backdoor link with SSO authentication scheme?!
Hello!
I think is can be an important security issue
I just activated SSO for my HTMLDB application. I used the authentication scheme from gallery:Oracle Application Server Single Sign-On (HTML DB as Partner Application) (changed only logout URL, but this is not relevant) and I followed the steps from
http://www.oracle.com/technology/products/database/htmldb/howtos/sso_partner_app.html
Everything was working fine with SSO login, but...
Users noticed me hey have strange results using their old bookmarks to former login page (htmldb built-in authentication).
Where can I be wrong? It looks for me like a big security bug.
Id like to know if there is a registered bug or a support note for this.
Please help!
Message was edited by:
jkestely