Oracle Enterprise Single Sign-on Suite Plus 11gR1 (11.1.1.

5) Certification Matrix
This document covers the Oracle Enterprise Single Sign-on Suite Plus product which consists of the following components: ESSO Logon Manager (LM), ESSO Authentication Manager (AM), ESSO Kiosk Manager
(KM), ESSO Universal Authentication Manager (UAM), ESSO Provisioning Gateway (PG), ESSO Password Reset (PR), ESSO Anywhere, ESSO Reporting.

MENU
Current System (Server and Client) Certification Click
Web Servers Certification Click
Strong Authentication Support Click
LDAP Certification Click
HLLAPI Emulator Support Click
Document Control Click

Page 1 of 8
 Oracle Enterprise Single Sign-on Suite Plus 11gR1 (11.1.1.5) Certification Matrix Last updated: September 14, 2011
This document covers the Oracle Enterprise Single Sign-on Suite Plus product which consists of the following components: ESSO Logon Manager (LM), ESSO Authentication Manager (AM), ESSO Kiosk Manager (KM), ESSO Universal
Authentication Manager (UAM), ESSO Provisioning Gateway (PG), ESSO Password Reset (PR), ESSO Anywhere, ESSO Reporting.

Server Certification
Installation Type Version Supported Processor OS Version OS Oracle FM JDK Vendor JDK Oracle Exceptions and Additional Information
Type 32/64 bit 32/64 bit Version* 32/64 bit Database*
PR, PG, Reporting 11gR1 (11.1.1.5) x86 Windows 2003 with SP2/R2+ 32 32 n/a n/a n/a n/a

PR, PG, Reporting 11gR1 (11.1.1.5) x86 Windows Server 2008 with SP1+ 32 32 n/a n/a n/a n/a
PR, PG, Reporting 11gR1 (11.1.1.5) x64 Windows 2003 with SP2/R2+ 64 32 n/a n/a n/a n/a
PR, PG, Reporting 11gR1 (11.1.1.5) x64 Windows Server 2008 with SP1+ 64 32 n/a n/a n/a n/a
PR, PG, Reporting 11gR1 (11.1.1.5) x64 Windows Server 2008 R2 64 32 n/a n/a n/a n/a

Client Certification
Installation Type Version Supported Browsers / Integration Version OS Version Exceptions and Additional Information
Supported
LM 11gR1 Internet Explorer 7.x n/a 1. ESSO LM specifically supports Firefox 3.5 & 3.6 for application logon functionality.
PR (Admin & Reset Client) (11.1.1.5) Internet Explorer 8.x 2. Browser support is no longer based on Operating Systems but strictly tied to the
Reporting Firefox 3.5+ browser themselves, no matter which Operating Systems they are installed on.
PG (Admin)

ALL 11gR1 n/a Windows XP Professional with SP3+ (32 bit) n/a
(11.1.1.5)
LM, PG, PR, Anywhere 11gR1 n/a Windows 7 (32 bit) n/a
(11.1.1.5)
LM, PG, PR, Anywhere 11gR1 n/a Windows 7 (64 bit) n/a
(11.1.1.5)
LM, PG, PR, Anywhere 11gR1 n/a Windows Server 2008 with SP1+ (32 bit) n/a
(11.1.1.5)
LM, PG, PR, Anywhere 11gR1 n/a Windows Server 2008 R2 n/a
(11.1.1.5)
LM, AM, PG, PR, Anywhere 11gR1 n/a Windows 2003 with SP2/R2+ (32 bit) n/a
(11.1.1.5)
LM, AM, PG, PR, Anywhere 11gR1 n/a Windows 2003 with SP2/R2+ (64 bit) n/a
(11.1.1.5)

Page 2 of 8
 Oracle Enterprise Single Sign-on Suite Plus 11gR1 (11.1.1.5) Certification Matrix Last updated: April 11, 2011

Installation Type Version Supported Web Server Exceptions and Additional Information
Version
PG, PR, Reporting 11gR1 (11.1.1.5) Microsoft Internet Information Server (IIS) 6.0+ The only components that utilize Web Services are PG,
Microsoft Internet Information Server (IIS) 7.0+ PR, and Reporting.

