Home >Documents >Using Oracle Discoverer 10g with Oracle E-Business Suite

Using Oracle Discoverer 10g with Oracle E-Business Suite

Date post:10-Apr-2015
View:1,101 times
Download:9 times
Share this document with a friend

"This presentation is for informational purposes only and may not be incorporated into a contract or agreement"

Using Oracle Application Server 10g with Oracle E-Business SuiteMay, 2008

Nikos Plevris Principal Service Delivery Manager

Topics Supported Architectures Features and Benefits Technical Integration Overview Integration with Third Party Access Managers & LDAP Directories

Customer Snapshots Roadmap References HANDS ON

Desupport Notices(Or, Why You Should Plan for OracleAS 10g Now)

Discoverer 4i Login Server 3.0.9 Portal 3.0.9 Oracle Internet Directory 3.0.1

October 2006 July 2007

BUT: Sun may desupport JDK 1.3 -- the required prerequisite for 3.0.9 -- in ~ Fall 2006!

Now Generally Available! E-Business Suite 11i integrations with Oracle Application Server 10g and are now certified and Generally Available

Simple Physical ArchitectureDMZ Firewall

OracleAS 10g ServerPortal Single Sign-On Oracle Internet Directory Directory Integration & Provisioning Delegated Administration Services Discoverer OracleAS Certificate Authority OracleAS 10g Metadata Repository

Intranet Firewall

External Users

Internal Users



E-Business Suite 11i Application Server Oracle9i Application Server Oracle HTTP Server Forms Server Reports Server

Release 11i Database

11i Integration with OracleAS 10g Release 11i instance runs Oracle9i Application Server 11i is integrated with a stand-alone Oracle Application Server 10g instance The existing Release 11i application-tier server nodes continue to run on Oracle9i Application Server

Distributed ArchitectureInternal Users

External Users Single Sign-On 10g Internal 9iAS 1.0.2 Server

Oracle Internet Directory Server 10g

OracleAS 10g Infrastructure Database


Reverse Proxy External 9iAS 1.0.2 Server

Release 11i Database

Portal 10g Discoverer 10g




Distributed Architecture BenefitsOracle Oracle Portal Portal

Enterprise Portal Server

May be scaled & managed by separate organization responsible for corporate communications

Oracle Single Oracle Single Sign-On Sign-On Server Server

Oracle Oracle Internet Internet Directory Directory

Enterprise Security Servers

May be scaled & managed by separate organization responsible for corporate security and identity management

Enterprise Application Servers9iAS 9iAS Applications Applications 11i 11i Database Database

May be scaled & managed by separate organization responsible for enterprise applications such as Oracle E-Business Suite Release 11i

OracleAS 10g Integration Benefits1. 2. 3. 4. Enable Single Sign-On for 11i Manage users in Oracle Internet Directory Access 11i via custom Portals Integrate 11i with third-party PKI, SSO & LDAP directories, and legacy applications 5. Analyse 11i with Discoverer workbooks 6. Accelerate 11i performance with WebCache

Enable Single Sign-On for 11i


Single Sign-On 10g

E-Business Suite 11i Application Server

E-Business Suite is a Single Sign-On partner application Log on to Oracle Single Sign-On to get access to all registered partner applications, including 11i Log off any one partner application to log off all of them

Manage Users in Oracle Internet Directory

Oracle Internet Directory 10g

DIP Platform Platform

E-Business Suite 11i FND_USER

Synchronise user credentials bidirectionally between Oracle Internet Directory and Release 11i (FND_USER) Set master source of truth as OID, Release 11i, or both Manage user provisioning via powerful OID Directory Integration & Provisioning Platform templates Link an OID userid with one or more 11i userids on-the-fly

Access 11i via custom Portals

Oracle Portal 10g

E-Business Suite 11i

Access one or more E-Business Suite 11i instances from a single Oracle Portal instance Add 11i portlets to custom Portal pages Display data in 11i portlets based on 11i responsibilities

Release 11i Portlets Applications NavigatorAccess Applications menus based on user responsibilities

Applications FavoritesBookmark specific Applications links for quick access

Applications WorklistSummary of current workflow notifications

Oracle Balanced ScorecardDisplay status of strategic and tactical business objectives

Performance Management ViewerDisplay business intelligence key performance indicators in graphical and tabular format

Applications Navigator PortletFlat Mode Tree Mode

Applications Favorites Portlet

Applications Worklist Portlet

Integrate 11i with3rd Party LDAP Oracle Internet Directory 10g Release 11i (FND_USER)

