SlideShare a Scribd company logo
1 of 12
Download to read offline
Single Sign-On for APEX:
It‘s not an option
Niels de Bruijn
08.03.2016 | APEX World
Facts & Figures
Independent Technology House
with Cross-Industry Expertise
Headquarter
Ratingen
(North Rhine – Westphalia)
240
Employees
Founded
1994
Branches
Dortmund, Cologne,
Frankfurt
Top Company
for Trainees &
Students
Privately-
Owned
Corporation
Oracle
Platinum
Partner
24 Mio. Euro
Revenue
2Single Sign-On for APEX
3
About me
§ Niels de Bruijn, Business Unit Manager APEX
§ Born in 1977, married, three daughters, living in Ratingen
§ Working for MT AG since DEC-2003
§ After working for 2 years as Oracle consultant for Oracle Nederland B.V.
§ Track record with APEX since its inception
§ Responsible for all APEX activity in the company
§ Knowledge Portal: apex.mt-ag.com
§ Active DOAG member and responsible for APEX within this society
§ Presenting at Kscope, DOAG Conference, APEXposed, APEX World, APEX Connect
§ Conference Chair for conference DOAG APEX Connect
§ Part of APEX Content Committee for Kscope
§ Member of the APEX Review Board
Single Sign-On for APEX
§ Single Sign-On: it is not an option
§ How does the magic work?
§ Caveats
§ I want more
§ Questions I get
§ More information
4
Agenda
Single Sign-On for APEX
For the sake of security
§ Credentials are not passed to the database
§ Kerberos is secure (as used by Windows itself)
§ Central user store in Active Directory
§ No corporate password policy needed within APEX
For the sake of productivity
§ End users love it
§ Developers can now switch between workspaces without logging in again
WHAT IS YOUR EXCUSE FOR NOT USING IT?
5
Single Sign-On: it is not an option
Single Sign-On for APEX
6
How does the magic work?
8009
Single Sign-On for APEX
Start here: http://www.slideshare.net/nielsdb/mt-ag-howtosingle-
signonforapexapplicationsusingkerberos-46435415
Overview
§ Install RDBMS & APEX
§ Install JDK, Tomcat & Apache/IIS
§ Configure ORDS & deploy
§ Configure Apache or IIS for SSO incl. SSL certificate
General installation steps of Apache & ORDS can be found here:
http://www.opal-consulting.de/downloads/presentations/2015-11-DOAG-ORDS-Setup
7
How does the magic work?
Single Sign-On for APEX
§ Map existing APEX accounts with their AD username
APEX_UTIL.SET_USERNAME
( p_userid => APEX_UTIL.GET_USER_ID('ADMIN')
, p_username => 'NDBRUIJN'
);
§ When using mod_auth_kerb and AD user is member of too many AD groups
§ Have a look here: http://blogs.technet.com/b/surama/archive/2009/04/06/kerberos-
authentication-problem-with-active-directory.aspx
§ Once enabled, you can’t change the identity without changing the OS user
§ Prepare your end users
§ For developers: just switch the authentication scheme to “open door” in the dev environment
8
Caveats
Single Sign-On for APEX
§ What about people not listed in Active Directory?
§ Option 1: Use a separate entry point (ie. VirtualHost) & use Custom Auth in your APEX app
§ Option 2: Use software like Microsoft Forefront (no change in ORDS/APEX needed)
§ What about devices like MacBooks or Smartphones that are not part of the Windows domain?
§ Fallback Authentication using Basic Authentication over HTTPS
§ Tipp: don’t use Digest Authentication (doesn’t work with Firefox)
§ Don’t want to enter username/password? Client certificates will help you out.
9
I want more
Single Sign-On for APEX
§ “We already have the shared session Cookie, so why bother?”
§ Still use it to prevent multiple APEX session cookies
§ “We already have LDAP authentication utilized in our APEX app”
§ Are you sure you want to pass your AD credentials to the database?
§ “What about the rights in my app?”
§ We are talking about authentication here, the authorization is normally determined by the app
§ “Any concerns about the session timeout setting in APEX?”
§ Set it to 99999 as this is now delegated to Kerberos
§ “The logout link in my app doesn’t work anymore”
§ Just delete it
10
Questions I get
Single Sign-On for APEX
§ General installation steps of Apache & ORDS can be found here:
http://www.opal-consulting.de/downloads/presentations/2015-11-DOAG-ORDS-Setup
§ About Kerberos
http://www.roguelynn.com/words/explain-like-im-5-kerberos
§ About mod_auth_kerb
http://blog.hallowelt.biz/wp-content/uploads/SSO_mit_mod_auth_kerb_v3.pdf
§ More SSO options
http://wphilltech.com/options-for-windows-native-authentication-with-apex
11
More information
Single Sign-On for APEX
Questions?
@nielsdb
http://nielsdebr.blogspot.de
http://de.linkedin.com/in/nielsdebruijn
www.xing.com/profile/Niels_deBruijn
http://www.apexsolutions.de/blog

