SSO integration with EBS 12.2 after upgrade

[raja]

Hi Erman

Which areas within the existing SSO integration should the potential customer be aware of while planning an R12.2 upgrade? What should be the list of security considerations for this integrations?

Any note/insights for this?

Thanks
Raja

[Raja]

Hi Erman

Could you please update.

Thanks
Raja

[ErmanArslansOracleBlog]

This is a very general question, so I will try to answer to your question generally.


*you may need to upgrade your SSO as well. Actually what we need to talk about is OAM here .. (SSO is old technology) -- check certifications for this.

*I don't know the way you integrate EBS and AD authorizations(in terms of Authorization), but if it is custom, then you need to modify the code after the upgrade, according to the changes in EBS...
Any custom codes doing work between EBS and AD or OID should be reviewed.

*As an Upgrade improvement, In order to have High Availability, you may also need to use Multi-NODE OAM + OID.. So this is a complex configuration.. Be aware of that.

*EBS , OAM and OID servers should be in the same domain.. (FQDNs should have the same domain names) .. So if you will start using new servers after this upgrade, be aware of this.

*As an Upgrade improvement, you may need to enable SSL (full path)

SSL should be configured for all the path ->

Load Balancer EBS - SSO - OID - AD

[Raja]

Hi Erman

Yes I was referring to oam/oid only. If i have the existing oam/oid with 12.1.3 and if it is also certified with ebs 12.2, then after ebs upgrade to 12.2 do I need to integrate oid oam again with ebs 12.2. As weblogic has been introduced in ebs 12.2 I believe I need to destroy the existing oid oam and then again do the integration again? Am I correct

[ErmanArslansOracleBlog]

Destroy? What you mean by that?