{"id":7212,"date":"2021-02-26T14:55:32","date_gmt":"2021-02-26T14:55:32","guid":{"rendered":"https:\/\/rax-stg-wp-aws.com\/blogs\/ebs-sso-integration-with-idcs\/"},"modified":"2026-11-03T19:28:13","modified_gmt":"2026-11-03T19:28:13","slug":"ebs-sso-integration-with-idcs","status":"publish","type":"blogs","link":"https:\/\/www.rackspace.com\/de\/blogs\/ebs-sso-integration-with-idcs\/","title":{"rendered":"EBS SSO integration with IDCS"},"content":{"rendered":"<p><strong>&nbsp;Introduction<\/strong><\/p>\n<p>The post introduces Oracle Identity Cloud Service (IDCS) integration with the existing Oracle e-Business Suite (EBS) environments.<\/p>\n<p>IDCS is an Oracle cloud-based Identity platform, which enables SSO services to access EBS applications. It does not require any installations. Oracle Cloud maintains everything, including backup, recovery, patching, upgrade, and scaling.<\/p>\n<p>You need only one component called EBS Asserter, which IDCS provides to implement SSO for Oracle e-Business Suite and other applications.<br \/>\n&nbsp;<\/p>\n<p><strong>Features of EBS Asserter<\/strong><\/p>\n<p>Asserter has the following key features:<\/p>\n<ul>\n<li>You don&#8217;t need to make configuration changes to EBS.<\/li>\n<li>You should deploy in WebLogic 12C with SSL configuration.<\/li>\n<li>It supports single login for EBS applications, IDCS, and EBS Asserter.<\/li>\n<li>It has multiple access modes for SSO with EBS.<\/li>\n<\/ul>\n<p>In IDCS, you can also integrate with the existing active directory (AD). To integrate IDCS with an existing AD, you need to download the Oracle IDCS AD agent from IDCS and install it on the AD server by providing client ID and client secret details. After the installation completes, the system updates the AD server details in the IDCS directory integrations.<br \/>\n&nbsp;<\/p>\n<p>To synchronize AD users, you need to configure the bridge and perform synchronization.<\/p>\n<p>Following is an illustration of the new approach of EBS integration with IDCS:<\/p>\n<p><img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/blog_article_images\/26311-body-Picture1_39.png\" alt=\"idcs pic 1\" \/><\/p>\n<p class=\"text-align-center\"><a href=\"https:\/\/cdn.app.compendium.com\/uploads\/user\/e7c690e8-6ff9-102a-ac6d-e4aebca50425\/66a8d353-e3ac-42d8-a6bc-e22fa8849ab4\/File\/2f32e80a5cf41b736acfa2e1c779689e\/capture.PNG\">Image source<\/a>&nbsp;<\/p>\n<p><strong>EBS Integration with IDCS for SSO<\/strong><\/p>\n<p>Oracle supports all EBS modules having browser-based logins to work with EBS Asserter and also supports Excel-based logins for Web ADI. Mobile Apps for EBS don&#8217;t use browser-based authentication, so Mobile apps are not supported.<\/p>\n<p><strong>Installation prerequisites<\/strong><br \/>\nTo install EBS Asserter, make sure you have the following elements in place:<\/p>\n<ul>\n<li>Oracle JRE\/JDK version 8 or later<\/li>\n<li>Java Cryptography Extension file for Java 8<\/li>\n<li>Access to the IDCS console to download the EBS Asserter and permission to register confidential applications.<\/li>\n<li>Access to EBS applications.<\/li>\n<li>A separate Oracle WebLogic server 12C and a new managed server, <strong>EBSAsserter_server<\/strong>,&nbsp;where you can deploy the EBS Asserter Java application. This WebLogic server and EBS&nbsp;servers must be in the same domain.<\/li>\n<\/ul>\n<ol>\n<li>Download and extract the EBS Asserter zip file.<\/li>\n<li>Access the Identity Cloud Service console, expand the <strong>NavigationDrawer<\/strong>, click&nbsp;<strong>Settings<\/strong>, and click <strong>Downloads<\/strong>. Click <strong>Download<\/strong>&nbsp;to download IDCS EBS Asserter,&nbsp;and then save the zip file.<\/li>\n<li>Extract the contents of the EBS Asserter zip file.