Supported Single Sign-On Solutions for Siebel Deployment

Siebel supports three types of HTTP access through which Siebel-provided services and data can be accessed: interactive user interfaces, Web services, and REST API.

Siebel deployment supports the following single sign-on (SSO) solutions:

1. Web Single Sign-On (Web SSO). This solution includes the following use case:

   • Web SSO for interactive user interfaces. See the following topics:

     • About Web Single Sign-On

     • About Implementing Web Single Sign-On

     • Web Single Sign-On Authentication Process

     • Requirements for Standards-Based Web Single Sign-On

     • Set up Tasks for Standards-Based Web Single Sign-On

     • Configuring the Session Timeout

     • Configuring Siebel CRM and Oracle Business Intelligence Enterprise Edition for Web Single Sign-On

2. Federated Single Sign-On with Security Assertion Markup Language (SAML). In this solution, the user’s single authentication token is trusted across multiple applications. For more information, see About Implementing Federated Single Sign-On. This solution includes the following use cases:

   Note: These use cases use Oracle Access Manager (OAM) and Oracle Access Gateway (OAG) for demonstration purposes only. Any equivalent solution from other vendors can also be used.

   • SSO with SAML for interactive user interfaces. For more information, see the following topics:

     • Federated Single Sign-On Authentication Process for Interactive User Interfaces

     • About Oracle API Gateway Role in Single Sign-On Authentication Process

   • SSO when Siebel REST and Siebel Web services are used in a portal application. For more information, see the following topics:

     • Web Single Sign-On Authentication Process When Using Siebel REST and Web Services in Portal Application

     • About Oracle API Gateway Role in Single Sign-On Authentication Process

   • Identity provider-initiated SSO. In this case, the portal application links to Siebel REST and Web services. The portal acts as an Identity Provider (IdP) and initiates federation. For more information, see the following topics:

     • Identity Provider-Initiated Single Sign-On Authentication Process

     • About Oracle API Gateway Role in Single Sign-On Authentication Process

       Note: For Siebel REST, you can use any Identity Provider (IdP) or gateway solution from any vendor. For more information, see Siebel REST API Guide

Note: Siebel Open UI provides standards-based Single Sign-On (Web SSO and SAML based). Windows Integrated Authentication (WIA) is not supported.