• Find us:
    +1-669-900-5138   |   +44-203-372-5553
  • Free Newsletter

    Get Latest Updates

  • Make Training Enquiry


    Company

  • Categories

  • Archive

  • Oracle Apps 11i /oa_servlets/AppsLogin – Authentication Engine

    Posted by "" in "11i, apps, basics, Beginners" on 2008-10-07

    Share on FacebookTweet about this on TwitterShare on Google+Share on LinkedInEmail this to someone

    Did you ever wonder “how Apps 11i determines where to direct for authentication – Local (FND_USER) or  SSO authentication” ?

    What is ICXINDEX.html (in 11.5.9 or early 11.5.10) or AppsLogin or AppsLocalLogin.jsp ?

    How to troubleshoot login issue ?

    If you type http://hostname.domainname:port  (where port is web server port for 11i)

    1.Web Server (9iAS 1.0.2.2.2) checks its configuration file $IAS_ORACLE_HOME/Apache/Apache/conf/httpd.conf for parameters

    DocumentRoot   – $COMMON_TOP/portal/$CONTEXT_NAME/ and
    DirectoryIndex – index.html

    2. Based on above settings, server returns page $COMMON_TOP/portal/$CONTEXT_NAME/index.html to client

    3. Page $COMMON_TOP/portal/$CONTEXT_NAME/index.html calls applist.html and aplogon.html in same directory

    4. In aplogon.html there is link to
    http(s)://hostname.domain:port/oa_servlets/AppsLogin

    This link is based on value defined by context variable s_login_page in context file(SID_hostname.xml) under $APPL_TOP/admin5. Apache (11i Web Server) redirects /oa_servlets/AppsLogin to Jserv (via mod_jserv) which in turn uses oracle.apps.fnd.sso.AppsLogin from file$IAS_ORACLE_HOME/Apache/Jserv/etc/zone.propertiesservlet.AppsLogin.code=oracle.apps.fnd.sso.AppsLogin 

    6.AppsLogin is a servlet which will direct user to specific login page depending on profile option “Application SSO Type

    7. Profile Option : Application SSO Type can be set to one of following four values
    Portal
    SSWA
    Portal w/SSO
    SSWA w/SSO

    a) If profile option is set to SSWA then user is redirected to /OA_HTML/AppsLocalLogin.jsp , after authentication (local to 11i) user is redirected to the configured home page specified in the Self Service Personal Home Page mode profile option.

    b) If profile option is set to SSWA w/SSO then user is redirected to SSO (Single Sign-On) page for authentication and after authentication redirected to home page specified in the Self Service Personal Home Page mode profile option.

    c) If profile option is set to Portal w/SSO then user is redirected to SSO (Single Sign-On) page for authentication and after authentication redirected to default Portal Homepage

    d) If profile option is set to Portal then user is redirected to /OA_HTML/AppsLocalLogin.jsp for authentication and after authentication redirected to default Portal Homepage

    If you hit any login related issues - check if
    i) Request coming till web server i.e. ($IAS_ORACLE_HOME/ Apache/ Apache/ logs/ access_log)
    ii) Next check for any error message in error_log in above directory
    iii)Next check if request is routed to Jserv (via mod_jserv) ;  ($IAS_ORACLE_HOME/ Apache/ Jserv/ logs/ mod_jserv.log  (You may have to enable mod_jserv logs)
    iv)After this check if request is routed to proper authentication server (Local 11i – AppsLocalLogin.jsp or SSO server)

    .
    References

    • 186981.1  Oracle Application Server with Oracle E-Business Suite Release 11i FAQ
    • 261914.1  Integrating Oracle E-Business Suite Release 11i with Oracle Internet Directory and Oracle Single Sign-On

    6 Responses to “Oracle Apps 11i /oa_servlets/AppsLogin – Authentication Engine”

    1. utpal says:

      In the above flow it is mentioned that “AppsLogin is a servlet which will direct user to specific login page depending on profile option “Application SSO Type”

      + As the values set in profile options are stored in EBS database, so does the AppsLogin servlet connects to database to fetch the profile option ?

      + As per my understanding in login page (AppsLocalLogin.jsp) when we submit user name/password then the connection to database is established by Jserv engine by picking up the db cridentials from dbc file.

      As per above explanation in this blog, it seems before login into the system the database connection is established by AppsLogin servlet. Just correct where i’m wrong.

    2. Rajesh says:

      Thanks so much Atul for this Note. You are doing a great job !!!

    3. rahul pareek says:

      hi Atul !
      thnx for great job i am facing problem in authentication of jsp page as
      during login int ooracle apps i am getting this exception

      Request URI:/OA_HTML/OA.jsp

      Exception:
      java.lang.StackOverflowError

      please suggest what to do as its a unique problem and not a usual one of Oracle itself.
      thnx

    4. jase says:

      Hi Rahul, did you solve your StackOverflowError, I am getting the same thing from 1 user only when they use one specific machine. Any pointers would be appreciated.
      thanks,
      Jase.

    5. rahul pareek says:

      hi Jase,
      i have solved that error.
      dear, it was due to some personalization,
      disable all form personalization you have made recently.that’s all i know.

      Regards
      Rahul

    6. Ravikumar says:

      Hi Atul,
      I want to increase size limit of mod_jserv.log.
      Where & how to achive this.
      Thanks,
      Ravikumar

    Leave a Reply



  • K21 Technologies is among the most experienced Oracle Gold Partner for Identity Access Management service providers. We work with application development companies and in-house technology division to help achieve significant returns on their IT security investment. Our clientele includes some of the globally renowned corporate, which speaks of our expertise in our field.

    We have the most talented and experienced team that can swiftly deploy security solutions even in complex IT ecosystem. Our clients highly appreciate our timely implementation, interactive training, on-demand support and community resources.
  • CONTACTS

    K21 Technologies
    8 Magnolia Place, Harrow,
    London, HA2 6DS

    UK: +44(0)7476444481
    USA: +1-888-414-1821

  • 2014, K21 Technologies. All rights reserved DMCA.com
  • TOP