To ensure that questions get required attention from community members and are NOT left unanswered, it’s important for the author to indicate (by selecting “Yes” or “No” when prompted) whether the question was answered. (newly added) Please note that it is also important to respond to EACH comment your question receives. Your Yes or No response ensures an accurate status for your question.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
Applications Security
Discussion List
-
Oracle Fusion MFA enforcement in Non ProductionHi All, We are enabling MFA in dev regions. There are couple of enhancements supported by vendors who eventually will have IT Security Manager Role. We are looking to ke… -
Worker Has Multiple Open-Ended Home Address Records and Cannot Update AddressSummary: Unable to remove/end-date a duplicate Home Address in Person Management – worker ends up with two open-ended Home Address records Content (please ensure you mas…
-
Need help finding Custom Supplier Role Code and extracting 8,000 assigned usersSummary: Hello Experts, My manager requested that I remove a custom supplier role from 8,000+ users in our Development instance using HCM Data Loader (HDL via User.dat).…
-
Oracle Fusion MFA Enforcement — PROD options for automation/service accountsHello Everyone, We are reviewing the upcoming Oracle-enforced MFA change for Fusion Applications after OCI IAM migration. Oracle documentation appears to state that MFA …
-
IAM upgrade - Relay stateSummary: IAM upgrade — where does relay state get configured post-upgrade? We have our Fusion IAM upgrade scheduled shortly and are planning SSO reconfiguration for non-…
-
How can we design a module-specific, setup-only Application Implementation Consultant role?Summary: We need to redesign the Oracle Fusion Cloud Application Implementation Consultant role into module-specific, setup-only roles using a least-privilege approach. …
-
Request for Oracle Fusion Audit Report DetailsHi Oracle Team, We need your assistance in confirming whether Oracle Fusion provides audit reporting/logging capabilities for tracing below user account activities. Plea…
-
How to Create Custom Role to edit supplier but Make Supplier Profile Read OnlyWe have a requirement to give access to edit addresses and sites, but we don't want these users to edit the supplier name. In order to edit the supplier site, they must …
-
How to Restrict Access to Setup and Maintenance Tasks by Role in Oracle Fusion HCM and Financials?Summary: Hello, We are implementing Oracle Fusion Applications and have a customer requirement related to securing the Setup and Maintenance area based on user roles. Sp… -
Security Matrix for Predefined RolesSummary: We are looking for a Security Matrix for Predefined HCM Roles. Content (required): We are looking for a Security Matrix for Predefined HCM Roles. We have an out… -
Navigation to Real User Experience REUI metricsSummary: Can we still collect the Real User Experience (REUI) > User Activity Metric Report? Content (please ensure you mask any confidential information): When we were … -
Need details around the user with Username "urn_opc_resource_fusion_<instance_name>_erp_APPID"Summary: We have observed that a new bank branch was created on May 30, 2025, by the user account "urn_opc_resource_fusion__erp_APPID." However, when we searched for thi… -
Track all Login attempts from REST/SOAP APISummary: We would like to track and report on all Login Attempts from any of the REST/SOAP API's that are exposed within Oracle Fusion Cloud. We thought this information… -
Unable to access Oracle Cloud through the mobile browserHello Team, User is trying to make login from mobile browser but somehow browser is pushing user to reset password. To reset password, mobile browser is not allowing and…
-
OCI IAM Upgrade - Pre-upgrade tasks (and IdP) clarificationHi Team, Regarding to the https://docs.oracle.com/en-us/iaas/Content/fusion-applications/identity-migration-overview.htm#identity-migration-actions-before documentation,…
-
Oracle Payroll – Cross-Validation Rule Validation During Payroll RunSummary: During the payroll run system should validate whether the applicable costing combination complies with the cross-validation rules configured in Finance. If a re… -
can we restrict users to see audit reports for a specific object not for other object in ERP Oraclecan we restrict users to see audit reports for a specific object not the other object for which the audit policies are enabled in ERP oracle cloud? for example - Both Su…
-
Authenticating Oracle Fusion REST APIs Using Microsoft Entra ID TokensSummary: Guidance on Authenticating Oracle Fusion REST APIs Using Microsoft Entra ID Tokens Approach: https://www.ateam-oracle.com/post/aad-token-fusion-apis Content (pl…
-
Post OCI IAM upgrade login screen "customization"Summary: Customer completed OCI IAM upgrade for non-production environments in Sep-26 (federated). The Customer wants to highlight the Single-Sign In button which is now… -
Issues with user accounts being inactivated for employees with active HCM recordsI dont know if LDAP is the culprit but we have active employees who have user accounts that infrequently set to 'inactive'. These user accounts have roles assigned to th…
-
B91083 - Oracle Fusion Procurement for Self Service Cloud Service - Hosted Named User - Not MeasuredWe have observed that in the latest(from September'26) SaaS Usage Metrics report, the following SKU is reported as not being measured by Oracle. B91083 - Oracle Fusion P…
-
Passing SSO/JWT Token from Fusion SaaS to APEX for REST Data Source AuthenticationEnvironment: Oracle APEX (self-hosted, ORDS) Oracle Fusion Cloud Applications (SaaS) APEX Authentication Scheme: Social Sign-In (OpenID Connect) REST Data Sources: Oracl…
-
A View ONLY for everything that involves PROJECTS.Summary A View ONLY for everything that involves PROJECTS.Content I'm attempting to create a custom role for PROJECTS View only. My current issue is the role I created w…
-
After the IAM upgrade, what is the password expiration frequency/policy for service accounts that doSummary: After the IAM upgrade, what is the password expiration frequency/policy for service accounts that do. Content (please ensure you mask any confidential informati… -
Audit user's deleted rolesHi team, As part of auditing requirement, our auditors wanted to find out when the role was added/removed from user accounts and who performed it. I found a Doc ID 29515…
-
Can AOR at Legal Employer Level Control Person, Business Unit, and Payroll Security?Summary: Clarification required on whether a single Area of Responsibility (AOR) assignment at the Legal Employer level can be used to control employee, Business Unit, a…
-
MFA enforcement in Oracle Fusion Applications - TESTSummary: Hi everyone, We are looking for some guidance from the community regarding the 26B MFA enforcement in Oracle Fusion Applications. Oracle 26B MFA enforcement has… -
Is there a way to hide the Reset Password option under the Set Preferences page?Summary: Is there a way to hide the Reset Password option under the Set Preferences page under Tools?
-
Is Redwood feature enabled for Security Console and Transaction consoleSummary: Redwood features are enabled for Different modules and wants to know whether Redwood is enabled for Security Console and Transaction console? Content (please en…
-
How to delete emails from inactive usersCurrently, terminated users continue to save their email in the security console, creating inconsistencies if a new user arrives and uses their new email. I would like t…