My Oracle Support Banner

New Direction for Oracle Fusion Middleware 11g with Single Sign-On 10g (Doc ID 1364497.1)

Last updated on FEBRUARY 11, 2019

Applies to:

Oracle Discoverer - Version 11.1.1.1.0 and later
Oracle Forms - Version 11.1.1.1.0 and later
Oracle Internet Directory - Version 11.1.1.1.0 and later
Oracle Fusion Middleware - Version 10.1.4.0.1 to 10.1.4.3.0 [Release AS10gR2 to AS10gR3]
Oracle Application Server Single Sign-On - Version 10.1.4.0.1 to 10.1.4.3 [Release 10gR3]
Information in this document applies to any platform.
This direction applies to all Oracle Fusion Middleware 11g Release 1 (11.1.1.x) versions. The direction and steps within are applicable to all previous versions. Use of the MRCA 10.1.4.3.1 is no longer provided in the media pack. This along with the inspre.pl and various workarounds proved to be incompatible for all situations, and are no longer supported.


Details

Note:
This document was written when FMW 11.1.1.6 was released for use with OAM 11.1.1.5. It also applies to FMW 11.1.1.7+ in the same manner using OAM 11.1.1.7+ or 11.1.2.1+ with the exception of a new installation of Oracle Portal 11g will need OAM 11.1.2.1+. See bottom section "Oracle Portal 11g - New Installation".
 


New Direction for Oracle Fusion Middleware 11g with Single Sign-On 10g


Oracle Fusion Middleware 11g Release 1 (11.1.1) products were released to be compatible with Oracle Single Sign-On (SSO) 10g with a plan for a later released Oracle Access Manager (OAM) 11g. Oracle recommends integrating OAM 11g into Oracle Fusion Middleware 11g topologies for a single sign-on solution as soon as possible. Since Oracle Portal 11g requires an SSO 10g connection during the upgrade and installation process, customers installing Oracle Portal, Forms, Reports, Discoverer (PFRD) 11g should evaluate all options before proceeding. FMW 10g-to-11g upgrade planning to should include steps to upgrade to OAM 11g. Existing FMW 11g installations should begin using Oracle Access Manager 11g for a single sign-on solution as soon as possible. This document provides a direction aligned with Oracle Documentation and arrival of the latest releases:

Newer combination:

<Note 1535341.1> Announcing Oracle Fusion Middleware 11g Release 1 (11.1.1.7.0)
   - Includes PFRD, OID, and may be used with OAM 11.1.1.5+ or OAM 11.1.2.0+ (check exact certification)

<Note 1510284.1>  Announcing Oracle Identity Access Management 11g Release 2 (11.1.2)
  - Includes OAM 11.1.2.1, the sso solution supported for use with new installations of Oracle Portal 11g (until the end of Premier Support for Oracle Portal)

Older combination:

<Note 1364511.1> Announcing Oracle Fusion Middleware 11g Release 1 (11.1.1.6.0)
   - Includes PFRD, OID, and may be used with OAM 11.1.1.5 or OAM 11.1.2.x (check exact certification)

       <Note 1316076.1> Announcing Oracle Fusion Middleware 11g Release 1 (11.1.1.5.0)
          - Includes OID and OAM, and may be used with PFRD 11.1.1.6+
      

Oracle Portal and SSO 10g are two products most impacted by this new direction because of Oracle Portal (10g/11g) dependency on SSO 10g. See the below direction regarding these products:

Oracle Portal

Oracle has released Oracle WebCenter 11g to bring together the most complete portfolio of portal, web experience management, content, social, and collaboration technologies into a single integrated product suite, and it provides the foundation for Oracle Fusion Middleware and Oracle Fusion Applications to deliver a next-generation user experience. Customers using Oracle Portal 10g/11g are encouraged to migrate to Oracle WebCenter 11g in order to take advantage of new features and functionality.
It is recommended that existing Oracle Portal 10g customers follow the upgrade path to Oracle Portal 11g for their production and test environments following the Oracle Portal Upgrade Guide. While running Oracle Portal 11g through the end of its life cycle, its not recommended to devote time in new development with Oracle Portal. As soon as possible, customers should install Oracle WebCenter 11g on your newer machines to begin migration and application development with Oracle WebCenter Portal 11g or other WebCenter offerings.

