Ebs idm con9020_pdf_9020_0001

  • 608 views
Uploaded on

 

  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Be the first to comment
    Be the first to like this
No Downloads

Views

Total Views
608
On Slideshare
0
From Embeds
0
Number of Embeds
0

Actions

Shares
Downloads
43
Comments
0
Likes
0

Embeds 0

No embeds

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
    No notes for slide

Transcript

  • 1. 1 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 2. Integrating Oracle E-Business Suite with OracleIdentity ManagementSolutionsSunil Ghosh, Group ManagerElke Phelps, Sr. Principal Product Manager2 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 3. Safe Harbor Statement The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decision. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle.3 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 4. §  Oracle E-Business Suite and Oracle Identity Management Integrations §  Support Time Line and Action PlansProgram §  Single Sign-On with Oracle E-Business SuiteAgenda §  Oracle Internet Directory Integration §  Step-by-Step: Oracle E-Business Suite and Single Sign-On Integration §  Oracle E-Business and Third-Party Identity Management Integrations §  Step-by-Step: Oracle E-Business and Third-Party Identity Management Integration §  Oracle E-Business Suite Single Sign-On Integration Roadmap4 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 5. Oracle E-Business Suite andOracle Identity ManagementIntegrations5 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 6. Manage Users in Oracle Internet Directory DBMS_LDAP Oracle Internet E-Business Suite Directory FND_USER DIP§  Synchronize user credentials bi-directionally between Oracle Internet Directory and E-Business Suite§  Set master “source of truth” as OID, EBS, or both§  Manage user provisioning via powerful OID Directory Integration & Provisioning (DIP) templates§  Link an OID userid with one or more EBS userids “on-the-fly” 6 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 7. Enable Single Sign-On with Oracle Access Manager EBS Oracle AccessGate Internet Directory E-Business Suite Oracle WebGate Access Manager§  Protect E-Business Suite instances with Oracle Access Manager WebGate§  Single sign-on provides access to all registered partner applications, including EBS§  Log off any one partner application to log off all of them§  Support complex third-party single sign-on architectures7 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 8. Manage Users in Oracle Identity Manager OID E-Business Suite Oracle LDAP LDAP Identity Manager §  Use Oracle Identity Manager as a provisioning hub with third-party user directories and applications §  Connectors available for OID, E-Business Suite’s FND_USER and HRMS directories, and many more8 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 9. Add Layered Access Security with Oracle AdaptiveAccess Manager (OAAM) EBS Oracle Oracle AccessGate Internet Identity Directory Manager E-Business Suite Oracle Oracle Access Adaptive WebGate Manager Access Manager§  Require additional protection through device fingerprinting and other contextual data§  Add secure and highly usable self-service password management§  Features are transparent to E-Business Suite9 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 10. Extend Single Sign-On with Oracle IdentityFederation EBS Oracle AccessGate Internet Directory Oracle Remote E-Business Access Suite Identity Manager OIF Service Provider Provider WebGate §  Integrate E-Business Suite into federated network §  Delegate authentication to OIF to enable access through remote identity providers §  Features are transparent to E-Business Suite10 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 11. Other Identity Management Certifications Product Latest Versions for EBS Oracle Access Manager 11.1.1.5 Oracle Identity Manager 11.1.1.5 Oracle Identity Federation 11.1.1.6 Oracle Adaptive Access Manager 11.1.1.5 Oracle Enterprise Single Sign-On Suite Plus 11.1.1.5 All certifications here are performed by Fusion Middleware product teams.11 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 12. Support Time Line andAction Plans12 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 13. Oracle E-Business Suite Support Dates Release Premier Support Ends Extended Support Ends Minimum Baseline 11i (11.5.10) November 2013 November 2010 MOS Doc ID 883202.1 December 2014* 12.0 January 2012 January 2015 MOS Doc ID 1195034.1 Key 12.1 May 2014 May 2017 MOS Doc ID 1195034.1 *Exception to Extended Support Some OAM integration requirements may supersede this minimum baseline. Lifetime Support Information: http://www.oracle.com/us/support/lifetime-support/index.html13 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 14. Oracle Identity Management Support Dates Release Premier Support Ends Extended Support Ends Oracle Single Sign-On 10g December 2011 December 2012* Oracle Internet Directory 10g December 2011 Not available Oracle Internet Directory 11g June 2015 June 2017 Oracle Access Manager 10g Key