1
Introduction

Oracle9iAS Single Sign-On is a component of Oracle9i Application Server (iAS) that enables users to log in to all features of the iAS product complement, as well as to other Web applications, using a single user name and password.

In Oracle9iAS, Release 2, application developers can use either mod_osso, an Oracle HTTP authentication module, or the Single Sign-On Software Development Kit (SDK) to enable applications for Single Sign-On. This chapter introduces these two authentication options. The remainder of the book explains how to integrate applications with mod_osso and with the SDK.

The chapter covers the following topics:

• What Is Mod_osso?

• What's in the Single Sign-On SDK?

• Other Components of Oracle Single Sign-On

What Is Mod_osso?

Mod_osso is an HTTP module that provides authentication to iAS applications. It is a simpler alternative to the Single Sign-On SDK, used in earlier releases of Oracle Single Sign-On to integrate partner applications. Mod_osso simplifies the authentication process by serving as the sole partner application to the Single Sign-On server, rendering authentication transparent for iAS applications. Thus, the administrator for these applications is spared the burden of integrating them with the Single Sign-On SDK.

Mod_osso can be registered with the Single Sign-On server when iAS is installed.

What's in the Single Sign-On SDK?

The Single Sign-On SDK consists of the following components:

• PL/SQL Application Programming Interface

• Java Application Programming Interface

• Sample code for implementing the PL/SQL and Java APIs, specifically procedures for constructing the application URL and retrieving the URLC token. The Java code includes examples of servlet and JSP partner applications

Other Components of Oracle Single Sign-On

• Oracle Single Sign-On Server (9iAS, Release 2)

  Program logic in the iAS database that enables users to log in securely to Single-Sign-On-enabled applications such as expense reports, mail, and benefits

• Partner Applications

  iAS applications that delegate the authentication function to the Single Sign-On server

• External Applications

  Web applications that do not delegate authentication to the Single Sign-On server. Instead, they display HTML login forms that ask for application user names and passwords

  See Also: Chapter 1, "Single Sign-On Basics" in Oracle9iAS Single Sign-On Administrator's Guide