This is possible with some Session Sharing attributes in relevant the Authentication Scheme, a feature agnostic to the Scheme Type.
This ultimately means you can set up two different applications that use two different methods of authentication, thereby letting in two different sets of users in the 'same' application - you just need to make some UX decisions.
APEX 18.x introduced a 'Type' option, and renamed the section from a less descriptive 'Session Cookie Attributes'.
Session Sharing Attributes |
I thought this was offering something a little bit extra, but it appears to just make the process a little simpler for the likely majority.
We can still segment our applications, where users of applications with the same cookie name / colour may have links that jump seemlessly between applications, such as Earth and Mars.
Application sharing examples |
This is possible only if you use the declarative 'link to different application' target, or include the session ID when you build the URL
f?p=EARTH:HOME:&SESSION.::
If the user tried to jump to Jupiter, then they will be prompted for login details. Ceres and Vesta stand alone with the default option, sharing authentication with no other apps, not even between themselves (unlike a certain spacecraft).
Upon returning to the authentication scheme for Earth, I noticed the Type actually changed back to Custom, and I saw an (undocumented) substitution string WORKSPACE_COOKIE used.
This saves us from having to nominate the cookie name, and store the literal ourselves, perhaps as a custom application substitution string. It just presumes that all apps in our workspace we nominate as such are to share authentication.
I thought I read some attempts on the forums to change the 'current' authentication scheme on the fly,
Thanks, perfect explanation :-)
ReplyDeletecan we share sessions between the applications in two different workspaces?
ReplyDeletethanks
Out of the box, no. I think you need to go full SSO to make that happen
ReplyDeletehttps://community.oracle.com/message/13382771#13382771
Though I thought I saw some other potential proof-of-concept on the forum recently.