Thursday May 09, 2013

Configuring Integrated SOA Gateway in Multinode EBS Environments

The E-Business Suite's three-tier architecture consists of application tier services such as Web Application Services (oacore, oafm, Forms), Web Entry Point Services, Batch Processing Services, Root Services and database tier processes and data. A node represents a physical server with a set of processes. When application and database processes are distributed across multiple servers, it is called a multi-node installation. Generally, a hardware load-balancer is used to distribute EBS traffic between multiple nodes.

Load-balanced multi-node EBS environment

Oracle E-Business Suite Integrated SOA Gateway (ISG) provides a SOA-based infrastructure to provide and consume web service in EBS. The Integrated SOA Gateway can be configured for use in multi-node EBS environments; see:

Configuring Oracle E-Business Suite Integrated SOA Gateway Release 12.1.2 and Release 12.1.3 in a Multinode Environment (Note 1081100.1)

This document's steps for web service generation and deployment in multi-node environments should be followed for each EBS Public API exposed as web service.

How to set up Integrated SOA Gateway in multi-node environment

Service Provider:  ISG generates web service artifacts and stores them in the Instance Home (INST_TOP). Regardless of whether a shared file system is used in EBS multi-node installation, ISG’s Service Provider should be configured to synchronize web service artifacts across all EBS application tier nodes.

Service Invocation Framework:  ISG stores metadata about the web service to be invoked in database tables. However, if the target web service resides outside a corporate firewall, then you need to ensure that the EBS host has access to WSDL and target web service endpoints required for sending SOAP requests. This requires setting up Proxy Host and Port at appropriate EBS application tiers; see the "Setup Tasks" section in Chapter 9 in this guide:

Oracle E-Business Suite Integrated SOA Gateway Implementation Guide [Part E12169-06].

Proxy Host and Port setup should be done for each node in a multi-node environment.

References

Related Articles

Wednesday May 08, 2013

BPEL 11.1.1.7 Certified for Prebuilt E-Business Suite 12.1 SOA Integrations

Service Oriented Architecture (SOA) integrations with Oracle E-Business Suite can either be custom integrations that you build yourself or prebuilt integrations from Oracle.  For more information about the differences between the two options for SOA integrations, see this previously-published certification announcement.

There are five prebuilt BPEL business processes by Oracle E-Business Suite Release 12 product teams:

  1. Oracle Price Protection (DPP)

  1. Complex Maintenance, Repair & Overhaul (CMRO/AHL)

  1. Oracle Transportation Management (WMS, WSH, PO)

  1. Advanced Supply Chain Planning (MSC)

  1. Product Information Management (PIM/EGO)

BPEL integration architecture diagram example

Last year we announced the certification of BPEL 11.1.1.6 for Prebuilt E-Business Suite 12.1.3 SOA integrations.  The five prebuilt BPEL processes have now been certified with Oracle BPEL Process Manager 11g version 11.1.1.7 (in Oracle Fusion Middleware SOA Suite 11g).  These prebuilt BPEL processes are certified with Oracle E-Business Suite Release 12.1.3 and higher.

Note: The Supply Chain Trading Connector (CLN) product team has opted not to support BPEL 11g with their prebuilt business processes previously certified with BPEL 10.1.3.5.  If you have a requirement for that certification, I would recommend contacting your Oracle account manager to ensure that the Supply Chain team is notified appropriately. 

For additional information about prebuilt integrations with Oracle E-Business Suite Release 12.1.3, please refer to the following documentation:

Certified Platforms

  • Linux x86 (Oracle Linux 4, 5)

  • Linux x86 (RHEL 5)

  • Linux x86 (SLES 10)

  • Linux x86-64 (Oracle Linux 4, 5, 6)

  • Linux x86-64 (RHEL 5)

  • Linux x86-64 (SLES 10) 

  • Oracle Solaris on SPARC (64-bit) (9, 10, 11)

  • HP-UX Itanium (11.23, 11.31)

  • HP-UX PA-RISC (64-bit) (11.23, 11.31)

  • IBM AIX on Power Systems (64-bit) (5.3, 6.1, 7)

  • IBM: Linux on System z (RHEL 5, SLES 10)

  • Microsoft Windows Server (32-bit) (2003, 2008) 

  • Microsoft Windows x64 (64-bit) (2008 R2)

Getting Support

If you need support for the prebuilt EBS 12.1.3 BPEL business processes, you can log Service Requests against the Applications Technology Group product family.

Related Articles


Tuesday Apr 23, 2013

Using SAML-based Authentication for Web Services with Integrated SOA Gateway

Web services provided by Oracle E-Business Suite Integrated SOA Gateway are secured at the transport level through SSL and at the message level through authentication tokens – Username Token and SAML Token (Sender Vouches). I will discuss SAML Token (Sender Vouches) here.

Brief on SAML, SAML Token, SAML Token Profile

Security Assertion Markup Language (SAML) is a XML-based framework to exchange security related information between Service Consumer, Identity Provider and Service Provider. The security information is expressed in terms of assertions. Statements about the subject or user form the SAML Token. 

WS-Security defines a set of security token profiles for different types of tokens embedded within the SOAP message as headers. SAML Token Profile is one of the WS-Security Token Profiles that describe the syntax and meaning of SAML Tokens. SAML Tokens are embedded within SOAP messages by placing assertion elements inside the SOAP Header.

As per WS-Security, there are three common methods to assure the Service Provider that the SOAP message came from the subject referenced in the token. The three common subject confirmation methods are Sender Vouches, Holder of Key, and Bearer. As of Oracle E-Business Suite Release 12.1.3, web services provided by Integrated SOA Gateway (inbound) support SAML Token using the Sender Vouches subject confirmation method.

SAML Token - Sender Vouches

SAML Tokens assert that the subject or user has already been authenticated. As the name suggests, in the Sender Vouches case, the Sender or SOAP web service client that sends the SOAP request message to SOAP web service vouches for the identity of the assertion’s subject.

