Technical data

Configuring Single Sign-On in an Enterprise Deployment Topology 3-1

Configuring Single Sign-On in an Enterprise

Deployment Topology

The following sections provide brief information and additional resources for

OracleAS Single Sign-On in an enterprise deployment topology:

■ About High Availability

■ About Security

■ Multiple Single Sign-On Middle Tiers with One Oracle Internet Directory

3.1 About High Availability

The availability of a system or any component in that system is defined by the

percentage of time that it works normally. A system works normally when it meets its

correctness and performance specifications.

You should become familiar with basic concepts of how high availability affects Oracle

Application Server security features such as Oracle Internet Directory and OracleAS

Single Sign-On.

For more information, see the Oracle Application Server 10g High Availability Guide.

3.2 About Security

Oracle Application Server provides a comprehensive security framework supporting

all its components, as well as third-party and custom applications deployed on the

application server. The framework is based on OracleAS Single Sign-On for

authentication, Oracle Internet Directory for authorization and centralized user

provisioning, Oracle HTTP Server for the Web server component, and the Oracle

Application Server Java Authentication and Authorization Service (JAAS) provider for

security in Java2 Enterprise Edition (J2EE) applications.

For complete information about security in Oracle Application Server, see the Oracle

Application Server 10g Security Guide. Updated information can always be found on the

Oracle Technology Network (OTN) at http://otn.oracle.com/.

Additionally, refer to the documentation for each component regarding security in that

component.