Page 3 of 8
 Oracle Enterprise Single Sign-on 11gR1 (11.1.1.5) Certification Matrix
Last updated: April 11, 2011
Strong Authentication Support

Proximity Card Support

*ESSO UAM and AM support are card supported by the readers lists below and have been validated with the following technology.
Card Family/Type Reader
HID 1336 DuoProx II Prox 125 KHz Omnikey Cardman 5125/5325
HID 1346 ProxKey II-Key fob token Prox 125 KHz Omnikey Cardman 5125/5325
HID ProxCard II Prox 125 KHz Omnikey Cardman 5125/5325
HID 2080 ICLASS Clamshell RFID 13.56 MHz Omnikey Cardman 5121/5321
HID 1430 MIFARE ISO RFID 13.56 MHz Omnikey Cardman 5121/5321
HID 1450 DESFire ISO RFID 13.56 MHz Omnikey Cardman 5121/5321
HID C700 RFID 13.56 MHz Omnikey Cardman 5121/5321
HID iCLASS Px E6L RFID 13.56 MHz Omnikey Cardman 5121/5321
Indala FlexCard Prox 125 KHz RFIDeas pcProx USB RDR-6382AKU
Indala FlexPass Prox 125 KHz RFIDeas pcProx USB RDR-6382AKU
iCLASS and MIFARE contactless RFID 13.56 MHz RFIDeas AIR ID RDR-7582AKU
HID C700 RFID 13.56 MHz RFIDeas AIR ID RDR-7582AKU
EM Wristband Prox 125 KHz RFIDeas pcProx USB RDR-6E82AKU

Page 4 of 8
 Oracle Enterprise Single Sign-on 11gR1 (11.1.1.5) Certification Matrix
Last updated: April 11, 2011
Strong Authentication Support
Smart Card Support
*ESSO UAM and AM support PKCS11 and .Net standards and validates them against the cards and Middleware in the matrix below.

Card Family/Type Middleware

RSA smart card 5200 PKCS11 RSA Authentication Client 2.0
NetMaker Net iD - CardOS 1 PKCS11 NetMaker Net iD 4.6
ORGA JCOP21 v2.2 PKCS11 SafeSign/RaakSign Standard 3.0.23
Oberthur ID-ONE Cosmo PKCS11 SafeSign/RaakSign Standard 3.0.23
Athena IDProtect PKCS11 SafeSign/RaakSign Standard 3.0.23
Athena ASECard Crypto PKCS11 Athena ASECard Crypto 4.33
HID Crescendo 700 PKCS11 HID RaakSign Standard 2.3
IBM JCOP21id PKCS11 SafeSign Identity Client 2.2.0
DigiSign JCOP with MyEID Applet PKCS11 Fujitsu mPollux DigiSign Client 1.3.2-34 (1671)
Gemalto Cyberflex 64K (v2c) SPE Required / SPE Optional PKCS11 Gemalto Access Client 5.5
Xiring CCID Driver version 1.00.0002 or later / XI-
SIGN reader

Gemalto PC-PinPad version 4.0.7.5 or later / PC

Pinpad reader

Oberthur ID-One Cosmo 64 v5.2D Fast ATR with PIV application SDK PKCS11 ActivIdentity ActivClient 6.1

Cyberflex 64K PKCS11 Gemalto Access Client 5.5

Sagem YpsID S1 and S2 - no mini driver support PKCS11 Sagem YpsID 3.2.1
HID Crescendo 200 MS Base CSP/MiniDriver HID Global MiniDriver for MS Base smart card CSP

Gemalto .NET v2+ MS Base CSP/MiniDriver Gemalto MiniDriver for Microsoft Windows XP
Oberthur ID-ONE Cosmo MS Base CSP/MiniDriver Oberthur ID-ONE MiniDriver for MS Base smart card
CSP

Athena ASECard Crypto ILM MS Base CSP/MiniDriver Athena ASECard Crypto ILM MiniDriver for MS Base
smart card

Gemalto .NET v2 or v2+ .NET Gemalto .NET smart cards PKCS#11 library 2.1.3

Fingerprint Biometric Support (through 3rd Party)