SAML flow diagram

The SAML assertion may be provided by an external Identity Provider -- a SAML Authority or SAML Issuer. In this case, a client sends a SAML assertion request to a SAML Authority. The SAML Authority identifies the client, authenticates the subject, and sends SAML assertion as response to client. The client’s private key is used to sign both the assertion and the SOAP message body.

The E-Business Suite's Integrated SOA Gateway uses Oracle Application Server’s Web Services Security framework. It verifies the digital signature in a SOAP request and extracts the SAML Token. It validates the SAML assertion such as the issuer, validity period, and authentication statement. It extracts the SAML Subject Name Identifier and verifies the same with registered Oracle Internet Directory (OID) for single sign-on users or with FND_USER table in Oracle E-Business Suite (EBS) database for non-single sign-on users. It uses Oracle Internet Directory to map the single sign-on user with the equivalent EBS user. The EBS username is then used for the authorization check for the web service execution.

When to use SAML Sender Vouches based authentication for web services provided by Integrated SOA Gateway?

SAML Token with Sender Vouches is best used for following scenarios:

  • Single Sign On: As part of your business process, you may want to authenticate once and propagate the authenticated identity as a SAML assertion to subsequent EBS web service calls.
  • Subject or user needs to be authenticated locally (at web service client end) or centrally by Identity Provider (or SAML Authority), and propagate the assertion to an EBS web service.

How to use SAML Token Sender Vouches in Integrated SOA Gateway?

The steps to expose an EBS API as web service are described in Oracle E-Business Suite Integrated SOA Gateway Implementation Guide and Developer's Guide

  • Create Grant for EBS API methods that you want to expose as web service operations
  • Generate and Deploy the EBS API as web service with SAML Token (Sender Vouches) authentication type
  • Configure client and EBS (server) for SAML  

See Setting Up SAML Token Security for Oracle E-Business Suite Integrated SOA Gateway Release 12.1.3 [Note 1144313.1] 

This Note describes the steps to configure SOAP Web Service Client as well as Oracle E-Business Suite (SOAP Web Service Provider). In Integrated SOA Gateway, a SAML Token Sender Vouches policy is applied at the web service level or port level. You may have to configure EBS for SAML for all web services that are deployed with Authentication Type as SAML Token (Sender Vouches).

  • Invoke web service with SAML Token

The Note also describes steps to test web service invocation with a SAML Token. Depending upon the client program, you may programmatically insert SAML assertions or let web service security policy enforcement products such Oracle Web Services Manager (OWSM) insert a SAML Token in a SOAP request message.

References

Related Articles

Tuesday Oct 02, 2012

New Whitepaper: Primer on Integrating with EBS 12 with Other Applications

Oracle E-Business Suite offers several integration points and a variety of integration technologies. While a given integration point may be available through various technologies and products, it is important to select the best approach for your specific integration requirements. I am pleased to announce the publication of a new white paper that can help with this:

Overview of EBS integration technologies

This whitepaper reviews integration strategies for Oracle E-Business Suite applications that are available today. The intended audience is solution architects, integration consultants, and anyone else interested in learning about integration options with Oracle E-Business Suite.

The white paper outlines the following enterprise application integration styles:

  • Data-centric integration
  • Integration through native interfaces
  • Process-centric integration
  • Event-driven integration
  • B2B integration
  • Integration through web services 

The white paper also discusses Oracle E-Business Suite application layer products and technologies that address the specific needs of each of these integration styles. It concludes with criteria for selecting the appropriate integration-related tools and technologies for your requirements.

Attending OpenWorld 2012?

We have two sessions covering Oracle E-Business Suite integration. Please join us to hear more on this subject:

  • CON9005 - Oracle E-Business Suite Integration Best Practices ( Tuesday, Oct 2, 1:15 PM - 2:15 PM - Moscone West 2018)
  • CON8716 - Web Services and SOA Integration Options for Oracle E-Business Suite ( Thursday, Oct 4, 11:15 AM - 12:15 PM - Moscone West 2016)

 Related Articles


Wednesday Apr 11, 2012

BPEL 11.1.1.6 Certified for Prebuilt E-Business Suite 12.1.3 SOA Integrations

Service Oriented Architecture (SOA) integrations with Oracle E-Business Suite can either be custom integrations that you build yourself or prebuilt integrations from Oracle.  For more information about the differences between the two options for SOA integrations, see this previously-published certification announcement.

There are five prebuilt BPEL business processes by Oracle E-Business Suite Release 12 product teams:

  1. Oracle Price Protection (DPP)
  2. Complex Maintenance, Repair & Overhaul (CMRO/AHL)
  3. Oracle Transportation Management (WMS, WSH, PO)
  4. Advanced Supply Chain Planning (MSC)
  5. Product Information Management (PIM/EGO)
BPEL integration architecture diagram example

Last year we announced the certification of BPEL 11.1.1.5 for Prebuilt E-Business Suite 12.1.3 SOA integrations.  The five prebuilt BPEL processes have now been certified with Oracle BPEL Process Manager 11g version 11.1.1.6 (in Oracle Fusion Middleware SOA Suite 11g).  These prebuilt BPEL processes are certified with Oracle E-Business Suite Release 12.1.3 and higher.

Note: The Supply Chain Trading Connector (CLN) product team has opted not to support BPEL 11g with their prebuilt business processes previously certified with BPEL 10.1.3.5.  If you have a requirement for that certification, I would recommend contacting your Oracle account manager to ensure that the Supply Chain team is notified appropriately. 

For additional information about prebuilt integrations with Oracle E-Business Suite Release 12.1.3, please refer to the following documentation:

Certified Platforms

  • Linux x86 (Oracle Linux 4, 5)
  • Linux x86 (RHEL 5)
  • Linux x86 (SLES 10)
  • Linux x86-64 (Oracle Linux 4, 5, 6)
  • Linux x86-64 (RHEL 5)
  • Linux x86-64 (SLES 10) 
  • Oracle Solaris on SPARC (64-bit) (9, 10, 11)
  • HP-UX Itanium (11.23, 11.31)
  • HP-UX PA-RISC (64-bit) (11.23, 11.31)
  • IBM AIX on Power Systems (64-bit) (5.3, 6.1, 7)
  • IBM: Linux on System z (RHEL 5, SLES 10)
  • Microsoft Windows Server (32-bit) (2003, 2008) 
  • Microsoft Windows x64 (64-bit) (2008 R2)

Getting Support

If you need support for the prebuilt EBS 12.1.3 BPEL business processes, you can log Service Requests against the Applications Technology Group product family.