More Related Content

What's hot

Apex behind the scenes
Apex behind the scenesApex behind the scenes
Apex behind the scenes
Enkitec
 
APEX Behind the Scenes by Scott Spendolini
APEX Behind the Scenes by Scott SpendoliniAPEX Behind the Scenes by Scott Spendolini
APEX Behind the Scenes by Scott Spendolini
Enkitec
 
The RDBMS You Should Be Using
The RDBMS You Should Be UsingThe RDBMS You Should Be Using
The RDBMS You Should Be Using
ColdFusionConference
 

What's hot (20)

Affordable Workflow Options for APEX
Affordable Workflow Options for APEXAffordable Workflow Options for APEX
Affordable Workflow Options for APEX
 
Apex behind the scenes
Apex behind the scenesApex behind the scenes
Apex behind the scenes
 
APEX richtig installieren und konfigurieren
APEX richtig installieren und konfigurierenAPEX richtig installieren und konfigurieren
APEX richtig installieren und konfigurieren
 
Mastering Universal Theme with corporate design from Union Investment
Mastering Universal Theme with corporate design from Union InvestmentMastering Universal Theme with corporate design from Union Investment
Mastering Universal Theme with corporate design from Union Investment
 
Oracle Enterprise manager 13c Installation
Oracle Enterprise manager 13c InstallationOracle Enterprise manager 13c Installation
Oracle Enterprise manager 13c Installation
 
Install oracle siebel on windows 2008 r2
Install oracle siebel on windows 2008 r2Install oracle siebel on windows 2008 r2
Install oracle siebel on windows 2008 r2
 
J2ee user managment using dwh builder
J2ee user managment using dwh builderJ2ee user managment using dwh builder
J2ee user managment using dwh builder
 
Developer Insights for Application Upgrade to ColdFusion 2016
Developer Insights for Application Upgrade to ColdFusion 2016Developer Insights for Application Upgrade to ColdFusion 2016
Developer Insights for Application Upgrade to ColdFusion 2016
 
Tips & Tricks for Java & SOA Cloud Service
Tips & Tricks for Java & SOA Cloud ServiceTips & Tricks for Java & SOA Cloud Service
Tips & Tricks for Java & SOA Cloud Service
 
APEX Behind the Scenes by Scott Spendolini
APEX Behind the Scenes by Scott SpendoliniAPEX Behind the Scenes by Scott Spendolini
APEX Behind the Scenes by Scott Spendolini
 
SOA & WebLogic - Lift & Shift to the Cloud
SOA & WebLogic - Lift & Shift to the CloudSOA & WebLogic - Lift & Shift to the Cloud
SOA & WebLogic - Lift & Shift to the Cloud
 
Using jca salesforce adapter with soa suite
Using jca salesforce adapter with soa suiteUsing jca salesforce adapter with soa suite
Using jca salesforce adapter with soa suite
 
How to add storage to esxi 5.5
How to add storage to esxi 5.5How to add storage to esxi 5.5
How to add storage to esxi 5.5
 
The RDBMS You Should Be Using
The RDBMS You Should Be UsingThe RDBMS You Should Be Using
The RDBMS You Should Be Using
 
APEX connects Jira
APEX connects JiraAPEX connects Jira
APEX connects Jira
 
Api manager preconference
Api manager preconferenceApi manager preconference
Api manager preconference
 
OWA And SharePoint Integration
OWA And SharePoint IntegrationOWA And SharePoint Integration
OWA And SharePoint Integration
 
Weblogic 101 for dba
Weblogic  101 for dbaWeblogic  101 for dba
Weblogic 101 for dba
 
Oracle on VMware Licensing Plugin for Oracle EM12c Beta Overview
Oracle on VMware Licensing Plugin for Oracle EM12c Beta OverviewOracle on VMware Licensing Plugin for Oracle EM12c Beta Overview
Oracle on VMware Licensing Plugin for Oracle EM12c Beta Overview
 
Oracle SOA Suite for High availability Enterprises
Oracle SOA Suite for High availability EnterprisesOracle SOA Suite for High availability Enterprises
Oracle SOA Suite for High availability Enterprises
 

Similar to 20160308 apex sso

Similar to 20160308 apex sso (20)

Overview and Walkthrough of the Application Programming Model with SAP Cloud ...
Overview and Walkthrough of the Application Programming Model with SAP Cloud ...Overview and Walkthrough of the Application Programming Model with SAP Cloud ...
Overview and Walkthrough of the Application Programming Model with SAP Cloud ...
 
