Contents

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Conventions

1 Oracle Enterprise Single Sign-On Suite 11g Release 2 (11.1.2.2)

• 1.1 Installation and Upgrade Notes
• 1.2 What's New In Oracle Enterprise Single Sign-On Suite 11.1.2.2
  • 1.2.1 Java-Based Help System (Requires 32-Bit Java Runtime Environment)
• 1.3 Administrative Console
  • 1.3.1 Support for Configuring Access Portal Application Policies
  • 1.3.2 Support for Mapping Logon Manager Application Templates to Oracle Privileged Account Manager Targets
• 1.4 Logon Manager
  • 1.4.1 Windows Authenticator v2 Support in Kiosk Environments
  • 1.4.2 Secondary Authentication Support in LDAP Authenticator v2
  • 1.4.3 LDAP Authenticator Version 1 Has Been Deprecated
  • 1.4.4 Customizable "Pause Logon Manager" System Tray Option
  • 1.4.5 Enhanced Administrative Rights for Credential Delegation
• 1.5 Universal Authentication Manager
  • 1.5.1 Individual Logon Methods Configurable as Primary Authenticator in Logon Manager
  • 1.5.2 Windows 7 x64 Support
  • 1.5.3 Kiosk Manager Support on Windows 7
• 1.6 Password Reset
  • 1.6.1 Windows Server 2012 Support
  • 1.6.2 Mobile Browser Support
• 1.7 Provisioning Gateway
  • 1.7.1 Windows Server 2012 Support
• 1.8 Anywhere
  • 1.8.1 Windows Authenticator Version 2 Support

2 Open Issues in 11g Release 2 (11.1.2.2)

• 2.1 Open Issues Applicable to All Suite Applications
  • 2.1.1 Unicode Characters Not Supported
• 2.2 Administrative Console
  • 2.2.1 Incorrect Error Message Displayed when Invalid OPAM Credentials Are Used
• 2.3 Logon Manager
  • 2.3.1 Logon Manager May Not Respond On-the-Fly to Some Web Applications
  • 2.3.2 Logon Manager May Not Respond At All to Some Web Applications
  • 2.3.3 Logon Manager Button Does Not Appear in Chrome's Title Bar
  • 2.3.4 Unable to Complete SmartCard Logon to a Kiosk Manager Session if Card Is Removed During PIN Entry
  • 2.3.5 Logon Manager Does Not Support Checking Out OPAM-Protected Accounts That Have No Expiration Date
  • 2.3.6 LDAP Authenticator Version 1 Support for Active Directory
  • 2.3.7 The "Process" Option in mfrmlist.ini Prevents Mainframe Application Detection
  • 2.3.8 Network Provider Installable with Incompatible Authenticators
  • 2.3.9 Silent Credential Capture Does Not Store Credentials for Some Web Applications
  • 2.3.10 Fine-Grain Password Policies Not Supported
  • 2.3.11 Delegated Credentials Not Injected If Delegation End Time is 12:00AM
• 2.4 Password Reset
  • 2.4.1 On Windows 7, Password Reset Client Does Not Support Running Under Accounts Other than Local System
  • 2.4.2 Installing the Password Reset Client on a 32-bit Windows 7 System Running Universal Authentication Manager and Configured for Automatic Logon Prevents Users From Logging On
  • 2.4.3 Password Reset Client: Reset Quiz Does Not Function on 64-bit Editions of Windows Server 2008 R2
  • 2.4.4 On Windows 7 Deployments in Norwegian, Some Dialogs Appear in English
• 2.5 Provisioning Gateway
  • 2.5.1 Unable to Check Out Account Delegated via Group Membership
  • 2.5.2 Active Directory Users Must Use Full Name to Authenticate to the OPAM Server
  • 2.5.3 Template Mapping List Appears Blank After Mapping a Template
• 2.6 Universal Authentication Manager
  • 2.6.1 BIO-Key Control Panel Does Not Open When No Reader Is Configured (64-Bit Systems Only)
  • 2.6.2 Reboot Required Immediately After Adding Or Removing a UAM-Enabled Machine To/From a Windows Domain

3 Technical Notes for 11g Release 2 (11.1.2.2)

• 3.1 Administrative Console
  • 3.1.1 Templates Exported to .INI File Must use Unicode Encoding if Imported into Oracle Access Manager
• 3.2 Logon Manager
  • 3.2.1 New User Setting Storage Schema (Active Directory Only)
  • 3.2.2 Installing the Oracle Enterprise Single Sign-On Administrative Console on 64-Bit Windows May Fail If Older Version Is Present
  • 3.2.3 Double Reboot Required when Upgrading a Kiosk Manager Installation
  • 3.2.4 Using Smart Cards with Logon Manager-Generated Keys
  • 3.2.5 Event Manager
  • 3.2.6 Backup/Restore
  • 3.2.7 Citrix Published Applications Using SendKeys: Cannot Use "Set Focus" Feature
  • 3.2.8 Citrix Published Applications: SendKeys Does Not Process "Enter" or "Tab" Properly
  • 3.2.9 "End Program" Message Displayed
  • 3.2.10 Reflection 14 Sporadically Causes the Display of the Logon Manager Password Change Dialog Box on a Logon Screen
  • 3.2.11 Win32/Injector.CFR Trojan Reported in the Agent Installer
• 3.3 Universal Authentication Manager
  • 3.3.1 Disable Kiosk Manager Credential Caching When Integrating with Kiosk Manager
  • 3.3.2 Error When Using RSA Authentication Client 2.0 Smart Card Middleware
  • 3.3.3 PKCS11 Card Failure with Remote Desktop Lock
  • 3.3.4 Incompatibility Between Crescendo C700 Proximity Card and Omnikey 5X25 Proximity Card Reader
• 3.4 Anywhere
  • 3.4.1 Anywhere Does Not Support Certain Logon Manager Features
  • 3.4.2 Default Security Policy on Windows 7, and Windows Server 2008/2008R2 Prevents Anywhere from Running
  • 3.4.3 Script Required for Microsoft IIS 6.0 Deployment