To ensure that questions get required attention from community members and are NOT left unanswered, it’s important for the author to indicate (by selecting “Yes” or “No” when prompted) whether the question was answered. (newly added) Please note that it is also important to respond to EACH comment your question receives. Your Yes or No response ensures an accurate status for your question.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
Applications Security
Discussion List
-
MFA Passcode windows allows multiple characters instead of single character when copy/paste is usedSummary: When entering MFA Passcode, the textbox allows more than one character to be pasted in the box which should allow one character. This behavior does not happen w… -
Successful integrations creating UserWorkerData Access in Oracle Fusion Cloud from an external systeHi everyone, We are looking to automate user onboarding in Oracle Fusion Cloud. Users would be registered in an external system (our source of record), and an integratio…
-
Learn how passkeys work URL Not WorkingI'm testing the new MFA passkey option in our DEV2 instance. When uses select passkey as an option, the next screen has a link for end user to learn how they work. It al…
-
Custom Criteria Not Restricting Employee Visibility After Global Transfer Across Legal EntitiesWe have implemented custom criteria in Person Security Profile to restrict employee visibility based on the Legal Entity (LE) of the logged-in user. The criteria checks … -
Manage Common Lookups Enabled checkboxHi Team, Business team needs access to Manage Common Lookups to maintain and update lookup code values. We have configured a custom role and assigned the Manage Applicat…
-
Security via AOR: Setup StepsHi everyone, A person in our organization needs HR Specialist-level access to our system. They should only see the people and related data for a specific location of one… -
Securing Oracle Fusion Cloud Supplier Portal with IAM Domains and MFAOne of the most common security challenges in Oracle Fusion Cloud is enabling Supplier Portal access for external users without disrupting existing workforce authenticat… -
Unable to Hide Add, Delete, Edit button on Job Profile PageSummary: Hi Team, I am trying to provide view-only access to the Job Profile page (My Client Groups → Profiles → Job Profile), where users will not be able to add, delet…
-
Could you help us understand why some users with the same Org role can see the Compensation InfoCould you help us understand why some users with the same Org role can see the Compensation Info quick action while others cannot? Users with the Department and Global D… -
Create Accounting does not work when Data Security Policy set to ALLIn our organization we have zero need for data security for a user. We control user access to a specific subledger (ie. Receivables, Payables etc) and they should have a…
-
Data Provisioning Rules unable to assign BU security context even if rule exists.Summary: 1) Created a Data Provisioning Rule and added 6 Roles and BU as security context. 2) Added above 6 roles to user. 3)Ran the ESS Jobs-Import User and Role Applic…
-
Is it possible to remove unwanted transactions that are currently appearing in BPM WorklistSummary: Is there a way to remove unwanted transactions that are currently appearing in BPM Worklist Content (please ensure you mask any confidential information): Versi…
-
Unable to export the BPM Worklist data to Excel, which is impacting daily activities.Summary: We are experiencing an issue with the BPM Worklist export functionality in Oracle Fusion HCM. Blank XLSX file is downloaded, and none of the tasks displayed in …
-
AI Security Messaging for Oracle SaaS Cloud Security CustomersPosition on AI-Accelerated Security Oracle views AI-accelerated vulnerability discovery and exploitation as a current security reality. As AI shortens the time between d…
-
Oracle Fusion Cloud Audit StreamingExcited to share a new two-part series on streaming Oracle Fusion Cloud audit events to SIEM platforms such as Splunk. The series outlines an event-driven pattern using …
-
Introducing the CIS Oracle SaaS BenchmarkWe’re excited to announce the upcoming launch of the first-ever Center for Internet Security (CIS) Benchmark for Oracle SaaS - focused on Oracle Fusion and Oracle Enterp…
-
Oracle Go – See Beyond the Logs: AI-Driven IAM Audit Analysis for Oracle SaaS with OCI Log AnalyticsI’m excited to invite you to our upcoming webinar with my colleague Ranveer Tiwari and myself “See Beyond the Logs – AI-Driven IAM Audit & Analysis for Oracle SaaS with …
-
B91083 - Oracle Fusion Procurement for Self Service Cloud Service - Hosted Named User - Not MeasuredWe have observed that in the latest(from September'26) SaaS Usage Metrics report, the following SKU is reported as not being measured by Oracle. B91083 - Oracle Fusion P…
-
How to get list of users which haven't login to oracle cloud application from last 2 months.Summary we need a query which provides the list of users which haven't login to oracle cloud application from last 2 months.Content Is there any way to get list of users…User_2025-02-08-01-24-02-240 109 views 5 comments 2 points Most recent by Alaaeldin Nabih Elgharbawy -
Using 3rd party APP for MFA in Oracle Fusion ApplicationSummary: Hi, Can I check the process to set up an alternative authentication app for MFA? There is an option within user preferences to 'Select Use Offline Mode or anoth…
-
Can We Use a Custom BIP Bursting Report to Send Welcome / Reset Password Emails to Users Email?Summary: We have a requirement to send welcome emails to newly provisioned users containing the password reset URL, based on user category. The challenge is that for som… -
Oracle Fusion MFA enforcement in Non ProductionHi All, We are enabling MFA in dev regions. There are couple of enhancements supported by vendors who eventually will have IT Security Manager Role. We are looking to ke…
-
