We currently are using Lotus Domino for our web site and have the need to link our customers to some functionality within Oracle Applications (E-Business suite). Is it possible to use the single sign-on capability of Lotus Domino to connect to Oracle Apps (without having to re-sign in). I believe Oracle’s App Server uses LDAP and can use 3rd party directory services, but I don’t belive Lotus Domino is by default LDAP. Has anyone done something like this before?
Subject: Can Single Sign-On connect to Oracle Apps?
SSO is not implemented via or related to LDAP in any way. It is based on LTPA, which is an IBM proprietary authentication protocol supported only by Domino, Sametime, and Websphere. Now if Larry Ellsion wants to start supporting LTPA, you’ll be golden. (Since LTPA competes with M$'s Kerberos, and Larry is arguably the single most anti-M$ guy around, it’s not the most ridiculous idea.)
Subject: RE: Can Single Sign-On connect to Oracle Apps?
Bruce’s response is not quite accurate on several scores.
-
LTPA is related to LDAP in that LDAP is used as the authentication mechanism. It is true that you don’t need to have it specifically for LTPA to work, however, without it you would be stuck with authenticating people using the Domino common name. This is unlikely to be a known name in Oracle wouldn’t you say.
-
LTPA can be generated by Domino through the Notes CAPI. If Oracle can support C programming then it could certainly be possible.
Regards
Rolf Pfotenhauer
Subject: The LTPA mechanism can be used with out LDAP running at all. You can just use normal domino logins.
Subject: RE: Can Single Sign-On connect to Oracle Apps?
Thanks for correcting me on that; I was going on what I understood from what IBM has published on LTPA, including explicit statements that only Domino and Websphere support it. Your insight suggests that it is indeed possible.
Subject: RE: Can Single Sign-On connect to Oracle Apps?
Thank you for your responses. I, unfortunately, am not an expert in this area, but I think since LDAP is used as the authentication mechanism then we should be able to get this to work. Oracle Application Server can be used to authenticate a 3rd-party LDAP sign-in and “pass it through” to Oracle E-Business Suite. We would have to manually link the Domino common names to Oracle E-Business Suite sign-ins through the Oracle Application Server. Once that is done, then it should work. However, the proof is in the pudding and I think I have the right ingredients, but I don’t have the recipe. 
Subject: *Disregard