Related Articles


Tuesday Apr 03, 2012

Webcast Replay Available: SOA Integration Options for E-Business Suite

I am pleased to release the replay and presentation for the latest ATG Live Webcast:
SOA Integration Options for E-Business Suite (Presentation)
Screenshot of the Integration Repository for the Integrated SOA Gateway within Oracle E-Business Suite

Abhishek Verma, Manager, Applications Technology Group and Rajesh Ghosh, Group Manager, ATG Development discussed the web service and SOA integration options for Oracle E-Business Suite. The presentation covered Oracle's integration tools and technologies, including the Oracle Applications Adapter and the Integrated SOA Gateway.

Finding other recorded ATG webcasts

The catalog of ATG Live Webcast replays, presentations, and all ATG training materials is available in this blog's Webcasts and Training section.

Monday Feb 27, 2012

ATG Live Webcast: SOA Integration Options for Oracle E-Business Suite

Do you need to integrate your Oracle E-Business Suite with multiple data sources, including web services? Or do you need to expose Oracle E-Business Suite interfaces as SOA web services for other integrations? If so, you need to attend the next installment of our ATG Live Webcast series on Mar 1, 2012:

SOA Integration Options for Oracle E-Business Suite

Join Abhishek Verma, Manager, Applications Technology Group as he discusses the web service and SOA integration options for Oracle E-Business Suite. This presentation will cover Oracle's integration tools and technologies, including the Oracle Applications Adapter and the Integrated SOA Gateway.

Screenshot of the Integration Repository for the Integrated SOA Gateway within Oracle E-Business Suite


The agenda for the SOA Integration Options for Oracle E-Business Suite webcast includes the following topics:

  • Overview of Integration Tools and Technologies
  • Oracle Applications Adapter
  • Integrated SOA Gateway Service Provider
  • Integrated SOA Gateway Service Invocation Framework
  • Business Use Cases for Integrated SOA Gateway

Date:               Thursday, March 1, 2012
Time:              8:00 AM - 9:00 AM Pacific Standard Time
Presenter:    Abhishek Verma, Manager, Applications Technology Group

Webcast Registration Link (Preregistration is optional but encouraged)

To hear the audio feed:
    Domestic Participant Dial-In Number:           1-877-697-8128
    International Participant Dial-In Number:      1-706-634-9568
    Dial-In Passcode:                                              99338

To see the presentation:
    The Direct Access Web Conference details are:
    Website URL: https://ouweb.webex.com
    Meeting Number:  598839387

If you miss the webcast, or you have missed any webcast, don't worry -- we'll post links to the recording as soon as it's available from Oracle University.  You can monitor this blog for pointers to the replay. And, you can find our archive of our past webcasts and training here.

If you have any questions or comments, feel free to email Bill Sawyer (Senior Manager, Applications Technology Curriculum) at BilldotSawyer-AT-Oracle-DOT-com. 

Thursday Dec 08, 2011

BPEL 11.1.1.5 Certified for Prebuilt E-Business Suite 12.1.3 SOA Integrations

Service Oriented Architecture (SOA) integrations with Oracle E-Business Suite can either be custom integrations that you build yourself or prebuilt integrations from Oracle.  There are five prebuilt BPEL business processes by Oracle E-Business Suite Release 12 product teams:
  1. Oracle Price Protection (DPP)
  2. Complex Maintenance, Repair & Overhaul (CMRO/AHL)
  3. Oracle Transportation Management (WMS, WSH, PO)
  4. Advanced Supply Chain Planning (MSC)
  5. Product Information Management (PIM/EGO)

Earlier this year we announced the certification of BPEL 11.1.1.4 for Prebuilt E-Business Suite 12.1.3 SOA integrations.  The five prebuilt BPEL processes have now been certified with Oracle BPEL Process Manager 11g version 11.1.1.5 (in Oracle Fusion Middleware SOA Suite 11g).  These prebuilt BPEL processes are certified with Oracle E-Business Suite Release 12.1.3 and higher.

Note: The Supply Chain Trading Connector (CLN) product team has opted not to support BPEL 11g with their prebuilt business processes previously certified with BPEL 10.1.3.5.  If you have a requirement for that certification, I would recommend contacting your Oracle account manager to ensure that the Supply Chain team is notified appropriately. 

For additional information about prebuilt integrations with Oracle E-Business Suite Release 12.1.3, please refer to the following documentation:

Certified Platforms

  • Linux x86 (Oracle Linux 4, 5)
  • Linux x86 (RHEL 4, 5)
  • Linux x86 (SLES 10)
  • Linux x86-64 (Oracle Linux 4, 5)
  • Linux x86-64 (RHEL 4, 5)
  • Linux x86-64 (SLES 10) 
  • Oracle Solaris on SPARC (64-bit) (9, 10)
  • HP-UX Itanium (11.23, 11.31)
  • HP-UX PA-RISC (64-bit) (11.23, 11.31)
  • IBM AIX on Power Systems (64-bit) (5.3, 6.1)
  • IBM: Linux on System z (RHEL 5, SLES 10)
  • Microsoft Windows Server (32-bit) (2003, 2008) 
  • Microsoft Windows x64 (64-bit) (2008 R2)

Getting Support

If you need support for the prebuilt EBS 12.1.3 BPEL business processes, you can log Service Requests against the Applications Technology Group product family.