<\/li>\n<li>Copy the <strong>ebs.war<\/strong>&nbsp;and <strong>idcs-wallet-&lt;version&gt;.jar<\/strong>&nbsp;files to a working folder into&nbsp;the EBS Asserter&#8217;s WebLogic Server machine.<\/li>\n<\/ol>\n<p>\n<em>Make sure the EBS Asserter URL has access over the SSL.<\/em><\/p>\n<p>If you have multiple EBS instances, you can configure and deploy EBS Asserter for each EBS instance. You can use the same WebLogic server for all EBS Asserter-managed servers.<\/p>\n<p><strong>Configuration steps<\/strong><\/p>\n<p>Perform the following configuration steps:<\/p>\n<p><strong>1. Create an application user on EBS<\/strong><\/p>\n<p>To create a user for EBS Asserter to communicate with EBS applications, perform the following steps from the <a href=\"https:\/\/www.oracle.com\/webfolder\/technetwork\/tutorials\/obe\/cloud\/idcs\/ebs_asserter_obe\/ebs-asserter.html\">Oracle Asserter documentation<\/a>:<\/p>\n<p>1. Log in to EBS as the <strong>sysadmin<\/strong>&nbsp;user.<br \/>\n2. Go to <strong>User Management Responsibility<\/strong>&nbsp;and click <strong>Users<\/strong>.<br \/>\n3. Select <strong>User Account<\/strong>&nbsp;from the <strong>Register<\/strong>&nbsp;drop-down menu and click <strong>Go<\/strong>.<br \/>\n4. On the <strong>Create User Account<\/strong>&nbsp;page, enter the following details to create a new user,<br \/>\n&nbsp; &nbsp;and click <strong>Submit<\/strong>:<\/p>\n<p>&nbsp; &nbsp; &nbsp;&#8211; <strong>Username<\/strong>: <em>EBSASSERTER<\/em><br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Password<\/strong>: The user password.<br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Description<\/strong>: <em>EBS Asserter Service User<\/em><br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Password Expire<\/strong>: None<\/p>\n<p>5. After user creation, click <strong>Assign roles<\/strong>, and then click <strong>Assign roles&nbsp;<\/strong>on the<br \/>\n&nbsp; &nbsp;<strong>Update User<\/strong>&nbsp;page.<br \/>\n6. Use <strong>Search and Select: Assign Roles<\/strong>&nbsp;by code UMX|<em>APPS_SCHEMA_CONNECT<\/em>.<br \/>\n7. Select <strong>Apps Schema Connect Role<\/strong> and click <strong>Select<\/strong>.&nbsp;<br \/>\n8. Justify <strong>EBS asserter service user<\/strong>&nbsp;and click <strong>Save<\/strong>.<\/p>\n<p><strong>2. Create EBS system administrator in IDCS<\/strong><\/p>\n<p>Perform the following steps from <a href=\"https:\/\/www.oracle.com\/webfolder\/technetwork\/tutorials\/obe\/cloud\/idcs\/ebs_asserter_obe\/ebs-asserter.html\">Oracle Asserter documentation<\/a>&nbsp;to create a user in IDCS that communicates to the system administrator in EBS applications.<\/p>\n<p>1. Log in to IDCS to access the console.<br \/>\n2. In the IDCS console, expand the navigation, click <strong>Users<\/strong>, and click <strong>Add<\/strong>&nbsp;on the<br \/>\n&nbsp; &nbsp;<strong>Users<\/strong>&nbsp;page.<br \/>\n3. In the <strong>Add User<\/strong>&nbsp;window, provide the following values and click <strong>Finish<\/strong>:<\/p>\n<p>&nbsp; &nbsp; &nbsp;&#8211; <strong>First Name<\/strong>: <em>EBS<\/em><br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Last Name<\/strong>: <em>Sysadmin<\/em><br \/>\n&nbsp; &nbsp; &nbsp;&#8211; Uncheck <strong>Use the email address as the username<\/strong>.<br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Username<\/strong>: <em>sysadmin<\/em><br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Email<\/strong>: Provide the email address set to the SYSADMIN account in your Oracle E-Business Suite.<\/p>\n<p>4. After you create the user in IDCS, log in to EBS applications and update the sysadmin<br \/>\nuser email address to match the IDCS sysadmin address.