1. Enable SSO for Oracle E-Business Suite with OCI IAM using EBS Asserter in High Availability mode
  2. Before You Begin

Before You Begin

You must configure OCI IAM as an identity provider for E-Business Suite Asserter, Oracle E-Business Suite as a target application, and E-Business Suite Asserter as the single sign-on provider for Oracle E-Business Suite.

  • Download the Oracle JRE/JDK version 8 or later.
  • Download the Java Cryptography Extension file for Java 8.
  • Access to an instance of OCI IAM, rights to download the E-Business Suite Asserter from the console, and rights to register a confidential application.
  • Get access to an instance of Oracle E-Business Suite Release 11i (11.5.10) or Release 12 (12.1.3, 12.2.4, or greater), with the latest patch applied.
  • Get access to a separate instance of Oracle WebLogic Server 12c (12.1.3 and 12.2) using the Java SE Development Kit 8 or Java EE 8.
  • Create a certificate in the Certificate Managed Services section to be used by the OCI Load Balancer for E-Business Suite Asserter. Alternatively, you can also use your own certificate.
  • In the Oracle WebLogic Server 12c, create managed servers named EBSAsserter_server_01 and EBSAsserter_server_02 to deploy the E-Business Suite Asserter Java application.
  • In this scenario, there are two nodes of E-Business Suite, which will be referred to as EBSNode01 and EBSNode02.
  • Create a working directory in EBS Asserter's WebLogic Server and Oracle EBS Server. For example, /opt/ebssdk.

Download the E-Business Suite Asserter from the OCI IAM Console

You can access the Downloads page from the OCI IAM console. From this page, you can download the OCI IAM E-Business Suite Asserter.

  1. Log in to the OCI IAM console, using the domain in which you want to integrate EBS.
  2. From the left navigation menu, click Identity and Security, and then click Domains.
  3. Select the required domain, then navigate to Settings, and then click Downloads.
  4. On the Downloads page, click the Identity Cloud Service E-Business Suite Asserter download button.

    With the release of OCI IAM Identity Domains, EBS Asserter is enabled by default for Oracle Apps Premium and Premium Domains.

    • Check the feature state by going to tenant base url/admin/v1/FeatureInfos. oracle.idaas.ebs.asserter should be marked as enabled.
    • If the feature is not enabled, contact Oracle Support and create a service request to enable oracle.idaas.ebs.asserter.
    • If ebs.war was already deployed on the WebLogic server before the EBS Asserter was enabled, then redeploy ebs.war after enabling the feature.
  5. Save the .zip file to a temporary folder on your local machine.
  6. Extract the contents of the .zip file on your local machine.
  7. Find the location of the ebs.war and idcs-wallet-<version>.jar files.
    The name of the files may vary accordingly to the version.
  8. Extract contents of the ebs.war file and locate the fndext-<version>.jar file which is present under the WEB-INF/lib folder. Upload the fndext-<version>.jar file to a working directory into the E-Business Suite Asserter's WebLogic Server machine. For example, /opt/ebssdk (create this folder if it doesn't exist).
    The name of the fndext.jar file may vary depending on the current version.
  9. Upload the fndext-<version>.jar file to the Oracle WebLogic Managed Servers EBSAsserter_server_01 and EBSAsserter_server_02, and place it in the $DOMAIN_HOME/lib folder.
  10. Upload the ebs.war and idcs-wallet-<version>.jar files to the E-Business Suite Asserter's WebLogic Server machine and place it in the /opt/ebssdk folder.

Provide Environment Information

Record the environment information that you'll need when you configure the E-Business Suite Asserter configuration file.

  • OCI Load Balancer public IP where the E-Business Suite Asserter servers are configured. This IP has to be mapped with the same domain name as the E-Business Suite server. For example, https://ebsasserter.example.com
  • Oracle WebLogic Admin Server console address. For example, https://ebsasserter01.example.com:7002/console
  • Oracle WebLogic Managed Server HTTPS address (including port number if not the default one) where the E-Business Suite Asserter is deployed. For example, https://ebsasserter01.example.com:7003 and https://ebsasserter02.example.com:7003
  • OCI Load Balancer public IP and Listener Port where the Oracle E-Business Suite servers are configured. This IP has to be mapped with the same domain name as the EBS servers. For example, https://ebs.example.com:8001.
  • Oracle E-Business Suite host name. For example, ebs01.example.com and ebs02.example.com
  • OCI IAM HTTPS address (including port number if not using the default one). For example, https://idcs-example.identity.oraclecloud.com
  • Oracle E-Business Suite Database name. For example, ebsDB
  • Oracle E-Business Suite Database host. For example, ebsdb.example.com
  • Oracle E-Business Suite Database port. For example, 1521
  • Oracle E-Business Suite APPS user password. For example, apps