For a list of supported biometric readers please visit http://www.bio-key.com/fingerprintbiometrics/Current/Reader%20Infomation.pdf

Page 5 of 8
 Oracle Enterprise Single Sign-on Suite Plus 11gR1 (11.1.1.5) Certification Matrix
Last updated: April 11, 2011
LDAP Certifications

LDAP Storage Support

Installation Type / Component LDAP Type of Use Exceptions and Additional Information
LM, KM, PG, PR Oracle Directory Server Enterprise Edition 11gR1 Data Store n/a
(11.1.1.3+)

LM, KM, PG, PR Oracle Internet Directory 11gR1 (11.1.1.4+) Data Store n/a
LM, KM, PG, PR Oracle Virtual Directory 11gR1 (11.1.1.4+) Data Store n/a
LM, KM, UAM, PG, PR Microsoft Active Directory 2008 Data Store n/a
LM, KM, UAM, PG, PR Microsoft Active Directory 2008 R2 Data Store n/a
LM, KM, UAM, PG, PR Microsoft Active Directory 2003 SP1 Data Store n/a
LM, KM, UAM, PG, PR Microsoft Active Directory Application Mode 2003 SP1 Data Store n/a

LM, KM, UAM, PG, PR Microsoft Directory Lightweight Directory Services 2008 Data Store n/a

LM, KM, PG IBM Tivoli Directory Server 5.2 Data Store n/a
LM, PG Novell eDirectory 8.8 SP1 Data Store n/a
LM Open LDAP Directory Server 2.4.x, 2.2, 2.0.27 Data Store n/a

Database Storage Support

LM, PG, PR, Reporting Oracle Database 11.2.0.2+ Data Store n/a
LM, PG, PR, Reporting Oracle Database 11.1.0.7+ Data Store n/a
LM, PG, PR Oracle Database 10.2.0.5+ Data Store n/a
LM, PG, PR, Reporting Microsoft SQL Server 2008 R2 Data Store n/a
LM, PG, PR, Reporting Microsoft SQL Server 2008 Data Store n/a
LM, PG, PR, Reporting Microsoft SQL Server 2005 Data Store n/a

Page 6 of 8
 Oracle Enterprise Single Sign-on Suite Plus 11gR1 (11.1.1.5) Certification Matrix
Last updated: April 11, 2011
Emulator support for Logon Manager
** ESSO Suite Plus LM support HLLAPI emulators and is validated with the list below.

BOSaNOVA TCP/IP Versions Supported

Attachmate/WRQ Reflection 15.0, 14.0
BOSaNOVA TCP/IP 6.0, 5.0
Ericom PowerTerm Interconnect 9.1.0, 8.2.0
G&R Glink 6
IBM WebSphere Host On-Demand 10.0.03, 9.0, 8.0, 4.0
IBM Personal Communications 5.8, 5.6, 5.5, 4.3
Jolly Giant QWS3270 PLUS 4.4 SP5, 4.3 SP10
NetManage NS/ElitePlus for Mainframe 3.12
NetManage Rumba 7.5, 7.1, 6.0
Newhart Systems BLUES 2000 6.0.0.35
PuTTY 0.6
ScanPak (Eicon) Aviva 9.1, 9.0, 8.1
Seagull BlueZone 4.0, 3.4
Zephyr PASSPORT PC TO HOST 2005
Zephyr PASSPORT WEB TO HOST 2005

Page 7 of 8
 Oracle Enterprise Single Sign-on Suite Plus 11gR1 (11.1.1.5) Certification Matrix
Document Properties
Author Matt Berzinski
Create Date 4/11/2011
Last Update Date 9/14/2011

Change Record
Date Author Change Reference
9/14/2011 Matthew Berzinski Current System Certification worksheet:
Geetika Mohindra . Added browser support for PG (Admin).
. Updated PR to PR (Admin and Reset Client).
HLLAPI Emulator Support worksheet:
. Removed versions that had been de-supported by the vendor.

4/11/2011 Matthew Berzinski Published Oracle Enterprise Single Sign-on Suite Plus 11gR1 (11.1.1.5) Certification Matrix.

Page 8 of 8