To ensure that questions get required attention from community members and are NOT left unanswered, it’s important for the author to indicate (by selecting “Yes” or “No” when prompted) whether the question was answered. (newly added) Please note that it is also important to respond to EACH comment your question receives. Your Yes or No response ensures an accurate status for your question.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
Applications Security
Discussion List
-
How to Create Custom Role to edit supplier but Make Supplier Profile Read OnlyWe have a requirement to give access to edit addresses and sites, but we don't want these users to edit the supplier name. In order to edit the supplier site, they must … -
How to Restrict Access to Setup and Maintenance Tasks by Role in Oracle Fusion HCM and Financials?Summary: Hello, We are implementing Oracle Fusion Applications and have a customer requirement related to securing the Setup and Maintenance area based on user roles. Sp… -
Security Matrix for Predefined RolesSummary: We are looking for a Security Matrix for Predefined HCM Roles. Content (required): We are looking for a Security Matrix for Predefined HCM Roles. We have an out… -
Navigation to Real User Experience REUI metricsSummary: Can we still collect the Real User Experience (REUI) > User Activity Metric Report? Content (please ensure you mask any confidential information): When we were … -
Need details around the user with Username "urn_opc_resource_fusion_<instance_name>_erp_APPID"Summary: We have observed that a new bank branch was created on May 30, 2025, by the user account "urn_opc_resource_fusion__erp_APPID." However, when we searched for thi… -
Track all Login attempts from REST/SOAP APISummary: We would like to track and report on all Login Attempts from any of the REST/SOAP API's that are exposed within Oracle Fusion Cloud. We thought this information… -
Unable to access Oracle Cloud through the mobile browserHello Team, User is trying to make login from mobile browser but somehow browser is pushing user to reset password. To reset password, mobile browser is not allowing and…
-
OCI IAM Upgrade - Pre-upgrade tasks (and IdP) clarificationHi Team, Regarding to the https://docs.oracle.com/en-us/iaas/Content/fusion-applications/identity-migration-overview.htm#identity-migration-actions-before documentation,…
-
Oracle Payroll – Cross-Validation Rule Validation During Payroll RunSummary: During the payroll run system should validate whether the applicable costing combination complies with the cross-validation rules configured in Finance. If a re… -
can we restrict users to see audit reports for a specific object not for other object in ERP Oraclecan we restrict users to see audit reports for a specific object not the other object for which the audit policies are enabled in ERP oracle cloud? for example - Both Su…
-
Authenticating Oracle Fusion REST APIs Using Microsoft Entra ID TokensSummary: Guidance on Authenticating Oracle Fusion REST APIs Using Microsoft Entra ID Tokens Approach: https://www.ateam-oracle.com/post/aad-token-fusion-apis Content (pl…
-
Post OCI IAM upgrade login screen "customization"Summary: Customer completed OCI IAM upgrade for non-production environments in Sep-26 (federated). The Customer wants to highlight the Single-Sign In button which is now… -
Issues with user accounts being inactivated for employees with active HCM recordsI dont know if LDAP is the culprit but we have active employees who have user accounts that infrequently set to 'inactive'. These user accounts have roles assigned to th…
-
B91083 - Oracle Fusion Procurement for Self Service Cloud Service - Hosted Named User - Not MeasuredWe have observed that in the latest(from September'26) SaaS Usage Metrics report, the following SKU is reported as not being measured by Oracle. B91083 - Oracle Fusion P…
-
Passing SSO/JWT Token from Fusion SaaS to APEX for REST Data Source AuthenticationEnvironment: Oracle APEX (self-hosted, ORDS) Oracle Fusion Cloud Applications (SaaS) APEX Authentication Scheme: Social Sign-In (OpenID Connect) REST Data Sources: Oracl…
-
A View ONLY for everything that involves PROJECTS.Summary A View ONLY for everything that involves PROJECTS.Content I'm attempting to create a custom role for PROJECTS View only. My current issue is the role I created w…
-
After the IAM upgrade, what is the password expiration frequency/policy for service accounts that doSummary: After the IAM upgrade, what is the password expiration frequency/policy for service accounts that do. Content (please ensure you mask any confidential informati… -
Audit user's deleted rolesHi team, As part of auditing requirement, our auditors wanted to find out when the role was added/removed from user accounts and who performed it. I found a Doc ID 29515…
-
Can AOR at Legal Employer Level Control Person, Business Unit, and Payroll Security?Summary: Clarification required on whether a single Area of Responsibility (AOR) assignment at the Legal Employer level can be used to control employee, Business Unit, a…
-
MFA enforcement in Oracle Fusion Applications - TESTSummary: Hi everyone, We are looking for some guidance from the community regarding the 26B MFA enforcement in Oracle Fusion Applications. Oracle 26B MFA enforcement has… -
Is there a way to hide the Reset Password option under the Set Preferences page?Summary: Is there a way to hide the Reset Password option under the Set Preferences page under Tools?
-
Is Redwood feature enabled for Security Console and Transaction consoleSummary: Redwood features are enabled for Different modules and wants to know whether Redwood is enabled for Security Console and Transaction console? Content (please en…
-
How to delete emails from inactive usersCurrently, terminated users continue to save their email in the security console, creating inconsistencies if a new user arrives and uses their new email. I would like t…
-
How to delete audit logs?We are planning to enable Audit Trail in Oracle Fusion How can we delete the audit logs/history? When deleted, are the logs permanently removed from storage?
-
How can I perform bulk password uploads via HDL in Oracle Cloud?Summary: Hello, I would like to know how to perform a bulk password update in Oracle. I understand that it is possible to do this on an individual, user-by-user basis vi…
-
Request for Role-Level Access List for Journal SourcesHello, Is there any way to find out all the privileges and access for the roles within the system? I'm looking to find out how to segregate access by Journal Source: Ass…
-
how to check if the Oracle fusion instance has been upgraded to IAMSummary: Content (please ensure you mask any confidential information): Version (include the version you are using, if applicable): Code Snippet (add any code snippets t…
-
Fusion Identity Upgrade: Customize Sign-In Page LayoutSummary: Is it possible to customize the login screen so that: • The Single sign-on button is on the top of the page • Pod name is always visible on the login page Conte…
-
Report for a list of Enabled Audit Business ObjectsSummary: Currently we enabled a number of itemsfor audit under "Manage Audit Policies" --> "Configure Business Object Attributes". However in order to know what items ar… -
Audit Policies Business Objects Excel ListingSummary: Audit Policies Business Objects Excel Listing Content (please ensure you mask any confidential information): Please advise if we have a consolidated list in exc…