Siebel CRM integration with Oracle Access Manager

Environment details:

OAM: Version 10.1.4.3 on RHEL

Siebel: Version 8.1 on Aix 5.3

Steps for Integration:

1) Create profile for webgate and install the webgate on target siebel webserver.
– I have used SIEBEL_SSO_UID as the header variable name to pass the username.

2) Create the following user in OAM LDAP
a)SADMIN
b)GuestUser

3) Check if SADMIN and GuestUser is created in siebel user repository.

4) Modify the email field for the above users in OAM LDAP as follows
a)SADMIN mail=username=SADMIN password=admin
b)GuestUser mail=username=GuestUser password=admin

[Note: The username and password values specified in the mail attribute are the corresponding user credentials in the Siebel user repository]

5) Check if IBM ldap client 32 is installed on siebel server where seibel application server is installed[The Ldap client is required for ldap lookup].
– open file Eg: /u01/apps/sba_81/siebsrvr/siebenv.sh
– Add the entry Eg: LIBPATH=$LIBPATH:/opt/IBM/ldap/V6.0/lib [Specify the path of the ldap client library]

6) Login to the siebel server administration console
-Navigate to server Administration update the LDAP security adapter details.
-Search for Security Adapter. Modify the values to LDAP and LDAPSecAdpt[refer metalink 801378.1]

7) Modify eapps.cfg and eapps_sia.cfg file in siebel webserver /u01/apps/sba_81/sweapp/bin/eapps.cfg
[defaults] EncryptedPassword = FALSE
AnonUserName  = GuestUser
AnonPassword  = admin [Password specified in OAM LDAP] StatsPage     = _stats.swe
HTTPPort      = 80
HTTPSPort     = 443
EnableFQDN          = False
FQDN                =  mycomp.co.in (Siebel server)
TrustToken          = HELLO
DoCompression       = true
GuestSessionTimeout = 300
SessionTimeout      = 1800

8 ) Modify eapps_sia.cfg file in siebel webserver /u01/apps/sba_81/sweapp/bin/eapps_sia.cfg
[/fins_enu] ConnectString = siebel.TCPIP.None.None:// mycomp.co.in:2321/SBA_81/FINSObjMgr_enu
WebPublicRootDir = /u01/apps/sba_81/sweapp/public/enu
SiebEntSecToken = EUJ1byJURkLyvCmm11wW8gEAAFHJ
AnonUserName  = GuestUser
AnonPassword  = admin [Password specified in OAM LDAP] SingleSignOn     = TRUE
TrustToken       = HELLO
UserSpec         = SIEBEL_SSO_UID
UserSpecSource   = Header
StartCommand  = SWECmd=GotoView&SWEView=FINS+Home+Page+View

9) Modify fins.cfg file in siebel server /u01/apps/sba_81/siebsrvr/bin/enu/fins.cfg
[LDAPSecAdpt] SecAdptDllName = sscfldap
ServerName = mycomp1.co.in (hostname of OAM LDAP)
Port = 389
BaseDN = Cn=users,dc=mycomp1,dc=co,dc=in
SharedCredentialsDN = Cn=sadmin,cn=users,dc=mycomp1,dc=co,dc=in
UsernameAttributeType = uid
PasswordAttributeType = userPassword
CredentialsAttributeType = mail
RolesAttributeType          =
SslDatabase                 =
ApplicationUser = Cn=sadmin,cn=users,dc=mycomp1,dc=co,dc=in
ApplicationPassword = admin [Password specified in OAM LDAP] HashDBPwd = FALSE
PropagateChange = TRUE
CRC =
SingleSignOn = TRUE
TrustToken = HELLO
UseAdapterUsername = FALSE
SiebelUsernameAttributeType = uid

10) Reboot Siebel gateway, Siebel webserver and Siebel application server.

Reference: Metalink ID 801378.1

About the Author Atul Kumar

Leave a Comment:

11 comments
Debajyoti says October 28, 2010

Hi Atul,
I really like the solutions that you provide and enlighten us on various technologies that is very hot in the market.

Atul I need your help in freezing our deployment architecture.We have Oracle Web Center 11g as an intranet portal and Sibel 8.1.1 to cater to public sector CRM. We want to integrate Oracle Web Center and Siebel single sign on feature.We have bouth the Oracle FMW 11g product stack.

We are not able to finalize how the Oracle Access Manager components are going to be deployed, where the web gates are to be installed and how the user request is goin to exactly flow like

Reply
Atul Kumar says October 28, 2010

@ Debajyoti,
First of all credit goes to Shilu for his nice written post.

