Contents

Title and Copyright Information

List of Figures

List of Tables

Send Us Your Comments

Preface

Audience

Organization

Related Documentation

Conventions

Documentation Accessibility

1 Single Sign-On Basics

Oracle9iAS Single Sign-On Components

Single Sign-On Server

Partner Applications

External Applications

Mod_osso

Single Sign-On Software Development Kit

Oracle9iAS Single Sign-On Processes

Accessing the Single Sign-On Server

Authentication Flow for Oracle Single Sign-On

Accessing an External Application

Accessing the External Applications Portlet in Oracle9iAS Portal

Authenticating to an External Application for the First Time

Authenticating to an External Application After the First Time

Single Sign-Off

Changing the Single Sign-On Password

Global User Inactivity Timeout

Single Sign-On Authentication Repository

2 Administering Oracle Single Sign-On

Default Single Sign-On Schemas

The Single Sign-On Administrator's Role

Granting Privileges to Single Sign-On Administrators

Accessing the Single Sign-On Administration Pages

Edit SSO Server Page

Administering Partner Applications

Adding a Partner Application

Editing a Partner Application

Administering External Applications

Adding an External Application

Editing an External Application

Storing External Application Credentials in the Single Sign-On Database

Changing Passwords

Configuring National Language Support

Configuring the Global User Inactivity Timeout

Enabling the Single Sign-On Server for SSL

Protecting URLs Accessed by Oracle9iAS Portal and Mod_osso

3 Directory-Enabled Single Sign-On

Authentication Flow for Directory-Enabled Single Sign-On

Managing Users in Oracle Internet Directory

Single Sign-On User Accounts

Password Policies

Password Rules

Password Expiry

Account Lockout

Configuring Password Policies

Directory Tree for Oracle Single Sign-On

Changing Single Sign-On Server Settings in the Directory

4 Single Sign-On Using Digital Certificates

Benefits of Certificate-Enabled Single Sign-On

Authentication Options

Authentication Flow in Certificate-Enabled Single Sign-On

System Requirements

Configuring Single Sign-On for Certificates

Oracle HTTP Server (SSL)

Mod_plsql

User Name Mapping Module

Oracle Internet Directory

Single Sign-On Server

Troubleshooting Certificate-Enabled Single Sign-On

Maintaining a Certificate Revocation List

5 Third-Party Single Sign-On

How Third-Party Single Sign-On Works

Synchronizing the Third-Party Repository with Oracle Internet Directory

Third-Party Integration Modules

Authentication Using a Token

Set External Cookies

Integration Case Study: Netegrity SiteMinder

Authentication Flow for the SiteMinder Solution

Logging Out of the Integrated System

Sample Integration Package

Installing and Deploying the SiteMinder Solution

6 Mobile Single Sign-On

iAS-Wireless Concepts and Architecture

Wireless Single Sign-On

Authenticating Through PTG

Authenticating by Requesting a Partner Application

Wireless Single Sign-Off

Change Password Page for iAS-Wireless

7 Monitoring the Single Sign-On Server

Accessing the Single Sign-On Monitoring Pages

Interpreting and Using the Home Page

Interpreting and Using the Details of Login Failures Page

8 Customizing the Single Sign-On Interface

Installing Customized Login, Change Password, and Single Sign-Off Pages

How Customized Single Sign-On Pages Are Enabled

Enabling the Customized Login Page

Enabling the Customized Change Password Page

Enabling the Single Sign-Off Page

Parameters for Login, Change Password, and Single Sign-Off Pages

Login Page Parameters

Change Password Page Parameters

Single Sign-Off Page Parameters

Error Codes for Login and Change Password Pages

Login Page Error Codes

Change Password Page Error Codes

Sample Customized Pages

Sample Login Page

Sample Change Password Page

Sample Single Sign-Off Page

Index