How can I make Oracle ERP login credentials same as company login credentials ?

[monika.chichghare]

Hi ,

I have to sink company authentication with  Oracle ERP authentication .
We have same credentials for our company interrnal portal (Gmail and Helpdesk, Jira) but we are having different credentials(Username & Password) for ERP as these two password are maintained in two separate systems .

Please suggest me how can I make Oracle ERP credentials same as of company Gmail (AD) credentials so that if we change company gmail passowrd , then with the same password we should be able to login in oracle ERP .

Regards,
Monika

[ErmanArslansOracleBlog]

Hi Monica,

FOR GMAIL AUTH---
There is no documented solution for this. Also I have never seen this in action, but I suggest you to check the following Oracle Support Document:
Integrating Oracle E-Business Suite Release 12 with Oracle Internet Directory and Oracle Single Sign-On 10gR3 (10.1.4.3) (Doc ID 376811.1)

In this document, read the paragraph related with third party ldap servers.
(like : Integration with Third-Party Access Management Systems and LDAP Directories)
Also , check OPENLDAP. You may use it in conjunction with Oracle's SSO server  by writing a plugin for dealing with the Google authentication using GOOGLE APIs.
But this is an adventures work :)

It may better to follow such a method that is like the following

Configure SSO and OID and integrate them to EBS R12.
Write a plugin for gmail authentication in OID , and make OID use that plugin for the authentication.


Also check this link; https://developers.google.com/gmail/api/auth/about-auth
That is  you may directly modify the EBS code and make it use the Google authentication APIs. But this is not recommended ,as your system will be unsupported if you do this kind of things..

---

FOR COMPANY INTERNAL PORTAL AUTHENTICATION
----------------------------------
If you have enabled single sign on for Gmail , helpdesk and Jira, then it means you already have a Single Signon Solution in your company
With the same logic as above, you can integrate Oracle ERP - SSO - OID -- Company Internal Portal(Company SSO Solution) for EBS authentication. You can end up with writing plugins in this method too..
Again check the document: Integrating Oracle E-Business Suite Release 12 with Oracle Internet Directory and Oracle Single Sign-On 10gR3 (10.1.4.3) (Doc ID 376811.1)
In this method, you also ll have to syncronize the accounts between OID and Your company Internal Portal.

--------------------------------
So these are my thoughts,but a deep investigation will be better..
I hope these ideas will help you on this.

[monika.chichghare]

Hi ,

Our idea is as follows :

We will set some hard-coded password for ERP for all the users to identify the user is valid user for Oracle EBS.

1. On click of Login , it will internally perform LDAP authentication which identify that same hard-coded password as a valid password internally and then user is able to see Oracle ERP home screen .

Please suggest me how can I do LDAP authentication using OAF (JDeveloper 10.1.3.3.0) .
Is there any way to do this ?
Suppose for POC, we have 2 fields Username and Password , then as we have to integrate it with our company AD , that means if I am putting my company AD credentials, then it should allow me login into it .

Please suggest how can I do it? is there any API to do this ?

Regards,
Monika

[ErmanArslansOracleBlog]

To be able to perform LDAP authentication, you will have to write java and plsql.
Also you will have to do some personalization in oaf login page.

Alternatively and also as recommended & recommend you may use EBS integrated to SSO and OID to perform such an LDAP authentication. If you will use this method, you must use java plugins present in OID such as iplanet plugin.

[ErmanArslansOracleBlog]

The api you have is seeded packages such as dbms_ldap and Os tools such as ldapbind..

[monika.chichghare]

Hi ,

We cannot go through recommonded solution of EBS integration with  SSO and OID to perform such an LDAP authentication. As for the SSO and OID , we will require OAM which is licensed version . We are 8000+ employees and it will be a big cost for the company . So we are dropping this idea.

I will connect with you over your email id to have custom solution.

Regards,
Monika

[Monika Chichghare]

Hi Erman ,

Please share your custom solution code on my email id .

Thanks,
Monika