To ensure that questions get required attention from community members and are NOT left unanswered, it’s important for the author to indicate (by selecting “Yes” or “No” when prompted) whether the question was answered. (newly added) Please note that it is also important to respond to EACH comment your question receives. Your Yes or No response ensures an accurate status for your question.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
Applications Security
Discussion List
-
Securing Oracle Fusion Cloud Supplier Portal with IAM Domains and MFAOne of the most common security challenges in Oracle Fusion Cloud is enabling Supplier Portal access for external users without disrupting existing workforce authenticat… -
AI Security Messaging for Oracle SaaS Cloud Security CustomersPosition on AI-Accelerated Security Oracle views AI-accelerated vulnerability discovery and exploitation as a current security reality. As AI shortens the time between d…
-
Oracle Fusion Cloud Audit StreamingExcited to share a new two-part series on streaming Oracle Fusion Cloud audit events to SIEM platforms such as Splunk. The series outlines an event-driven pattern using …
-
Introducing the CIS Oracle SaaS BenchmarkWe’re excited to announce the upcoming launch of the first-ever Center for Internet Security (CIS) Benchmark for Oracle SaaS - focused on Oracle Fusion and Oracle Enterp…
-
Oracle Go – See Beyond the Logs: AI-Driven IAM Audit Analysis for Oracle SaaS with OCI Log AnalyticsI’m excited to invite you to our upcoming webinar with my colleague Ranveer Tiwari and myself “See Beyond the Logs – AI-Driven IAM Audit & Analysis for Oracle SaaS with …
-
Pending Worker Multi-Factor Authentication (MFA)Summary: Oracle documentation states that: 1. "Oracle will begin enforcing multifactor authentication (MFA) for Fusion Applications environments." , 2. "environments tha… -
We are updating user names from say X to Y. Will following Change?Summary: We are updating user names from say X to Y. Earlier the user names were like John.Davis@domain.com, now we are replacing it with DAVISJOHN Will following work o…
-
How to migrate AI Agent Studio custom roles and enabled Permission Groups via FSMSummary: Hi everyone, We are currently working with AI Agent Studio and have created two custom roles: AI Agent Admin AI Agent Explorer For these custom roles, we have e…
-
MFA Passcode windows allows multiple characters instead of single character when copy/paste is usedSummary: When entering MFA Passcode, the textbox allows more than one character to be pasted in the box which should allow one character. This behavior does not happen w…
-
LBAC - users faces intermittent access issueSummary: We have LBAC enabled in Fusion. All our office, VPN, and machine IP addresses are whitelisted. However, users are intermittently experiencing missing roles. The…
-
Could you help us understand why some users with the same Org role can see the Compensation InfoCould you help us understand why some users with the same Org role can see the Compensation Info quick action while others cannot? Users with the Department and Global D… -
Enabling OAuth setup for HCM REST APIs instead of Basic AuthSummary Enabling OAuth setup for HCM REST APIs instead of Basic AuthContent Hi, Please can someone provide me a step by step mechanism whereby we can establish OAuth sec…
-
Does the SCIM Endpoint for Fusion Applications only support Basic Authentication?I'd like to auto provision users from Entra to Fusion Applications using Oauth2 client credentials, if possible. Or if anyone has another way besides using Basic Authent…
-
Mandatory MFA in non-production Oracle HCM Cloud environments post-IAM migrationSummary: Our company is scheduled for the Fusion Identity Upgrade, starting in February 2026. We primarily use SSO unless we need to log into a non-production environmen…
-
Multi Factor Authentication in Fusion Security Console vs Cloud ConsoleHi Everybody. Does anybody know about the following: We are going to have MFA enforced in DEV on November 7th and in PRD on November 21st. We are currently trying to pre…
-
Why being only a User Administrator get this login error: sign-on policy denies accessSummary: Does the user needs to belong to both 1) Identity Domain Adminstrator & 2) User Administrator group to be able to add or delete users? If we remove the user fro…
-
Unable to Download Output File for "User and Role Access Audit Report" Run on 13-Apr-2026Hello Experts, We are trying to retrieve the output file from the "User and Role Access Audit Report" scheduled process that was successfully run on 13-Apr-2026. We have…
