My Oracle Support Banner

AAI_812:SSO Authentication (SAML) Using Microsoft Active Directory (Doc ID 2903867.1)

Last updated on NOVEMBER 01, 2022

Applies to:

Oracle Financial Services Analytical Applications Infrastructure - Version 8.1.2 and later
Information in this document applies to any platform.

Goal

For implementing the SSO Authentication (SAML) using Microsoft active directory,

1. What would be the entity id.
2. What would be the reply url/ Assertion Consumer Service URL
3. Log out Url
4. If we enable Just in time provisioning (JIT)
 4a. Can Microsoft AD pass more than one group in user_groups attribute? if yes please advise how.
 4b. If Microsoft AD group is AD_MICRO_OFSAA should this group be created in OFSAA and roles assigned as well?
 4c. Values in user_group attribute passed should be microsoft AD groups or OFSAA user groups.
 4d. If user is part of more than one AD group, how ofsaa will authorize.
 

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.