4 Security in Retail Applications

Retail Applications leverage ADF's security framework that is based on the Oracle Platform Security Services.

This section discusses the various assumptions around security for Retail Applications.

Single Sign-on Setup for RAF Applications

RAF provides the following applications as enterprise archive (EAR) files to Retail Applications. By default, these applications are installed as part of Retail Applications.

• RetailAppsAdminConsole(RAAC)

• RetailAppsMobileSecurity

  • RetailAppsMobileBasicAuth

  • RetailAppsMobileAccessService

• RetailAppsRESTServices

In SSO environment, follow the SSO setup procedure for these applications similar to Retail Applications.

Displaying External Application Contents in Non-SSO Environments

Retail Applications allow retailers to display content from external applications. These contents are typically business intelligence reports from a third party application that are configured to display within the Retail Application's dashboard.

Some of these contents might be secured requiring users to login before the contents can be accessed and displayed.

In non-SSO environments, when a user logs out of the Retail Application, they may not be logged out of any secured content they had configured access to. Therefore, it is highly recommended that customers only configure access to external content in a SSO-enabled environments where the application logout manages the logout from any other secured content that was previously accessed.