December 2013 Not available Oracle Access Manager 11g June 2015 June 2017 * Limited Extended Support to December 2012 Lifetime Support Information: http://www.oracle.com/us/support/lifetime-support/index.html14 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 15. Action Plan for Oracle E-Business Suite UsersOracle Internet Directory 10g and Oracle Single Sign-On 10g §  Extended Support ends this year –  Oracle Single Sign-On (OSSO)10g extended support ends December 2012 è Deploy Oracle Access Manager §  Upgrade path for OID –  OID 10g è OID 11g (11.1.1.6 latest certified) §  Migration path for OSSO –  For EBS 12.0 or 12.1, OSSO 10g è OAM 11g with mod_osso –  For EBS 11i, migrate to OAM 10g NOTE: Oracle strongly recommends you upgrade to Release 12.1.3 and leverage OAM 11g and EBS AccessGate15 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 16. Single Sign-On withOracle E-Business Suite16 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 17. Oracle Access Manager 11g §  Oracle Access Manager (OAM) 11g is Oracle’s recommended single sign-on solution §  Supports E-Business Suite, Fusion Middleware, OracleAS products, Fusion Applications, and more §  Offers two styles of integration: WebGate and mod_osso Overview of Single Sign-On Integration Options for Oracle E-Business Suite, Note 1388152.1 Integrating Oracle E-Business Suite Release 12 with Oracle Access Manager 11gR1 (11.1.1.5), Note 1309013.117 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 18. Authentication vs. Authorization Authentication Authorization Oracle Access Manager Oracle E-Business Suite •  Identifies the user •  Identifies data and actions •  Validates user credentials the user can access •  Checks user responsibilities18 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 19. Oracle Access Manager 11g and E-BusinessSuite AccessGate EBS Oracle AccessGate Internet Directory E-Business Suite Oracle WebGate Access Manager §  EBS AccessGate enables integration with WebGate –  Maps LDAP user to EBS user and complements EBS session management with OAM –  WebGate 10g and WebGate 11g both supported –  Requires Oracle Internet Directory19 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 20. Oracle Access Manager 11g and E-BusinessSuite AccessGate §  External Java EE application installed independently from EBS –  Fewer points of integration = easier to certify new releases –  Insulates EBS instance from user authentication configuration §  EBS AccessGate supports multiple EBS releases as well as multiple OAM releases §  Multiple deployments can be supported with 1 WebGate20 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 21. Oracle Access Manager 11g and mod_osso User E-Business Suite OHS / mod_osso §  Support for mod_osso enables fast and easy migration from Oracle Single Sign-On (OSSO) 10g21 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 22. Oracle Access Manager 11g and mod_osso §  OAM 11g replaces OSSO 10g server –  Automatically migrate existing partner applications –  No changes needed for existing E-Business Suite installs §  Recommended only for users upgrading from OSSO 10g §  Available for EBS Release 12.0 and 12.1 only22 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 23. Integration with Discoverer and Portal E-Business Suite Oracle Discoverer EBS AccessGate User Oracle mod_osso WebGate Access ManagerWebGate and mod_osso deployments canbe used together to protect applications23 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 24. Integration with Discoverer and Portal E-Business Suite Oracle Discoverer EBS AccessGate User Oracle mod_osso WebGate Access ManagerIf mod_osso detects valid OAM session, user mayaccess resource without resubmitting credentials24 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 25. Oracle Internet DirectoryIntegration25 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 26. Oracle Internet Directory Integration DBMS_LDAP Oracle E-Business Suite Internet FND_USER Directory DIP §  Oracle Internet Directory and FND_USER must be kept synchronized §  Synchronization events are raised via the Workflow-based Business Event System whenever users are added or modified26 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 27. Oracle Internet Directory Supported Synchronization DBMS_LDAP Oracle E-Business Suite Internet FND_USER Directory DIP §  Asynchronous OID to FND_USER using Directory Integration & Provisioning §  Synchronous FND_USER to OID using DBMS_LDAP §  Bi-directional synchronization27 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 28. Link Accounts Oracle E-Business Internet Suite Directory (FND_USER) Userid = “Link Account” Userid = “John.Smith” Global Unique Identifier (GUID) “jsmith” §  One-time User Registration –  Done at setup time by system administrator –  Optional: can be done by end-user on first logon (“Link on the fly”) –  Useful when existing accounts in OID or a third-party LDAP directory differ from existing E-Business Suite accounts28 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 29. Link Accounts Oracle E-Business