( as part of patch#1279604).

Also, if supported, couple of screenshots including the " RAC database with SCAN address and apps datasource driver class "oracle.apps.fnd.ext.jdbc.datasource.AppsDataSource" will help people on the field. I am going through nightmare of putting together and still not working when creating the multidatasource either way.

I thought it will be nice to have it for others who are trying to get it working without much hassle.

Regards,
Chanth

Posted by Chanth on November 12, 2012 at 06:15 AM PST #

Hi,

Is E-business suite certified with eSSO? or can we implement eSSO for Oracle e-business suite R12.1.3.

Regards,
Rajiv.

Posted by guest on December 19, 2012 at 03:43 PM PST #

Hi Steven,
I have followed the "Integrating Oracle E-Business Suite Release 12 with Oracle Access Manager 11gR1 (11.1.1.5) using Oracle E-Business Suite AccessGate [ID 1309013.1]" document for my 12.1.3 DEV and TEST. The only thing that is missing is the functionality for self-service password changes. This functionality used to be there in OAM 10g, and now the note 1309013.1 says that I have to integrate OAM with other provisioning and password management tools to get this functionality. Do I have to integrate Oracle Identity Manager 11.1.1.5 with OAM 11.1.1.5 to get the APPS_SSO_CHANGE_PWD_URL. Your help is really appreciated.

Thanks Titan

Posted by Titan Shaba on December 21, 2012 at 10:52 AM PST #

Saurabh,

Would you be able to specify the documents and maybe the downloads you used to setup the OAM infrastructure as described? As usual, I'm having difficulty following the Oracle roadmap to this destination.

Thanks,
Glen

Posted by Glen Graffius on January 07, 2013 at 01:33 PM PST #

Hi,

Based on this blog, the requirements I need to migrate from OSSO 10.4.3.0 used for EBS SSO/WNA to OAM 11g are listed below. Would someone please provide the direct links to this software? These names and version numbers are a bit confusing. Of course, any other advises is appreciated.

Oracle Access Manager 11g PS1 with BP01 (11.1.1.5.1) recommended
Oracle Internet Directory 11g PS4 (11.1.1.5) recommended
Oracle WebLogic Server 11g (10.3.1) or higher, if using Oracle E-Business Suite AccessGate; PS4 (10.3.5) recommended

Thanks much,
Glen

Posted by Glen Graffius on January 07, 2013 at 04:57 PM PST #

Keith,

In this blog the requirements list:
Oracle Internet Directory 11g PS2 (11.1.1.3) or higher; PS4 (11.1.1.5) recommended

We need to implement SSO/WNA for EBS. Are we able to use Identity Management (11.1.1.6.0), which includes OID?

http://www.oracle.com/technetwork/middleware/downloads/oid-11g-161194.html

Thanks,
Glen

Posted by Glen Graffius on January 08, 2013 at 04:34 PM PST #

Hi,
ntegrated IDAM 11.1.1.5.0 with EBS r12 the sso was working fine but suddenly throwing error while accessing it Unable to redirect to sso login page. while accesing ebs sso loging page throwing following error
Error 500–Internal Server Error

java.lang.NoSuchMethodError: oracle.apps.fnd.ext.common.EBiz.getConnection()Ljava/sql/Connection;
at oracle.apps.fnd.ext.common.server.EBizHelper.getEBizInstance(Unknown Source)
at jsp_servlet.__oamlogin._jspService(__oamlogin.java:321)
at weblogic.servlet.jsp.JspBase.service(JspBase.java:34)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300)
at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:111)
at java.security.AccessController.doPrivileged(Native Method)
at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:313)
at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:413)
at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:94)
at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:161)
at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:136)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3715)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3681)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2277)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2183)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1454)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:178

Can you please help me how to resolve, where to check any pointers.

Thanks in advance…

Posted by guest on January 15, 2013 at 09:02 PM PST #

Hi, Guest,

I'm sorry to hear that you've encountered an issue with this.

We can provide general conceptual guidance here, but I'm afraid that this blog isn't the best place to get technical support for specific issues like the one that you're working through.

Your best bet would be to log a formal Service Request via My Oracle Support (formerly Metalink) to get one of our specialists engaged.

Please feel free to forward your Service Request number to me if it gets stuck in the support process for some reason.