<\/p>\n<p>########<\/p>\n<p>Perform the following steps from <a href=\"https:\/\/www.oracle.com\/webfolder\/technetwork\/tutorials\/obe\/cloud\/idcs\/ebs_asserter_obe\/ebs-asserter.html\">Oracle Asserter documentation<\/a>&nbsp;to register the EBS Asserter with EBS:<\/p>\n<p>1. Log in to the EBS application server as `applmgr` and identify the directories for<br \/>\n&nbsp; &nbsp;<strong>$JAVA_HOME<\/strong> and <strong>$WLS_HOME<\/strong>.<br \/>\n2. Run the following commands to create a working directory:<\/p>\n<p>&nbsp; &nbsp;<em> &nbsp; &nbsp; cd \/u01\/app\/SID<br \/>\n&nbsp; &nbsp; &nbsp; &nbsp; mkdir ebssdk<br \/>\n&nbsp; &nbsp; &nbsp; &nbsp; cd ebssdk<\/em><\/p>\n<p>3. Extract <strong>fndext.jar<\/strong> from <strong>ebs.war<\/strong>, which you downloaded from IDCS. Copy it both&nbsp;to the working directory and the EBS asserter WebLogic server <strong>$DOMAIN\\_HOME\/lib<\/strong>&nbsp;folder.<br \/>\n4. Source the EBS environment file and run the following commands to register EBS asserter with EBS applications:<\/p>\n<p>&nbsp;<em> &nbsp; &nbsp; &nbsp; cd \/u01\/app\/SID\/ebssdk<br \/>\n&nbsp; &nbsp; &nbsp; &nbsp; java oracle.apps.fnd.security.AdminDesktop apps\/&lt;apps_pwd&gt; CREATE NODE_NAME=ebsasserter.example.com DBC=$FND_SECURE\/EBSDB.dbc<\/em><\/p>\n<p>5. Copy the generated <strong>EBSDB_ebsasserter.example.com.dbc<\/strong>&nbsp;file to the EBS Asserter server and make a note of the <strong>APPL_SERVER_ID<\/strong>.<\/p>\n<p>4. <strong>Register EBS Asserter in IDCS<\/strong><\/p>\n<p>Perform the following steps from <a href=\"https:\/\/www.oracle.com\/webfolder\/technetwork\/tutorials\/obe\/cloud\/idcs\/ebs_asserter_obe\/ebs-asserter.html\">Oracle Asserter documentation<\/a>&nbsp;to create a confidential application to represent EBS asserter:<br \/>\n&nbsp;<\/p>\n<p>1. Log in to the IDCS console and expand the navigation and then click applications.<br \/>\n2. Click on Add and select Confidential applications in the dialog box<\/p>\n<p><img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/blog_article_images\/26311-body-Picture2_33.png\" alt=\"ebs pic 2\" \/><\/p>\n<p>\n&nbsp;<br \/>\n3. Enter the following information and click next:<\/p>\n<p>&nbsp; &nbsp; &nbsp;&#8211; <strong>Name<\/strong>: <em>EBS Asserter<\/em><br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Description<\/strong>: <em>EBS Asserter Application<\/em><br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Application URL<\/strong>: <em>https:\/\/ebsasserter.example.com:7002\/ebs<\/em><br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Display in My Apps<\/strong>: Select this check box.<\/p>\n<p>4. In the <strong>Client<\/strong> pane, select <strong>Configure this application as a client now&nbsp;<\/strong>and enter<br \/>\n&nbsp; &nbsp;the following information:<br \/>\n&nbsp; &nbsp;<br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Allowed Grant Types<\/strong>: Select <strong>Client Credentials<\/strong> and <strong>Authorization Code<\/strong>.<br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Redirect URL<\/strong>: <em>https:\/\/ebsasserter.example.com:7002\/ebs\/response<\/em><br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Logout URL<\/strong>: <em>https:\/\/ebsasserter.example.com:7002\/ebs\/logout<\/em><br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Post Logout Redirect URL<\/strong>: <em>https:\/\/ebsasserter.example.com:7002\/ebs<\/em><\/p>\n<p>5. Beneath <strong>Grant the client access to Identity Cloud Service Admin APIs<\/strong>, click <strong>Add<\/strong>.<br \/>\n6. In the <strong>Add App Role<\/strong>&nbsp;dialog window, select <strong>Authenticator Client<\/strong>&nbsp;and <strong>Me<\/strong>&nbsp;in the&nbsp;list and click <strong>Add<\/strong>.<br \/>\n7. Click <strong>Next&nbsp;<\/strong>in the <strong>Client<\/strong>&nbsp;pane and the following panes. Click <strong>Finish<\/strong>.<br \/>\n8. In the <strong>Application Added<\/strong> dialog box, make a note of the <strong>Client ID<\/strong>&nbsp;and&nbsp;<strong>Client Secret<\/strong>&nbsp;values and click <strong>Close<\/strong>.