Steps to enable single sign-on

Prerequisites

• Configure single sign-on in standard Oracle E-Business Suite.
• Ensure you're using an Oracle-recommended integration option.
• Ensure SSO is working.

Once you have this in place, you can configure the single sign-on for the app using the following instructions.  You will need to work with your Database Administrator to complete these steps.

12.1 steps (see here for 12.2+ steps)

1. As the applmgr user, log in to the Application Tier (APPL_TOP) by sourcing the environment file.
2. Navigate to the $FND_TOP/admin/template directory
3. Create a subdirectory called custom (you only need to do this if one does not already exist)
4. From $FND_TOP/admin/template copy the orion_web_xml_1013.tmp file to the newly created custom directory. Do not override this file if it already exists because you may remove the existing custom configuration
5. Edit custom/orion_web_xml_1013.tmp and create new <servlet> and <servlet-mapping> sections underneath any existing <servlet> or <servlet-mapping> section:

     <!-- Applaud Solutions Servlets -->  <servlet>
     <servlet>
       <servlet-name>SessionToken</servlet-name>
       <servlet-class>xxas.oracle.apps.xxas.com.SessionToken</servlet-class>
     </servlet>
     <servlet-mapping>
       <servlet-name>SessionToken</servlet-name>
       <url-pattern>/applaud/auth/sessiontoken</url-pattern>
     </servlet-mapping>
    <servlet>
       <servlet-name>SessionClear</servlet-name>
       <servlet-class>xxas.oracle.apps.xxas.com.SessionClear</servlet-class>
     </servlet>
     <servlet-mapping>
       <servlet-name>SessionClear</servlet-name>
       <url-pattern>/applaud/auth/sessionclear</url-pattern>
     </servlet-mapping>

6. Set the XXAS: SSO Login Url to the URL that the app should redirect to for Single Sign-On. This is typically the full URL of the AppsLogin servlet.  Eg, https://myebshost.myebsdomain.com/OA_HTML/AppsLogin. Do not use AppsLocalLogin.jsp.
7. Set the Applications SSO Login Types profile option to BOTH at the User-level for the GUEST user.
8. Run AutoConfig on the Application Tier.

12.2 steps

1. As the applmgr user, log in to the Application Tier (APPL_TOP) by sourcing the environment file.
2. Navigate to the $FND_TOP/admin/template directory
3. Create a subdirectory called custom (you only need to do this if one does not already exist)
4. From $FND_TOP/admin/template copy the oacore_web_xml_FMW.tmp file to the newly created custom directory. Do not override this file if it already exists because you may remove the existing custom configuration.
5. Edit custom/oacore_web_xml_FMW.tmp and create a new <servlet> and <servlet-mapping> section underneath any existing <servlet> or <servlet-mapping> section:

     <!-- Applaud Solutions Servlets -->  <servlet>
     <servlet>
       <servlet-name>SessionToken</servlet-name>
       <servlet-class>xxas.oracle.apps.xxas.com.SessionToken</servlet-class>
     </servlet>
     <servlet-mapping>
       <servlet-name>SessionToken</servlet-name>
       <url-pattern>/applaud/auth/sessiontoken</url-pattern>
     </servlet-mapping>
    <servlet>
       <servlet-name>SessionClear</servlet-name>
       <servlet-class>xxas.oracle.apps.xxas.com.SessionClear</servlet-class>
     </servlet>
     <servlet-mapping>
       <servlet-name>SessionClear</servlet-name>
       <url-pattern>/applaud/auth/sessionclear</url-pattern>
     </servlet-mapping>

6. Set the XXAS: SSO Login Url to the URL that the app should redirect to for Single Sign-On. This is typically the full URL of the AppsLogin servlet.  Eg, https://myebshost.myebsdomain.com/OA_HTML/AppsLogin. Do not use AppsLocalLogin.jsp.
7. Set the Applications SSO Login Types profile option to BOTH at the User-level for the GUEST user.
8. Run AutoConfig on the Application Tier.