Related Articles

Wednesday Jul 06, 2011

BPEL 11.1.1.4 Certified for Prebuilt E-Business Suite 12.1.3 SOA Integrations on IBM Linux on System z

IBM logoAs a follow-up to our original certification announcement, prebuilt SOA integrations for Oracle E-Business Suite Release 12 using BPEL Process Manager 11.1.1.4 are now certified on the following Linux on System z platforms:

  •  Red Hat Enterprise Linux (RHEL) version 5 (64-bit)
  • Novell SUSE Linux Enterprise Server (SLES) version 10 (64-bit)

References

Related Articles


Tuesday May 31, 2011

BPEL 11.1.1.4 Certified for Prebuilt E-Business Suite 12.1.3 SOA Integrations

There are two major options for SOA-related integrations for the E-Business Suite:
  1. Custom integrations using the Oracle Application Server (SOA) Adapter for Oracle Applications
  2. Prebuilt SOA integrations for E-Business Suite using BPEL Process Manager
For more background about these two options, please see this article:
Architecture diagram showing E-Business Suite and SOA web services
OPTION 2.  Using prebuilt E-Business Suite 12 BPEL business processes

Five E-Business Suite Release 12 product teams have developed their own prebuilt BPEL business processes:
  1. Oracle Price Protection (DPP)
  2. Complex Maintenance, Repair & Overhaul (CMRO/AHL)
  3. Oracle Transportation Management (WMS, WSH, PO)
  4. Advanced Supply Chain Planning (MSC)
  5. Product Information Management (PIM/EGO)
For the five products listed above, their prebuilt BPEL processes have been certified with Oracle BPEL Process Manager 11g version 11.1.1.4 (in Oracle Fusion Middleware SOA Suite 11g).  These prebuilt BPEL processes are certified with Oracle E-Business Suite Release 12.1.3 and higher.

Note: The Supply Chain Trading Connector (CLN) product team has opted not to support BPEL 11g with their prebuilt business processes previously certified with BPEL 10.1.3.5.  If you have a requirement for that certification, I would recommend contacting your Oracle account manager to ensure that the Supply Chain team is notified appropriately.

For more information about using the prebuilt R12.1.3 SOA integrations, see:

Certified Platforms

  • Linux x86 (Oracle Linux 4, 5)
  • Linux x86 (RHEL 4, 5)
  • Linux x86 (SLES 10)
  • Linux x86-64 (Oracle Linux 4, 5)
  • Linux x86-64 (RHEL 4, 5)
  • Linux x86-64 (SLES 10) 
  • Oracle Solaris on SPARC (64-bit) (9, 10)
  • HP-UX Itanium (11.23, 11.31)
  • HP-UX PA-RISC (64-bit) (11.23, 11.31)
  • IBM AIX on Power Systems (64-bit) (5.3, 6.1)
  • Microsoft Windows Server (32-bit) (2003, 2008)
  • Microsoft Windows x64 (64-bit) (2008 R2)

Getting Support

If you need support for the prebuilt EBS 12.1.3 BPEL business processes, you can log Service Requests against the Applications Technology Group product family.

Related Articles

Tuesday Feb 22, 2011

Reminder: ATG Live Webcast Feb. 24th: Using the R12 EBS Adapter

Reminder: Our next ATG Live Webcast is happening on 24-Feb. The event is titled:
  • E-Business Suite R12.x SOA Using the E-Business Suite Adapter
This live one-hour webcast will offer a review of the Service Oriented Architecture (SOA) capabilities within E-Business Suite R12 focusing on the E-Business Suite Adapter. While primarily focused on integrators and developers, understanding SOA capabilities is important for all E-Business Suite technologists and superusers.
SOAImage.gif

E-Business Suite R12.x SOA Using the E-Business Suite Adapter

Date: Thursday, February 24, 2011
Time: 8:00 AM - 9:00 AM Pacific Standard Time
Presenters: 

  • Neeraj Chauhan, Product Manager, ATG Development
Direct Link to Webcast
Event Dial-in Numbers:
U.S. Participants: 877-697-8128
International Participants: 706-634-9568
Passcode: 93997

If you have any questions or comments, please feel free to email me, Bill Sawyer, Senior Manager, Applications Technology Curriculum at Bill dot Sawyer at Oracle.com.

Monday Feb 14, 2011

ATG Live Webcast Feb. 24th: Using the EBS 12 SOA Adapter

Our next ATG Live Webcast is now open for registration. The event is titled:

  • E-Business Suite R12.x SOA Using the E-Business Suite Adapter
This live one-hour webcast will offer a review of the Service Oriented Architecture (SOA) capabilities within E-Business Suite R12 focusing on the E-Business Suite Adapter. While primarily focused on integrators and developers, understanding SOA capabilities is important for all E-Business Suite technologists and superusers.

SOAImage.gif
ATG Live Webcast Logistics

The one-hour event will be webcast live with a dial-in access for Q&A with the Applications Technology Group (ATG) Development experts presenting the event. The basic information for the event is as follows:

E-Business Suite R12.x SOA Using the E-Business Suite Adapter

Date: Thursday, February 24, 2011
Time: 8:00 AM - 9:00 AM Pacific Standard Time
Presenters: 

  • Neeraj Chauhan, Product Manager, ATG Development
NOTE: When you register for the event, the confirmation will show the event starting at 7:30 AM Pacific Standard Time. This is to allow you time to connect to the conference call and web conference. The presentation will start at 8:00 AM Pacfic Standard Time.

How to Register for this ATG Live Webcast

Register for this event here:

The event information and dial-in numbers will be provided when you register for the event. In order to register, you will need an Oracle.com account. You can register for a free Oracle.com account here.

If you're a first-time Oracle University Knowledge Center user

Sign-in with your Oracle.com account, or if you don't already have one, use the link provided on the sign-in screen to create an account. After signing in, accept the Terms of Use. Upon completion of these steps, you will be directed to the Webcast. The presentation will start at 8:00 AM Pacific Standard Time.

If you have any questions or comments, please feel free to email me, Bill Sawyer, Senior Manager, Applications Technology Curriculum at Bill dot Sawyer at Oracle.com.