SMART4apex company presentation APEX world convention March 25 2014
SMART4apex company presentation APEX world convention March 25 2014SMART4apex company presentation APEX world convention March 25 2014
SMART4apex company presentation APEX world convention March 25 2014
 
Moving your APEX app to the Oracle Exadata Express Cloud
Moving your APEX app to the Oracle Exadata Express CloudMoving your APEX app to the Oracle Exadata Express Cloud
Moving your APEX app to the Oracle Exadata Express Cloud
 
Oracle Apex Intoduction.pptx
Oracle Apex Intoduction.pptxOracle Apex Intoduction.pptx
Oracle Apex Intoduction.pptx
 
Apex atp customer_presentation_wwc march 2019
Apex atp customer_presentation_wwc march 2019Apex atp customer_presentation_wwc march 2019
Apex atp customer_presentation_wwc march 2019
 
How to make APEX print through Node.js
How to make APEX print through Node.jsHow to make APEX print through Node.js
How to make APEX print through Node.js
 
SQLite3
SQLite3SQLite3
SQLite3
 
ORACLE FUSION CLOUD SCM PDF.pdf
ORACLE FUSION CLOUD SCM PDF.pdfORACLE FUSION CLOUD SCM PDF.pdf
ORACLE FUSION CLOUD SCM PDF.pdf
 
C vof anas
C vof anasC vof anas
C vof anas
 
CvofAnas
CvofAnasCvofAnas
CvofAnas
 
Transforming to OpenStack: a sample roadmap to DevOps
Transforming to OpenStack: a sample roadmap to DevOpsTransforming to OpenStack: a sample roadmap to DevOps
Transforming to OpenStack: a sample roadmap to DevOps
 
Experiences of SOACS
Experiences of SOACSExperiences of SOACS
Experiences of SOACS
 
Intro on Oracle Application express - APEX
Intro on Oracle Application express - APEXIntro on Oracle Application express - APEX
Intro on Oracle Application express - APEX
 
Exploiting Critical Attack Vectors to Gain Control of SAP Systems
Exploiting Critical Attack Vectors to Gain Control of SAP SystemsExploiting Critical Attack Vectors to Gain Control of SAP Systems
Exploiting Critical Attack Vectors to Gain Control of SAP Systems
 
Service Workers and APEX
Service Workers and APEXService Workers and APEX
Service Workers and APEX
 
SharePoint 2013 in a hybrid world
SharePoint 2013 in a hybrid worldSharePoint 2013 in a hybrid world
SharePoint 2013 in a hybrid world
 
Microsoft Flow advanced: tips, pitfalls, problems and warnings to be known be...
Microsoft Flow advanced: tips, pitfalls, problems and warnings to be known be...Microsoft Flow advanced: tips, pitfalls, problems and warnings to be known be...
Microsoft Flow advanced: tips, pitfalls, problems and warnings to be known be...
 
Extending Oracle SaaS Using Oracle Cloud UX Rapid Development Kit
Extending Oracle SaaS Using Oracle Cloud UX Rapid Development KitExtending Oracle SaaS Using Oracle Cloud UX Rapid Development Kit
Extending Oracle SaaS Using Oracle Cloud UX Rapid Development Kit
 
Oracle Application Express (APEX) and Microsoft Sharepoint integration
Oracle Application Express (APEX) and Microsoft Sharepoint integrationOracle Application Express (APEX) and Microsoft Sharepoint integration
Oracle Application Express (APEX) and Microsoft Sharepoint integration
 
Découvrons Oracle Cloud Platform for Integration - Oracle Integration Cloud
Découvrons Oracle Cloud Platform for Integration - Oracle Integration CloudDécouvrons Oracle Cloud Platform for Integration - Oracle Integration Cloud
Découvrons Oracle Cloud Platform for Integration - Oracle Integration Cloud
 

More from MT AG

MT AG: 7 gute Gründe warum Apex
MT AG: 7 gute Gründe warum ApexMT AG: 7 gute Gründe warum Apex
MT AG: 7 gute Gründe warum Apex
MT AG
 
