To ensure that questions get required attention from community members and are NOT left unanswered, it’s important for the author to indicate (by selecting “Yes” or “No” when prompted) whether the question was answered. (newly added) Please note that it is also important to respond to EACH comment your question receives. Your Yes or No response ensures an accurate status for your question.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
Applications Security
Discussion List
-
AI Security Messaging for Oracle SaaS Cloud Security CustomersPosition on AI-Accelerated Security Oracle views AI-accelerated vulnerability discovery and exploitation as a current security reality. As AI shortens the time between d… -
Securing Oracle Fusion Cloud Supplier Portal with IAM Domains and MFAOne of the most common security challenges in Oracle Fusion Cloud is enabling Supplier Portal access for external users without disrupting existing workforce authenticat…
-
Oracle Fusion Cloud Audit StreamingExcited to share a new two-part series on streaming Oracle Fusion Cloud audit events to SIEM platforms such as Splunk. The series outlines an event-driven pattern using …
-
Introducing the CIS Oracle SaaS BenchmarkWe’re excited to announce the upcoming launch of the first-ever Center for Internet Security (CIS) Benchmark for Oracle SaaS - focused on Oracle Fusion and Oracle Enterp…
-
Oracle Go – See Beyond the Logs: AI-Driven IAM Audit Analysis for Oracle SaaS with OCI Log AnalyticsI’m excited to invite you to our upcoming webinar with my colleague Ranveer Tiwari and myself “See Beyond the Logs – AI-Driven IAM Audit & Analysis for Oracle SaaS with …
-
Unable to access Oracle Cloud through the mobile browserHello Team, User is trying to make login from mobile browser but somehow browser is pushing user to reset password. To reset password, mobile browser is not allowing and… -
OCI IAM Upgrade - Pre-upgrade tasks (and IdP) clarificationHi Team, Regarding to the https://docs.oracle.com/en-us/iaas/Content/fusion-applications/identity-migration-overview.htm#identity-migration-actions-before documentation,…
-
Security Matrix for Predefined RolesSummary: We are looking for a Security Matrix for Predefined HCM Roles. Content (required): We are looking for a Security Matrix for Predefined HCM Roles. We have an out… -
Oracle Payroll – Cross-Validation Rule Validation During Payroll RunSummary: During the payroll run system should validate whether the applicable costing combination complies with the cross-validation rules configured in Finance. If a re… -
Pending Worker Multi-Factor Authentication (MFA)Summary: Oracle documentation states that: 1. "Oracle will begin enforcing multifactor authentication (MFA) for Fusion Applications environments." , 2. "environments tha…
-
can we restrict users to see audit reports for a specific object not for other object in ERP Oraclecan we restrict users to see audit reports for a specific object not the other object for which the audit policies are enabled in ERP oracle cloud? for example - Both Su…
-
Request for Oracle Fusion Audit Report DetailsHi Oracle Team, We need your assistance in confirming whether Oracle Fusion provides audit reporting/logging capabilities for tracing below user account activities. Plea…
-
Authenticating Oracle Fusion REST APIs Using Microsoft Entra ID TokensSummary: Guidance on Authenticating Oracle Fusion REST APIs Using Microsoft Entra ID Tokens Approach: https://www.ateam-oracle.com/post/aad-token-fusion-apis Content (pl…
-
Once MFA is enforced, will we still be able to Exclude MF Auth for a user in a non-prod environment?Summary: Once MFA is enforced, will we still be able to "Exclude Multifactor Authentication" for a user account in our non-production environments for purposes of testin… -
Post OCI IAM upgrade login screen "customization"Summary: Customer completed OCI IAM upgrade for non-production environments in Sep-26 (federated). The Customer wants to highlight the Single-Sign In button which is now… -
can we move/customize the Single Sign On button after IAM Upgrade for Oracle Fusion Apps?Summary: We use local login for service accounts and Single Sign On for employees. After the IAM upgrade, the SSO button is at the bottom of the page which confuses peop…
-
