To ensure that questions get required attention from community members and are NOT left unanswered, it’s important for the author to indicate (by selecting “Yes” or “No” when prompted) whether the question was answered. (newly added) Please note that it is also important to respond to EACH comment your question receives. Your Yes or No response ensures an accurate status for your question.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
Applications Security
Discussion List
-
Unknown User Names in PU_USERS TableSummary: Seeing plenty of Unknown User Names in PU_USERS Table. Few samples are give below. 1)Please let know whether this pose any threat 2) Are these Oracle generated?… -
Is it possible to view login activity of users?Summary: We would like to be able to view how many times a user has logged into the oracle fusion environment and on what date. Is there a role/report within Fusion whic…
-
Automatic Revocation of Roles assigned to Users based on End DateSummary: In old days of EBS, the Responsibilities assigned to Users had a Start Date and End Date. The Responsibility assigned to the user would be functional only betwe…
-
If SSO is enabled, should the Oracle User Name be same as SSO email ID??Summary: If SSO is enabled, should the Oracle User Name be same as SSO email ID?? for eg: In SSO , email ID of employee is abd@company.com. And the user name in security…
-
Enabling External Application Integration with Fusion SaaS Security ConsoleSummary: We are trying to enable external application integration like FDI, EPM FCCS, EPM ARCS with Fusion Security Console. For this, we have enabled profile option “OR…
-
Rotation of Service Provider SAML / SSL CertificateWe would like to know if it's possible to have Oracle rotate the Signing and / or Encryption Certificates that can be found in Security Console. See attached image. We k…
-
Password ManagementHello, I searched the entire security memo and couldn't find the answer to my question: https://docs.oracle.com/en/cloud/saas/applications-common/25a/facsa/how-can-i-dis… -
How to skip Fusion SSO login page?Hello Employees in our organization access various Fusion HCM pages via deep links configured in our company's internal portal. For example, one link takes them to perso… -
grant in SYSTEM scope failed due to JPS-04201 oracle HCM OPSS audit rest APIfor an audit integration, we need to transmit audit REST API details to a third party monitoring system. using OPSS as product for fscmRestApi/fndAuditRESTService/auditt…
-
Agreed upon procedure - Fusion ApplicationAs per our internal audit team we want to enable "Agreed upon procedure (AUP)" on our Fusion instance. As per auditors this is enabled by Oracle which lets us track all …
-
Are there a sign in and failed sign in attempt reports for Oracle Fusion financials.Summary: And is this data available in a table or via an api that we can export to analyze. Our auditors and IT security are requesting Content (please ensure you mask a… -
Oracle Health breachSummary: FYI and any additional infomration would be great. Our old SR was closed for the other even with the denial of the incident. So the other topic is closed, and t… -
Can user reset the password once expired on user login screen by confirming last passwordI understand there is a forgot password link on login screen and user can reset the password by notification link. I just wanted to confirm if there are any ways to rese… -
How can I tell if the user was created using SSO vs manuallySummary: I ran a user report in Oracle OTBI within fusion, and it isn't clear what user accounts are managed through SSO and which ones are manual Oracle accounts whose … -
Best practices for Service Account ManagementSummary: Best practices for Service Account Access Reset to avoid any impact on the business as usual Content (please ensure you mask any confidential information): Hi A… -
Need the table details for Security Console Notifications for the below seeded notifications/custom.In security console user will receive below notifications. Based on the events like user created, password expired etc. Where this data is stored in the database table. …
-
Is it possible enable MFA in Oracle Cloud HCM application?Summary: Hi, Please let us know the MFA can be enabled for Oracle Cloud HCM application. We have enabled MFA using IDP but wanted to know if Oracle has provided any solu…
-
Name of the table that stores the 'Location Based Access' infoSummary: Hi, I'm trying to figure out the table name that stores the 'Location Based Access' info. Navigation: FA → Tools → Security Console → Administration → Location … -
Is it possible to retrieve IP addresses and user activity logs for a specific dateHello, Is it possible to find out the following information in Oracle HCM Fusion: The IP addresses used by logged-in users for a specific date? Can a top-level log file … -
Fusion environments upgrade to OCI IAMWhen you say SSO will be moved to Oracle IAM from Fusion security console, Will the current configuration setup will be available once it's moved to Oracle IAM or we nee…
-
Set up IP Restrictions for FDI instancesHello All, Is there any documentation out there on how to restrict network access to Oracle Financial Data Intelligence URL's through IP restricting? I cant seem to find…
-
6 million data records allegedly stolen from the company's Oracle Cloud federated SSO login server?Latest news on Massive Oracle Cloud Breach which was discovered on 21-March-2025 on following link:- https://www.cybersecuritydive.com/news/researchers-oracle-cloud-brea…
-
Need to know about OIC admin access is consuming the license or not in oracleHi Team, Could you please confirm if the OIC admin access is consuming the license?
-
Configure SSO to land on My Activity Center (Deeplink)Summary: It seems like SSO should allow us to use a deeplink that redirects the user to a specific page. However, I am unfamiliar with SSO configuration and need help wi… -
Moved: Do we have any webservice to call FSM to upload configuration packages in oracle fusion ?This discussion has been moved. -
How to determine if the data breach affected meHow do I determine if the claim A Breach Forums user claimed to have stolen six million records from Oracle Cloud’s SSO and LDAP services affects our organization?
-
Need a custom role to use only Open & Close AP, AR, FA &GL periods in oracle fusionHi Team, Need to create a custom role that can be assigned to a user who can only assist in Open & Close AP, AR, FA &GL periods periods. How to create Custom role which …
-
2469550.1Summary: Content (please ensure you mask any confidential information): Version (include the version you are using, if applicable): Code Snippet (add any code snippets t…
-
Send User Name and Password E-Mail NotificationsSummary: Content (please ensure you mask any confidential information): Version (include the version you are using, if applicable): Code Snippet (add any code snippets t…
-
Denied Data Breech in the Media (rose87168)Just an inquiry and to inspire conversation. I've not seen mention of this in the community, so I wanted to see if anyone besides myself were researching it? Only web ar…