Assumptions : You are using OAM 10g

For SSO integration with WebCenter and OAM, I am sure you must be installing OHS 11g infront of WebCenter 11g so webgate will go on OHS 11g .

You then need to protect WebCenter URLs via OAM Policy Domains.

I am assuming you have already integrated Siebel with OAM as mentioned above.

Now request flow.

1. User try to access webcenter 11g via OHS url
2. WebGate on OHS will intercept user request and check for valid OAM cookie (obssocokie) since cookie is not present , OAM will ask user for username and password
3. OAM will validate username and password from user data store (OID or AD)
4. OAM’s access server will generate cookie and send it to user’s PC
5. If user is authorized (based on authorization policy in OAM defined by you)then access will granted.

Now same user access siebel protected by same OAM server then webgate on siebel webserver will again check for valid cookie .

User http request will show cookie to access server which it will validate and if user is authorized (based on authorization policy defined) then access will be granted.

I would say learn how OAM function (I am writing book on OAM 11g which will be out in Jun-Jul 2011 so stay tuned)

Till that time check http://onlineappsdba.com/index.php/2007/04/15/access-manager-webgate-request-flow/

Reply
Debajyoti says March 18, 2011

@Atul
Thanks for the reply. We are not using OHS as the web tier but rather using Sun Java Web Server 6.1 as the web host. From the compatibility matrix i have verified that Access Manager 10.1.4.3.0 and Web Center 11g and Siebel 8.1 all support Sun Java Web Server.

I haven’t done the integration of Access Manager with Siebel. It would be really nice if you could provide me with any help about the step by step procedure that needs to be done in access manager like how to create a web gate profile , how to provide the preffred host names for that web gate, how to configure the header and all. From Siebel side i am well informed of the changes that needs to be done.

Awaiting for your help Atul,

Regards
Dev

Reply
Debajyoti says April 4, 2011

hi atul any comment on this

Reply
Atul Kumar says April 4, 2011

@ Debajyoti,
At this is minute it is not possible to do step by step instructions for OAM 10g webgate on this blog as I am doing same for my book on OAM 11g .

Check Oracle Installation guide for installing 10g OAM webgate (including creating webgate instance) at http://download.oracle.com/docs/cd/E15217_01/doc.1014/e12493/webgate.htm#CHDBHAAG

Reply
Dev says May 10, 2011

I am following step by step procedure that Oracle has given me in order to achieve the integration but i am getting a HTTP 500 Internal Server Error while trying to access the siebel URLprotected in oracle access manager.

My URL string is getting appended with the values like start.swe?WECmd=Start&SWEHo=XYZ but getting the error as mentioned above.
Any suggestions on what might be going wrong

Reply
Atul Kumar says May 10, 2011

@ Dev,
Which version of siebel application you are using ?

what is version of OAM (10g or 11g) ?

You mentioned that “I am following step by step procedure that Oracle has given me”

Which document you are following ?

Reply
Dev says May 11, 2011

I am using Siebel 8.1.1.3 version on sun Solaris Platform. OracleAccess Manager version is 10.1.4.3.0 and it is also on Sun Solaris Platform . My web server is Sun Java Web Server 6.1 on which my web gates are installed.

I am following the Oracle Metalink Article titled “How to Integrate OAM with Siebel v8?”
Metalink Article Id# 801378.1

To brief you about my configuration , I have done a small POC on Oracle Access Manager where i have protected a custom HTML page at the web server through a policy in policy manager. when using basic over ldap authentication scheme and trying to access the protected resource it takes me to the pop up window where when i enter the credentials it takes me the requested URL. Second time when trying to access the same html page it doesn’t ask me any other credentials and directly takles me to the HTML Page becoz of the ObSSO cookie.

Same thing when i am trying to do with siebel setting the HTTP Header in the authentication action, and trying to access my URL it takes me to the pop window. after entering the credentials the URL gets chaged as mentioned in the above post but i get a HTTP 500 Internal Error.

Please help me in this regards
Awaiting your reply on this

Regards
Dev

Reply
Anera says April 2, 2014

Hi Atul,

I have requirement like provide SSO for Siebel CRM 8.1.1.11 with Access Manage 11gR2 PS2.

Can you help me in referring the right document.

Thanks
Anera

Reply
amol4321 says July 23, 2014

We are trying to protect Siebel 8.1 using OAM11g; However after login through OAM, when the request is redirected to Siebel -> Siebel application loaded in the browser but the siebel tabs are not getting rendered.

Any pointers will be helpful.

Reply
Rohan says September 27, 2015

@amol4321

Did you get any solution for the siebel application tab getting rendered issue?

I am facing the same issue.

Thanks,
Rohan Gokarnkar

Reply
Add Your Reply

Not found