-
can we move/customize the Single Sign On button after IAM Upgrade for Oracle Fusion Apps?Summary: We use local login for service accounts and Single Sign On for employees. After the IAM upgrade, the SSO button is at the bottom of the page which confuses peop…
-
Exporting full custom role to another environmentSummary: Export custom made role from one cloud environment to another Content (required): Hi all, I am in need of exporting the custom roles I have created in a test en… -
How to test password reset token duration in non-production environment where email is disabled?Summary: The recommendation was to "test the token expiration behavior by manually providing the reset link or token to a test user to verify the extended expiration per…
-
Create Accounting does not work when Data Security Policy set to ALLIn our organization we have zero need for data security for a user. We control user access to a specific subledger (ie. Receivables, Payables etc) and they should have a…
-
As part of Fusion Applications Identity Upgrade how can we segregate in OCI change for SSOAs part of Fusion Applications Identity Upgrade how can we segregate in OCI which users can or cant control the SSO aspect - which users can change elements such as user…
-
Data Provisioning Rules unable to assign BU security context even if rule exists.Summary: 1) Created a Data Provisioning Rule and added 6 Roles and BU as security context. 2) Added above 6 roles to user. 3)Ran the ESS Jobs-Import User and Role Applic…
-
Is it possible to remove unwanted transactions that are currently appearing in BPM WorklistSummary: Is there a way to remove unwanted transactions that are currently appearing in BPM Worklist Content (please ensure you mask any confidential information): Versi…
-
Unable to export the BPM Worklist data to Excel, which is impacting daily activities.Summary: We are experiencing an issue with the BPM Worklist export functionality in Oracle Fusion HCM. Blank XLSX file is downloaded, and none of the tasks displayed in …
-
BPM Error"An unresolvable error has occurred.Please contact your administrator for more information"Summary: We are getting this error "An unresolvable error has occurred. Please contact your administrator for more information." while setting up Expense Approval rules … -
What privilege gives access to Manage Common Lookup Task?Summary: I am trying to add access to Manage Common Lookup task to a custom security role. I have already added the privilege 'Manage Application Common Lookup' (FND_APP… -
How to extract all IDCS users with Federation status, Creation Date, and Last Login?Hello everyone, I need to generate a report/extract of all users currently registered in IDCS (Identity Cloud Service) / Oracle Cloud Infrastructure IAM. Specifically, I…
-
How we can disable Chooser Login Page after Fusion Identity Upgrade?Summary After Fusion Identity Upgrade, Single Sign-On task will be removed and SSO configurations will move to OCI IAM. I wanted to know how we can disable the Chooser L…
-
how to find the Privilege required for Rest endpoint in Fusion SaaS ApplicationSummary Privilege required for EndpointContent Hi team, I am trying to Find the Privilege for the particular Rest endpoint in Payable. similarly SOAP in Developer Connec…
-
Oracle Fusion MFA Enforcement - Toggling MFA On and Off before Enforcement Date in non ProductionHi all, Our enforcement date for Oracle Fusion MFA is coming up soon, and we would like to test this out in one of our non-production environments. If we enable MFA proa…
-
The roles from the system is not availaible in french translationHi everyone, We're currently facing an issue with role translations in our system. While other parts of the application support French localization, the roles themselves…
-
Is there any way to load/configure role name translation?Summary: I am looking for translating role names and couldn't find a table for that. Any help is well appreciated. Content (required): Version (include the version you a…
-
Pending workers Candidates Not Receiving Password reset EmailsSummary: Recently an increase in login issues has been observed within the preboarding journey process. Multiple candidates across various regions have reported not rece…
-
Once MFA is enforced, will we still be able to Exclude MF Auth for a user in a non-prod environment?Summary: Once MFA is enforced, will we still be able to "Exclude Multifactor Authentication" for a user account in our non-production environments for purposes of testin…