Tuesday Jan 11, 2011

BPEL 11.1.1.2 Certified for Prebuilt E-Business Suite 12.1.3 SOA Integrations

A new certification was released simultaneously with the E-Business Suite 12.1.3 Maintenance Pack late last year:  the use of BPEL 11g Version 11.1.1.2 with E-Business Suite 12.1.3. 

There are two major options for SOA-related integrations for the E-Business Suite:
  1. Custom integrations using the Oracle Application Server (SOA) Adapter for Oracle Applications
  2. Prebuilt SOA integrations for E-Business Suite using BPEL Process Manager
For more background about these two options, please see this article:


Architecture diagram showing SOA business event to web service mappingOPTION 2.  Using prebuilt E-Business Suite 12 BPEL business processes

Five E-Business Suite Release 12 product teams have developed their own prebuilt BPEL business processes:
  1. Oracle Price Protection (DPP)
  2. Complex Maintenance, Repair & Overhaul (CMRO/AHL)
  3. Oracle Transportation Management (WMS, WSH, PO)
  4. Advanced Supply Chain Planning (MSC)
  5. Product Information Management (PIM/EGO)
For the five products listed above, prebuilt BPEL processes have been certified with Oracle BPEL Process Manager 11g version 11.1.1.2 (in Oracle SOA Suite 11g).  These prebuilt BPEL processes are certified with Oracle E-Business Suite Release 12.1.3 and higher.

Note: The Supply Chain Trading Connector (CLN) product team has opted not to support BPEL 11g with their prebuilt business processes previously certified with BPEL 10.1.3.5.  If you have a requirement for that certification, I would recommend contacting your Oracle account manager to ensure that the Supply Chain team is notified appropriately.

For more information about using the prebuilt R12.1.3 SOA integrations, see:
Getting Support

If you need support for the prebuilt EBS 12.1.3 BPEL business processes, you can log Service Requests against the Applications Technology Group product family.

Related Articles


Wednesday Nov 10, 2010

Oracle BPEL 10.1.3.5 Certified with EBS 12 on IBM Linux on System z

Oracle E-Business Suite Release 12.1.2 included prebuilt SOA integrations for the following E-Business Suite products:
  1. Oracle Price Protection (DPP)
  2. Complex Maintenance, Repair & Overhaul (CMRO/AHL)
  3. Oracle Transportation Management (WMS, WSH, PO)
  4. Supply Chain Trading Connector (CLN)
  5. Advanced Supply Chain Planning (MSC)
  6. Product Information Management (PIM/EGO)
SOA-architecture2.png
These prebuilt SOA integrations for E-Business Suite Release 12 (12.1.2 or higher) using BPEL Process Manager (10.1.3.5) are now certified on the IBM: Linux on System z platform.

The operating systems certified on this platform are:
  • Red Hat Enterprise Linux (RHEL) version 5 (64-bit)
  • Novell SUSE Linux Enterprise Server (SLES) version 9 (64-bit)
  • Novell SUSE Linux Enterprise Server (SLES) version 10 (64-bit)
References
Related Articles

Thursday Aug 26, 2010

Securing E-Business Suite Web Services with Integrated SOA Gateway

The Oracle E-Business Suite Integrated SOA Gateway service-enables Oracle E-Business Suite public APIs for Service Oriented Architecture.  This feature was released in Oracle E-Business Suite Release 12.1.1. 

One of the most common questions that Oracle E-Business Suite developers have is, "How do you secure E-Business Suite web services?"  Generally, web service security consists of authentication, message integrity and confidentiality.  I'll discuss the authentication aspect of web service security in this article.
The WS-Security specification describes enhancements to SOAP that increase the protection and confidentiality of messages. It provides this protection by defining mechanisms for associating tokens with Simple Object Access Protocol (SOAP) messages.

AuthenticationType.jpg
To secure and authenticate Oracle E-Business Suite web service operations, the E-Business Suite Integrated SOA Gateway supports Username Token-based WS-Security.  In addition, it supports SAML Token (Sender Vouches) based security in Oracle E-Business Suite 12.1.3 and higher.

An Oracle E-Business Suite Integration Repository administrator can select the appropriate authentication type for each Web service-enabled interface.  The authentication type should be selected before deploying the API as a standard web service.  Integration Repository administrators can grant user access to E-Business Suite web service operations.

Username Token based security
The username token carries basic authentication information.  The username-token element propagates user name and password information to authenticate the message.  The information provided in the token and the trust relationship provides the basis for establishing the identity of the user.

A typical WS-Security header in a SOAP Request looks like this:

wsheader.jpg
When invoking Oracle E-Business Suite Web services through SOA Provider using username token-based security, these security headers should be passed along with the SOAP request. The username/password discussed here in wsse:security is the Oracle E-Business Suite username/password (or the username/password created through the Users window in defining an application user).

SAML Token-based security

SAML security tokens (Sender Vouches) are composed of assertions: one or more statements about a user, such as an authentication or attribute statement.  SAML tokens are attached to SOAP messages by placing assertion elements inside the header. SAML security tokens enable interoperable single-sign-on and federated identity for E-Business Suite Web services.

When invoking Oracle E-Business Suite Web services through SOA Provider using SAML Tokens, the SOAP request should contain a sender-vouches SAML assertion. The Assertion and the Body elements should be digitally signed.  A reference to the certificate used to verify the signature should be provided in the header.  The basis of trust is the Web service Requester's certificate.  The Requester's private key is used to sign both the SAML Assertion and the message Body. The SOA Provider relies on the Web service Requester, who vouches for the contents of the User message and the SAML Assertion.

Your Feedback is Welcome

We're extremely interested in hearing about your use cases and your experiences with our Integrated SOA Gateway.  If you've used this product -- or are evaluating it -- please post a comment here or drop us a line with your thoughts.

