If you configured
the SSO server earlier to use the optional Fallback authentication,
you can proceded with testing this option.
Fallback authentication
will allow a user without a certificate to authenticate against your
web applications using their Oracle AS user name and password instead
of a user certificate.
Before we
can test Fallback authentication it may be neccessary to remove any
user certificate issued by OCA from your browser. If you have a valid
certificate issued by OCA in your browser you will not be able to test
Fallback authentication until you remove it because when you try to
login, the SSO server will see that your browser has a valid certificate
and will use it to authenticate you and you will not be redirected
to the page which allows you to login using your user name and password.
Use the following
procedure if you need to remove a user certificate issued by OCA. This
procedure is specific to Mozilla and Netscape browsers.
From the "Edit" menu in your browser, select
"Preferences".
When the "Preferences" window pops up, select
"Privacy and Security" -> "Certificates".
Then click on the "Manage Certificates" button.
In the window that follows, click on the "Your
Certificates" tab. In the list of certificates, find the certificate
issued by OCA and delete it.
Once you have deleted any OCA user certificates you
will be ready to test Fallback authentication.
Testing
Fallback Authentication
In your browser, navigate to the following URL:
https://hostname.domain.com:4443/oiddas
Click on the "Login" link at the upper right
corner of the page.
Since your browser does not have a valid certificate
you should be directed to the SSO login page where you can enter your
user name and password.
After entering your user name and password you should
be immediately logged into the DAS application.