ssoMode ssoProxyConnect ssoDynamicResourceCreate Enabling OracleAS Single Sign-On for an Application

Using Forms Services with Oracle Single Sign-On 9-7

6. In the Value field, enter true.

7. Click Apply to update the formsweb.cfg file.

Single sign-on is now enabled for the selected application. To disable single sign-on for an application: 1. Select Web Configuration from the Forms menu. 2. Select the row that lists the configuration section for your application.

3. In the Section region, select sso in the Show drop down list.

4. In the Section region, select the row containing ssoMode.

5. In the Value column, enter false.

6. Click Apply.

Single sign-on is now disabled for the selected application.

9.4.1 ssoMode

The ssoMode parameter enables a Forms Services application to connect to OracleAS Single Sign-On Server. By default, Oracle Forms applications are not configured to run in single sign-on mode. The ssoMode parameter can be set in two places in the formsweb.cfg file: ■ By setting ssoMode in the default section of formsweb.cfg with a value of true which allows all applications to run in single sign-on mode by this Forms Services instance ■ By setting the ssoMode parameter in a named configuration of an Oracle Forms application which enables or disables single sign-on only for this particular application, for example: [myApp] form=myFmx ssoMode=true

9.4.2 ssoProxyConnect

The ssoProxyConnect parameter enables a user to control when Oracle Forms should use a proxy connection to the database and when it should not. The ssoProxyConnect parameter can be set in two ways: ■ By setting ssoProxyConnect in the default section of formsweb.cfg with a value of yes which allows all applications to run in single sign-on mode by this Forms Services instance ■ By passing the ssoProxyConnect parameter in the URL at runtime, for example http:host:port?config=myapp……ssoProxyConnect=yes

9.4.3 ssoDynamicResourceCreate

The ssoDynamicResourceCreate parameter is set to true by default which allows the user to create a Resource Access Descriptor RAD entry in Oracle Internet Directory to run the application if this resource entry does not exist. The Web page used is a standard form provided by the Oracle Delegated Administration Services. This Web page cannot be customized as it is not owned by Oracle Forms. 9-8 Forms Services Deployment Guide Allowing dynamic resource creation simplifies Oracle Internet Directory administration because there is no longer the need for an administrator to create user RAD information in advance. The ssoDynamicResourceCreate parameter can be set as a system parameter in the formsweb.cfg file or as a parameter of a named configuration. Because the default is set to true, this parameter may be used in a named configuration for a specific application to handle a missing RAD entry differently from the default. Note that enabling an application for single sign-on with the value of the ssoDynamicResourceCreate parameter set to false, while not specifying a value for the ssoErrorURL, causes Oracle Forms to show an error message if no RAD resource exists for the authenticated user and this application.