Skip to Main Content

APEX

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

APEX HTTP header authentication

Sam.KMar 9 2015 — edited Mar 10 2015

Hi All,

So long story short, We need to integrate one of our APEX application (hosted on our cloud) with some client's SAML/SSO. So users will click on some internal link on their portal which will somehow hit some Service Provider (we may go with PingFederate) and after all federation, assertion validation..etc . take place, the Service provider will "redirect" users to our APEX app. This last piece (the redirect to APEX) is where I have a question.

So I believe the service provider will need some APEX URL and redirect to it and submit some parameters (such as userID) in a POST fashion. For this,I  have done the following:

1- Added a new CGI variable in the DAD :

PlsqlCGIEnvironmentList PF_AUTH_SUBJECT

2- Changed APEX app's authentication scheme to HTTP Header Variable, and entered PF_AUTH_SUBJECT as the variable name.

In order to test this interaction, I created a simple HTML POST form as follows:

<html>

    <body>

       <form action="http://ditstweb111:7777/pls/apex_dev/f?p=999" method="post">

            <input type="hidden" name="PF_AUTH_SUBJECT" value="test_user"></input>

            <input type="submit" value="Post"></input>

       </form>

    </body>

</html>

However, when I click on submit, I get the error below! can someone help me create a correct form that stimulates the last part of this integration ( i.e. redirect to APEX app, and submit PF_AUTH_SUBJECT) value?? or in general, how can I we create a test case for HTTP Header Variable authentication method?!

Not Found

The requested URL /pls/apex_dev/f was not found.

Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Apr 7 2015
Added on Mar 9 2015
4 comments
2,884 views