Internet Suite Directory (FND_USER) Userid = “Link Account” Userid = “John.Smith” Global Unique Identifier (GUID) “jsmith” §  GUID = orclguid attribute in OID –  This attribute is used by EBS to guarantee uniqueness –  Dependency on orclguid is why EBS supports direct integration only with OID29 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 30. Link to Multiple EBS Accounts Oracle E-Business Internet Suite Directory (FND_USER) “Link Account” Userid = Userid = “John.Smith” “jsmith” Userid = “testuser1” §  Note: It’s not possible to link multiple OID accounts to the Userid = same EBS account “testuser2”30 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 31. Access EBS Accounts Using Proxy Users Oracle E-Business Internet Suite Directory (FND_USER) “Link Account” Userid = Userid = “John.Smith” “jsmith” §  Recommended alternative to “multi-link” Userid = “testuser1” –  Grant/revoke proxy privilege to individual users by admin –  Track delegates’ actions within the system for improved security, compliance enforcement Userid = –  Granular control of proxy authority; e.g.: for specific date ranges “testuser2” –  Configure entirely within EBS – no OID changes required31 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 32. Step-By-Step:Oracle E-Business SuiteSingle Sign-On Integration32 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 33. First-Time Login with EBS AccessGate E-Business Suite EBS AccessGate User Oracle Internet Directory WebGate Oracle Access Manager33 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 34. Login to E-Business Suite via EBS AccessGate E-Business Suite EBS Œ AccessGate User Oracle Internet DirectoryŒ Unauthenticated to requests access user WebGate Oracle protected EBS resource Access Manager34 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 35. Login to E-Business Suite via EBS AccessGate E-Business Suite EBS AccessGate User Oracle  Internet Directory User redirected to EBS by AccessGate, protected WebGate Oracle OAM Access Manager35 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 36. Login to E-Business Suite via EBS AccessGate E-Business Suite EBS AccessGate User Oracle Internet Ž DirectoryŽ Per OAM policies, WebGate intercepts WebGate Oracle request Access Manager36 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 37. Login to E-Business Suite via EBS AccessGate E-Business Suite EBS AccessGate User Oracle  Internet Directory WebGate connects user to EBS AccessGate to collect WebGate Oracle credentials Access Manager37 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 38. Login to E-Business Suite via EBS AccessGate E-Business Suite EBS AccessGate User Oracle Internet  Directory User submits(OAM 11g) orto OAM server credentials WebGate Oracle WebGate (OAM 10) Access Manager38 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 39. Login to E-Business Suite via EBS AccessGate E-Business Suite EBS AccessGate User Oracle Internet ‘ Directory‘ OAM verifiesdirectory and against user credentials WebGate Oracle creates user session Access Manager39 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 40. Login to E-Business Suite via EBS AccessGate E-Business Suite EBS AccessGate User ’ Oracle Internet Directory’ OAM securely passes user identifier to EBS WebGate Oracle AccessGate Access Manager40 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 41. Login to E-Business Suite via EBS AccessGate E-Business Suite “ EBS AccessGate User Oracle Internet Directory“ EBS AccessGate links OID user to EBS user and WebGate Oracle creates ICX session Access Manager41 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 42. Login to E-Business Suite via EBS AccessGate E-Business Suite ” EBS AccessGate User Oracle Internet Directory” User redirected to original EBS URL with session, and WebGate Oracle resource returned to browser Access Manager42 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 43. Third-Party IdentityManagement Integrations43 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 44. Third-Party Single Sign-On Integration EBS Application Server … delegates user authentication to … Oracle Access Manager … delegates user authentication to … Third-Party SSO44 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 45. Third-Party SSO InteroperabilityMany ways to work with third-party SSO engines §  Oracle Access Manager 11g –  Windows Native Authentication via Kerberos, X.509 –  PKI X.509v3 Digital Certificates –  Other SSO systems via custom AccessGates with Access SDK §  Oracle Enterprise SSO Suite Plus 11g –  Biometric and smartcard systems §  Oracle Identity Federation 11g –  SAML, WS-Federation, Liberty Alliance –  Support CA Netegrity, IBM Tivoli, etc.45 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 46. Integration with Third-Party LDAPIf you have an existing third-party LDAP… Third-Party LDAP … synchronizes user attributes with … Oracle Internet Directory … synchronizes user attributes with … E-Business Suite Database (FND_USER)46 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 47. Integration with Third-Party