Saturday 22 April 2017

Instructions to restrict single session per user in 11i and R12

If we want to implement  “Single Session per User” restriction that one user credential cannot be used simultaneously. In Oracle E-Business Suite release 11i, a patch is required (#3861070). This patch installed the oracle.apps.icx.security.session.created event and the event subscription to enable a single login per user. If a  user logs in to the application and a previous, valid session is still active, the previous session(s) are immediately invalidated by the event. 

Please note that, for evident reasons, the event will not fire for the following users:

Sysadmin,Guest,Anonymous

Please make sure that, the classpath environment variable is correctly set and the location of the java executable is included in the PATH environment variable.

In Release 11i:

        Load the event with the command: 
        java oracle.apps.fnd.wf.WFXLoad -u < apps_un > < apps_pw > < apps_dbserver.+fqdn > :< db_port >:< SID >  thin US \$ICX_TOP/patch/115/xml/US/icxevte.wfx

        Load the event subscription: 
        java oracle.apps.fnd.wf.WFXLoad -u < apps_un > < apps_pw > < apps_dbserver.+fqdn > :< db_port >:< SID > thin US \$ICX_TOP/patch/115/xml/US/icxevts.wfx

In Release 12:

In Oracle E-Business Suite release 12, there is no need to apply any patch as the files required are already present in the filesytem. The instructions are as follows:

        Load the event with the command:
        java oracle.apps.fnd.wf.WFXLoad -u < apps_un> < apps_pw> < apps_dbserver.+fqdn> :< db_port>:< SID> thin US \ $FND_TOP/patch/115/xml/US/icxevte.wfx


        Load the event subscription:  java oracle.apps.fnd.wf.WFXLoad -u < apps_un> < apps_pw> < apps_dbserver.+fqdn>
:< db_port>:< SID> thin US \ $FND_TOP/patch/115/xml/US/icxevts.wfx

We can enable/disable the business event through the System Administrator > Business Events screen (SYSADMIN user only) by searching for the word ’security’. It will pull up the oracle.apps.icx.security.session.created event. Click on the Update icon and enable/disable. You then need to close all browsers for the change to take affect. 

No comments:

Post a Comment