Issues with user accounts being inactivated for employees with active HCM recordsI dont know if LDAP is the culprit but we have active employees who have user accounts that infrequently set to 'inactive'. These user accounts have roles assigned to th…
-
B91083 - Oracle Fusion Procurement for Self Service Cloud Service - Hosted Named User - Not MeasuredWe have observed that in the latest(from September'26) SaaS Usage Metrics report, the following SKU is reported as not being measured by Oracle. B91083 - Oracle Fusion P…
-
Passing SSO/JWT Token from Fusion SaaS to APEX for REST Data Source AuthenticationEnvironment: Oracle APEX (self-hosted, ORDS) Oracle Fusion Cloud Applications (SaaS) APEX Authentication Scheme: Social Sign-In (OpenID Connect) REST Data Sources: Oracl…
-
How to migrate AI Agent Studio custom roles and enabled Permission Groups via FSMSummary: Hi everyone, We are currently working with AI Agent Studio and have created two custom roles: AI Agent Admin AI Agent Explorer For these custom roles, we have e…
-
A View ONLY for everything that involves PROJECTS.Summary A View ONLY for everything that involves PROJECTS.Content I'm attempting to create a custom role for PROJECTS View only. My current issue is the role I created w…
-
After the IAM upgrade, what is the password expiration frequency/policy for service accounts that doSummary: After the IAM upgrade, what is the password expiration frequency/policy for service accounts that do. Content (please ensure you mask any confidential informati… -
Audit user's deleted rolesHi team, As part of auditing requirement, our auditors wanted to find out when the role was added/removed from user accounts and who performed it. I found a Doc ID 29515…
-
Can AOR at Legal Employer Level Control Person, Business Unit, and Payroll Security?Summary: Clarification required on whether a single Area of Responsibility (AOR) assignment at the Legal Employer level can be used to control employee, Business Unit, a…
-
MFA enforcement in Oracle Fusion Applications - TESTSummary: Hi everyone, We are looking for some guidance from the community regarding the 26B MFA enforcement in Oracle Fusion Applications. Oracle 26B MFA enforcement has… -
Is there a way to hide the Reset Password option under the Set Preferences page?Summary: Is there a way to hide the Reset Password option under the Set Preferences page under Tools?
-
Is Redwood feature enabled for Security Console and Transaction consoleSummary: Redwood features are enabled for Different modules and wants to know whether Redwood is enabled for Security Console and Transaction console? Content (please en…
-
How to delete emails from inactive usersCurrently, terminated users continue to save their email in the security console, creating inconsistencies if a new user arrives and uses their new email. I would like t…
-
How to delete audit logs?We are planning to enable Audit Trail in Oracle Fusion How can we delete the audit logs/history? When deleted, are the logs permanently removed from storage?
-
LBAC - users faces intermittent access issueSummary: We have LBAC enabled in Fusion. All our office, VPN, and machine IP addresses are whitelisted. However, users are intermittently experiencing missing roles. The…
-
How can I perform bulk password uploads via HDL in Oracle Cloud?Summary: Hello, I would like to know how to perform a bulk password update in Oracle. I understand that it is possible to do this on an individual, user-by-user basis vi… -
Request for Role-Level Access List for Journal SourcesHello, Is there any way to find out all the privileges and access for the roles within the system? I'm looking to find out how to segregate access by Journal Source: Ass…
-
how to check if the Oracle fusion instance has been upgraded to IAMSummary: Content (please ensure you mask any confidential information): Version (include the version you are using, if applicable): Code Snippet (add any code snippets t…
-
Fusion Identity Upgrade: Customize Sign-In Page LayoutSummary: Is it possible to customize the login screen so that: • The Single sign-on button is on the top of the page • Pod name is always visible on the login page Conte…
-
Report for a list of Enabled Audit Business ObjectsSummary: Currently we enabled a number of itemsfor audit under "Manage Audit Policies" --> "Configure Business Object Attributes". However in order to know what items ar…