LDAPServer Chaining§  New feature in OID 11g –  Map entries in third party LDAP directories to part of the directory tree and access through OID without synchronization –  Replaces external authentication plug-ins from OID 10g §  Third-party directories certified with Oracle Access Manager –  Microsoft Active Directory §  Does not support Active Directory Lightweight Directory Service –  Sun Java System Directory (SunONE iPlanet) –  Oracle Directory Server Enterprise Edition (formerly Sun) –  Novell eDirectory47 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 48. Passwords Stored in Third-Party LDAP Third-Party Oracle E-Business LDAP Internet Database (optional) Directory (FND_USER) User Password X User Password X User Password §  Third-party LDAP –  Handles user authentication, usually with a third-party authentication solution –  Commonly considered “Master” source-of-truth §  Oracle Internet Directory and E-Business Suite take minimal copies of master user definition -- excluding passwords §  E-Business Suite doesn’t maintain user passwords in this configuration48 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 49. Step-By-Step:Oracle E-Business Suite andThird Party IdentityManagement Integrations49 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 50. Third-Party Integration Architecture Third-Party Third-Party LDAP Oracle SSO Internet Directory EBS Database (FND_USER) End User Oracle Access Manager * EBS Application Server / EBS AccessGate * WebGate not shown.50 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 51. Third-Party Integration Architecture Third-Party Third-Party LDAP Oracle SSO Internet Directory EBS Database End Œ (FND_USER) User Oracle Access Manager EBS Application Server /Œ User provides credentials to third-party single sign-on system. EBS AccessGate 51 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 52. Third-Party Integration Architecture Third-Party Third-Party LDAP Oracle SSO Internet  Directory EBS Database (FND_USER) End User Oracle Access Manager EBS Application Server / Third-party single sign-onLDAP for credentials to third-party sends user’s EBS AccessGate authentication. 52 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 53. Third-Party Integration Architecture Third-Party Third-Party LDAP Oracle SSO Internet Directory EBS Database End Ž (FND_USER) User Oracle Access Manager EBS Application Server /Ž Third-party single sign-on providessecurity authenticated user with third-party EBS AccessGate token. 53 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 54. Third-Party Integration Architecture Third-Party Third-Party LDAP Oracle SSO Internet Directory EBS Database (FND_USER) End User Oracle Access Manager EBS Application Server / User attempts to access EBS, and is redirected to  EBS AccessGate EBS AccessGate and OAM. 54 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 55. Third-Party Integration Architecture Third-Party Third-Party LDAP Oracle SSO Internet Directory EBS Database (FND_USER) End User Oracle Access Manager  EBS Application Server / OAM recognizes the third-partyreturns OID token, then issues its own and security EBS AccessGate user to EBS AccessGate. 55 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 56. Third-Party Integration Architecture Third-Party Third-Party LDAP Oracle SSO Internet Directory EBS Database (FND_USER) End User Oracle Access Manager EBS Application Server /‘ EBS AccessGate recognizes the OAM session, maps the OID user ‘ EBS AccessGate to an EBS user and returns the resource.56 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 57. Case Studies57 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 58. Case StudyLogical Server Topology User§  One server per server type –  E-Business Application Server EBS Oracle –  EBS AccessGate Server AccessGate Internet Directory –  Oracle Internet Directory Server E-Business –  Oracle Access Manager Server Suite Oracle WebGate Access Manager58 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 59. Case StudyPhysical Server Topology§  Logical Servers may be combined EBS Application Server - EBS Instance§  Example: - EBS AccessGate –  One physical server for E-Business Suite and EBS AccessGate –  One physical server for Fusion Middleware components – WebGate, Oracle Access Manager and Oracle Internet Directory Fusion Middleware Server -Web Server with WebGate -Oracle Access Manager -Oracle Internet Directory59 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 60. Case StudyPhysical Server Topology§  Combine logical servers EBS Application Server - EBS Instance§  Scales easily - EBS AccessGate§  Increases to Fusion Middleware footprint not required§  Supports multiple E-Business Suite Instances with EBS AccessGate Fusion Middleware Server -Web Server with WebGate -Oracle Access Manager -Oracle Internet Directory60 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 61. Case StudyPhysical Server Topology§  Combine logical servers EBS Application Server 1 EBS Application Server 2 - EBS Instance 1 - EBS Instance 2§  Scales easily - EBS AccessGate 1 - EBS Access Gate 2§  Increases to Fusion Middleware footprint not required§  Supports multiple E-Business Suite Instances with EBS AccessGate Fusion Middleware Server -Web Server with WebGate -Oracle Access Manager -Oracle Internet Directory61 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 62. Case StudyIntegration with Active Directory & Kerberos Microsoft Windows Microsoft Native Authentication Active via Kerberos Directory Oracle Internet Directory End EBS User Database Oracle (FND_USER) Access Manager E-Business Suite Application Server EBS AccessGate62 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 63. Case Study Company Intranet DMZ 1 DMZ 2 External Internal Users Users WebGate FMW OID Repository OAM Internet Reverse Server Proxy External EBS EBS Database Internal EBS App Server + App Server + Firewall Firewall EBS AccessGate Firewall EBS AccessGate63 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 64. E-Business Suite SingleSign-On IntegrationRoadmap64 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 65. RoadmapSingle Sign-On §  Certify with Oracle Access Manager 11.1.2 –  Simplify documentation –  Certify DMZ configurations with the Detached Credential Collector65 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 66. Certify with Oracle Access Manager 11.1.2Roadmap§  Oracle E-Business Suite Release 12 will use the Oracle Access Manager 11gR2 global login page66 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 67. Certify with Oracle Access Manager 11.1.2Roadmap§  Oracle E-Business Suite Release 12 will use the Oracle Access Manager 11gR2 global login page67 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 68. Certify with Oracle Access Manager 11.1.2Roadmap§  Oracle E-Business Suite Release 12 will use the Oracle Access Manager 11gR2 global login page§  Custom login pages configured from Oracle Access Manager only68 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 69. RoadmapSingle Sign-On §  Certify with Oracle Access Manager 11.1.2 –  Simplify documentation –  Certify DMZ configurations with the Detached Credential Collector –  Utilize default OAM login page §  Simplify Deployment and Configuration §  Provide Advanced Diagnostics §  Provide separate authentication for external vs. internal users69 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 70. Authentication for External and Internal Users Existing Solution http://jobs.company.com http://intranet.mycompany.comExternal User Internal User External Internal EBS EBS Application Application Server Server Internet Intranet 70 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 71. Authentication for External and Internal Users Existing Solution http://jobs.company.com http://intranet.mycompany.comExternal User Internal User 71 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 72. Authentication for External and Internal Users Roadmap http://jobs.company.com http://myintranet.mycompany.comExternal User Internal User External Internal EBS EBS Application Application Server Server Internet Internet Intranet 72 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 73. Authentication for External and Internal Users Roadmap http://jobs.company.com http://intranet.mycompany.comExternal User 73 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 74. References74 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 75. ReferencesMy Oracle Support Note ID Title 1388152.1 Overview of Single Sign-On Integration Options for Oracle E-Business Suite 1309013.1 Integrating EBS with Oracle Access Manager 11g Using Oracle E-Business Suite AccessGate 1304550.1 Migrating Oracle Single Sign-On 10gR3 to Oracle Access Manager 11gR1 with Oracle E-Business Suite 975182.1 Integrating EBS with Oracle Access Manager 10g Using Oracle E-Business Suite AccessGate 876539.1 Using the Latest Oracle Internet Directory 11gR1 Patchset with Single Sign-On and EBS75 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 76. E-Business Suite Technology Stack Blog blogs.oracle.com/stevenChan•  Direct from EBS Development•  Latest news•  Certification announcements•  Primers, FAQs, tips•  Desupport reminders•  Latest upgrade recommendations•  Statements of Direction•  Subscribe via email or RSS 76 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 77. ReferencesE-Business Suite Technology Blog §  Understanding Options for Integrating Oracle Access Manager with E- Business Suite §  Oracle Access Manager 11.1.1.5 Certified with E-Business Suite 12 §  Why Does EBS Integration with Oracle Access Manager Require Oracle Internet Directory? §  Oracle Internet Directory 11gR1 11.1.1.5 Certified with E-Business Suite §  In-Depth: Using Third-Party Identity Managers with E-Business Suite Release 1277 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 78. Q&A78 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 79. Graphic Section Divider79 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 80. 80 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.
  • 81. 81 Copyright © 2012, Oracle and/or its affiliates. All rights reserved.