SSO integration with application deployed on WLS

3038849

Hi everyone,

I am using WLS 12.2.1 and OHS 11g. I am trying to add the Oracle Single Sign on, that we use internally for all the authentication and authorization purposes, into my application. I already submitted the Request to the SSO team and have got the required configurations.

I have my WLS on one machine and OHS on another. So, right now, the user logs into OHS, and is redirected to the SSO page, logs in, and then redirected to my application deployed on WLS. The question I am facing is how to determine that a user is already logged in and use the information sent from the SSO server in my application. Right now, when I successfully log into the SSO, I redirect to my application which has a default ADF security thus, I have to login again.

I have looked into the following youtube video. but it was of little help

https://www.youtube.com/watch?v=tjBSLZBBZYY

Any  insights would be very appreciable.

Thanks and Regards.

handat

You just need to update jps-config.xml to add the oam sso provider config, see this doc for instructions: https://docs.oracle.com/middleware/1221/core/BIEDG/GUID-10906355-241B-4B74-B8A9-39721E1F6CA0.htm#BIEDG-GUID-BBEB6E0F-4D78-4975-A772-FB52674FB484

3038849

Hi handat,

Thanks for the link. I am not able to understand the webgate part. Do I have to install webgate for integrating with Oracle's Single Sign On or they already have it on there machine?

Thanks

amey g

Hello,

Are you talking about OAM to establish SSO then yes you required webgate.

Please check https://blogs.oracle.com/FunctionalArchitecture/entry/fusion_applications_single_sign_on

If you are check for Oracle Single sing on then no need.

OSSO

-  Install and Configure the Oracle HTTP Server

- Configure the module mod_wl in the WebTier OHS

-Configure the OSSOIdentityAsserter

-Register OHS with Oracle SSO

- application specific configuration.

Thanks,
Amey

handat

You should double check with your SSO team, but most likely, they already installed a webgate and all you need to do is update your jps-config settings to recognise the sso token passed to you by ohs and webgate.