To ensure that questions get required attention from community members and are NOT left unanswered, it’s important for the author to indicate (by selecting “Yes” or “No” when prompted) whether the question was answered. (newly added) Please note that it is also important to respond to EACH comment your question receives. Your Yes or No response ensures an accurate status for your question.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
Applications Security
Discussion List
-
Is Employee role cost license? Is there a document that list all the roles that may consume license?Summary: We are finalizing our security matrix and making sure we will not exceed the number of license available for different roles. One thing we want to know if Emplo… -
In a threat actor situation, is there an alternative path for limited access to fusion applications?Summary: In a scenario where an employee turns into a threat actor and hacks the network blocking normal access to Oracle Fusion HCM Payroll, can Oracle provide an alter… -
what are the privileges required to access My Client GroupsSummary: Content (please ensure you mask any confidential information): Version (include the version you are using, if applicable): Code Snippet (add any code snippets t…
-
HCM Reasons for Send Prorated LDAP Changes to ErrorSummary: After 26B, I made some security updates in a non-production pod, and when I run the Send Pending LDAP Requests process, I'm getting errors in most of the subpro…
-
Concurrent SSO and Direct login ability for a userSummary: Oracle documentation isnt really clear. SSO enabled as well as chooser page. Can a user have login via SSO and also optionally with the direct login via chooser…
-
Oracle Fusion MFA Enforcement — PROD options for automation/service accountsHello Everyone, We are reviewing the upcoming Oracle-enforced MFA change for Fusion Applications after OCI IAM migration. Oracle documentation appears to state that MFA …
-
Critical Security Vulnerabilities (CVSS > 9.5) – Impact on ERP Cloud, OCI, OIC and ADFdi (July 2026Summary: Dear Community, we received a security alert for following relevant CVEs. CVE-2026-60880 (Oracle E-Business Suite – Work in Process) CVE-2026-60198 (Oracle WebL…
-
SAML Metadata file details change after refresh?Summary: We are in the process of configuring Okta-based SSO for our Fusion ERP environments. After completing our first refresh (T2T | Dev > Test), it looks as though o…
-
Region/Country-Based Geo-Fencing Support for Oracle EPM CloudSummary: Region/Country-Based Geo-Fencing Support for Oracle EPM Cloud Content (please ensure you mask any confidential information): We have a query regarding access re…
-
How to hide Forgot Password link in the login pageSummary Hide Forgot Password link in the login pageContent Hi, In the development/test instances, we are planning to restrict users to use the Forgot password functional…
-
Representatives can see employees in all organizations the employee is assigned toOur person security profiles are secured by Area of Responsibility. The Scope of Responsibility is "Organization hierarchy for department" and we have an organization hi…
-
Convert to Federated UsersSummary: we have users setup to allow both user name-password and single sign-on in the Sign-on Policies under Domain Policies. We want to convert these users to federat…
-
Not able to remove privilege from a custom job role created as part of migration in security consoleSummary: We have a custom job role for procurement which is created in production as part of migration and not in security console. Recently we have been trying to remov…
-
HCM Ideas that are essential for security and compliance – Ideas that desperately NEED your votesContent There are a few Ideas (Enhancement Requests) that we and others have logged that are critical for SOX compliance, Data Privacy, Security, and for the implementat… -
Restrict Chart of Account Segment Access from One Entity, While Allowing access on different entityIs there a way to restrict access at the COA segment combination? For example, can you restrict access for users on reporting/transactional access from Account 1000 with…
-
Stuck Privilege (from creating ESS Job), Cannot be removed in security console.Summary: We created an ESS job for a report. I completed creating the ESS Job and ran the ImportUser and Role Application Security Data. Privilege for the ess job was cr…
-
Can Oracle indicate on which parts of the application we should focus on for the regression testingSummary: Can Oracle indicate on which parts of the application we should focus on for the regression testing for the Monthly Security and Stability updates?For us it fee…
-
We are unable to login the support portal as it always asking to verify the identification.Summary: We are unable to login the support portal as it always asking to verify the identification. Can you please help us to login successfully? Content (please ensure…
-
How to Remove Privileges from a RoleSummary: How to Remove Privileges from a Role Content (please ensure you mask any confidential information): I created a copy of the "Employee" role and would like to re…
-
Generate Public URL for a UCM FileSummary UCM File Access from InternetContent Good People, Is there any way we can generate a Public URL accessible from Internet for a File Loaded in UCM ? Thanks, Soumya -
Web Services Application Identity for Procurement User updating supplier detailsSummary: Hi Team, We are seeing few of the supplier records updated by user : Web Services Application Identity for Procurement which is predefined APPID by Oracle. Appl…
-
How to configure all the setting we use to get in security console sso option after IAM upgradeSummary: We had "Chooser" Mode enabled in SSO. Employee Users can login by clicking on the "Company Sign on" link and Supplier portal users use login id and password. No…
-
Mandatory MFA Enforcement - Client-specific restrictions and challengesWe have a client with very specific work environment restrictions that directly impact their user's methods for accessing Oracle applications. The majority of the client…
-
Access to Report Job History without BI Admin roleSummary Access to Report Job History without BI Admin roleContent We have a requirement where we need to grant access for set of users to "Report Job History" page in BI… -
How password is setup when employee is hired in Fusion HCMSummary: When any employee is hired in HCM. What is the process to create default password and how long it is active. Is there any configuration to manage it? Content (p… -
Hi all, I can't see "Setup and maintenance" Tab in My accountHi all, I can't see "Setup and maintenance" Tab in My account, Even after adding -"Application Implementation Consultant" role. Also, I performed LDAP multiple times.
-
Disable User login page after IAM Update - SSO Option Missing in FA Security ConsoleSummary: Hi All, We completed the IAM updates in lower POD and for this activity we did enable the User login page along with SSO before the upgrade. Now after the IAM u…
-
Idp Policy Applications updateWe just activate single sign-on (SSO). We assign an IdP Policy and added the Applications on it. Will the application identifiers be modified at any point (for example, …
-
Oracle Platform Security Services is not workingSummary: Hello We have enabled the Oracle Platform Security Services audit policies but when i try to search the report in Audit report the data is not coming what could…
-
Recommendations/tips/experiences for creating custom aggregated Job Roles for FinancialsSummary: Recommendations/tips/experiences for creating custom aggregated Job Roles for Financials Content (please ensure you mask any confidential information): Customer…