Search Results find_realm

Overview

FND_SSO_REGISTRATION is an Oracle E-Business Suite PL/SQL package body owned by the APPS schema that implements the integration layer between EBS and an external LDAP directory, historically Oracle Internet Directory (OiD). Its principal business function is to register and reconcile user identities and their associated "realm" definitions between the EBS database and the directory server, so that single sign-on, delegated authentication, and directory-based user provisioning function correctly. The package operates through DBMS_LDAP, opening directory sessions, searching entries, and reading attribute values to determine which realm governs a given user or site.

The metadata classifies the package under API classification OTHER, indicating that it is an internal infrastructure package rather than a published, supported extension API. The source header identifies the file as AFSCORGB.pls, reinforcing that this is part of the core Applications SSO registration code shipped with the EBS technology stack for the 12.1.1 and 12.2.2 releases.

Key Procedures and Functions

• FIND_REALM — Locates and returns the realm applicable to the current lookup context, the entry point most commonly associated with the search term "find_realm".
• FIND_REALM_INDEX — Returns the positional index of a realm within the package's internal realm collection, supporting the indexed access pattern used by the other realm routines.
• GET_REALM_DATA — Retrieves the complete record of attributes that define a realm, including its sequence, GUID, distinguished name, and load state.
• GET_REALM_ATTRIBUTE — Returns an individual attribute value belonging to a specified realm.
• GETGUIDREALM — Resolves a realm from its binary GUID identifier.
• GETDEFAULTREALM — Returns the default realm used when no more specific realm match is found.
• GETREALMSEARCHBASELIST — Produces the list of directory search base distinguished names against which realm discovery is performed.
• GETUSERREALMINDEX — Determines the realm index associated with a given user.
• IS_OPERATION_ALLOWED — Evaluates whether a specific directory operation (identity add, update, or delete; subscription add, update, or delete) is permitted for a realm in either the applications-to-directory or directory-to-applications direction.
• GET_USER_OR_SITE_PROFILE — Resolves a profile option value at the user level, falling back to the site level when no user-specific setting exists.

Tables Accessed

The package references FND_USER through APPS synonyms, principally to resolve the EBS user identity that must be correlated with a directory entry during realm lookup. DBMS_LDAP is referenced as the PL/SQL interface package providing session management, search, and attribute retrieval primitives; the body declares collection types such as DBMS_LDAP.string_collection and message handles to hold search results. PLITBLM is referenced for PL/SQL table and index-by table manipulation utilities used by the internal realm collection. No direct DML against application transaction tables is documented; FND_USER access is read-oriented identity resolution.

Usage Notes

FND_SSO_REGISTRATION is invoked by the SSO and OID registration subsystem rather than by end-user forms directly. It is referenced by two other packages, which call its realm resolution and operation-permission routines during user provisioning, directory synchronization, and authentication setup. Typical invocation scenarios include running the Oracle Internet Directory registration and synchronization concurrent programs, validating realm configuration during SSO enablement, and servicing custom provisioning code that must determine the governing realm for a user before performing directory operations. Because operation permissions are expressed as separate allow flags for identity and subscription changes in both directions, IS_OPERATION_ALLOWED is the appropriate guard routine for any code that intends to modify directory content on behalf of EBS.

Administrators and developers should treat this package as internal. Its behavior depends on valid profile option configuration through GET_USER_OR_SITE_PROFILE and on reachable directory base entries returned by GETREALMSEARCHBASELIST; when realm lookup fails, the default returned by GETDEFAULTREALM applies.