Taleo Connect Client Migration To SHA-2 - Asberry

Transcription

Taleo Connect Client Migration to SHA-2ORACLE WHITE PAPER MAY 2016

Table of ContentsIntroduction2Feature Overview2Audience2Update of the Taleo certificates to SHA-23Requirements3Migration4Timeline and dependencies4Next Steps4Additional Information4

IntroductionFeature OverviewOracle Taleo is deprecating the use of the SHA-1 hashing function. As part of this project, the Oracle Taleo zone certificate will beupgraded to SHA-2, replacing the current SHA-1 certificate. Accordingly the TCC client must be updated to utilize a SHA-2 certificate.AudienceThis guide is intended for customers who are using Taleo Connect Client (TCC) to integrate with their instance of Oracle TaleoEnterprise Edition Cloud Service.SINGLE SIGN-ON AND ORACLE TALEO ENTERPRISE PRODUCTS

Update of the Taleo certificates to SHA-2The Oracle Taleo zone certificate will be updated to be signed using the SHA-2 method. The endpoint URL used by TCC for zoneaccess remains unchanged, only the certificate that secures the communication will be updated.Integration scripts are not affected by the new certificate but a new version of TCC is needed to be able to connect to the Taleo zone.Data import and export features remain the same and are unaffected by this change.RequirementsTaleo Connect Client version 15A.2 supports SHA-2. It is mandatory that customers migrate to this version. It is available for downloadfrom Oracle e-Delivery site.https://edelivery.oracle.comThe version will show this in the ‘About Taleo Connect Client’ screen:SINGLE SIGN-ON AND ORACLE TALEO ENTERPRISE PRODUCTS

MigrationTCC integration relies on PIP files that must be kept in synch with the customer’s Oracle Taleo zone version. Migrating to the newTCC version to support SHA-2 does not require changing the PIP files. Only the TCC engine must be updated.Although no impact is expected to existing scripts/integrations, reference the TCC support policy as outlined in the TCC user guide,available via OTN.In an environment that already has a TCC installed, installing a new TCC can potentially require some changes. Examples are: Customer’s TCC configuration files refer to version-dependant TCC pathsReferences to the new version in the customer’s environmentTimeline and dependenciesThe new SHA-2 certificate will begin to be deployed to the Oracle Taleo zones starting on September of 2016. Customers must havemigrated to the SHA-2 compatible TCC version before that date to ensure continuity of service.Next StepsCustomers with TCC integration must migrate to TCC 15A.2.Additional Information For additional information or questions about this document, please submit a Service Request (SR) via My Oracle Support(MOS). Include “Route SR to the Oracle Taleo Enterprise Edition integration support team (Product Code 9832 / Nav / SSO SSL)” inyour question or issue description. Failure to do so may significantly delay response time.Processes for registering for My Oracle Support (MOS) and submitting Service Requests are:oRegister to My Oracle Support (MOS)oSubmit Service Requests (SR)Submitting an SR requires your company’s Customer Support Identifier (CSI). If you do not know your CSI please contactthe Oracle Partner Integration Team at partnerintegration us@oracle.com. .SINGLE SIGN-ON AND ORACLE TALEO ENTERPRISE PRODUCTS

Oracle Corporation, World HeadquartersWorldwide Inquiries500 Oracle ParkwayPhone: 1.650.506.7000Redwood Shores, CA 94065, USAFax: 1.650.506.7200CONNECT W ITH ght 2015, Oracle and/or its affiliates. All rights reserved. This document is provided for information purposes only, and thecontents hereof are subject to change without notice. This document is not warranted to be error-free, nor subject to any othertwitter.com/oraclewarranties or conditions, whether expressed orally or implied in law, including implied warranties and conditions of merchantability ororacle.comfitness for a particular purpose. We specifically disclaim any liability with respect to this document, and no contractual obligations areformed either directly or indirectly by this document. This document may not be reproduced or transmitted in any form or by anymeans, electronic or mechanical, for any purpose, without our prior written permission.Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license andare trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo aretrademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group. 0615White Paper TitleMay 2016Author: [OPTIONAL]SINGLE SIGN-ON AND ORACLE TALEO ENTERPRISE PRODUCTSContributing Authors: [OPTIONAL]

Taleo Connect Client version 15A.2 supports SHA-2. It is mandatory that customers migrate to this version. It is available for download from Oracle e-Delivery site. https://edelivery.oracle.com The version will show this in the 'About Taleo Connect Client' screen: