>Oracle Advanced Security is not necessary to do single sign on via AD/OID "via AD/OID" is probably the keyword here. What we did was OID'less OS Authentication using Oracle Kerberos sqlnet.authentication_method which is part of Advanced security I believe (?) --------------------------------------------------------------------------------- Please consider the environment before printing this e-mail Jared Still <jkstill@xxxxxxxx m> To Laimutis.Nedzinskas@xxxxxx 2009.05.06 20:52 cc r.tieland@xxxxxxxx, oracle-l@xxxxxxxxxxxxx, oracle-l-bounce@xxxxxxxxxxxxx Subject Re: Authentication with ActiveDirectory and SSO On Wed, May 6, 2009 at 3:16 AM, Laimutis Nedzinskas < Laimutis.Nedzinskas@xxxxxx> wrote: The you need to buy Oracle Advanced Security option (part of sqlnet) Next thing to do is to configure Oracle+Kerberos+AD. Oracle has some metalink notes and white papers how to achieve this. Try those: Oracle Advanced Security is not necessary to do single sign on via AD/OID We are doing this with Oracle Applications via AD and OID synchronization, and Advanced Security is not required. That said, I'm not sure how to set it up for signon under forms, but I suspect it wouldn't be too difficult. Contrast that to setting up SSO in Oracle Apps, which is ridiculously complex. Jared Still Certifiable Oracle DBA and Part Time Perl Evangelist -- //www.freelists.org/webpage/oracle-l