Most customers who use Oracle E-Business Suite integrate it in production with their corporate identity and access management (IAM) solution to achieve single sign-on (SSO). Because E-Business Suite doesn’t support SSO protocols like SAML 2.0 and OpenID Connect, a set of external components (for example, Oracle Identity Cloud Service with E-Business Suite Asserter, or Oracle Access Manager with Oracle Internet Directory or Oracle Unified Directory) is needed to enable E-Business Suite to integrate with an enterprise SSO solution like Microsoft Azure Active Directory (Azure AD).

This paper provides a reference SSO architecture and configuration details for end users who are accessing Oracle E-Business Suite running on Azure by using Oracle Identity Cloud Service. This setup enables users who have already logged in to Azure AD to navigate to E-Business Suite without logging in again. Enterprises that deploy this solution gain the benefits of SSO, including a single set of credentials, an improved login experience, improved security, and reduced help-desk cost.

Use Cases

Following are common use cases for using SSO with E-Business Suite and Azure AD:

• Users log in to Azure AD, access E-Business Suite through the My Apps portal , and get seamless access to E-Business Suite.

• E-Business Suite users with a bookmarked E-Business Suite or AppsLogin URL are redirected to Azure AD to log in, and get access to the application after successful authentication.

• Users who log out of E-Business Suite are also logged out of the My Apps portal.

Benefits

The benefits for using SSO with E-Business Suite and Azure AD are as follows:

• Lightweight E-Business Suite SSO solution

• Single set of credentials

• Seamless login and logout experience

• Secure end-user access provided by the security features of Azure AD and Identity Cloud Service