<br \/>\n9. Click <em><strong>Activate<\/strong><\/em> to activate the application.&nbsp;<\/p>\n<p><img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/blog_article_images\/26311-body-Picture3_34.png\" alt=\"ebs pic 3\" \/><\/p>\n<p><strong>5. Create a WebLogic wallet&nbsp;<\/strong><\/p>\n<p><strong>According to <a href=\"https:\/\/www.oracle.com\/webfolder\/technetwork\/tutorials\/obe\/cloud\/idcs\/ebs_asserter_obe\/ebs-asserter.html\">Oracle Asserter documentation<\/a>,&nbsp;<\/strong>for security purposes, you need to register client ID, client secret, and IDCS URL in the wallet used by the EBS Asserter. &nbsp;Perform the following steps described in the Oracle documentation:<\/p>\n<p>1. Log in to the EBS Asserter server and go to the directory where the&nbsp;<strong>idcs-wallet-&lt;version&gt;.jar<\/strong>&nbsp;file exists.<\/p>\n<p>2. Run the following command to generate the <strong>cwallet.sso<\/strong>&nbsp;file and fill in the details<br \/>\n&nbsp; &nbsp;as prompted:<\/p>\n<p>&nbsp; &nbsp; &nbsp; &nbsp; java -jar idcs-wallet-&lt;version&gt;.jar &nbsp;<\/p>\n<p>&nbsp; &nbsp; &nbsp;&#8211; <strong>Enter Wallet Path<\/strong>: Enter the path to the store wallet file.<br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Enter Client ID<\/strong>: Enter the <strong>Client ID<\/strong><\/p>\n<p>&nbsp; &nbsp; &nbsp;&#8211; <strong>Enter Client Secret<\/strong>: Enter the <strong>Client Secret<\/strong> for the client ID.<br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Enter IDCS base URL<\/strong>: Enter the IDCS base URL.<\/p>\n<p><strong>6. Update the configuration file<\/strong><\/p>\n<p>Update EBS Asserter configuration file, <strong>bridge.properties<\/strong>&nbsp;with EBS instance and IDCS details.<\/p>\n<p><strong>&nbsp;7. Deploy EBS Asserter<\/strong><\/p>\n<p>Perform the following steps from <a href=\"https:\/\/www.oracle.com\/webfolder\/technetwork\/tutorials\/obe\/cloud\/idcs\/ebs_asserter_obe\/ebs-asserter.html\">Oracle Asserter documentation<\/a>&nbsp;to create a new data source and deploy the EBS Asserter application.<\/p>\n<p>Define the data source<\/p>\n<p>1. Log in to the EBS Asserter WebLogic console and select <strong>Data Sources<\/strong>.<br \/>\n2. Click **New** and select <strong>Generic Data Source<\/strong>.<br \/>\n3. Enter the following database details and click <strong>Next<\/strong>.<\/p>\n<p>&nbsp; &nbsp; &nbsp;&#8211; <strong>Name<\/strong>: <em>EBSDB<\/em>&nbsp;(The name should be same as the <strong>ebs.ds.name<\/strong>&nbsp;in file.)<br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>JNDI Name<\/strong>: <em>EBSDB<\/em><br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Database Type<\/strong>: <em>Oracle<\/em><br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Database Driver<\/strong>: <em>\\*Oracle&#8217;s Driver (Thin) for Instance connections; Versions:Any<\/em>.<\/p>\n<p>4. Enter the following database connection details:<\/p>\n<p>&nbsp; &nbsp; &nbsp;&#8211; <strong>Database Name<\/strong>: <em>EBSDB<\/em><br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Host Name<\/strong>: <em>ebs.example.com<\/em><br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Port<\/strong>: <em>1521<\/em><br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Database Username<\/strong>: <em>EBSASSERTER<\/em><br \/>\n&nbsp; &nbsp; &nbsp;&#8211; <strong>Password<\/strong>: Enter the username password.<\/p>\n<p>5. Select driver class name&#8221; <em>oracle.apps.fnd.ext.jdbc.datasource.AppsDataSource<\/em>.<br \/>\n6. Update the following details in <strong>Properties<\/strong>:<\/p>\n<p>&nbsp; &nbsp; &nbsp; &nbsp; <em>user=IDETITYADMIN<br \/>\n&nbsp; &nbsp; &nbsp; &nbsp; dbcFile=\/u01\/app\/SID\/ebssdk\/EBSDB_ebsasserter.example.com.dbc<\/em><\/p>\n<p>7. Click <strong>Test Configuration<\/strong><\/p>\n<p><strong>Deploy EBS Asserter on the WebLogic server<\/strong><\/p>\n<p>1. Log in to the EBS Asserter WebLogic console and click <strong>Lock &amp; Edit<\/strong>.