MT AG: Ajax Rezepte fuer web services mit jquery und ajax
MT AG: Ajax Rezepte fuer web services mit jquery und ajaxMT AG: Ajax Rezepte fuer web services mit jquery und ajax
MT AG: Ajax Rezepte fuer web services mit jquery und ajax
MT AG
 

More from MT AG (15)

20160307 apex connects_jira
20160307 apex connects_jira20160307 apex connects_jira
20160307 apex connects_jira
 
MT AG Data Vault Generator
MT AG Data Vault GeneratorMT AG Data Vault Generator
MT AG Data Vault Generator
 
MT AG: Sesam oeffne Dich
MT AG: Sesam oeffne DichMT AG: Sesam oeffne Dich
MT AG: Sesam oeffne Dich
 
MT AG: 7 gute Gründe warum Apex
MT AG: 7 gute Gründe warum ApexMT AG: 7 gute Gründe warum Apex
MT AG: 7 gute Gründe warum Apex
 
MT AG: Ajax Rezepte fuer web services mit jquery und ajax
MT AG: Ajax Rezepte fuer web services mit jquery und ajaxMT AG: Ajax Rezepte fuer web services mit jquery und ajax
MT AG: Ajax Rezepte fuer web services mit jquery und ajax
 
MT AG: Implementierungsvarianten mit-apex4.1
MT AG: Implementierungsvarianten mit-apex4.1MT AG: Implementierungsvarianten mit-apex4.1
MT AG: Implementierungsvarianten mit-apex4.1
 
MT AG Präsentation Rapid Application Development mit APEX 5
MT AG Präsentation Rapid Application Development mit APEX 5MT AG Präsentation Rapid Application Development mit APEX 5
MT AG Präsentation Rapid Application Development mit APEX 5
 
APEX & MTdoxx
APEX & MTdoxxAPEX & MTdoxx
APEX & MTdoxx
 
Datenmodellierung ist langweilig, lassen Sie Datamodeler das machen
Datenmodellierung ist langweilig, lassen Sie Datamodeler das machenDatenmodellierung ist langweilig, lassen Sie Datamodeler das machen
Datenmodellierung ist langweilig, lassen Sie Datamodeler das machen
 
Ist Gradle auch für die APEX-Projekte?
Ist Gradle auch für die APEX-Projekte?Ist Gradle auch für die APEX-Projekte?
Ist Gradle auch für die APEX-Projekte?
 
Tune up your APEX
Tune up your APEXTune up your APEX
Tune up your APEX
 
Echtes Single Sign-On mit APEX realisieren
Echtes Single Sign-On mit APEX realisierenEchtes Single Sign-On mit APEX realisieren
Echtes Single Sign-On mit APEX realisieren
 
Echtes Single Sign-On mit APEX realisieren
Echtes Single Sign-On mit APEX realisierenEchtes Single Sign-On mit APEX realisieren
Echtes Single Sign-On mit APEX realisieren
 
Five Finger Death Punch
Five Finger Death PunchFive Finger Death Punch
Five Finger Death Punch
 
Dateien per Drag & Drop in APEX Applikationen ablegen.
Dateien per Drag & Drop in APEX Applikationen ablegen.Dateien per Drag & Drop in APEX Applikationen ablegen.
Dateien per Drag & Drop in APEX Applikationen ablegen.
 

Recently uploaded

AI/ML Infra Meetup | Improve Speed and GPU Utilization for Model Training & S...
AI/ML Infra Meetup | Improve Speed and GPU Utilization for Model Training & S...AI/ML Infra Meetup | Improve Speed and GPU Utilization for Model Training & S...
AI/ML Infra Meetup | Improve Speed and GPU Utilization for Model Training & S...
Alluxio, Inc.
 