Regards,
Steven

Posted by Steven Chan on January 16, 2013 at 08:42 AM PST #

Steven

Following was Posted by guest on October 17, 2012 at 04:40 PM PDT #, but did not see any response.
Could you confirm if EBS AG can be deployed in an HA configuration? Though the war file can be deployed in an WLS cluster, since EBS AG depends on DBC file for establishing a secure DB connection, we will need to have capability of providing multiple DBC files. Similarly the war file configuration requires appl_server_id be specified which will also accept only a single value.
I have even opened a couple of SRs for this, but no clear response yet.

--Posted by guest on October 17, 2012 at 04:40 PM PDT #---
The above architecture works for EBS 12.1.3 with IDM 11g (OAM 11.1.1.5.1)for single node . The doc 1309013.1 also provides lot of details. But there is no reference or documents corresponding to High Availability solution IDM 11g with EBS Access Gate 1.1

For example
Two Node EBS with Loadbalancer and Two Node IDM Suite OAM11g with Loadbalancer and where would the AccessGate deployed. If I deploy the access gate on single server, then it becomes single point of failure. Also,oracle recommendation is not to use the EBS Midtier server, so it has to be in Oracle Access Manager Server. Is there architecture diagram depicting this.

There is the architecture in EDG for Webgate and not for AccessGate.
http://docs.oracle.com/cd/E21764_01/core.1111/e12035/whatis_im.htm#CHDCFJJC

We tested all the components in single server (OID / OAM / OIM / WebGate / AccessGate) in deveolopment. Similarly, trying to get all those in production in cluster with each server having all components (OID/OAM/OIM/Webgate/AccessGate). Is this supported? Is there any problem with this configuration.

Regards,

Rajiv Grover

Posted by guest on January 22, 2013 at 09:19 AM PST #

Chanth,

Apologies for the delayed response. Thank you for your inquiries and the information you have posted for others. I'm sorry that you are having trouble with the configuration.

While the cluster configuration you reference is theoretically feasible, we currently do not have a certified document with procedures or a diagram for a high availability solution for this deployment. This request has bee received from others and has been added as an enhancement request.

Regards,
Elke

Posted by Elke Phelps (Oracle Development) on January 24, 2013 at 03:52 PM PST #

Titan,

Thanks for the inquiry. You are correct, the self-serivce password change funtionality is not available with Oracle Access Manager 11g. Per MOS Note 1309013.1, this functionality is avialable by integrating with Oracle Identity Manager.

Thanks.
Elke

Posted by Elke Phelps (Oracle Development) on January 24, 2013 at 04:00 PM PST #

Rajiv,

Thanks for the inquiry.

Oracle E-Business Suite is not certified with Orace Enterprise Single Sign On (ESSO).

Oracle E-Business Suite Release 12 is certified with Oracle Access Manager. Our current recommendation is to integrate E-Business Suite Release 12 with Oracle Access Manager 11gR2.

Regards,
Elke

Posted by Elke Phelps (Oracle Development) on January 24, 2013 at 04:11 PM PST #

Glen,

To download the necessary software, please execute the following steps:

1. Go to the Oracle Software Delivery Cloud:
https://edelivery.oracle.com/

2. Select a Product Pack: Oracle Fusion Middleware
Then, Enter your platform and click "Go".

3. Select Oracle Fusion Middleware 11g Media Pack for your platform
Then, click "Continue"

4. On this next screen, you will find all components listed.

Thanks.
Elke

Posted by Elke Phelps (Oracle Development) on January 24, 2013 at 04:19 PM PST #

Hi,

We are looking forward to implement Oracle EBS 12.2.3 with SSO on RHEL 6. But the certification matrix @ MOS does not show OID in the LDAP Services certification results for R12.2.3. Does it mean that OID is not certified with R12.2.3 on RHEL 6? Then what is the strategy to implement SSO for R12.2.3 on RHEL 6?

Or do we have to downgrade to R12.2.2 for implementing SSO?

Could somebody please suggest the correct way to go about this and also point to some documents.

Thanks

Sudip

Posted by guest on January 14, 2014 at 01:25 AM PST #

Post a Comment:
  • HTML Syntax: NOT allowed
About

Search

Categories
Archives
« July 2014
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
  
       
Today