To ensure that questions get required attention from community members and are NOT left unanswered, it’s important for the author to indicate (by selecting “Yes” or “No” when prompted) whether the question was answered. (newly added) Please note that it is also important to respond to EACH comment your question receives. Your Yes or No response ensures an accurate status for your question.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
Applications Security
Discussion List
-
IAM Upgrade OKTA Unable to Sign Out (Only SSO, disabling Username Password Option)In our production environment, we have simplified the user experience by enabling SSO-only access and disabling direct username/password login. Users access the applicat… -
How to implement data access security in Data Extraction Tool(RODS) in Oracle Fusion ApplicationsSummary: We have created an extract definition on ERP objects using the Data Extraction Tool (RODS) and would like to understand how to enforce ERP data access security … -
Recommendations/tips/experiences for creating custom aggregated Job Roles for FinancialsSummary: Recommendations/tips/experiences for creating custom aggregated Job Roles for Financials Content (please ensure you mask any confidential information): Customer… -
Oracle Fusion MFA Enforcement — PROD options for automation/service accountsHello Everyone, We are reviewing the upcoming Oracle-enforced MFA change for Fusion Applications after OCI IAM migration. Oracle documentation appears to state that MFA …
-
Business Object for Oracle LicensingSummary: I would like to know while creating Tools in AI Agent Studio, which business object should we use to get the list of Oracle License (service) consumed and the u…
-
Is there any way to automate adding privileges to the roles in fusion cloudIs there any way to automate adding privileges to the roles in fusion cloud
-
Suspended flag is Yes and roles were not removed for that user. Will this consume any license?Summary: Hello Experts, Few users are marked as Yes in Per_Users Table and roles are not removed for such users. Will such users consume any license cost? Content (pleas…
-
Oracle Fusion IAM Upgrade - not all pods scheduledSummary: Yesterday we got the notification of the dates for our Fusion IAM upgrades dates. All of our environments that are on the PROD cadence (x3) have been scheduled … -
OCI IAM Upgrade - Pre-upgrade tasks (and IdP) clarificationHi Team, Regarding to the https://docs.oracle.com/en-us/iaas/Content/fusion-applications/identity-migration-overview.htm#identity-migration-actions-before documentation,…
-
Pre-upgrade actions for an environment. Two identity providers availableI'm going through the pre-upgrade actions for the identity upgrade. When I select one of the environments, there are two options for identity providers. Do I just select…
-
Dowtime for - Upcoming Exception Migration to Identity and Access Management (IAM)Summary: We have the above mentioned Migration from Oracle planned on coming Friday. The announcement mentions a downtime for about 1.5 hours. For our clear understandin…
-
Post-HDL processes that sync the Security Console email and Work Email validate email domain?Summary: When converting Worker data into a client's non-production instance, we added XX to the end of all email addresses to invalidate them. We then noticed that the …
-
can we restrict users to see audit reports for a specific object not for other object in ERP Oraclecan we restrict users to see audit reports for a specific object not the other object for which the audit policies are enabled in ERP oracle cloud? for example - Both Su…
-
Platform Security Services Report missing eventsWe run this report monthly for Internal Audit. It was incomplete in January, was supposedly fixed in 25C and it's incomplete again in October. It's missing role membersh…
-
How can we customize User Role Membership Report?Summary: We have a requirement to add job column in output of delivered process 'User Role Membership Report'. We found delivered HCM Extract called User_Role_Membership…
-
How to capture login activity for HCM usersSummary: We need to capture the following 1) successful / unsuccessful login into Fusion HCM 2) Any activity performed post login . Are there any standard report(s) avai…
-
tables to fetch the sign in / sign out details in fusionPlease provide us the details to fetch the data of the user who has been logged in last 7 days and the module they have accessed.
-
looking to implement a generic Cross-Validation (CV)ruleHello Community,We are looking to implement a generic Cross-Validation (CV) rule in Oracle Cloud to restrict account combinations where the Company segment value is equa…
-
Audit report for Redwood who has accessed/ changed the sensitive fields on employment pages in HCMSummary: Is there an audit report for Redwood on who has accessed pages with employee data sensitive information from person management and compensation perspective. Con…
-
How to create View Access custom Role for "Manage Financial Project Settings" in ProjectsHi Team, Our requirement is to create a custom role "XX Project Inquiry" with access to the Project Financial Management and Costs tabs. Within Project Financial Managem…
-
Does OCI allow push notification to MS or Google AuthenticatorWe have a requirement to use MFA for OCI console Access or any integrated application access. Client wants to use MS authenticator with push number validation, is it pos…
-
Audit of BU Access and Revoked Data Access AssignmentsSummary: We need to confirm if Oracle ERP Cloud provides a way to audit Business Unit (BU) access linked to roles and users, including tracking of revoked or expired Dat…
-
How to secure Supplier login page from potential rogue actorsI’m looking for guidance on how to better secure supplier access to the Oracle Fusion Supplier Portal. Current Situation: There are two methods for supplier login: 1. Cr…
-
Need to verify the existence of the audit trails for key configurations and dataset24 Absence of ERP System Audit Trails We have some reuirement related to the Audit where thwy have asked the following information. Observation As part of review of Orac…
-
Impact on Licenses for an Inactive User account with no roles assigned in Fusion ERPSummary: Would there be any impact on licenses against a user account that is in "Inactive" status with "No" roles assigned and unable to log into Fusion ERP Application…
-
Unable to auto assign the data access using auto provisioning rules on basis of assigned rolesHi Everyone, 1.I have created the sample employee in the fusion and created a useraccount for him.I have created the manage data provisioning rules and role mapping on b…
-
Reset all passwords - Is there a way to isolate this further to a super admin?Summary: Today, all admin users can access this. Is there a way, "Reset all passwords" can be restricted to a Super Admin? Content (please ensure you mask any confidenti…
-
Enable Multifactor Authentication(MFA) without SSO enabledSummary: Enable Multifactor Authentication(MFA) without SSO enabled Content (please ensure you mask any confidential information): Hi all, we are not enabling Single Sin…
-
Upsert-Mode= true doesn't work for DataSecurities APISummary: I am trying to fire DataSecurities REST API and the expectation of adding Upsert-Mode=true is that if the Data Security (DAS) already exists for said combinatio… -
Rehired employee still shows as inactive in security consoleHi, We rehired an employee a couple of weeks ago, but they are still showing as inactive in the security console. One post by a fellow community members mention the auto…