Oracle Internet Directory 11gR1 11.1.1.6 Certified with E-Business Suite

[June 7, 2012 Update: Corrected typo in "Supported Configurations" section]

Oracle E-Business Suite comes with native user authentication and management capabilities out-of-the-box. If you need more-advanced features, it's also possible to integrate it with Oracle Internet Directory and Oracle Single Sign-On or Oracle Access Manager, which allows you to link the E-Business Suite with third-party tools like Microsoft Active Directory, Windows Kerberos, and CA Netegrity SiteMinder. 


For details about third-party integration architectures, see either of these article for EBS 11i and 12:

Oracle Internet Directory 11.1.1.6 is now certified with Oracle E-Business Suite Release 11i, 12.0 and 12.1.  OID 11.1.1.6 is part of Oracle Fusion Middleware 11g Release 1 Version 11.1.1.6.0, also known as FMW 11g Patchset 5.  Certified E-Business Suite releases are:
  • EBS Release 11i 11.5.10.2 + ATG PH.H RUP 7 and higher
  • EBS Release 12.0.6 and higher
  • EBS Release 12.1.1 and higher

Supported Configurations

Oracle Internet Directory 11.1.1.6.0 can be integrated with two single sign-on solutions for EBS environments:

  • Oracle Internet Directory and Directory Integration Platform from Fusion Middleware 11gR1 Patchset 5 (11.1.1.6.0) with Oracle Access Manager 10g (10.1.4.3) with an existing Oracle E-Business Suite system (Release 11i or 12.1.x).
  • Oracle Internet Directory and Directory Integration Platform from Fusion Middleware 11gR1 Patchset 5 (11.1.1.6.0) with Oracle Access Manager 11gR1 (11.1.1.5) with an existing Oracle E-Business Suite system (Release 12.0.6 or higher or 12.1.x).
  • Oracle Internet Directory (OID) and Directory Integration Platform (DIP) from Oracle Fusion Middleware 11gR1 Patchset 5  (11.1.1.6.0) with Oracle Single Sign-On Server and Oracle Delegated Administration Services Release 10g (10.1.4.3.0) with an existing Oracle E-Business Suite system (Release 11i, 12.0.6 or 12.1.x)

Oracle Access Manager strongly recommended

Oracle has two single sign-on solutions: Oracle Single Sign-On Server (OSSO) and Oracle Access Manager (OAM). Oracle strongly recommends that all new single sign-on implementations use Oracle Access Manager. Oracle Access Manager is the preferred solution going forward, and forms the basis of Oracle Fusion Middleware 11g. OSSO is no longer being actively developed and will not be ported to Oracle WebLogic Server.

Platform certifications

Oracle Internet Directory is certified to run on any operating system for which Oracle WebLogic Server 11g is certified. Refer to the Oracle Fusion Middleware 11g System Requirements for more details.

For information on operating systems supported by Oracle Internet Directory and its components, refer to the Oracle Identity and Access Management 11gR1 certification matrix.

Integration with Oracle Internet Directory involves components spanning several different suites of Oracle products. There are no restrictions on which platform any particular component may be installed so long as the platform is supported for that component.

References

Related Articles
Comments:

Hi Steven,
Thanks for this update. I am investigating installation at this very moment.
Q1.I noticed that in the first line of your 'supported configurations' you mentioned 11.1.1.5.0. You probably meant 11.1.1.6.0. Is that a typo?
Also document note 1309013.1 has not been updated yet.

Q2: OID 11.1.1.6.0 must be installed WLS 10.3.6. and OAM 11.1.1.5 (11.1.1.6 is not certified yet) must be installed in WLS 10.3.5.
Is it always better to have both products installed in seperate WLS homes and domains, because certifications for OID en OAM are not released together ?
Regards,
Andre Eveleens

Posted by Andre Eveleens on June 07, 2012 at 01:29 AM PDT #

Hi, Andre,

1. Thanks for catching that typo! Fixed now. Note 1309013.1 was last updated on May 25, 2012 and references OID 11.1.1.6 explicitly.

2. Yes, that's what I'd do. OAM and OID updates are released and certified independently, so the relatively small overhead of separate WLS homes will be more than paid for by the freedom of patching them independently.

Regards,
Steven

Posted by Steven Chan on June 07, 2012 at 04:46 PM PDT #

Steven,

With OID & SSO 10g there was no real 'solution' for cloning instances, in other words, we cloned our EBS R12 from prod to acpt and did a 'fresh install' (unzip a backup of an empty db), and went thru the partnering again for the R12 to oid/sso integration. That did the job but is rather time consuming and remains difficult to automate as an overnight job

Is this easier in the world of R12 EBS integrated with OAM 11g?

Regards,
Erwin

Posted by guest on July 19, 2012 at 05:52 AM PDT #

Erwin,

I'm afraid that the manual reimplementation requirements still remain with OAM 11g. You might wish to log a formal Service Request against the Oracle Access Manager team requesting an enhancement request for automated cloning of Oracle Access Manager instances.

Regards,
Steven

Posted by Steven Chan on July 20, 2012 at 01:39 PM PDT #

Hello,
I am looking for steps involved in backup and restore process for OID11g. Please let me know the necessary steps required or any links for the documentation.

Thanks,

Posted by guest on August 30, 2012 at 12:42 AM PDT #

Hi,

Our client is on EBS 11i currently. EBS 11i is integrated with OAM 10g through OSSO for Web SSO. The actual authentication/SSO is provided by OAM.

Now our client is upgrading to EBS 12. they want OAM also to be upgraded to OAM 11g.

