Credential Store Introduction to Oracle Reports Security

15-8 Publishing Reports to the Web with Oracle Reports Services ■ The user chooses a link on a Web page or a bookmark that contains a URL that requests the report. ■ From within Oracle Portal if configured, the user requests to run the report object for example, clicks the Run link. The user must be logged into Oracle Portal and, consequently, OracleAS Single Sign-On. As part of its security, Oracle Portal validates that the user has the required security permissions to see the report object. For example, if the report object is on a page, the user must have appropriate privileges to see the page and the reports object. Otherwise, Oracle Portal will not display the page or the report object to the user.

2. Oracle HTTP Server routes the request to rwservlet deployed on Oracle

WebLogic Server. The URL redirects the user to either rwservlet or the JSP depending upon whether this report has been set to execute through rwservlet or a JSP.

3. rwservlet

asks OracleAS Single Sign-On to authenticate the user. 4. OracleAS Single Sign-On server requests the user name and password. 5. Oracle HTTP Server displays the login page to the user, and the user provides user name and password. 6. User name and password are passed on to OracleAS Single Sign-On. 7. OracleAS Single Sign-On verifies the credentials with Oracle Internet Directory. 8. If the user is authenticated, OracleAS Single Sign-on server passes the user authenticated message to rwservlet. If you used SSOCONN in your URL, rwservlet checks the Single Sign-On key against Oracle Internet Directory to see if it already has been mapped to a data source connection string for example, scotttigermy_or_db. If you used SSOCONN and Oracle Internet Directory already has a connection string associated with the key, then rwservlet uses that connection string for the data source connection of the report. If you used SSOCONN but Oracle Internet Directory does not already contain a connection string for the key, the Oracle Delegated Administration Services Create Note: The URL may optionally contain or reference that is, through the key map file a Single Sign-On parameter SSOCONN with a value of the form: key_namedata_source_typeparameter_name In the case of an Oracle database, the Single Sign-On value would look something like the following: mykeyOracleDBuserid If you do not specify a data source type and parameter name, an Oracle database is assumed. Note: Because of this feature, many users can use the same report URL even if they all use different data source connection strings.