Third-party LDAP directories Prepackaged: Microsoft Active Directory, Sun ONE / iPlanet Others via LDIF, custom connectors

Third-party single sign-on solutions Microsoft Windows Native Authentication / Kerberos Oblix, Entrust, IBM, RSA, Netegrity, Sun, Thor, and others

PKI X.509v3 digital certificates

Integrate 11i withLegacy Application Oracle Integration Release 11i

Over 250 adapters for Enterprise Application Integration with third-party applications J2EE and open standards-based integration, including: E-Business Suite, third-party applications, database sources XML, JMS, JCA Web Services: SOAP, WSDL, UDDI B2B Protocols: RosettaNet, HIPAA, EDI

Analyse 11i with DiscovererUser

Discoverer 10g

E-Business Suite End-User Layer

Access APPS_MODE End-User Layer via Business Intelligence System Discoverer workbooks secured by Applications responsibilities Provide powerful end-user reporting via ad hoc queries Drill-down into data via tabular & graphical analytical tools Run Discoverer on separate cluster for enhanced scalability, wide deployment

Accelerate 11i Performance with WebCache


WebCache 10g

E-Business Suite 11i Application Server

Cache and compress frequently used items Reduce network consumption and accelerate response time Can act as a reverse-proxy server Can act as a load-balancer

Technical Integration Overview

Build Releases E-Business Suite Interoperability Patch for OracleAS 10g integration released in Builds Build 1: Build 2.0: Build 2.2: Build 3.0: Build 3.1: Build 3.2: Jan 2004 Mar 2004 Jul 2004 Jan 2005 Feb 2005 Jul 2005 Aug 2005 Sep 2005 Feb 2006 Mar 2006Released & Generall y Availabl e

Configuration Options with 11iA. Single Sign-On ServerMinimum requirement for single sign-on support. Release 11i and regions via OA Framework

B. Portal and Single Sign-On ServerOptional.

C. DiscovererOptional. SSO also optional for Discoverer standalone implementations.

OracleAS 10g + 11i Integration PointsSSO OID Single Sign-On partner application via SSO SDK 9.0.2 Provisioning integrated application via Directory Integration & Provisioning Platform Oracle Applications Framework Web Provider & portlets APPS_MODE End-User Layer in 11i database

Portal Discoverer

Logical ArchitectureOracleAS 10g

Enterprise PortalPortal Portal 10g 10g

Metadata RepositoryPortal Portal Repository Repository

Single Single Sign-On Sign-On 10g 10g

OID 10g OID 10g

OID User OID User Repository Repository

Profile Profile

Apps Web Apps Web Provider & Provider & Portlets Portlets Portal 3.0.9 Portal 3.0.9 (Reqd for (Reqd for JPDK 3.0.9) JPDK 3.0.9)

OracleAS 10g OracleAS 10g Interoperability Interoperability Patches Patches 9iAS 9iAS Applications Applications 11i 11i Database Database

Directory Directory Integration & Integration & Provisioning Provisioning Platform Platform

Application Tier

Database Tier

Single Sign-On IntegrationSingle Single Sign-On Sign-On 10g 10g OID 10g OID 10g OID User OID User Repository Repository

Chain of Trust

Delegates SSO to

Release 11i Release 11i 9iAS 9iAS

FND_USER FND_USER Applications Applications 11i Database 11i Database

Release 11i delegates user authentication to Single Sign-On Single Sign-On authenticates users against Oracle Internet Directory Authenticated users are redirected to Release 11i Release 11i validates the users authorization (I.e. 11i Responsibilities) against FND_USER

Oracle Internet Directory IntegrationOracle Internet Directory 10g DIP Platform Platform E-Business Suite 11i FND_USER

Oracle Internet Directory and FND_USER must be kept synchronised Supported synchronisation directions: From OID to FND_USER (Asynchronous via the Directory Integration & Provisioning Platform) From FND_USER to OID (Synchronous via ldap calls) Bidirectionally

Synchronisation events are raised via the Workflow-based Business Event System whenever users are added or modified

Oracle Internet Directory Accounts linked with Release 11i AccountsOracle Internet Directory Userid = Userid = John.Smith John.Smith Release 11i (FND_USER)

Link AccountGlobal Unique Identifier (GUID)

Userid = Userid = jsmith jsmith

One-time User Registration Done at setup time by system administrator Optional: can be done by end-user on first logon (Link on the fly) Useful for situations where existing accounts in Oracle Internet Directory 10g or a third-party LDAP directory differ from existing accounts in Release 11i.