References
Related Articles

Tuesday Jan 19, 2010

BPEL 10.1.3.5 Certified for Prebuilt E-Business Suite 12 SOA Integrations

A new certification was released simultaneously with the E-Business Suite 12.1.2 Maintenance Pack last month:  the use of BPEL 10.1.3.5 with E-Business Suite 12.  But before we jump into the details of that certification, it's useful to characterize the two major options for SOA-related integrations for Oracle E-Business Suite:
  1. Custom integrations using the Oracle Application Server (SOA) Adapter for Oracle Applications
  2. Prebuilt SOA integrations for E-Business Suite using BPEL Process Manager

Architecture diagram showing SOA business event to web service mapping

OPTION 1.  Custom integrations using the Oracle Application Server (SOA) Adapter for Oracle Applications

If you'd like to use SOA Suite to develop your own custom integrations with Oracle E-Business Suite Release 12, you can run the latest SOA Suite version: e.g. 10.1.3.5, 11.1.1.1, or higher. 

This includes the use of the SOA Suite's SOA Adapter for E-Business Suite.  The Fusion Middleware division's documentation is a little inconsistent on this point, but this product is also referred to as the Oracle Fusion Middleware Adapter for Oracle Applications.  The Version 11.1.1.1.0 prerequisites for this adapter are:
  • Oracle E-Business Suite Release 11i with OWF.G.Rollup 7; or,
    Oracle E-Business Suite Release 12.0
  • To enable the "Native E-Business Suite Connectivity using J2EE Data Sources" feature:
    • Oracle E-Business Suite Release 11i with FND Rollup 6; or,
    • Oracle E-Business Suite Release 12 version 12.0.4.
If you're using the Oracle Fusion Middleware Adapter for Oracle Applications to build your own custom integrations with the E-Business Suite, there are no additional E-Business Suite dependencies.  These are custom integrations that you will develop yourself.  Your custom integrations will run against the E-Business Suite standard web services published in the Integration Repository. 

For more information about using the generic SOA Adapter for Oracle Applications, see:

OPTION 2.  Using prebuilt E-Business Suite 12 BPEL business processes


Six E-Business Suite Release 12 product teams have developed their own prebuilt BPEL business processes:
  1. Oracle Price Protection (DPP)
  2. Complex Maintenance, Repair & Overhaul (CMRO/AHL)
  3. Oracle Transportation Management (WMS, WSH, PO)
  4. Supply Chain Trading Connector (CLN)
  5. Advanced Supply Chain Planning (MSC)
  6. Product Information Management (PIM/EGO)
These prebuilt BPEL processes have been certified with Oracle BPEL Process Manager 10g version 10.1.3.5 (in Oracle SOA Suite 10.1.3.5).  These prebuilt BPEL processes are certified with Oracle E-Business Suite Release 12.1.1 and higher.

For more information about using the prebuilt SOA integrations, see:
Getting Support

If you need support for the Fusion Middleware SOA Adapter for Oracle Applications, you can log Service Requests against the Fusion Middleware product family.

If you need support for the prebuilt EBS 12 BPEL business processes, you can log Service Requests against the Applications Technology Group product family.

Related Articles


Monday Nov 23, 2009

Integration Architectures for Oracle EBS (OpenWorld 2009 Recap)

There are many ways of integrating the E-Business Suite with third-party applications.  Neeraj Chauhan and Vijay Shanmugam, from our E-Business Suite Applications Technology Group, covered the latest options and integration architectures in their OpenWorld 2009 session:

Architecture diagram showing registration of custom APIs with E-Business Suite EBS Integration Repository

Neeraj and Vijay discuss the following topics in detail:
  • Key integration challenges
  • Business Integration architecture
    • Oracle SOA Platform
    • Oracle Application Integration Architecture (AIA)
    • SOA Enablement of Oracle E-Business Suite
  • Oracle E-Business Suite Integrated SOA Gateway
    • Integration Repository
    • Publishing custom interfaces to the Integration Repository
    • Walkthrough including custom PL/SQL API annotations
    • SOA Provider for web services
    • Business events in Integration Repository
    • Composite services in Integration Repository
    • SOA Monitor
    • Integration interfaces and services
    • Service invocation framework
  • Oracle E-Business Suite Adapter
    • SOA principles for the EBS Adapter
    • Integration lifecycle
    • Secured connections
    • Function security and authorization
    • Application context
    • Global transactions
    • Customization support through PL/SQL APIs, custom business events
  • Business use cases
  • Roadmap
Listening to the Session

If you registered for OpenWorld, here's a link to the OpenWorld On Demand page where you can download the presentation or listen to the live recording of this session.

Related Articles

Friday Oct 16, 2009

Using Oracle Application Server 10g with E-Business Suite (OpenWorld 2009 Recap)

[Oct 19 2009 Update: If you registered for OpenWorld, here's a link to the OpenWorld On Demand page where you can download or listen to the live recording of this session as well as the presentation materials.]

Every year I provide an OpenWorld update on the various ways that E-Business Suite users can use different Oracle Application Server 10g components.  This presentation covers many of the topics that I visit regularly on this blog, neatly summarizing them in a single package with the latest Fusion Middleware certified versions (and desupport notices) in one place:

Architecture diagram showing sso oid and third-party LDAP integration with E-Business Suite

This presentation covers:

  • A quick overview of the various Oracle Application Server 10g products that can be optionally integrated with the E-Business Suite, including:
    • Oracle Single Sign-On and Oracle Internet Directory
    • Oracle Access Manager and Oracle Identity Manager
    • Web Center and Portal
    • Oracle Business Intelligence Enterprise Edition and Discoverer
    • Web Cache
    • Oracle SOA Suite
    • Oracle Enterprise Manager
  • How Oracle Single Sign-On works with the E-Business Suite
  • How EBS users can be managed using Oracle Internet Directory
  • How EBS can be integrated via Oracle Single Sign-On with third-party authentication systems such as:
    • Windows Native Authentication via Kerberos
    • Netegrity Siteminder
    • IBM Tivoli Access Manager
    • PKI X.509v3 Digital Certificates
  • How EBS can be integrated via Oracle Internet Directory with third-party LDAP directories such as:
    • Microsoft Active Directory
    • Sun Java System Directory
    • Novell eDirectory
    • OpenLDAP
Related Articles

