APEX

Hi,

I have an existing PHP based Web Application hosted on an Apache server. I want to protect these web pages by authenticating users via Oracle SSO.

I tested this by creating a simple APEX web page with redirect <Meta> tag to route traffic to my application upon successful SSO login. This works fine if request comes directly to APEX page....

So my question is how do I protect php pages from being directly accessed and still be able to get sso user login information (like username) coming from APEX page?

Do I still need to set up mod_sso.so in osso.conf for my Apache Server or should I just register my php web application as partner application with SSO server without going through APEX?

Any advice on this is greatly appreciate.

Thanks,
james