Oracle Apps DBA Interview Question : Apps / SSO / OID integration

Here are few Apps DBA interview questions you can expect, if recruiter is looking for SSO-Apps Integration expertise

Q. How to find if your E-Business Suite is integrated with SSO/OID (10g Identity Management)

– There are multiple ways to find out Apps 11i/R12 is integrated with SSO/OID
a) Check if SSOSDK schema exists (in Apps 11i/R12) and check table in SSOSDK schema
b) Check if log file exists at $OAD_TOP/rgf/$CONTEXT_NAME/sso
c) Profile option Option “Application SSO Types”

Q. If Single Sign-On server & OID is down, can users still login ?
Yes, use localLogin

Q. Name few Profile Option w.r.t. SSO Integration
– Application SSO Types
– Application SSO login types
– Application SSO Auto link User

* Make sure you know about these profile option as explain these profile option and how they effect SSO Integration

Q. Which SSO build version you are currently working ?
– Build 1, 2.1, 2.2, 3, 3.1, 4, 5, 6

Q. What is OID version you used for Apps-SSO/OID Integration ?
Latest certified OID version is 10.1.4.0.1 (Other certified were 10.1.2.0.2, 9.0.4 )

Q. What was direction of User synchronization ?
– From OID to Apps
– Apps to OID
– Bidirectional

Q. What extra steps you need to do after changing apps password in SSO Integrated Apps Instances ?
– Update provisioning profile in OID with new apps password

Q. If new users created is not able to login, how will you troubleshoot ?
– Check if user exist in both Apps (FND_USER) and OID  (If not check if user provisioning is working fine)
– If user exist check Password (in FND_USER) is set to External (If set to LOCAL user should try AppsLocalLogin.jsp)

Q. User is currently set to Login via SSO, what steps you need to do to change user for Local Login 

(AppsLocalLogin.jsp)
– Set Profile Option “Applications SSO Login Types” to LOCAL or BOTH
– Reset User Password using FNDCPASS
– Login using URL  /OA_HTML/AppsLocalLogin.jsp

Q. Where is log file for Apps Registration to SSO/OID ?
$APPLRGF/sso ($COMMON_TOP/rgf/$CONTEXT_NAME/sso)

Q. Where is log file for User Provisioning ?
On OID Node under $ORACLE_HOME/ldap/odi/log

Q. How you clone Oracle Apps (11i/R12) Instance Integrated with OID/SSO

On Apps
– Clone E-Business Suite using Rapid Clone

On OID/SSO
– Migrate User/Groups from source to target using ldifwrite & bulkload.sh
– Migrate Password Policy, DAS Admin Group

and finally Register target Apps to Target OID/SSO

Q. What all issues you encountered during SSO/OID Integration ?

Q. What is Subscription List ?

Q. What is mapping file w.r.t. User provisioning between Apps & OID and what is default location of oracle shipped

mapping file in Apps ?
– $FND_TOP/admin/template/*.tmp

Q. What is ODISRV in OID ?
ODISRV stands for Directory Integration Server and used during user provisioning between Apps and OID

Q. How to load initial Set of user from Apps to OID or Vice-Versa ?
From Apps to OID
– Create intermediate LDIF file
– Using ldifmigrator create final LDIF file
– Use bulkload to load ldif file containing users to OID
– Finally create subscription for bulkloaded users

From OID to Apps
– Use ldifwrite to create dump of users into LDIF file
– Using LDAPUserImport to import user to apps

Post your questions in comment section

About the Author Masroof Ahmad

Leave a Comment:

4 comments
Arvindhakshan says December 24, 2007

Hi,

I have doubts about

Q. What extra steps you need to do after changing apps password in SSO Integrated Apps Instances ?
– Update provisioning profile in OID with new apps password

In a bi directional provisioning system shud we reset the pswd ?

and could you please exp more about bi and uni directional provisioning ?

regards,
Arvind

Reply
Atul says December 24, 2007

Apps password is stored in provisioning profile between FND_USER OID User provisioning and Sync so as soon as you change apps password new password should be updated in this provisioning profile else user sync will fail.

I’ll cover user provisioning (BI, OID to FND_USER, FND_USER to OID) soon on this site

Reply
Ebizsso says October 17, 2008

Hi Atul,
The information regarding EBS sso is very helpful.
I am wondering if there a way to link EBS users to OID users other than link on the fly?
I would like to import AD users into OID.

Thank you
Ebizsso.

Reply
gani says October 30, 2010

could u tell me user login flow on apache and forms server..

Reply
Add Your Reply