I've covered all of these topics already on this blog, with articles discussing the conceptual topics as well as new certification announcements.  See:

Wednesday Sep 02, 2009

Critical Rollup Update for E-Business Suite Integrated SOA Gateway Release 12.1.1

A critical Rollup Update for Oracle E-Business Suite Integrated SOA Gateway Release 12.1.1 was released on August 21, 2009. It is a consolidated one-off fix to address some open issues in Oracle E-Business Suite Integrated SOA Gateway Release 12.1.1. Patch 8459663 for Integrated SOA Gateway R12.1.1 is now available for download.

patch_8459663.png

Overview

Oracle E-Business Suite Integrated SOA Gateway (ISG) was released with Oracle E-Business Suite Release 12.1.1. It allows Oracle E-Business Suite public integration interfaces to be exposed as standard web services. It allows integration between heterogeneous applications and allows you to deploy web services for consumption via standard web service clients.

Why is this Rollup Update Important?

This Rollup Update fixes outstanding bugs in ISG R12.1.1 and introduces key changes in SOAHeader elements. SOAHeader elements are SOAP Header elements defined by Integrated SOA Gateway for Web services through SOA Provider. It is used for setting appropriate application context for executing PL/SQL APIs in Oracle E-Business Suite.

Oracle highly recommends that all customers who have installed the Oracle E-Business Suite Integrated SOA Gateway Release 12.1.1 upgrade to this one-off patch as soon as possible

Key Enhancements and Fixes in Rollup Update
isg_oneoff.jpg
One of the key changes with this release is change in SOAHeader elements in SOAP Requests for PL/SQL and Concurrent Program services. There are changes in element names and expected values in SOAHeader. Now instead of language dependent names, language independent key values should be sent in SOAP Request.  Other key enhancements & fixes include:
  • Support for SSL-based Web Service Invocation Over HTTPS
Service Invocation Framework now supports SSL-based Web service invocation using Server Authentication method.
  • Web Service NLS Compliance
In ISG R12.1.1, although we had the NLSLanguage element in SOAHeader, it was not used. Now, ISG supports Web service NLS compliance and it can consume SOAP requests in the language specified in the SOAHeader.
  • Security Grant on Overloaded Functions
Each of the overloaded function in a package can now be uniquely granted to a specific user, user group, or all users.
  • Standalone script to generate services for IREP interfaces
Some interfaces take long time to generate WSDL, and the Integration Repository UI may time out. Now, there's a standalone script to generate Web service artifacts.
  • Check to restrict simultaneous 'Generate Service' requests
Multiple requests to generate Web service for an integration interface are now restricted. 

References

For more information on mandatory consolidated one-off release, see:

Wednesday Jun 03, 2009

Hands-On with Oracle's iPhone Apps

The last time Steven covered the iPhone was November 2008, which is roughly 1948 in Internet time. Heck, the App Store had less than 9,000 apps in it back then and it's now just around 40,000 apps. Oracle has been enabling our enterprise solutions for that platform and many of them impact EBS administrators, so we'll summarize them here.

E-Business Suite Specific Applications

Screenshot of Oracle iPhone Expenses app Steven noted that Oracle Business Approvals for Managers is now Available for the iPhone. That really is a cool solution. Using Oracle Workflow for expense reports, purchase order requisitions, human resources vacancies, and HR job offers, Release 12 end-users can perform approvals on the fly in a native iPhone app, including drilling to detail on each notification.

Our SOA technologies allow us to add on new user experiences like the iPhone UI, but architecturally it's just like a Rich Internet Application. Because of this, we can use the same infrastructure to support Oracle Business Approvals for Sales Managers for the Siebel CRM platform with all the same advantages. The E-Business Suite version had been downloaded through the App Store over 12,000 times as of March 2009, so this must be old hat for some of you.

Also, integrated to Approvals or standalone, Oracle Business Intelligence Enterprise Edition users can now access reports and alerts through Oracle Business Indicators. Indicators will be increasingly useful to E-Business Suite shops as they take up the Oracle Business Intelligence Applications.

The BI Apps deliver ETL, integrated security, schema and metadata, reports, dashboards and more for E-Business Suite 11i10 and R12 instances, as well as the other Applications Unlimited stacks and even third-party applications. The Indicators app has seen over 43,000 downloads in its first 7 months!

Screenshot of Oracle iPhone app Business Intelligence Indicators

A New App: Maintenance Workbench for Oracle Enterprise Asset Management

New with E-Business Suite Release 12.1 is the Maintenance Workbench application for Oracle Enterprise Asset Management. The Workbench app allows a field user to pull up nearby assets using the iPhone's GPS, integrating Google Maps information for navigation, and then allowing the execution of work orders on the phone. Manage your asset-intense operations? There's an app for that!

Accessing EBS Self-Service with Safari

You know -- because E-Business Suite has been an Internet-only solution since, well, since shortly after there was an Internet -- I forget sometimes to mention that all of the Self-service or Oracle Applications Framework/JTF user interfaces function pretty well on Mobile Safari.

Quick tip - remember to enable pop-up windows, which is off by default in Mobile Safari. We use them for LOV lookups.

In testing Managers, I created that expense report in iExpenses on the fly, and when I needed to turn off the Personalization profile option for OPERATIONS user, I did that right from the iPhone. You get a lot for free around here, huh? Here’s iSupplier because I thought it was more interesting…

Screenshot of iSupplier running on iPhone Mobile Safari

Oracle CRM iPhone Apps

Screenshot of Oracle iphone app CRM On Demand Mobile Sales Assistant

Oracle's Application Integration Architecture provides prebuilt integrations for the Apps Unlimited products, built on a standards-based Services Oriented Architecture (SOA) platform. One interesting product here is a Process Integration Pack that integrates Oracle's hosted multi-tenant Customer Relationship Management (CRM) platform with Oracle E-Business Suite. Oracle CRM On Demand Integration Pack for Oracle E-Business Suite (Opportunity to Quote) allows E-Business Suite shops to adopt CRM for their field sales forces, and we're supporting that through several iPhone user interfaces.