As part of Fusion Applications Identity Upgrade how can we segregate in OCI change for SSOAs part of Fusion Applications Identity Upgrade how can we segregate in OCI which users can or cant control the SSO aspect - which users can change elements such as user…
-
How to test password reset token duration in non-production environment where email is disabled?Summary: The recommendation was to "test the token expiration behavior by manually providing the reset link or token to a test user to verify the extended expiration per…
-
Unable to Download Output File for "User and Role Access Audit Report" Run on 13-Apr-2026Hello Experts, We are trying to retrieve the output file from the "User and Role Access Audit Report" scheduled process that was successfully run on 13-Apr-2026. We have…
-
Why being only a User Administrator get this login error: sign-on policy denies accessSummary: Does the user needs to belong to both 1) Identity Domain Adminstrator & 2) User Administrator group to be able to add or delete users? If we remove the user fro…
-
How to exclude MFA for Supplier user categorySummary: How to exclude MFA for Supplier user category Content (please ensure you mask any confidential information): How to exclude MFA for Supplier user category Versi… -
OCI Identity Domain - Sign-On Policy Change Notification ImpactHello Team, Recently, we started receiving the following notification in our OCI tenancy: "Review sign-on policy changes. Oracle requires explicit consent for any modifi…
-
Looking for guidance on management of personas and/or test accounts.What process does Oracle or any Oracle Customers recommend for securely replicating another user’s roles, data access, and approval workflows during testing? Do other cu…
-
Worklist Application link in journal approval email not working after OCI UpgradeWe are seeing the Worklist Application link in journal approval, req approval, and FRS report emails not working. The user tries to login through SSO and they get a 'una…
-
malicious codes in text boxesSummary: Our client has a third party vendor to assess / test the security and safety of the application. In oracle recruiting cloud, we have custom (dff) text fields bu…
-
What are the seeded user accounts in HCMSummary: Content (please ensure you mask any confidential information): Version (include the version you are using, if applicable): Code Snippet (add any code snippets t…
-
IAM upgrade cant configure MFA exclusionSince our IAM update took place, now in Oracle Fusion we need to exclude certain users from the MFA configuration However, giving ourselves IT security manager and being…
-
Query To Pull User Category Of PopulationHello all, We have a requirement to pull the user category information for users. We have written the below query but it is still returning as null. Is there any changes…
-
Disable "Schedule New Process" button for FND_READ_ONLY users.Content We are a public company so compliance is a major factor in our security implementation. Our support specialists and 3rd party implementation team members have fu… -
What is the best approach to export all users and user groups from Oracle Cloud Infrastructure (OCI)Summary: We currently need to extract user and group membership information periodically for audit and access review purposes. We are looking for a solution that can be …
-
Custom Role to have access only to Edit Bank Account on SupplierSummary Role to have access to bank account creation and editing onlyContent Currently I created a custom AP role to only have AP update and create supplier bank account…
-
Alumni auto provision rule is not revoking the alumni job role when the user is rehiredWe have the below auto provisioned rules defined for Alumni role, but after the user is getting rehired the alumni role which was auto provisioned is not getting deprovi…
-
Guidance on Simplifying Oracle Access Request Process and Birthright Access ProvisioningBirthright / Default Access Provisioning: We would like to automatically provision certain baseline access to users based on attributes such as Business Unit, Department…
-
Malware/Virus Scan for documents uploaded in UCM from External SourceSummary: Is there any Oracle Solution that deals with the documents scanning for uploaded documents from external system to Oracle UCM Cloud for virus/malware scanning. …
-
What to do with fusion_console_upgrade_admin_role and planning_Console_Upgrade_Service_Admin_GroupHello Oracle Community! Our domain has the below Oracle generated roles: planning_Console_Upgrade_Service_Admin_Group fusion_console_upgrade_admin_role I understand that…
-
We are updating user names from say X to Y. Will following Change?Summary: We are updating user names from say X to Y. Earlier the user names were like John.Davis@domain.com, now we are replacing it with DAVISJOHN Will following work o…
-
26B- Security Console-Configure MFA ExclusionSummary: 26B- Security Console-Configure MFA Exclusion Content (please ensure you mask any confidential information): After 26B is applied we are seeing an option "Confi… -
Audit user's deleted rolesHi team, As part of auditing requirement, our auditors wanted to find out when the role was added/removed from user accounts and who performed it. I found a Doc ID 29515… -
Is there any Performance impact of enabling Auditing in Fusion ApplicationsSummary: Content (required): We are considering enabling auditing for SOA. (Reference - How To Audit Workflow Customizations (Doc ID 2907250.1)) Before we enable Auditin…
-
How can we restrict access to sensitive benefits information on PO's and contracts?We are looking to move benefit purchases into Oracle Fusion but need the ability to restrict access to requisitions, purchase orders, and contracts as there could be sen…
-
how to find the Privilege required for Rest endpoint in Fusion SaaS ApplicationSummary Privilege required for EndpointContent Hi team, I am trying to Find the Privilege for the particular Rest endpoint in Payable. similarly SOAP in Developer Connec…