These steps can be followed to have an OAG EBS user log out of the EBS server and then use single logout on the OAG server to terminate the sessions. The user will then be redirected to the EBS local login page. This is for the OAG EBS rapid application.
- Okta Access Gateway (OAG)
- Oracle E-Business Suite (EBS)
- Single Logout (SLO)
- Secure Shell (ssh)
These steps can be followed to set up the logout flow for EBS and SLO on OAG to redirect to the EBS local login page.
EBS Setup
- Log in to the EBS Admin console.
- In the menu, select System Administrator > Profile > System, and a Java dashlet will be downloaded and launched.
- In the Profile box enter Application%.
. - Select Find, and the system profiles are now shown.
- Find Application SSO Post Logout URL and set this to (OAG EBS app public domain) https://OAG.PublicDomain.com/ssologout.do.
- Save the configuration (yellow floppy disk).
- Restart the required services needed for the changes to take effect.
Now the EBS server should redirect the user on logout to the OAG server.
OAG Setup
- Login to the OAG admin console.
- Edit the EBS application and expand the behaviors menu.
- Under Logout select the option Define a Custom Logout URL.
- Specify the ebs local login url for the Post Logout URL option.
- For example (https://ebs.locallogin.com/OA_HTML/AppsLocalLogin.jsp).
- For example (https://ebs.locallogin.com/OA_HTML/AppsLocalLogin.jsp).
- We need to trigger OAG to do the single logout when the EBS server redirects the client via the Application SSO Post Logout URL. This is done by a redirect statement in the policy.
- In the policy section of the EBS app, create a new protected policy.
- Enter the path as
/ssologout.do. - In the custom configuration, add the following statement (This must match the defined Logout path).
-
return 301 /spgwLogout;
-
- Save the OAG application. When the user logs out of ebs, they will be redirected to OAG, single logout will occur, sessions will be terminated, and the user will be directed to the local ebs login page.