I've had a chance to play with Oracle Mobile Sales Assistant against our test CRM On Demand instance, and it's great. The replication of data is near real-time. You can seamlessly switch between local iPhone contacts and CRM On Demand contact information. You can even update tasks offline when you should be sleeping on the airplane - all big wins.

The CRM On Demand apps are rounded out by a dedicated application for managing Sales Forecast information. You can get more info on that here.

And lest we forget, the CRM On Demand folks also support the BlackBerry - but that's a different blog entry.

Related Articles

Tuesday May 06, 2008

E-Business Suite + Fusion Middleware Best Practices Center Launched

If you've been watching Oracle's ERP strategy, you'll notice that there's been a profound shift in emphasis over the last few years.  The E-Business Suite is now acknowledged to be only one part of your organization's overall software environment, and we're investing heavily in integration technologies such as Service-Oriented Architecture (SOA).

FMW Best Practices Screenshot: Screenshot of Oracle E-Business Suite + Fusion Middleware Best Practices Center

My colleagues in the Fusion Middleware group have just launched a new Oracle E-Business Suite & Fusion Middleware Best Practice Center.  This site has step-by-step tutorials covering topics that include:
They've also started a blog that already has a rich set of deep technical articles covering topics such as:
If you're already developing SOA-based applications involving the E-Business Suite, or just curious about what's now possible with our latest tools, this site is worth a look.

Related Articles

Monday Jul 24, 2006

Service-Enable 11i -- Get A Jump On Fusion

You call 411 and ask for the phone number of the local Joe's Pizza. You ask your fancy-pants hotel concierge to book you tickets to the revival of, "Learn Oracle in 21 Days - The Musical."  You ask the E-Business Suite,  "How many Vision Laptops are in inventory organization M1?"  What's going on here? 

The World At Your Service

Web Services are key to the flexible infrastructure that has the potential to lower your costs of ownership and let your systems adjust to changes more easily. Lots of ink has been spilled: e.g. O'Reilly from 2001 is like looking at a time machine.

So if Web Services and Service Oriented Architectures (SOA) make applications easier to mix and match, what's a monolithic old application like the E-Business Suite to do?

Well, the Fusion Middleware BPEL Process Manager lets you Web Service-enable any of the E-Business Suite APIs today. Steven has given you the basics about using BPEL Process Manager and told you where to find the programming interfaces.  My goal is to connect these dots for you through the Fusion Middleware SOA Suite's E-Business Suite adapter. When these dots are connected, you'll see that you can service-enable any programming interface in the E-Business Suite - that's thousands of touchpoints to pick from.  The E-Business Suite is waiting to dance to your tune on puppet strings made of SOAP bubbles!

EBSAdapterGoForward: <FONT size=2>Going forward, the EBS adapter will get its metadata directly from your R12 instance.</FONT>
The EBS Adapter will get its metadata directly from your R12 instance going forward.

E-Business Suite - Exposed!

There are many interfaces published in the Integration Repository, and some of them are, in fact, document-style Web Services. The XML Gateway can take XML messages in standard Simple Object Access Protocol (SOAP) wrappers; it's a nice standards-based way to input some Sales Orders, the occasional Advanced Ship Notice. But let's face it:  you want 'remote procedure call' services! Request/Reply! Stock quotes! Exchange rates! The sexy stuff!

The E-Business Suite Adapter lets us do that with any of the procedural APIs in the Suite, many of which are based on PL/SQL. The ingredients are:
  • One pound E-Business Suite instance.  Any version will do - that's one of the cool parts.
  • One fired-up cup of JDeveloper 10.1.2.0.2, which includes the E-Business Suite adapter.  This version includes both BPEL and a runtime OC4J container, which will actually execute the whole BPEL product and your trial service - for testing purposes.
  • One tablespoon live Oracle Application Server 10.1.2.0.2 with BPEL Process Manager, for actually implementing and deploying the process.
We're going to use our example of the inventory check:  "How many Vision Laptops are actually in M1?"  Turns out we can check out that PL/SQL method in the Integration Repository.  It's the Query Quantity procedure in the Quantity Tree package in Inventory

Now, this isn't a cookbook play-by-play; there's a good one already posted.  Here are just the basics, to show you it's pretty easy.
  • In JDeveloper, create a new, empty synchronous BPEL process.
  • From the Process Components palette on the right, pull a PartnerLink onto your diagram.
JDeveloper UI:
  • Start the E-Business Suite Adapter ("Define New Adapter Servce"), and search for the API.
AdapterUI:
  • Notice that the API looks the same as it does in the Integration Repository!
  • The Adapter Wizard waves a wand and suddenly you have:
    • A PL/SQL package
    • An XML Schema Definition (XSD)
    • The Web Services Description Language (WSDL) for the adapter service
That's pretty much it.  You can see in the diagram that for my process I defaulted in some values (org id, etc), and got out only the Quantity On Hand value. Those are BPEL "Assign" steps.

Servicing our Customers

Some of the most common questions our customers put to us lately include:
  • How does the E-Business Suite expose services?
  • How can I fit the E-Business Suite into my SOA strategy?
  • What's the Applications direction around Web Services? 
What we've shown here today is not what Web Services will look like in Fusion. In the future, web services will be tightly tied to the Java object model underneath the Framework, and will use the Service Data Object standard that Oracle and others are pushing.

But you can get a jump on that future, using the tools of the Fusion Applications -- Fusion Middleware, BPEL, Integration Repository -- and deliver real architectural value back to your business today.  That's pretty cool, and you'll pick up some neat tricks in the process.

Tell me if you do anything interesting like this in the Comments box.

For More Information
PS - Does anyone remember junior high English class - where Tom Sawyer gets all the other kids to paint the fence by telling them how good it will look on their curriculum vitae? Steven Chan does!

About

Search

Categories
Archives
« April 2014
SunMonTueWedThuFriSat
  
1
4
5
6
7
8
9
10
11
12
13
14
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today