EBS 12.1.3 Registration with OID 11.1.1.5 through SSL for SSO

Got the following error while executing the EBS-OID registartion script from EBS DB.

Steps followed:

1. Import the OID certificates into the EBS DB key store.
2. Create a dedicated admin account in OID which will be used for EBS-OID registration. eg: cn=ebsadmin
3. Execute the OID registration script from EBS DB as per the Oracle guidelines.


applscp@ebsapplication01:12.1.3 ebsapp01_BALANCE$ $FND_TOP/bin/txkrun.pl \
> -script=SetSSOReg \
> -registeroid=yes \
> -ldaphost=oidlb.testdomain.com \
> -ldapport=389 \
> -oidadminuser=cn=ebsadmin,cn=Users,dc=testdomain,dc=com \
> -oidadminuserpass=******* \
> -appspass=xxxx \
> -instpass=*******

You are registering this instance with OID Server.


*** Log File = /u01/app/applscp/inst/apps/ebsapp01_ebsapplication01/logs/appl/rgf/TXK/txkSetSSOReg_Tue_May_15_13_45_05_2012.xml

Beginning input parameter validation for OID registration.
Input parameters validation for OID registration completed.

BEGIN OID REGISTRATION:
Beginning to register Application and Service containers if necessary.
Application and Service containers were created successfully if necessary.
Beginning to register application in Oracle Internet Directory.
Registration of application in Oracle Internet Directory completed successfully.
-> LOADING:  /u02/app/applscp/apps/apps_st/appl/fnd/12.0.0/admin/template/AppsOIDRegistration.tmp
Beginning to register provisioning profile in Oracle Internet Directory.


*** ERROR :  Application Provisioning profile registration is not Successful.
May be provisioning does not exist.It is recommended that you review the log files to determine the cause


End of /u02/app/applscp/apps/apps_st/appl/fnd/12.0.0/patch/115/bin/txkSetSSOReg.pl : No Errors encountered


applscp@ct11bzapp136:12.1.3 caoa071_BALANCE$ view /u01/app/applscp/inst/apps/ebsapp01_ebsapplication01/logs/appl/rgf/TXK/txkSetSSOReg_Tue_May_15_13_45_05_2012.xml
  INFO
  oracle.apps.fnd.txk.ias.oid.BiDirectionalProfile
  create
  10
  Creating a BiDirectional (default) Profile


  2012-05-15T13:45:13
  1337089513180
  75
  txkSetSSOReg
  SEVERE
  oracle.apps.fnd.txk.ias.oid.BiDirectionalProfile
  create
  10
  java.lang.Exception: ERROR: [LDAP: error code 50 - Insufficient Access Rights]
The Provisioning Profile for the Application could not be created.
    at oracle.ldap.util.provisioning.ProvisioningProfileV2.process(ProvisioningProfileV2.java:185)
    at oracle.ldap.util.provisioning.ProvisioningProfile.manageProfiles(ProvisioningProfile.java:722)
    at oracle.ldap.util.provisioning.ProvisioningProfile.ProfileHandler(ProvisioningProfile.java:680)
    at oracle.apps.fnd.txk.ias.oid.BiDirectionalProfile.create(BiDirectionalProfile.java:66)
    at oracle.apps.fnd.txk.ias.oid.Provisioning.create(Provisioning.java:221)
    at oracle.apps.fnd.txk.ias.oid.Instance.createProvisioning(Instance.java:1028)
    at oracle.apps.fnd.txk.ias.oid.Instance.register(Instance.java:947)
    at oracle.apps.fnd.txk.ias.oid.Instance.main(Instance.java:1390)


  2012-05-15T13:45:13
  1337089513180
  76
  txkSetSSOReg
  SEVERE
  oracle.apps.fnd.txk.ias.TXKSTDIO
  exception
  10
  oracle.apps.fnd.txk.ias.SsoOidException: Application Provisioning profile registration is not Successful.
May be provisioning does not exist.It is recommended that you review the log files to determine the cause

    at oracle.apps.fnd.txk.ias.oid.Provisioning.create(Provisioning.java:224)
    at oracle.apps.fnd.txk.ias.oid.Instance.createProvisioning(Instance.java:1028)
    at oracle.apps.fnd.txk.ias.oid.Instance.register(Instance.java:947)
    at oracle.apps.fnd.txk.ias.oid.Instance.main(Instance.java:1390)



Solution:

Login to your OID via ODSM console, open data browser, open root => cn=oracle internet directory => cn=DirectoryAdminGroup. Click on green "+" and add newly created user as a member of this group. And re-run the registration script.

!!!All the best !!!