Recently we’ve had multiple customers asking us about how to perform Oracle Forms 11g R2 single sign-on. There are many options when it comes to security n fact there are even multiple authentication store products. Luckily, I found a great blog post from the Proactive Support – Oracle Development Tools team to explain the process.
In it they define step-by-step how creating a single sign-on environment can be done using Oracle Access Manager 11g (OAM) and Oracle Internet Directory (OID). Together, they eliminate the need for additional logins to access applications using the same server during a single user session.
To help secure forms, Oracle Forms Services applications in Oracle FMW 11g Release 2 they can be protected by one of the following authentication servers:
- Oracle Access Manager (OAM Server) - It is an Oracle FMW 11g authentication server that provides a full range of security functions that include Web single sign-on, authentication and authorization. When running Forms Services, it uses Oracle Internet Directory as the Identity Store. Oracle Access Manager can use either mod_osso or webgate as the access client configured with Oracle HTTP Server.
- Oracle Single Sign-On Server (OSSO Server) - It is an OracleAS 10g authentication server. It uses Oracle Internet Directory as the Identity Store. Oracle Single Sign-On Server uses mod_osso as the access client configured with Oracle HTTP Server.
For more detailed configuration and implementation instructions check it out: Read the full blog to address security and sign-on issues.