Recently uploaded (20)

AI/ML Infra Meetup | ML explainability in Michelangelo
AI/ML Infra Meetup | ML explainability in MichelangeloAI/ML Infra Meetup | ML explainability in Michelangelo
AI/ML Infra Meetup | ML explainability in Michelangelo
 
AI/ML Infra Meetup | Perspective on Deep Learning Framework
AI/ML Infra Meetup | Perspective on Deep Learning FrameworkAI/ML Infra Meetup | Perspective on Deep Learning Framework
AI/ML Infra Meetup | Perspective on Deep Learning Framework
 
APVP,apvp apvp High quality supplier safe spot transport, 98% purity
APVP,apvp apvp High quality supplier safe spot transport, 98% purityAPVP,apvp apvp High quality supplier safe spot transport, 98% purity
APVP,apvp apvp High quality supplier safe spot transport, 98% purity
 
GraphSummit Stockholm - Neo4j - Knowledge Graphs and Product Updates
GraphSummit Stockholm - Neo4j - Knowledge Graphs and Product UpdatesGraphSummit Stockholm - Neo4j - Knowledge Graphs and Product Updates
GraphSummit Stockholm - Neo4j - Knowledge Graphs and Product Updates
 
OpenChain @ LF Japan Executive Briefing - May 2024
OpenChain @ LF Japan Executive Briefing - May 2024OpenChain @ LF Japan Executive Briefing - May 2024
OpenChain @ LF Japan Executive Briefing - May 2024
 
AI Hackathon.pptx
AI                        Hackathon.pptxAI                        Hackathon.pptx
AI Hackathon.pptx
 
How to install and activate eGrabber JobGrabber
How to install and activate eGrabber JobGrabberHow to install and activate eGrabber JobGrabber
How to install and activate eGrabber JobGrabber
 
AI/ML Infra Meetup | Improve Speed and GPU Utilization for Model Training & S...
AI/ML Infra Meetup | Improve Speed and GPU Utilization for Model Training & S...AI/ML Infra Meetup | Improve Speed and GPU Utilization for Model Training & S...
AI/ML Infra Meetup | Improve Speed and GPU Utilization for Model Training & S...
 
AI/ML Infra Meetup | Reducing Prefill for LLM Serving in RAG
AI/ML Infra Meetup | Reducing Prefill for LLM Serving in RAGAI/ML Infra Meetup | Reducing Prefill for LLM Serving in RAG
AI/ML Infra Meetup | Reducing Prefill for LLM Serving in RAG
 
SQL Injection Introduction and Prevention
SQL Injection Introduction and PreventionSQL Injection Introduction and Prevention
SQL Injection Introduction and Prevention
 
How to pick right visual testing tool.pdf
How to pick right visual testing tool.pdfHow to pick right visual testing tool.pdf
How to pick right visual testing tool.pdf
 
A Python-based approach to data loading in TM1 - Using Airflow as an ETL for TM1
A Python-based approach to data loading in TM1 - Using Airflow as an ETL for TM1A Python-based approach to data loading in TM1 - Using Airflow as an ETL for TM1
A Python-based approach to data loading in TM1 - Using Airflow as an ETL for TM1
 
Crafting the Perfect Measurement Sheet with PLM Integration
Crafting the Perfect Measurement Sheet with PLM IntegrationCrafting the Perfect Measurement Sheet with PLM Integration
Crafting the Perfect Measurement Sheet with PLM Integration
 
Workforce Efficiency with Employee Time Tracking Software.pdf
Workforce Efficiency with Employee Time Tracking Software.pdfWorkforce Efficiency with Employee Time Tracking Software.pdf
Workforce Efficiency with Employee Time Tracking Software.pdf
 
A Guideline to Zendesk to Re:amaze Data Migration
A Guideline to Zendesk to Re:amaze Data MigrationA Guideline to Zendesk to Re:amaze Data Migration
A Guideline to Zendesk to Re:amaze Data Migration
 
What need to be mastered as AI-Powered Java Developers
What need to be mastered as AI-Powered Java DevelopersWhat need to be mastered as AI-Powered Java Developers
What need to be mastered as AI-Powered Java Developers
 
IT Software Development Resume, Vaibhav jha 2024
IT Software Development Resume, Vaibhav jha 2024IT Software Development Resume, Vaibhav jha 2024
IT Software Development Resume, Vaibhav jha 2024
 
KLARNA - Language Models and Knowledge Graphs: A Systems Approach
KLARNA -  Language Models and Knowledge Graphs: A Systems ApproachKLARNA -  Language Models and Knowledge Graphs: A Systems Approach
KLARNA - Language Models and Knowledge Graphs: A Systems Approach
 
The Impact of PLM Software on Fashion Production
The Impact of PLM Software on Fashion ProductionThe Impact of PLM Software on Fashion Production
The Impact of PLM Software on Fashion Production
 
10 Essential Software Testing Tools You Need to Know About.pdf
10 Essential Software Testing Tools You Need to Know About.pdf10 Essential Software Testing Tools You Need to Know About.pdf
10 Essential Software Testing Tools You Need to Know About.pdf
 

