higher express banner-apex integration framework
TRANSCRIPT
Higher Express Banner-APEX Integration Framework
What is Oracle Application Express?
• “Oracle Application Express (Oracle APEX) is a rapid web application development tool for the Oracle database. Using only a web browser and limited programming experience, you can develop and deploy professional applications that are both fast and secure. Oracle APEX is a fully supported, no cost option of the Oracle database.”
http://www.oracle.com/technology/products/database/application_express/index.html
Higher Express 2010, 2011
2
Application Express and Banner
• You can create applications in a fraction of the time
– that have the full functionality of Banner Oracle Forms
– that are more dynamic and useful than the Self-Service Banner web applications
• Your end users will notice the difference
Higher Express 2010, 2011
3
Application Express and Banner
• Ease of Development
– Uses PL/SQL and SQL – nothing new to learn– Powerful wizards and features– No web programming experience needed– No Java experience needed
• APEX will allow your IT Shop to extend Banner while at the same time keeping Banner vanilla.
Higher Express 2010, 2011
4
Application Express and Horizon SunGard is implementing Project Horizon migrating
all Oracle forms to Grails (Java platform)– SunGard will be incorporating JQuery libraries
• APEX 4.0, the latest release, incorporates JQuery as Plug-In components. SunGard libraries can be incorporated within APEX.
– Future API calls will be referenced via Web Services• APEX has a built in Web Service Component. APEX 4.0 also
incorporates REST Web Services as a standard declarative component.
APEX will continue to remain an excellent option to extend the base functionality of Banner as SunGard migrates to Horizon.
Higher Express 2010, 2011
5
Securing & Administering APEX Applications
• Your institution will need to create authorization security procedures for your APEX applications
• Why not use Banner security?– This is already a proven security methodology– Your institution has already invested time and
resources along with ongoing yearly maintenance– Leverage Banner security along with APEX security– APEX applications will coexist within the Banner
Security framework• One single source of security administration and reporting
• Can be managed by your existing security Administrators
Higher Express 2010, 2011
6
Higher Express Banner-APEX Security Framework
• Integrates Banner and APEX security– Applications will automatically be secured
• Allows you to focus on application development• Flexible
– Can extend with your custom business rules– Add your own layout and style
• No modifications to Banner baseline code• Consists of two modules:
– Self-Service Banner (SSB) Security Module– GSASECR Security Module
Higher Express 2010, 2011
7
Self-Service Banner (SSB) Security Module
• Secure - closes all potential security holes– Cannot be hacked either from within or from without a
valid SSB session– Algorithmic process securely opens the door to allow
authenticated access than closes the door– All authentication parameters are encrypted– Continuously validates the SSB Banner session– Your existing Web Tailor security settings will
automatically be used– Nothing is hard coded, no extraneous grants required
Higher Express 2010, 2011
8
SSB Security Module cont’d
• Centralized Administration– APEX applications are defined within Web Tailor
Administration– Can be administered by your Web Tailor Administrator– Your institutions existing Web Tailor security settings
will automatically be detected and used– SSB APEX applications can be authenticated with
Luminis just as any other SunGard SSB application
Higher Express 2010, 2011
9
GSASECR Security Module
• Uses GSASECR Banner Security Framework– APEX applications will have the same security as INB
Banner forms and Job Submission processes– APEX applications are defined within the GSASECR
Banner Security form exactly as any other Banner form or process
– Allows use of BAN_DEFAULT_M & BAN_DEFAULT_Q to further secure your applications
– These APEX applications can be administered by your DBA/GSASECR Security Administrator.
Higher Express 2010, 2011
10
GSASECR Security Module cont’d
• Users can log into their APEX applications via a single sign on menu– The menu will consist of only their specific
applications– Using the menu users will be able to access their
APEX applications without having to re-authenticate– APEX applications can authenticate against Active
Directory, Oracle, LDAP or other custom authentication scheme
• No need for LDAP/single sign on functionality.
Higher Express 2010, 2011
11
GSASECR Security Module cont’d
• Two Factor Authentication (Optional)– Applications can only be accessed from the Main
Menu, can not be accessed directly– Main Menu must first be accessed via SSB or
Luminis• Upon successful authentication via SSB/Luminis,
user must log into the Main Menu via the authentication scheme of your choosing
• This option will ensure that your applications can not be accessed out side of Luminis/SSB.
Higher Express 2010, 2011
12