Oracle Single Sign-On 10g

Oracle has released Oracle Access Manager 11g to provide a comprehensive identity management and access control system that simplifies user access across applications. Learn more about the role of Oracle Access Manager 11g here and here. Customers using Oracle Single Sign-On 10g should upgrade to Oracle Access Manager 11g for a more advanced single sign-on solution.
References:

Identity and Access Management 11g Release 1 (11.1.1.7) Documentation Library
[ http://docs.oracle.com/cd/E28280_01/im.htm ]  (OID and OAM 11.1.1.7)

Identity and Access Management 11g Release 2 (11.1.2.1) Documentation Library
[ http://docs.oracle.com/cd/E37115_01/index.htm ] (OAM 11.1.2.1)

Oracle Fusion Middleware Installation Guide for Oracle Identity Management 11g Release 1 (11.1.1)
[ http://www.oracle.com/pls/as1111/lookup?id=INOIM ] - latest revision
-- See: "Evaluating Single Sign-On Installations"

Oracle Fusion Middleware Upgrade Guide for Oracle Identity Management 11g Release 1 (11.1.1)
[ http://www.oracle.com/pls/as1111/lookup?id=FUPIM ] - latest revision

<Note 1290974.1> ALERT: Premier Support Ends Dec 31 2011 for Oracle Fusion Middleware 10g 10.1.2 & 10.1.4

<Note 340.1> Install and Configure Advisor: Oracle Fusion Middleware (FMW) Identity Access Management (OAM, OIM) 11g

<Note 1395233.1> How to Install, Configure and Integrate Oracle Internet Directory (OID) and Oracle Access Manager (OAM) 11g

Actions

Evaluate and Plan for Your Requirements

To help customers decide which single sign-on solution to use, Oracle recommends carefully considering your requirements and options. The following outlines the choices when looking for a single sign on solution.

  • The first step is to consider your entire topology, what products you will be installing on the same and different machines which will be working and connecting to each other. It is recommended to refer to the Certification Guide (11gR1 and R2 here) and Compatibility Guide while performing this planning activity.

     
  • SSO 10g has been a requirement of the Oracle Portal, Forms, Reports, Discoverer (PFRD) installations. The sections within this document outline considerations and direction for each of these products. It is only Oracle Portal which requires SSO 10g for the installation. For this reason, the PFRD products are no longer recommend to be installed at the same time. You should choose the new direction for each and avoid the unnecessary older SSO 10g installation.

     
  • Customers are encouraged to minimally install Oracle Access Management 11g with Oracle Internet Directory 11g as soon as possible in order to test and evaluate the available single sign-on options. There are also many other Identity Management and Identity Access Management products to use within your topology. The following is provided to help step through this:

    <Note 340.1> Install and Configure Advisor: Oracle Fusion Middleware (FMW) Identity Access Management (OAM, OIM) 11g
  • This direction applies to all Oracle Fusion Middleware 11g Release 1 (11.1.1.x) versions. The direction and steps within are applicable to all previous versions. Use of the MRCA 10.1.4.3.1 is no longer provided in the media pack. This along with the inspre.pl and various workarounds proved to be incompatible for all situations, and are no longer supported.



New Installations - Not Installing Portal, Forms, Reports, Discoverer

 


Identity and Access Management 11g Release 1 (11.1.1.7) Documentation Library
[ http://docs.oracle.com/cd/E28280_01/im.htm ]  (OID and OAM 11.1.1.7)

See New Oracle Access Management R2 release after split:

Oracle Access Management 11g Release 2 (11.1.2.3)
Oracle Access Management 11g Release 2 (11.1.2.2)
Oracle Access Management 11g Release 2 (11.1.2.1)

OID 11g R1 only (no R2 for OID side):

Oracle Fusion Middleware Installation Guide for Oracle Identity Management 11g Release 1 (11.1.1)
[ http://www.oracle.com/pls/as1111/lookup?id=INOIM ] - latest revision
-- See: "Evaluating Single Sign-On Installations"

Oracle Fusion Middleware Installation Guide for Oracle Identity Management 11g Release 1 (11.1.1)
[ http://www.oracle.com/pls/as1111/lookup?id=INOIM ] - latest revision

Oracle Fusion Middleware Upgrade Guide for Oracle Identity Management 11g Release 1 (11.1.1)
[ http://www.oracle.com/pls/as1111/lookup?id=FUPIM ] - latest revision

<Note 1290974.1> ALERT: Premier Support Ends Dec 31 2011 for Oracle Fusion Middleware 10g 10.1.2 & 10.1.4

<Note 340.1> Install and Configure Advisor: Oracle Fusion Middleware (FMW) Identity Access Management (OAM, OIM) 11g

<Note 1395233.1> How to Install, Configure and Integrate Oracle Internet Directory (OID) and Oracle Access Manager (OAM) 11g

       <Note 1535341.1> Announcing Oracle Fusion Middleware 11g Release 1 (11.1.1.7.0)
          - Includes PFRD, OID, and may be used with OAM 11.1.1.5+ or OAM 11.1.2.0+ (check exact certification)

       <Note 1510284.1>  Announcing Oracle Identity Access Management 11g Release 2 (11.1.2)
          - Includes OAM 11.1.2.1, the only one fully supported for use with new installations of Oracle Portal 11g

       <Note 1364511.1> Announcing Oracle Fusion Middleware 11g Release 1 (11.1.1.6.0)
          - Includes PFRD, OID, and may be used with OAM 11.1.1.5 or OAM 11.1.2.x (check exact certification)

                      <Note 1316076.1> Announcing Oracle Fusion Middleware 11g Release 1 (11.1.1.5.0)
                         - Includes OID and OAM, and may be used with PFRD 11.1.1.6+

 