Associate OID Accounts with Multiple 11i AccountsOracle Internet Directory Userid = Userid = John.Smith John.Smith Release 11i (FND_USER)

Link Account

Userid = Userid = jsmith jsmith Userid = Userid = testuser1 testuser1 Userid = Userid = testuser2 testuser2

Portal Integration

Portal 10g

11i Portlet

OAF Web Provider

JPDK 3.0.9

11i App Server

OracleAS 10g


Single Sign-On is a prerequisite for Portal Oracle Applications Framework Web Provider is registered in Portal 10g 11i portlets are added to custom Portal pages 11i Portlets communicate with 11i 9iAS server: Oracle Applications Framework Web Provider JPDK 3.0.9

11i portlet users must have a valid 11i responsibility, validated via ICX_SESSION

Discoverer IntegrationUser

Discoverer 10g

E-Business Suite End-User Layer

Discoverer 10g End-User Layer resides in 11i database APPS_MODE option enforces Applications security for all Discoverer users Easy migration from Discoverer 4i Installation upgrades a copy of 4i End-User Layer to 10g Run 4i and 10g side-by-side for User Acceptance Tests TIP: Run Discoverer 4i and 10g on different physical servers to avoid Visibroker conflicts

Full Discoverer 10g Support for Single Sign-On Earlier versions of Discoverer 10g did not support Single Sign-On & Oracle Internet Directory integration for EBusiness Suite users Full SSO/OID support is now available No more dual-maintenance of E-Business Suite user passwords in both FND_USER and OID for standalone Discoverer connections See Metalink Note 313418.1 for details

Accelerate 11i Performance with WebCacheUser WebCache 10g E-Business Suite 11i Application Server

Frequently used items (e.g. images, static text) are cached, compressed, and served by WebCache Secured data (I.e. requiring authorization) is not cached Partial page refresh supported for Portal Can act as a reverse-proxy server Can act as a load-balancer

11i Integration with Third-Party Access Management & LDAP Directories

If you already have an Enterprise Single Sign-On Oracle products integrate with Oracle SSO Server directly, so it must be installed. Oracle SSO server can integrate with external authentication systems. Windows Native Authentication via Kerberos Entrust, IBM, RSA, Netegrity, Oblix, Sun, Thor, and others PKI X.509v3 Digital Certificates Other SSO systems via custom adapter

Third-Party Integration Logical ArchitectureEnd UserLogs on to Third-Party Third-Party Access Access Manager Manager Delegates SSO to Single Single Sign-On Sign-On 10g 10g Directory Directory Integration Integration Platform 10g Platform 10g Authenticates user against Third-Party Third-Party LDAP LDAPProfile Profile

Portal 10g Portal 10g

OID 10g OID 10g

OID User OID User Repository Repository

Delegates SSO to

Release 11i Release 11i 9iAS 9iAS

FND_USER FND_USER Applications Applications 11i Database 11i Database

Profile Profile

If you already have an Enterprise User Directory Oracle products integrate with OID directly, so it must be installed and populated OID must be synchronized with external directories via Directory Integration & Provisioning Platform: Microsoft Active Directory Sun ONE / iPlanet Prepackaged OID Connectors Any LDAP directory via LDIF files Any other directory via custom DIP agent

OID must synchronize user info with Release 11i (FND_USER)

Planned for OracleAS 10.1.4 Identity Management:Novell eDirectory, OpenLDAP

"This presentation is for informational purposes only and may not be incorporated into a contract or agreement"

Deployed in Production Alcoa (Europe) Applied Materials (Israel) Atento (Norway) Bunnings (Australia) CapGemini / Councils Online (Australia) Central Bank of Nigeria Cisco Systems Cox Communications (USA)

Guandong Unicom (China) Inter-Arab Investment Guarantee (Kuwait) International Enterprises (Singapore) International Institute for Applied Systems Analysis (Austria) Ireland Dept of Defence Kansas State University Mitac (Taiwan) Phoenix Technologies Putrajaya (Malaysia) Rafael Armament Development Authority (Israel) Telecom Italia Mobile (Italy) Universal Weather & Aviation (USA) Wind River Systems (USA)

Fiera Milano (Italy) General Dynamics Land Sys General Electric (USA)

These are not customer references

O/S Platform UsageSolaris Linux HP-UX AIX NT Tru64 0 4 20 40 60 80 100 8 21 52 85 83


OracleAS 10g UsageX% : Percentage of active EAP ctsSSO

96% 75%129 148



Third-party LDAP

65%Discoverer 120

61%Third-party SSO 0 76

38% 50






Third-Party LDAP UsageX% : Percentage of customers using third-party LDAPMS Active Directory SunONE Novell IBM Tivoli Lotus Notes Other 0 3 3 20 40 60 6 6

