Oracle APEX and Shibboleth

[Peter Schober]

* Murthy Nunna <mnunna at fnal.gov> [2016-08-05 22:48]:
> Would like to know if any of you successfully implemented Shibboleth
> authentication for Oracle APEX?

Maybe this will help:
http://www.oracle.com/technetwork/developer-tools/apex/learnmore/apex-oam-integration-1375333.pdf

"Oracle Application Express utilizes authentication schemes to
validate user credentials. Pre- configured schemes are provided for
Oracle Application Server Single Sign-On, Lightweight Directory Access
Protocol (LDAP) Directory, HTTP Header Variable, Database credentials,
and others including custom authentication." (p.3)

Seems you'd need chose a deployment for APEX that involves their
Apache httpd ("Oracle HTTP Server") and get the Shib SP working with
that same web server, the one that also runs Oracle's mod_plsql. The
specific steps required depend on your OS and deployment:
https://wiki.shibboleth.net/confluence/display/SHIB2/Installation

>From Oracle's documentation referenced above it seems you should be
able to replace use of Oracle Access Manager and "WebGate" with just
the Shib SP, by populating the configured (p.13) HTTP Request Headers
from the Shib SP.
The rest of that documentation will apply just the same (i.e., the
other steps of configuring APEX etc are also necessary).
-peter