User unable to login in SSO

OID to FND Sync Issue

If the user is successfully created in OID (Oracle Internet Directory) and is not getting updated in FND(E-business suite) ...

It may be one of the following:

1. Check if the user is not end dated in E-Business suite.

2. Make sure the user information is correct in OID

3. Identify the issue with the link between OID and FND

  A.  On the SSO middle tier, run the ldap command to identify the users GUID:

ldapsearch -v -h -p -D "cn=" -w "" -b "DC" -s sub "uid= *"  uid  orclguid orclactivestartdate orclactiveenddate orclisenabled

You will get the ORCL GUID

B. Get onto the Middle tier of Oracle E-business suite as applmgr(OWNER)

sqlplus apps/

SELECT USER_GUID FROM FND_USER WHERE USER_NAME = '';

C. Compare the GUID from step A and B, if they are different then run the link script below which resets the GUID of the user in FND to NULL

sqlplus apps/

@$FND_TOP/patch/115/sql/fndssouu.sql

PL/SQL procedure successfully completed.


Commit complete.


D. Make sure that the following profile option (in E-Business Suite) is set to Enabled:  Application_SSO_AUTO_LINK_USER

E. Ask the user to relogin and this time the same GUID will be populated.