I explored and found 2 methods (e.g. note ID 1388152.1) to integrate EBS 12 with OAM 11g:
1. with EBS AccessGate
2. using mod_osso agent (only for users upgrading from OSSO Server 10gR3)

Can you please throw some light on this ? Which method out of the above mentioned 2 methods is preferable (with pros & cons of both) ? Or suggest some other method, if you know.

Thanks
Andy

Posted by Andy on September 04, 2012 at 05:37 AM PDT #

Guest,

Oracle Internet Directory is part of Fusion Middleware. You can start by reviewing the Administrator's Guide for Oracle Internet Directory, Chapter 24, Backing Up and Restoring Oracle Internet Directory:
http://docs.oracle.com/cd/E21043_01/oid.1111/e10029/backup_restore.htm

Thanks.
Elke

Posted by Elke Phelps (Oracle Development) on September 04, 2012 at 05:46 AM PDT #

Hi,

We have the following Oracle applications integrated with OSSO for Web SSO:
EBS
Discoverer
Demantra
iSupplier
ASCP

OSSO delegates the authentication to OAM 10g and the actual authentication/SSO is provided by OAM.

Now we have to upgrade to OAM 11g. We are planning to integrate EBS with OAM 11g using EBS AccessGate (without OSSO).

What will be the SSO integration approach for the above applications (Discoverer, Demantra, iSupplier, ASCP) with OAM 11g ? Will EBS AccessGate approach work for these applications also or a separate integration approach needs to be taken (with OSSO) for these applications ?

Thanks
Andy

Posted by Andy on September 07, 2012 at 07:52 AM PDT #

Guest,

Oracle Internet Directory is part of Fusion Middleware. You can start by reviewing the Administrator's Guide for Oracle Internet Directory, Chapter 24, Backing Up and Restoring Oracle Internet Directory:
http://docs.oracle.com/cd/E21043_01/oid.1111/e10029/backup_restore.htm

Thanks.
Elke

Posted by Elke Phelps (Oracle Development) on September 07, 2012 at 11:07 AM PDT #

Hi,

Our client is EBS 11i but they want us to integrate with OAM 11.1.1.5.0

I know this is not supported out of the box. Can you please provide some solution to achieve SSO using these versions.

Regards,
Abhinav

Posted by guest on September 18, 2012 at 06:39 AM PDT #

Abhinav,

Thanks for your inquiry.

For an Oracle E-Business Suite Release 11i customer, we recommend to first upgrade to Oracle E-Business Suite Release 12.1.3. Once the customer is upgraded to Oracle E-Business Suite Release 12.1.3, then integrate with Oracle Access Manager 11.1.1.5.

If an upgrade to Oracle E-Business Suite Release 12.1.3 is not possible at this time, then we recommend that the Oracle E-Business Suite Release 11i customer integrate with Oracle Access Manager 10g.

Please refer to the following article and My Oracle Support note for addiitional details:

1) Understanding Options for Integrating Oracle Access Manager with E-Business Suite, https://blogs.oracle.com/stevenChan/entry/new_single_sign_on_iintegrations

2) Overview of Single Sign-On Integration Options for Oracle E-Business Suite Note 1388152.1

Thanks.
Elke

Posted by Elke Phelps (Oracle Development) on September 18, 2012 at 12:06 PM PDT #

Hi,

my client is using e-Business suite 11i. now he wants to introduce biometric authentication in this.

what is the best way to integrate biometric system to EBS 11i?

can we do by using OAM11g?. if yes please let me know the possibilities.

Thanks
Prasad

Posted by guest on October 07, 2012 at 11:14 PM PDT #

Hi, Prasad,

Oracle Access Manager can be integrated with various biometric devices such as fingerprint scanners.

You can integrate EBS 11i with Oracle Access Manager 10g 10.1.4.3, and Oracle Access Manager 10g can, in turn, be integrated with biometric devices.

However, I would strongly recommend that you invest your efforts in upgrading your EBS 11i environment to EBS 12, and then integrating EBS 12 with Oracle Access Manager 11g, instead.

Regards,
Steven

Posted by Steven Chan on October 08, 2012 at 10:12 AM PDT #

Hi steven,

Thanks for your reply,

can you please share some technical design doc, if you have.

Thanks for your time and support

Regards
Prasad

Posted by guest on October 19, 2012 at 05:37 AM PDT #

Prasad,

Thanks for the additional inquiry. We in E-Business Suite Applications Technology Development do not have technical design documents for integrating Oracle Access Manager with biometric devices.

Please research Fusion Middleware documentation for details regarding biometric device integration with Oracle Access Manager.

You may also consider contacting your Oracle Account Manager who can connect you with a security consulting specialist.

Regards,
Elke

Posted by Elke Phelps (Oracle Development) on October 29, 2012 at 12:51 PM PDT #

Abhinav,

Thanks for the inquiry. Please see review the following blog article for recommended integration options:
https://blogs.oracle.com/stevenChan/entry/new_single_sign_on_iintegrations

Please also refer to the following related My Oracle Support Note:
Overview of Single Sign-On Integration Options for Oracle E-Business Suite Note 1388152.1

Thanks.
Elke

Posted by Elke Phelps (Oracle Development) on September 30, 2013 at 02:31 PM PDT #

Post a Comment:
  • HTML Syntax: NOT allowed
About

Search

Categories
Archives
« April 2014
SunMonTueWedThuFriSat
  
1
4
5
6
7
8
9
10
11
12
13
14
19
20
21
24
25
26
27
28
29
30
   
       
Today