1 Before You Install
Oracle Enterprise Single Sign-On Suite

Before you install Oracle Enterprise Single Sign-On Suite, read the information contained in this section carefully and follow it closely. This section contains the following topics:

1.1 Overview of the Oracle Enterprise Single Sign-On Suite Installation Process

Oracle Enterprise Single Sign-On Suite handles all tasks related to granting users access to applications, including automatic sign-on, application password change, Windows password reset, kiosk session management, application credential provisioning, as well as strong authentication inside and outside of the session.

Oracle Enterprise Single Sign-On Suite consists of the following components:

• Logon Manager - provides single sign-on functionality.

• Provisioning Gateway - provides remote credential provisioning capability.

• Password Reset - provides the self-service password reset ability. Consists of the following components:

  • Password Reset Client - installed as a selectable component during the Logon Manager installation.

  • Password Reset Server components.

• Kiosk Manager - provides session and application management for kiosk environments.

• Universal Authentication Manager - provides strong authentication inside and outside the Windows session.

• Anywhere - provides the ability to deploy custom-configured installation packages to end-user workstations not connected to the enterprise network.

The following is a high-level overview of the suite installation process:

Note:

If this installation is an upgrade, please refer to the "Upgrading an Existing Installation..." section for the selected component(s).

1. Determine which components of the Oracle Enterprise Single Sign-On Suite and their features you will be installing, based on the business requirements of your organization.

2. Ensure that supporting software listed in Required Supporting Software has been installed on the target machine(s). Refer to the Oracle Enterprise Single Sign-On Suite Release Notes for a per-application list of requirements.

3. Obtain and decompress the appropriate installer archive. See Contents of the Oracle Enterprise Single Sign-On Suite Master Archive for the description of its contents.

4. Complete the installation steps in this guide for each component you've chosen to install.

5. If any problems arise during the installation or post-installation tasks, see Troubleshooting Oracle Enterprise Single Sign-On Suite Installations.

1.2 Required Supporting Software

In order to install and function properly, the Oracle Enterprise Single Sign-On Suite applications require the following third-party supporting software to be installed on the target machines if it has not already been installed:

• The Windows Installer InstallScript redistributable. This package is required by all Suite application installers; you must install this package unless your machine already has it installed. It can be obtained from http://consumerdocs.installshield.com/selfservice/viewContent.do?externalId=Q108322.

• The Microsoft .NET 4.0 "Full Profile" framework. This package is required by Logon Manager and the Administrative Console; you must install it if your machine does not already have the .NET Framework version 4.0 installed.
  It can be obtained from http://www.microsoft.com/en-us/download/details.aspx?id=17718

• The Microsoft .NET 3.5 SP1 framework. This software is required by
  Provisioning Gateway Server. It can be obtained from http://www.microsoft.com/en-us/download/details.aspx?id=22

• The latest 32-bit Java Runtime Environment. Required by the Java-based help system.

1.3 Contents of the Oracle Enterprise Single Sign-On Suite Master Archive

The following section describes the purpose of the files contained in the Oracle Enterprise Single Sign-On Suite master archive. The archive contains the following folders:

• Logon Manager

• Password Reset

• Provisioning Gateway

• Universal Authentication Manager

• Anywhere

• Reporting

The archive root also contains a PDF file, "ESSRN.PDF," which contains the product release notes.

1.4 Contents of the Logon Manager Folder

The contents of this folder are as follows:

• ESSO Administrative Console.msi - the Oracle Enterprise Single Sign-On Administrative Console installer.

• ESSO-LM.msi - the 32-bit Logon Manager installer.

• ESSO-LMx64.msi - the 64-bit Logon Manager installer.

• BIP Reports - report files for generating usage reports for Oracle Enterprise Single Sign-On Suite applications with Oracle Business Intelligence Publisher.

• Language Transforms - MSI installer language transform files that allow you to launch the Logon Manager installer in a specific supported language.

• Utility - folder that contains supplementary software and unsupported Logon Manager troubleshooting tools. These are:

  • SSOHiddenWindowResponse.exe- the Hidden Window Response utility. Use this utility to allow Logon Manager to detect hidden application windows by window title and class. For more information, see the guide, Using the Hidden Window Response Utility, available in the online documentation center.

  • ssoSCDetect.exe - SmartCard detection tool. When troubleshooting logon issues with the SmartCard authenticator, run this tool to determine whether Logon Manager can see an inserted SmartCard.

  • TraceController.exe - the Trace Controller utility. Use this utility to enable and manage trace logging in Logon Manager and other Oracle Enterprise Single Sign-On Accelerator Suite applications.

• Logon Manager Event Viewer.msi - the Logon Manager Event Viewer installer. Installs and registers the messaging libraries required to view Logon Manager events in the Windows Event Viewer.

For more information, see the Oracle Enterprise Single Sign-On Suite Administrator's Guide.

1.4.1 Contents of the Password Reset Folder

The contents of this folder are as follows:

• ESSO-PR_Server.msi- 32/64-bit installer for the Password Reset server-side software.

1.4.2 Contents of the Provisioning Gateway Folder

The contents of this folder are as follows:

• ESSO-PG_ClientCLI.msi - 32-bit installer for the Provisioning Gateway command-line interface client-side software. Note that installation on 64-bit environments is not supported.

• ESSO-PG_Server.msi- 32/64-bit installer for the Provisioning Gateway server-side software.

1.4.3 Contents of the Universal Authentication Manager Folder

The contents of this folder are as follows:

• ESSO-UAM.msi - the 32-bit installer for Universal Authentication Manager.

• ESSO-UAM-64.msi - the 64-bit installer for Universal Authentication Manager.

• Language Transforms - MSI installer language transform files that allow you to launch the Universal Authentication Manager installer in a specific supported language.

• SmartCard - contains .reg files that enable supported smart cards.

• ProximityCard - contains .reg files that enable supported proximity cards.

• Utility - contains the command-line and graphical configuration tools, DeployTool.exe and ConfigEditor.exe, their supporting files, as well as documentation describing their use.

1.4.4 Contents of the Anywhere Folder

The contents of this folder are as follows:

• Console - contains the Anywhere Console installer MSI file.

• Utility - contains the VBS script file that adds the required MIME types to Microsoft IIS.

1.4.5 Contents of the Reporting Folder

The contents of this folder are as follows:

• MSSQL -Table setup scripts, stored procedure SQL scripts, and .NET stored procedures for the Microsoft SQL Server database.

• ORACLE -Table setup scripts, stored procedure SQL scripts, and Java stored procedures for the Oracle database.