89% 22%29


Total exceeds 100% due to multiple 80 100 120 140 directories in use at customer sites


Third-Party SSOX% : Percentage of cts using third-party SSOMS Kerberos Netegrity Other

51% 33%9 25


12%Oblix WebSeal Novell 0 7

9%3 9% 5





Total exceeds35 100% 40 to multiple due 45 25 30 SSO solutions in use at customer sites


Customer LessonsOrganisational & Staffing Tips Proactively manage organisational politics: Corporate Security vs. E-Business administrators Plan for complexity. Pad project plans with appropriate contingency Experience helps. Trainee sysadmins may struggle.

Customer Lessons (2)Organisational & Staffing Tips Demand skilled consultants from consulting firms (including Oracle Consulting) Read OracleAS 10g manuals, FAQs, get training Skills required include: E-Business Suite system administration (e.g. AutoConfig) OracleAS 10g installation & configuration Security (e.g. LDAP, PKI) Networking (e.g. firewall, load-balancing router configuration)

Customer Lessons (3)Systems Configuration Tips Check Oracle CERTIFY on Metalink for platform availability (e.g. AIX & Tru64 werent available on Frequent complete backups Stay current with certified OracleAS 10g releases & E-Business Suite technology stack patches Only apply OracleAS 10g MLRs (emergency patchsets) that have been certified with the EBusiness Suite

Customer Lessons (4)Systems Configuration Tips Deploy incrementally: Get SSO & OID working first Add Portal & Discoverer Add third-party LDAP & SSO integration

Test in production-like environment as early as possible with firewalls, load-balancers, SSL accelerators, etc. Load-balancers and firewalls = largest source of problems when moving from TEST to PRODUCTION

Customer Lessons (5)Working with Oracle Support Use the right Technical Assistance Request (TARs) template (see Note 233436.1) Monitor closely and escalate TARs as needed All TARs must go to E-Business Suite Technology Stack Support Specialists (AOL Support) Escalate as needed

Customer Lessons (5)Working with Oracle Support Upload prepared environment summary: Build and OracleAS 10g versions used, NLS languages Network topology: third-party LDAP & SSO, loadbalancers, firewalls, SSL accelerators

Provide detailed, reproducible testcase. Bad testcase: OID integration doesnt work. File enhancement requests

The more precisely the position is determined, the less precisely the momentum is known in this instant, and vice versa.~ Heisenberg, 1927

The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decision. The development, release, and timing of any features or functionality described for Oracles products remains at the sole discretion of Oracle.

Release 11i Certification Roadmap

Whats Coming Build 4.0 New systems administration features Second-generation diagnostic tools Automated RAC, SSL, DMZ Support

Portal 10.1.4 Certification These statements are subject to change

"This presentation is for informational purposes only and may not be incorporated into a contract or agreement"

Release 12 Technology Stack Plans(Subject to Change)

Applications Landscape

Leveraging Fusion MiddlewareAS 10g Discoverer AS 10g Identity Mgt

AS 10g WebCache E-Business Suite

AS 10g Portal

Collaboration Suite 10g PeopleSoft

AS 10g Integration

R11i10 Technology Stack R12 Technology Stack Client

3-Tier Logical ArchitectureApplication9iAS 9i or 10gO4 CJ



WbL te e e is n r

B4 CJ U IX Rp rts eo F rm o s

User Interface

Application logic

Database logic

R12 Application Server TierAS 10.1.3 ORACLE HOME RSF 10.1 Apache 1.3 OC4J Developer10.1.2 ORACLE HOME RSF 10.1 Forms 10 Reports 10 Database ORACLE HOME RSF 10.2

RDBMS Components



R12 Application Server Tier OracleAS 10g 10.1.2 for Forms & Reports Services Replaces the 8.0.6-based Oracle_Home provided by iAS in 11i

OracleAS 10g 10.1.3 for Oracle Containers for Java (OC4J) Replaces the 8.1.7-based Oracle_Home provided by iAS in 11i

Oracle JDeveloper 10.1.3 JDBC 10.2 JDK 5.0 for web & concurrent processing

R12 Preview: Deployment10.1.3 ORACLE_HOME opmn Apache OC4J-Forms OC4J-oacore OC4J-xmlsrv COMMON_TOP /html, /javaRuntime processes started from 10.1.3 Oracle Home OPMN, Apache OC4J instances Forms runtime executable, frmweb, spawned by OC4J-Forms out of 10.1.2 O_HOME. oacore and xmlsrv OC4J instances use classes, html, jsp files from COMMON_TOP

