To ensure that questions get required attention from community members and are NOT left unanswered, it’s important for the author to indicate (by selecting “Yes” or “No” when prompted) whether the question was answered. (newly added) Please note that it is also important to respond to EACH comment your question receives. Your Yes or No response ensures an accurate status for your question.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
Applications Security
Discussion List
-
Mandatory MFA in non-production Oracle HCM Cloud environments post-IAM migrationSummary: Our company is scheduled for the Fusion Identity Upgrade, starting in February 2026. We primarily use SSO unless we need to log into a non-production environmen… -
Custom role to have access to Setup and Maintenance (Only Manage Bank and Manage Bank Branch)Hello, The requirement of the client is to give a user access to Setup and Maintenance, but the user should have access to only Manage Bank and Manage Bank Branch. Kindl… -
Issues with user accounts being inactivated for employees with active HCM recordsI dont know if LDAP is the culprit but we have active employees who have user accounts that infrequently set to 'inactive'. These user accounts have roles assigned to th… -
Upcoming Exception Migration to Identity and Access Management (IAM)Summary: Upcoming Exception Migration to Identity and Access Management (IAM) Content (please ensure you mask any confidential information): Hi We received the notificat… -
Supplier Portal - MFASummary Enabling MFA for Supplier Portal using IDCS MFAContent Hi , I want to reach out to this audience and see anyone has experience enabling MFA on Supplier Portal (e… -
How to remove roles which were autoprovisioned ?Summary: Once we remove roles from Auto provisioning role mapping what process need to be scheduled to remove the roles from all user profiles Content (please ensure you… -
privilege denied for user to pathSummary: Hi, We have created a user with below roles ,but trying to create a BIP report and saves it, its gives me below error HRAnalyst_ViewAll Application Implementati…
-
Can a data security policy be added to a security role indirectly?We discovered a data security policy for "Grant on Public Person" in one of our security roles in our PROD environment that is not in the same security role in a non-PRO…
-
How to restrict OTBI folder permissions to only show GL reportsSummary: Users to navigate through Shared Folders but only see the GL folder while hiding all other folders (like AP or HR) Content (please ensure you mask any confident…
-
Authenticating Oracle Fusion REST APIs Using Microsoft Entra ID TokensSummary: Guidance on Authenticating Oracle Fusion REST APIs Using Microsoft Entra ID Tokens Approach: https://www.ateam-oracle.com/post/aad-token-fusion-apis Content (pl…
-
Budget Inquiry Role – Issue with Budget Period SelectionWe have created the “Budget Inquiry” role; however, we are unable to select the “From Budget Period” and “To Budget Period” fields on the “Review Budgetary Control Trans…
-
User Management is changed after IAM upgradeSummary: An error message 'User GUID cannot be null' is shown when searching a newly created user in Fusion Applications. Content (please ensure you mask any confidentia…
-
Create accounting process errorSummary: the Create Accounting process ended in an error because you have global permissions for the Subledger Source Transaction data resource. Details: You must update…
-
How to redirect URL to the /FuseWelcome home page? (HCM Cloud)Summary: How to redirect URL to the /FuseWelcome home page? (HCM Cloud) Content (required): When a person accesses HCM Cloud using the below URL, they get our home page …
-
ERROR The federation partner has not been recognized - update federated SSOSummary: I'm getting an error when I perform the pre-update tasks for federated SSO environments in the production environment. Everything works correctly in the test en…
-
Manage HCM Role Provisioning custom criteriaSummary: Is there a way to set up formulas or custom criteria in HCM Role Provisioning rules? The options are limiting and we have some specific situation we would like …
-
How to fetch User changes details in oracle fusionHi Team, Can anyone please let us know if there is a way to fetch audit logs for the following actions performed on user accounts? The audit log should ideally capture: …
-
Oracle fusion session inactivity timeoutHello, I've been asked if it's possible to increase the session inactivity timeout. As per the doc it doesn't look like this is possible. Is this still the case does any…
-
Suppress logout confirmationSummary: Hi, We have enabled SSO b/w Fusion Cloud Application and IDCS with IDCS as IdP.When logout is initiated from the application it presents a button for the user t…
-
can we move/customize the Single Sign On button after IAM Upgrade for Oracle Fusion Apps?Summary: We use local login for service accounts and Single Sign On for employees. After the IAM upgrade, the SSO button is at the bottom of the page which confuses peop…
-
Is it possible to create a Transaction Security Profile based on Business Unit?Summary: Is it possible to create a Transaction Security Profile based on Business Unit or will that be applied based on the Person Security assigned to the Data role? W…
-
Enable Chooser Page in Oracle Fusion Environment with the new Fusion IAM enabledSummary: We are currently using Fusion Cloud ERP environments (25D Release) with the new Fusion IAM and Single Sign-On (SSO) enabled. For an upcoming data migration proj…
-
Send User Name and Password E-Mail NotificationsSummary: Content (please ensure you mask any confidential information): Version (include the version you are using, if applicable): Code Snippet (add any code snippets t…
-
Concurrent logins in Oracle FusionIs there a limit to the number of concurrent logins a single user can have in Oracle Fusion? I've confirmed the ability to login with the same user in three different se… -
You cannot change your password because it is not expired or an administrator did not make a requestSince today, we've received two reports with this message that the user needs to change their password, but when doing so, it displays: "You cannot change your password …
-
how to find who deleted the user accountSummary: Need to know who deleted the user account and the time Content (please ensure you mask any confidential information): Version (include the version you are using…
-
How we can disable Chooser Login Page after Fusion Identity Upgrade?Summary After Fusion Identity Upgrade, Single Sign-On task will be removed and SSO configurations will move to OCI IAM. I wanted to know how we can disable the Chooser L…
-
How to stop e-mails being sent from a Dev/Test instanceSummary: We have a requirement to stop all e-mails being sent from our non Prod instances Content (required): As above, we need a method to stop all e-mails from being …
-
Can we secure that what role should a user be able to assign in Security console?Is it possible to restrict by a role that a particular role should only be able to assign specific roles to all users? Like restrict access to IT security manager
-
Identification of user blocked due to API accessSummary: A password change has been performed for a local user. The new password has been updated in all processes that consume Oracle Fusion APIs. However, it appears t…