SSO Deep Linking

Oracle Learn Cloud supports defined URLs that provide a direct access to the Oracle Learn Cloud beyond the default home page. Users can click on a hyperlink in an email, portal or other environments outside the Oracle Learn Cloud application and navigate directly to a screen in the application.

The information presented in this topic refers to the self service Learn Single Sign-On (SSO) feature. If you have a custom SSO built by the Oracle Learn Cloud Services team, and you are looking for assistance, please refer to any documentation they have provided.

Using the deep linking feature, the system administrator can provide URLs to users that directly place the user on the Learn Center home page, directly onto a LearnCenter page, Enrollment, Assignment, Forum, Course Certificate, User Preferences, and the Communication Center as well as many other places in the application. Additionally deep linking can take the User or manager to the Course launch of a web based Course or Class.

If SSO is used, Users are directed precisely where the URL points to, without having to go through the User Sign On page. If SSO is not used, Users are first prompted to enter their credentials in the User Sign On page before being able to access the page defined by the URL.

To create a URL that directs Users to a specific action, specific parameters are required. For example, the following URL directs Users to a specific page:

https://abcCustomer.learn.taleo.net/learncenter.asp?id=178410&page=4

Deep linking is supported with end User and Supervisor information, as well as links within Communication Messages, Notices and Notifications. Deep linking to the Control Panel can be done if you are not using the Management password to control User access to the Control Panel. Oracle Learn Cloud does not officially support Deep Linking into the Control Panel at this time because the Management Password which controls User access into the Control Panel is not supported in the SAML standards. Deep Linking to the Control Panel will currently work if you are not using a Management password for Control Panel access, but be aware that if issues are encountered with an unsupported Control Panel Deep Link, Support will not be able to assist you.

Deep Linking with Learn SSO

Deep linking with Learn SSO is supported through the SAML relay state parameter. The IDP must implement and support SAML relay state for deep linking with the Learn SSO to function. Deep linking through the Learn SSO is supported for the end User and manager to the Course application as well as email notification that contain URL links for the end User and manager,

What is the SAML RelayState?

RelayState is a parameter of the SAML protocol that is used to identify the specific resource the User will access after they are signed in and directed to the relying party’s federation server.

Without the use of any parameters, a User would need to go to the IDP initiated sign on page, log in to the server, choose the relying party, and then be directed to the application. Using RelayState can automate this process by generating a single URL for the User to click and be logged in to the target application without any intervention. It should be noted that when using RelayState, any parameters outside of it will be dropped.

For example: <input type="hidden" name="RelayState" value="0043bfc1bc45110dae17004005b13a2b"/>

The Single Sign-On Service builds a SAML assertion representing the User's logon security context. Since a POST binding is going to be used, the assertion is digitally signed before it is placed within a SAML <Response> message. The <Response> message is then placed within an HTML FORM as a hidden form control named SAMLResponse. If the convention for identifying a specific application resource at the SP is supported at the IdP and SP, the resource URL at the SP can be encoded into the form using a hidden form control named RelayState. The Single Sign-On Service sends the HTML form back to the browser in the HTTP response. For ease-of-use purposes, the HTML FORM typically will contain script code that will automatically post the form to the destination site.

<form method="post" action="https://sp.example.com/SAML2/SSO/POST" ...> <input type="hidden" name="SAMLResponse" value="response" /> <input type="hidden" name="RelayState" value="token" /> ... <input type="submit" value="Submit" /> </form>

The information in the following tables is intended for use with the Learn SSO-based SAML SSO. If you have a Custom SSO solution provided by Oracle Learn Cloud Services team, it may or may not support deep linking. Consult your integration Design Document or OCS consultant for more information on what your custom SSO solution supports.

The following table represents the supported deep links for the Learn application through the product Learn SSO.

The example URL uses the protocol https. If your site has not been set to be secure via https, then substitute "https" for "http".

Not all third party Courses support deep liking into the Course, chapter, and page. Consult with your courseware vendor for support with deep linking into the Course. LearnCenter Courses that are constructed with chapters and pages support deep linking into the Course.

LearnCenter Designer
Product URL	Endpoint	Required Parameters
https://abcCustomer.learn.taleo.net	/page	Page Number /26
		Optional Parameters   None
Example URL:https://abcCustomer.learn.taleo.net/page/26
	Deep linking is not supported for open LearnCenters at this time.

Related Topics

Copyright © 2010-2015, Oracle and/or its affiliates. All rights reserved.