10.1.2 ORACLE_HOME formsapp.ear frmweb

Optional on External Servers for R12 OracleAS 10g Single Sign-On & Oracle Internet Directory 10.1.2.x Discoverer 10.1.2.x Portal 10.1.2.x WebCache 10.1.2.x Oracle Integration 10.1.2.x Collaboration Suite 10gR2 Enterprise Manager 10gR2

New E-Business Suite Technology Stack Blog Certification and desupport announcements Discussions about architectures, advanced configurations Early Adopter Programs and Statements of Direction Other E-Business Suite technology stack topics, presentations Supports RSS feedreaders

Cut through the noise -- get the news directly from Development

OracleAS + E-Business Suite Resources Frequently Asked Questions Installation Guide Implementation Guide Discoverer Installation Guide Documentation Roadmap Statement of Direction Note 186981.1 Note 233436.1 Note 261914.1 Note 313418.1 Note 207159.1 Note 223927.1


Introducing OracleAS Discoverer

Objectives After completing this session, you should be able to do the following: Identify the business intelligence (BI) components of OracleAS Identify the components of OracleAS and Oracle Discoverer Create a private connection to access a standard or applications mode End User Layer (EUL) Explain the role of Discoverer manager

Oracle Application Server: Overview

Oracles Business Intelligence Solutions OracleAS Discoverer OracleAS Personalization OracleAS Reports Services

OracleAS Discoverer OracleAS Discoverer includes: Discoverer Plus Discoverer Viewer Discoverer Portlet ProviderDiscoverer ServerEnd User Layer

OracleAS OC4J Plus Servlet Provider Servlet Viewer Servlet

Discoverer Plus Discoverer Provider

HTTP Server

Discoverer Viewer

Oracle Discoverer Administrator and Oracle Discoverer DesktopOracle Discoverer Desktop Oracle Discoverer Administrator

End User Layer


Oracle Discoverer ComponentsDiscoverer Plus Discoverer Viewer OracleAS Discoverer Services Discoverer Portlet Provider

Discoverer Administrator


Discoverer Desktop

Data Warehouse Versus Transactional Systems A data warehouse is an enterprisewide database that is: Multisubject oriented Integrated across subjects on an enterprise base Time variant Nonvolatile Historical Capable of handling unpredictable workloads

Data Warehouse Versus Transactional Systems An online transaction processing (OLTP) system: Is current Is volatile Has a predictable workload

Using Discoverer with a Data Warehouse or a Transactional Database Oracle Discoverer: Is a subject-oriented tool Provides standard EULs for use with data warehouses and applications-mode EULs Supports the functionality of Oracle database

Connecting to OracleAS Discoverer Plus

What Is a Discoverer Connection? A Discoverer connection consists of the following: Database username Database password Database name Oracle Application responsibility (optional) Language End User Layer name

Creating a Discoverer Connection: Standard EUL

Creating a Discoverer Connection: Applications EUL

Creating a Discoverer Connection: Selecting the End User Layer

Editing an Existing Private Connection

The End UserYou see this Discoverer does this Video Rentals SELECT XT.TEXT_TYPE , XT.XT_TU_SHORT_NAME Rental Order Detail SHORT_NAME NAME Rental Performance , , ' '||XT.IS_EXTENDED Region IS_EXTENDED States , ' '|| Quarter XT.IS_PUBLISHED IS_PUBLISHED Pct Inc FROM XT_CIUE_TEXT_USAGES XT RM_ELEMENT_TYPES ET Video Rentals 1999 , WHERE XT.ELEMENT_TYPE = ET.ID AND CI.IS_EXTENDED = 'Y' ORDER BY 1, 2

Where to Get Helpful Information Online Help Users Guide Wizards

Wizards Wizards guide you through the process of creating specific objects: Automate frequently performed tasks Enhance product knowledgeWhat layout style? What business area? Which folders? What calculations? What sorts?

Key TerminologyBusiness areas Video Store Tutorial

Folders Products Store



Product Type


Key Terminology Data types Rows Queries Worksheets Workbooks

The Discoverer Managers Responsibilities The Discoverer manager performs multiple functions, such as: Defining business areas Controlling user access Defining drill paths Defining summary tables

Identifying Your Requirements You should provide the Discoverer manager with the following information: Common queries Meaningful names for business areas and folders Possible drill paths Common filters Summary information needed

Click here to load reader

Reader Image
Embed Size (px)