{"id":2571,"date":"2011-06-29T11:59:36","date_gmt":"2011-06-29T15:59:36","guid":{"rendered":"http:\/\/onlineappsdba.com\/index.php\/2011\/06\/29\/integrate-oracle-apps-e-business-suite-r12-with-oracle-access-manager-oam-11g-for-sso\/"},"modified":"2017-12-18T08:45:19","modified_gmt":"2017-12-18T12:45:19","slug":"integrate-oracle-apps-e-business-suite-r12-with-oracle-access-manager-oam-11g-for-sso","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2011\/06\/29\/integrate-oracle-apps-e-business-suite-r12-with-oracle-access-manager-oam-11g-for-sso\/","title":{"rendered":"Integrate Oracle Apps (E-Business Suite) R12 with Oracle Access Manager (OAM) 11g for SSO"},"content":{"rendered":"

I discussed about support of EBS (Apps R12) integration with OAM 11g for Single Sing-on here<\/a>, In this post I am going to cover high level steps to integrate Oracle Applications R12 with Oracle Access Manager 11g<\/strong> (for detailed analysis of EBS Access Gate<\/strong>, WebGate<\/strong> and what happens behind the scene including deploying Access Gate in High Availability check chapter 12<\/strong> of my book OAM \/ OIM 11g for Administrators<\/a> ).<\/p>\n

High Level Steps for Oracle Apps R12 integration with OAM 11g<\/u><\/strong><\/p>\n

1.<\/strong> Install Oracle Access Manager 11g R1 (11.1.1.3) , check steps here<\/a>\u00a0 (OIM or SOA are optional component and not required for this integration<\/span>)<\/p>\n

2.<\/strong> Apply Patch BP02<\/strong> (10368022)\u00a0to Oracle Access manager and bring\u00a0OAM to 11.1.1.3.2 using steps mentioned here<\/a><\/p>\n

3.<\/strong> Install OID 11.1.1.3 (or higher) as mentioned here<\/a>\u00a0 (If you are installing OID 11.1.1.4 or 11.1.1.5 then do not use same MW_HOME as used by OAM else enterprise manager (EM) will fail to start<\/span>)<\/p>\n

4.<\/strong> Change Primary Identity Store\u00a0<\/strong>of Oracle Access Manager from weblogic’s embedded LDAP server to Oracle Internet Directory (OID) as explained here<\/a><\/p>\n

5.<\/strong> If you are on apps 12.1.1 then apply patch 8919489 & 9824524, for 12.0.6 apply patch 10220779 & 10257580, and for 12.1.2\/12.1.3 apply patch 9454600<\/p>\n

6.<\/strong>Install WebLogic server which will host E-Business Suite Access Gate\u00a0<\/strong>and create weblogic domain (You can also use WebLogic Server used by OAM server). For steps on WebLogic Server Installation click here<\/a><\/p>\n

7.<\/strong> Install OHS 11g server which will host webgate <\/strong>and also act as proxy server for WebLogic (via mod_wl_ohs<\/strong>), more on mod_wl_ohs here<\/a>\u00a0 (User will be redirected for authentication to this OHS server via profile option “Application Authenticate Agent<\/strong>” and\u00a0 “Applications SSO Type<\/strong>“)<\/span><\/p>\n

8.<\/strong> Create DBC <\/strong>file for machine hosting WebLogic server java oracle.apps.fnd.security.AdminDesktop <apps user>\/<apps pwd> CREATE<\/strong> (If WebLogic server is hosted on same machine as R12 middle tier then you can use existing DBC file<\/span>)<\/p>\n

9.<\/strong> Download patch 10124068<\/strong> (This patch contains Access Gate 1.1.0<\/span>) on WebLogic Server machine and copy fndext.jar <\/strong>to weblogic’s $DOMAIN_HOME\/lib directory and restart all servers running on weblogic domain.<\/p>\n

10.<\/strong> Use ant -f txkEBSAuth.xml <\/strong>(xml file is part of 10124068<\/strong>) to deploy EBS Access Gate on weblogic domain created on step 6. This will deploy web application<\/strong> (war – Web Archive) and create JDBC <\/strong>in WebLogic server to connect to EBS database. (Web Application will\u00a0contains login page OAMLogin.jsp<\/strong>)<\/p>\n

11. <\/strong>Configure OHS (installed on step 7) to forward request to WebLogic server (installed on step 6) more steps to configure mod_wl_ohs here<\/a><\/p>\n

12.<\/strong> Provision an Instance of 10g WebGate<\/strong> either using RREG<\/strong> or OAMConsole<\/strong>. For more information on RREG and registration using OAMConsole refer chapter 8<\/strong> of my book OAM \/ OIM 11g for Admins<\/a>\u00a0or for 11g WebGate here<\/a> (You can use either 10g webgate or 11g webgate, 10g Webgate is recommended for EBS R12<\/span>)<\/p>\n

13.<\/strong> Install 10g or 11gWebgate<\/strong>(depending on instance created in step 12)\u00a0with OHS server (created on step 7)<\/p>\n

14.<\/strong> Verify Authentication Modules<\/strong>, Schemes<\/strong>, Policies<\/strong>, Application Domain<\/strong>, Public and Protected Resource <\/strong>as explained in MOS Note 1309013.1 . For more information on these components of OAM, refer chapter 6<\/strong> of book OAM\/OIM 11g for Admins<\/a><\/p>\n

15.<\/strong> Configure Profile Option\u00a0 “Application Authenticate Agent<\/strong>” & “Applications SSO Type<\/strong>” for EBS R12<\/p>\n

16.<\/strong>Configure EBS-OID synchronization (OID to EBS, EBS to OID or both using option provisiontype<\/strong>)<\/p>\n

[code language=”bash”]<\/p>\n

$FND_TOP\/bin\/txkrun.pl<\/strong> \\
\n-script=SetSSOReg \\
\n–registerinstance=yes<\/strong> \\<\/p>\n

[\/code]<\/p>\n

and<\/p>\n

[code language=”bash”]<\/p>\n

$FND_TOP\/bin\/txkrun.pl \\
\n-script=SetSSOReg \\
\n–registeroid=yes<\/strong> \\<\/p>\n

[\/code]<\/p>\n

17.<\/strong> Configure Log Out for EBS<\/p>\n

18. <\/strong>Test Login to EBS (using user\/password in OID) and Logout<\/p>\n

We provided a dedicated module for Troubleshooting where we cover Logging in WebGate<\/strong>, OHS<\/strong>, EBS Accessgate<\/strong>, DIP<\/strong>, OAM<\/strong>, and OID<\/strong> in our EBS-OAM\/OID Integration Training<\/a> , more about training here<\/a><\/p>\n

If you have not yet downloaded\u00a0FREE eBook \u2013 7 Docs every Oracle Apps DBA must read for EBS R12 integration with OAM\/OID for SSO<\/a>\u00a0get a copy in your Email<\/p>\n