Existing Environments Using Single Sign-On 10g

 



Oracle Fusion Middleware Upgrade Guide for Oracle Identity Management 11g

[ http://www.oracle.com/pls/as1111/lookup?id=FUPIM ] - latest revision

<Note 340.1> Install and Configure Advisor: Oracle Fusion Middleware (FMW) Identity Access Management (OAM, OIM) 11g

<Note 1395233.1> How to Install, Configure and Integrate Oracle Internet Directory (OID) and Oracle Access Manager (OAM) 11g

 

Oracle Discoverer 11g

 


Oracle Business Intelligence Discoverer Statement of Direction

Oracle Fusion Middleware Installation Guide for Oracle Portal, Forms, Reports and Discoverer 11g Release 1 (11.1.1)
[ http://www.oracle.com/pls/as1111/lookup?id=CLINS ] - latest revision

Oracle Fusion Middleware Configuration Guide for Oracle Business Intelligence Discoverer 11g Release 1 (11.1.1.6)
13 Maintaining Security with Oracle BI Discoverer

--See Section 13.8: "Using Discoverer with Oracle Identity Management Infrastructure"
   (There are SSO 10g instructions followed by OAM 11g instructions)

Oracle Forms & Reports 11g

 


References:

Portal, Forms, Reports, and Discoverer 11g (11.1.1.7) Documentation Library
[ http://docs.oracle.com/cd/E28280_01/pfrd.htm ]

Oracle Fusion Middleware Installation Guide for Oracle Identity Management 11g Release 1 (11.1.1)
[ http://www.oracle.com/pls/as1111/lookup?id=INOIM ] - latest revision
-- See: "Evaluating Single Sign-On Installations"

Oracle Fusion Middleware Installation Guide for Oracle Portal, Forms, Reports and Discoverer 11g Release 1 (11.1.1)
[ http://www.oracle.com/pls/as1111/lookup?id=CLINS ] - latest revision

Oracle Fusion Middleware Upgrade Guide for Oracle Portal, Forms, Reports, and Discoverer 11g Release 1 (11.1.1)
[ http://www.oracle.com/pls/as1111/lookup?id=FUPCL ] - latest revision

 

Oracle Portal 11g


FMW 10g-to-11g upgrade planning to should include plans to upgrade SSO 10g to OAM 11g under the three typcial scenarios:
  • All existing Oracle Fusion Middleware 11g installations should upgrade existing SSO 10g installations to OAM 11g for a single sign-on solution as soon as possible.



  • All existing Oracle Application Server 10g customers should follow the upgrade path to Oracle Fusion Middleware 11g for their production and test environments following the Oracle Portal Upgrade Guide. During this upgrade process, there is a limitation where new installations of Oracle Portal 11g (11.1.1.x) will require an SSO 10g connection, which is initiated from the step as shown from this screenshot. In an upgrade case, this would be an existing OID/SSO 10g, upgrading your existing test and production systems using the same method. It is recommended that existing Oracle Portal 10g customers follow the upgrade path to Oracle Portal 11g for their production and test environments following the Oracle Portal Upgrade Guide. While running Oracle Portal 11g through the end of its life cycle, its not recommended to devote time in new development with Oracle Portal. As soon as possible, customers should install Oracle WebCenter 11g on your newer machines to begin migration and application development with Oracle WebCenter Portal 11g or other WebCenter offerings.


  • At this point in time, it is not expected that you should install Oracle Fusion Middleware 11g to use SSO 10g as a brand new installation on a test or production environment. If needing a new Oracle Fusion Middleware 11g installation on a newer machine, all Oracle Fusion Middleware 11g products now have a method to begin using OAM 11g as a single sign-on solution immediately after installation. If needing to specifically install Oracle Portal 11g, see the section below as the only supported method to install Oracle Portal 11g as a brand new installation.
References:

Portal, Forms, Reports, and Discoverer 11g (11.1.1.7) Documentation Library
[ http://docs.oracle.com/cd/E28280_01/pfrd.htm ]

Oracle Fusion Middleware Installation Guide for Oracle Identity Management 11g Release 1 (11.1.1)
[ http://www.oracle.com/pls/as1111/lookup?id=INOIM ] - latest revision
-- See: "Evaluating Single Sign-On Installations"

There are two sections below to outline a direction for Oracle Portal upgrades and new installations:

Oracle Portal 11g - Upgrade

 

Oracle Portal 11g - New Installation

 

This document replaces Doc ID 1069426.1

Contacts

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Details
 New Direction for Oracle Fusion Middleware 11g with Single Sign-On 10g
 Oracle Portal
 Oracle Single Sign-On 10g
Actions
 Evaluate and Plan for Your Requirements
 New Installations - Not Installing Portal, Forms, Reports, Discoverer
 Existing Environments Using Single Sign-On 10g
 Oracle Discoverer 11g
 Oracle Forms & Reports 11g
 Oracle Portal 11g
 Oracle Portal 11g - Upgrade
 Oracle Portal 11g - New Installation
Contacts
References

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.