<br \/>\n2. Click <strong>Deployments<\/strong>&nbsp;and <strong>Install<\/strong>.&nbsp;<br \/>\n3. Select the&nbsp;<strong>ebs.war<\/strong> file and click <strong>Next<\/strong>.&nbsp;<br \/>\n4. Select <strong>Install this deployment as an application<\/strong>&nbsp;and click <strong>Next<\/strong>.<br \/>\n5. Select the target server, <strong>EBSAsserter\\_server<\/strong>. Click <strong>Next<\/strong>.<br \/>\n6. Accept the default values and click <strong>Finish<\/strong>.<br \/>\n7. Click <strong>Activate Changes<\/strong>.<\/p>\n<p><strong>8. Update EBS profiles<\/strong><\/p>\n<p>Update the following EBS profiles:<\/p>\n<p>&#8211; <strong>Application Authenticate Agent<\/strong>: <em>https:\/\/ebsasserter.example.com:7002\/ebs<\/em><br \/>\n&#8211; <strong>Oracle Applications Session Cookie Domain (ICX_SESSION_COOKIE_DOMAIN)<\/strong>**: <em>DOMAIN<\/em><br \/>\n&#8211; **Applications SSO Type**: `SSWA_SSO`<br \/>\n&#8211; **FND_SEC_ALLOW_UNRESTRICTED_REDIRECT: <em>Yes<\/em><\/p>\n<p><strong>9. Restart and test<\/strong><\/p>\n<p>Restart the EBS services and test your SSO logins.<\/p>\n<p><strong>Conclusion<\/strong><\/p>\n<p>The preceding steps help implement SSO functionality for EBS by using Oracle IDCS and facilitate integration between active AD, EBS, and IDCS.<br \/>\n&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>EBS SSO integration with IDCS<\/p>\n","protected":false},"author":2,"featured_media":7214,"menu_order":0,"comment_status":"open","ping_status":"open","template":"","format":"standard","meta":{"content-type":"","nid":"26311","content_type":"blog","created_by":"10130","authored_on":"2023-11-29T14:55:31+00:00","field_article_industries":"","tag_category":"Technical","field_blog_author_text":"by Praveen Muthyala, Oracle Applications Database Administrator, Rackspace Technology","seo_description":"Integrate Oracle Identity Cloud Service (IDCS) with Oracle E-Business Suite (EBS) for enhanced Single Sign-On services.\r\n","field_featured_image":"","insights_image":"\/wp-content\/uploads\/2026\/blog_technical_images\/26311-insights_image-oracle-technical-blog-1-insights.jpg","field_partners":"","rxt_platforms":"Oracle, Oracle E-Business Suite","product":"","publisheddate":"2021-02-26T14:55:32","rxt_solutions":"Application Modernization, Databases, Application Security","opengraph_tag":"","x_tag":"","teaser_flag":"Technical Blog","seo_titile":"EBS SSO Integration with IDCS | Rackspace Technology","field_topics":"","field_slug":"ebs-sso-integration-with-idcs","footnotes":""},"categories":[178],"tags":[204],"class_list":["post-7212","blogs","type-blogs","status-publish","format-standard","has-post-thumbnail","hentry","category-blog","tag-technical"],"_links":{"self":[{"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/blogs\/7212","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/blogs"}],"about":[{"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/types\/blogs"}],"author":[{"embeddable":true,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/comments?post=7212"}],"version-history":[{"count":2,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/blogs\/7212\/revisions"}],"predecessor-version":[{"id":9157,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/blogs\/7212\/revisions\/9157"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/media\/7214"}],"wp:attachment":[{"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/media?parent=7212"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/categories?post=7212"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rackspace.com\/de\/wp-json\/wp\/v2\/tags?post=7212"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}