Implementing Single Sign-on

About Single Sign-On

Single Sign-On is an Oracle Web Agent CGI program that allows authenticated Oracle Self Service Application users to access Financial Analyzer without additional security challenges.

Implementing Single Sign-On assumes that you have performed several preliminary installation and setup tasks.

Note: This feature is available only for Financial Analyzer Web users.

Requirements for implementing Single Sign-On

Install the Application Object Library (AOL) patch

You must install a special AOL patch for Financial Analyzer. The patch will update Oracle Applications with Financial Analyzer Single Sign-On metadata (roles, menus, functions, and so forth).

Install Single Sign-On

You must install Single Sign-On on the same machine on which the Web server is installed.

Set up users and responsibilities in Oracle Applications

You must define each Financial Analyzer Web user in Oracle Applications and assign user responsibilities. You can associate a user with one or more of the following responsibilities:

• OFA Administrator

• OFA Budget

• OFA Analyst

• OFA External

Set up system profiles in Oracle Applications

You must also set up the following system profiles in Oracle Applications:

• OFA Server Profile --The Web listener host and, optionally, its port number, in the format host_name[:port]

• OFA Web Agent profile -- The name and virtual path of your Single Sign-On Web Agent CGI program.

• OFA Express Access Descriptor profile -- The service name of the instance to which you will connect.

• OFA Installation Path profile -- The path to your Financial Analyzer root directory.

Set Up the Single Sign-On Web Agent in Express

To ensure that Single Sign-On users can connect to a Financial Analyzer session, in the Express Instance Manager, you must set the following properties to a value of None:

• Required Security Level

• Required Authentication Level

• Web Agent Web Authentication Type

Ongoing task: Import users into Financial Analyzer from Oracle Applications

As you create new users, you must import their user names from Oracle Applications. For details, refer to the topic called "Creating Users" in the Financial Analyzer Help system.