Contents

Title and Copyright Information

List of Tables

Send Us Your Comments

Preface

Audience

Organization

Related Documentation

Conventions

Documentation Accessibility

1 Introduction

2 Developing Applications for Single Sign-On

Protecting Applications Using mod_osso: Two Methods

Protecting URLs Statically

Protecting URLs with Dynamic Directives

Developing Applications Using mod_osso

Developing Statically Protected PL/SQL Applications

Developing Statically Protected Java Applications

Developing Java Applications That Use Dynamic Directives

Java Example #1: Simple Authentication

Java Example #2: Single Sign-Off

Java Example #3: Forced Authentication

A Word About Non-GET Authentication

Security Issues: Single Sign-Off and Application Logout

Application Login: Code Examples

Bad Code Example #1

Bad Code Example #2

Recommended Code

Application Logout: Recommended Code

A Single Sign-On Software Development Kit

PL/SQL APIs

Functions and Procedures

GENERATE_REDIRECT Function

Syntax

Example

PARSE_URL_COOKIE Procedure

Syntax

Example

GET_ENABLER_CONFIG Procedure

Syntax

Example

CREATE_ENABLER_CONFIG Procedure

Syntax

Example

MODIFY_ENABLER_CONFIG Procedure

Syntax

Example

DELETE_ENABLER_CONFIG Procedure

Syntax

Example

ENCRYPT_COOKIE Function

Syntax

Example

DECRYPT_COOKIE Function

Syntax

Example

Table Definitions

WWSEC_ENABLER_CONFIG_INFO$

WWSEC_SSO_LOG$

Exceptions

Java APIs

B Using the PL/SQL and Java APIs

Before Using the APIs

Writing Partner Applications Using PL/SQL APIs

SAMPLE_SSO_PAPP.SSOAPP

SAMPLE_SSO_PAPP.SIGN_ON

SAMPLE_SSO_PAPP.LOGOUT

Writing Partner Applications Using Java APIs

Servlet Partner Application

JSP Partner Application

C Adding and Editing SDK-Enabled Applications

Add Partner Application Page

Edit Partner Application Page

D User Attributes Passed to Partner Applications

Glossary

Index