20160308 apex sso

  • 1. Single Sign-On for APEX: It‘s not an option Niels de Bruijn 08.03.2016 | APEX World
  • 2. Facts & Figures Independent Technology House with Cross-Industry Expertise Headquarter Ratingen (North Rhine – Westphalia) 240 Employees Founded 1994 Branches Dortmund, Cologne, Frankfurt Top Company for Trainees & Students Privately- Owned Corporation Oracle Platinum Partner 24 Mio. Euro Revenue 2Single Sign-On for APEX
  • 3. 3 About me § Niels de Bruijn, Business Unit Manager APEX § Born in 1977, married, three daughters, living in Ratingen § Working for MT AG since DEC-2003 § After working for 2 years as Oracle consultant for Oracle Nederland B.V. § Track record with APEX since its inception § Responsible for all APEX activity in the company § Knowledge Portal: apex.mt-ag.com § Active DOAG member and responsible for APEX within this society § Presenting at Kscope, DOAG Conference, APEXposed, APEX World, APEX Connect § Conference Chair for conference DOAG APEX Connect § Part of APEX Content Committee for Kscope § Member of the APEX Review Board Single Sign-On for APEX
  • 4. § Single Sign-On: it is not an option § How does the magic work? § Caveats § I want more § Questions I get § More information 4 Agenda Single Sign-On for APEX
  • 5. For the sake of security § Credentials are not passed to the database § Kerberos is secure (as used by Windows itself) § Central user store in Active Directory § No corporate password policy needed within APEX For the sake of productivity § End users love it § Developers can now switch between workspaces without logging in again WHAT IS YOUR EXCUSE FOR NOT USING IT? 5 Single Sign-On: it is not an option Single Sign-On for APEX
  • 6. 6 How does the magic work? 8009 Single Sign-On for APEX
  • 7. Start here: http://www.slideshare.net/nielsdb/mt-ag-howtosingle- signonforapexapplicationsusingkerberos-46435415 Overview § Install RDBMS & APEX § Install JDK, Tomcat & Apache/IIS § Configure ORDS & deploy § Configure Apache or IIS for SSO incl. SSL certificate General installation steps of Apache & ORDS can be found here: http://www.opal-consulting.de/downloads/presentations/2015-11-DOAG-ORDS-Setup 7 How does the magic work? Single Sign-On for APEX
  • 8. § Map existing APEX accounts with their AD username APEX_UTIL.SET_USERNAME ( p_userid => APEX_UTIL.GET_USER_ID('ADMIN') , p_username => 'NDBRUIJN' ); § When using mod_auth_kerb and AD user is member of too many AD groups § Have a look here: http://blogs.technet.com/b/surama/archive/2009/04/06/kerberos- authentication-problem-with-active-directory.aspx § Once enabled, you can’t change the identity without changing the OS user § Prepare your end users § For developers: just switch the authentication scheme to “open door” in the dev environment 8 Caveats Single Sign-On for APEX
  • 9. § What about people not listed in Active Directory? § Option 1: Use a separate entry point (ie. VirtualHost) & use Custom Auth in your APEX app § Option 2: Use software like Microsoft Forefront (no change in ORDS/APEX needed) § What about devices like MacBooks or Smartphones that are not part of the Windows domain? § Fallback Authentication using Basic Authentication over HTTPS § Tipp: don’t use Digest Authentication (doesn’t work with Firefox) § Don’t want to enter username/password? Client certificates will help you out. 9 I want more Single Sign-On for APEX
  • 10. § “We already have the shared session Cookie, so why bother?” § Still use it to prevent multiple APEX session cookies § “We already have LDAP authentication utilized in our APEX app” § Are you sure you want to pass your AD credentials to the database? § “What about the rights in my app?” § We are talking about authentication here, the authorization is normally determined by the app § “Any concerns about the session timeout setting in APEX?” § Set it to 99999 as this is now delegated to Kerberos § “The logout link in my app doesn’t work anymore” § Just delete it 10 Questions I get Single Sign-On for APEX
  • 11. § General installation steps of Apache & ORDS can be found here: http://www.opal-consulting.de/downloads/presentations/2015-11-DOAG-ORDS-Setup § About Kerberos http://www.roguelynn.com/words/explain-like-im-5-kerberos § About mod_auth_kerb http://blog.hallowelt.biz/wp-content/uploads/SSO_mit_mod_auth_kerb_v3.pdf § More SSO options http://wphilltech.com/options-for-windows-native-authentication-with-apex 11 More information Single Sign-On for APEX