To ensure that questions get required attention from community members and are NOT left unanswered, it’s important for the author to indicate (by selecting “Yes” or “No” when prompted) whether the question was answered. (newly added) Please note that it is also important to respond to EACH comment your question receives. Your Yes or No response ensures an accurate status for your question.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
Applications Security
Discussion List
-
How to skip Fusion SSO login page?Hello Employees in our organization access various Fusion HCM pages via deep links configured in our company's internal portal. For example, one link takes them to perso… -
grant in SYSTEM scope failed due to JPS-04201 oracle HCM OPSS audit rest APIfor an audit integration, we need to transmit audit REST API details to a third party monitoring system. using OPSS as product for fscmRestApi/fndAuditRESTService/auditt… -
Agreed upon procedure - Fusion ApplicationAs per our internal audit team we want to enable "Agreed upon procedure (AUP)" on our Fusion instance. As per auditors this is enabled by Oracle which lets us track all … -
Are there a sign in and failed sign in attempt reports for Oracle Fusion financials.Summary: And is this data available in a table or via an api that we can export to analyze. Our auditors and IT security are requesting Content (please ensure you mask a… -
Oracle Health breachSummary: FYI and any additional infomration would be great. Our old SR was closed for the other even with the denial of the incident. So the other topic is closed, and t… -
Can user reset the password once expired on user login screen by confirming last passwordI understand there is a forgot password link on login screen and user can reset the password by notification link. I just wanted to confirm if there are any ways to rese… -
How can I tell if the user was created using SSO vs manuallySummary: I ran a user report in Oracle OTBI within fusion, and it isn't clear what user accounts are managed through SSO and which ones are manual Oracle accounts whose … -
Best practices for Service Account ManagementSummary: Best practices for Service Account Access Reset to avoid any impact on the business as usual Content (please ensure you mask any confidential information): Hi A… -
Need the table details for Security Console Notifications for the below seeded notifications/custom.In security console user will receive below notifications. Based on the events like user created, password expired etc. Where this data is stored in the database table. … -
Is it possible enable MFA in Oracle Cloud HCM application?Summary: Hi, Please let us know the MFA can be enabled for Oracle Cloud HCM application. We have enabled MFA using IDP but wanted to know if Oracle has provided any solu… -
Name of the table that stores the 'Location Based Access' infoSummary: Hi, I'm trying to figure out the table name that stores the 'Location Based Access' info. Navigation: FA → Tools → Security Console → Administration → Location … -
Is it possible to retrieve IP addresses and user activity logs for a specific dateHello, Is it possible to find out the following information in Oracle HCM Fusion: The IP addresses used by logged-in users for a specific date? Can a top-level log file … -
Fusion environments upgrade to OCI IAMWhen you say SSO will be moved to Oracle IAM from Fusion security console, Will the current configuration setup will be available once it's moved to Oracle IAM or we nee… -
Set up IP Restrictions for FDI instancesHello All, Is there any documentation out there on how to restrict network access to Oracle Financial Data Intelligence URL's through IP restricting? I cant seem to find… -
6 million data records allegedly stolen from the company's Oracle Cloud federated SSO login server?Latest news on Massive Oracle Cloud Breach which was discovered on 21-March-2025 on following link:- https://www.cybersecuritydive.com/news/researchers-oracle-cloud-brea… -
Need to know about OIC admin access is consuming the license or not in oracleHi Team, Could you please confirm if the OIC admin access is consuming the license? -
Configure SSO to land on My Activity Center (Deeplink)Summary: It seems like SSO should allow us to use a deeplink that redirects the user to a specific page. However, I am unfamiliar with SSO configuration and need help wi… -
Moved: Do we have any webservice to call FSM to upload configuration packages in oracle fusion ?This discussion has been moved. -
How to determine if the data breach affected meHow do I determine if the claim A Breach Forums user claimed to have stolen six million records from Oracle Cloud’s SSO and LDAP services affects our organization? -
Need a custom role to use only Open & Close AP, AR, FA &GL periods in oracle fusionHi Team, Need to create a custom role that can be assigned to a user who can only assist in Open & Close AP, AR, FA &GL periods periods. How to create Custom role which … -
2469550.1Summary: Content (please ensure you mask any confidential information): Version (include the version you are using, if applicable): Code Snippet (add any code snippets t… -
Send User Name and Password E-Mail NotificationsSummary: Content (please ensure you mask any confidential information): Version (include the version you are using, if applicable): Code Snippet (add any code snippets t… -
Denied Data Breech in the Media (rose87168)Just an inquiry and to inspire conversation. I've not seen mention of this in the community, so I wanted to see if anyone besides myself were researching it? Only web ar… -
How can some Audit details be reported in Oracle Cloud HCM?Hi, I need some application security details that the client requires. For Example; User Login and logout Roles assigned to the user and their changes Password change in… -
Hi Team is there any specific role that give access to Profile management pagesHi Team, is there any specific role that give access to Profile management pages(Profile app) alone under My client group in Oracle fusion HCM -
Can user be restricted to update/edit/delete few set of lookup codes in common lookup maintenanceUser who have access to lookup maintenance privilege, can access to all lookups to view/update/add/delete. But, customer has a requirement that only set of common lookup… -
Access HCM REST APIs using Oauth method by third party Integration PlatformSummary: Client is already using JWT token method to authenticate. They have their own integration platform through which they are connecting to fusion HCM REST APIs via… -
Upgrade to OCI IAM - MFA options?Summary: Oracle Go Webinar on March 19, 2025 indicated that after the upgrade later this year, we will have the option for MFA for our Fusion environments. (Slides 10, 2… -
Can we limit access to OCWMS and OIC through a set of IP addressesSummary: Business wants to have limited access to OCWMS and OIC through set of IP address Content (please ensure you mask any confidential information): Version (include… -
Links of VB applications pointing to source after Fusion cloud ERP cloneSummary: Links of VB applications pointing to source after Fusion cloud ERP clone. When team members requests access, in the mail links are pointing to source instance. …