Integration of E-Business suite with Oracle Single Sign-on
I have done the integration of E-Business suite with Oracle Single Sign-on today and would like to post few integration details of the same.
In my case, I am using EBS 12.0.6 and the pre-requisites is that OID should be upgraded to 10.1.4.3. The patch 5855635 should be applied in E-Business Suite machine if the E-Business suite is running on AIX machine.
Note: You might need to check the certification matrix the exact OID version compatible for E-Business version.
All we need is to register the OID with the E-Business instance. A script txkrun.pl needs to be run for this, which will register the E-Business application in Oracle Single Sign-On server of the OID instance and registers the OID details in E-Business Suite database.
For eg:
$FND_TOP/bin/txkrun.pl -script=SetSSOReg
Note: Several other parameters can be provided in the above command based on your requirement. Investigate that in the metalink article given below.
The sample output of the above script is shown below.
Enter the host name where Oracle iAS Infrastructure database is installed ? OID_HOSTNAME
Enter the LDAP Port on Oracle Internet Directory server ? OID_PORT
Enter SSL LDAP Port on Oracle Internet Directory server ? OID_SSL_PORT
Enter the Oracle Internet Directory Administrator (orcladmin) Bind password ?
Enter the instance password that you would like to register this application instance with ?
Enter Oracle E-Business apps database user password ?
You can observe that first input to be given is the hostname where Oracle iAS Infrastructure database is installed. This means you should enter the Database hostname if OID and DB are residing on different machines which is the same in our case. In fact, we should provide the OID hostname and not DB hostname.
After OID registration is completed successfully, check the OSSO application whether the EBS is registered as partner application or not and restart the OC4J_Security service.
Create an EBS user in OID (not an admin user) as shown below,
for e.g. username=operations, password=welcome1
When you access the E-Business console, it will display OSSO login page for login details and upon submitting those details, it will show another login page which is to map the operations user in E-Business, the second login page will appear only for the first time you access the E-Business console after OID registration.
For subsequent access of E-Business console, any OID user trying to login will be mapped to operations user of E-Business application.
Helpful Articles:
Metalink Note: 376811.1
We provided a dedicated module for Troubleshooting where we cover Logging in WebGate, OHS, EBS Accessgate, DIP, OAM, and OID in our EBS-OAM/OID Integration Training , more about training here
If you have not yet downloaded FREE eBook – 7 Docs every Oracle Apps DBA must read for EBS R12 integration with OAM/OID for SSO get a copy in your eMail.
About the Author Mahendra
I am engulfed in Oracle Identity & Access Management domain. I have expertise on providing the optimized solutions for user provisioning, web access management, Single Sign-On and federation capabilities etc., I am also well versed with complex integrations within Identity Management and other product domains. I have expertise on building demos and implementation experience on products Oracle Access Manager, Oracle Adaptive Access Manager, Oracle Entitlement Server, Oracle Virtual Directory, Oracle Internet Directory etc., Look @ my blog: http://talkidentity.blogspot.com