Did you ever wonder “how Apps 11i determines where to direct for authentication – Local (FND_USER) or  SSO authentication” ?

What is ICXINDEX.html (in 11.5.9 or early 11.5.10) or AppsLogin or AppsLocalLogin.jsp ?

How to troubleshoot login issue ?

If you type http://hostname.domainname:port  (where port is web server port for 11i)

1.Web Server (9iAS 1.0.2.2.2) checks its configuration file $IAS_ORACLE_HOME/Apache/Apache/conf/httpd.conf for parameters

DocumentRoot   – $COMMON_TOP/portal/$CONTEXT_NAME/ and
DirectoryIndex – index.html

2. Based on above settings, server returns page $COMMON_TOP/portal/$CONTEXT_NAME/index.html to client

3. Page $COMMON_TOP/portal/$CONTEXT_NAME/index.html calls applist.html and aplogon.html in same directory

4. In aplogon.html there is link to
http(s)://hostname.domain:port/oa_servlets/AppsLogin

This link is based on value defined by context variable s_login_page in context file(SID_hostname.xml) under $APPL_TOP/admin5. Apache (11i Web Server) redirects /oa_servlets/AppsLogin to Jserv (via mod_jserv) which in turn uses oracle.apps.fnd.sso.AppsLogin from file$IAS_ORACLE_HOME/Apache/Jserv/etc/zone.propertiesservlet.AppsLogin.code=oracle.apps.fnd.sso.AppsLogin 

6.AppsLogin is a servlet which will direct user to specific login page depending on profile option “Application SSO Type

7. Profile Option : Application SSO Type can be set to one of following four values
Portal
SSWA
Portal w/SSO
SSWA w/SSO

a) If profile option is set to SSWA then user is redirected to /OA_HTML/AppsLocalLogin.jsp , after authentication (local to 11i) user is redirected to the configured home page specified in the Self Service Personal Home Page mode profile option.

b) If profile option is set to SSWA w/SSO then user is redirected to SSO (Single Sign-On) page for authentication and after authentication redirected to home page specified in the Self Service Personal Home Page mode profile option.

c) If profile option is set to Portal w/SSO then user is redirected to SSO (Single Sign-On) page for authentication and after authentication redirected to default Portal Homepage

d) If profile option is set to Portal then user is redirected to /OA_HTML/AppsLocalLogin.jsp for authentication and after authentication redirected to default Portal Homepage

If you hit any login related issues - check if
i) Request coming till web server i.e. ($IAS_ORACLE_HOME/ Apache/ Apache/ logs/ access_log)
ii) Next check for any error message in error_log in above directory
iii)Next check if request is routed to Jserv (via mod_jserv) ;  ($IAS_ORACLE_HOME/ Apache/ Jserv/ logs/ mod_jserv.log  (You may have to enable mod_jserv logs)
iv)After this check if request is routed to proper authentication server (Local 11i – AppsLocalLogin.jsp or SSO server)

.
References

  • 186981.1  Oracle Application Server with Oracle E-Business Suite Release 11i FAQ
  • 261914.1  Integrating Oracle E-Business Suite Release 11i with Oracle Internet Directory and Oracle Single Sign-On