To ensure that questions get required attention from community members and are NOT left unanswered, it’s important for the author to indicate (by selecting “Yes” or “No” when prompted) whether the question was answered. (newly added) Please note that it is also important to respond to EACH comment your question receives. Your Yes or No response ensures an accurate status for your question.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
Applications Security
Discussion List
-
After the IAM upgrade, what is the password expiration frequency/policy for service accounts that doSummary: After the IAM upgrade, what is the password expiration frequency/policy for service accounts that do. Content (please ensure you mask any confidential informati… -
Pending Worker Multi-Factor Authentication (MFA)Summary: Oracle documentation states that: 1. "Oracle will begin enforcing multifactor authentication (MFA) for Fusion Applications environments." , 2. "environments tha… -
How to migrate AI Agent Studio custom roles and enabled Permission Groups via FSMSummary: Hi everyone, We are currently working with AI Agent Studio and have created two custom roles: AI Agent Admin AI Agent Explorer For these custom roles, we have e…
-
LBAC - users faces intermittent access issueSummary: We have LBAC enabled in Fusion. All our office, VPN, and machine IP addresses are whitelisted. However, users are intermittently experiencing missing roles. The…
-
Enabling OAuth setup for HCM REST APIs instead of Basic AuthSummary Enabling OAuth setup for HCM REST APIs instead of Basic AuthContent Hi, Please can someone provide me a step by step mechanism whereby we can establish OAuth sec…
-
Does the SCIM Endpoint for Fusion Applications only support Basic Authentication?I'd like to auto provision users from Entra to Fusion Applications using Oauth2 client credentials, if possible. Or if anyone has another way besides using Basic Authent…
-
Mandatory MFA in non-production Oracle HCM Cloud environments post-IAM migrationSummary: Our company is scheduled for the Fusion Identity Upgrade, starting in February 2026. We primarily use SSO unless we need to log into a non-production environmen… -
Multi Factor Authentication in Fusion Security Console vs Cloud ConsoleHi Everybody. Does anybody know about the following: We are going to have MFA enforced in DEV on November 7th and in PRD on November 21st. We are currently trying to pre…
-
can we move/customize the Single Sign On button after IAM Upgrade for Oracle Fusion Apps?Summary: We use local login for service accounts and Single Sign On for employees. After the IAM upgrade, the SSO button is at the bottom of the page which confuses peop…
-
Exporting full custom role to another environmentSummary: Export custom made role from one cloud environment to another Content (required): Hi all, I am in need of exporting the custom roles I have created in a test en… -
BPM Error"An unresolvable error has occurred.Please contact your administrator for more information"Summary: We are getting this error "An unresolvable error has occurred. Please contact your administrator for more information." while setting up Expense Approval rules …
-
What privilege gives access to Manage Common Lookup Task?Summary: I am trying to add access to Manage Common Lookup task to a custom security role. I have already added the privilege 'Manage Application Common Lookup' (FND_APP… -
How to extract all IDCS users with Federation status, Creation Date, and Last Login?Hello everyone, I need to generate a report/extract of all users currently registered in IDCS (Identity Cloud Service) / Oracle Cloud Infrastructure IAM. Specifically, I…
-
How we can disable Chooser Login Page after Fusion Identity Upgrade?Summary After Fusion Identity Upgrade, Single Sign-On task will be removed and SSO configurations will move to OCI IAM. I wanted to know how we can disable the Chooser L…
-
Oracle Fusion MFA Enforcement - Toggling MFA On and Off before Enforcement Date in non ProductionHi all, Our enforcement date for Oracle Fusion MFA is coming up soon, and we would like to test this out in one of our non-production environments. If we enable MFA proa…
-
The roles from the system is not availaible in french translationHi everyone, We're currently facing an issue with role translations in our system. While other parts of the application support French localization, the roles themselves…
-
Is there any way to load/configure role name translation?Summary: I am looking for translating role names and couldn't find a table for that. Any help is well appreciated. Content (required): Version (include the version you a…
-
Pending workers Candidates Not Receiving Password reset EmailsSummary: Recently an increase in login issues has been observed within the preboarding journey process. Multiple candidates across various regions have reported not rece…
-
Once MFA is enforced, will we still be able to Exclude MF Auth for a user in a non-prod environment?Summary: Once MFA is enforced, will we still be able to "Exclude Multifactor Authentication" for a user account in our non-production environments for purposes of testin… -
Worker Has Multiple Open-Ended Home Address Records and Cannot Update AddressSummary: Unable to remove/end-date a duplicate Home Address in Person Management – worker ends up with two open-ended Home Address records Content (please ensure you mas…
-
Need help finding Custom Supplier Role Code and extracting 8,000 assigned usersSummary: Hello Experts, My manager requested that I remove a custom supplier role from 8,000+ users in our Development instance using HCM Data Loader (HDL via User.dat).…
-
Oracle Fusion MFA Enforcement — PROD options for automation/service accountsHello Everyone, We are reviewing the upcoming Oracle-enforced MFA change for Fusion Applications after OCI IAM migration. Oracle documentation appears to state that MFA …
-
IAM upgrade - Relay stateSummary: IAM upgrade — where does relay state get configured post-upgrade? We have our Fusion IAM upgrade scheduled shortly and are planning SSO reconfiguration for non-…
-
How can we design a module-specific, setup-only Application Implementation Consultant role?Summary: We need to redesign the Oracle Fusion Cloud Application Implementation Consultant role into module-specific, setup-only roles using a least-privilege approach. …
-
Request for Oracle Fusion Audit Report DetailsHi Oracle Team, We need your assistance in confirming whether Oracle Fusion provides audit reporting/logging capabilities for tracing below user account activities. Plea…
-
How to Create Custom Role to edit supplier but Make Supplier Profile Read OnlyWe have a requirement to give access to edit addresses and sites, but we don't want these users to edit the supplier name. In order to edit the supplier site, they must …
-
How to Restrict Access to Setup and Maintenance Tasks by Role in Oracle Fusion HCM and Financials?Summary: Hello, We are implementing Oracle Fusion Applications and have a customer requirement related to securing the Setup and Maintenance area based on user roles. Sp… -
Security Matrix for Predefined RolesSummary: We are looking for a Security Matrix for Predefined HCM Roles. Content (required): We are looking for a Security Matrix for Predefined HCM Roles. We have an out… -
Navigation to Real User Experience REUI metricsSummary: Can we still collect the Real User Experience (REUI) > User Activity Metric Report? Content (please ensure you mask any confidential information): When we were … -
Need details around the user with Username "urn_opc_resource_fusion_<instance_name>_erp_APPID"Summary: We have observed that a new bank branch was created on May 30, 2025, by the user account "urn_opc_resource_fusion__erp_APPID." However, when we searched for thi…