To ensure that questions get required attention from community members and are NOT left unanswered, it’s important for the author to indicate (by selecting “Yes” or “No” when prompted) whether the question was answered. (newly added) Please note that it is also important to respond to EACH comment your question receives. Your Yes or No response ensures an accurate status for your question.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
For more information, please refer to this announcement explaining best practices for getting answers to questions.
Applications Security
Discussion List
-
Locking Down Set-Up and MaintenanceSummary: As a part of establishing User Security, Data Security and Plant Profiles our UAA team needs access limited in Setup & Maintenance. We've tried to create a cust… -
Pending Worker Multi-Factor Authentication (MFA)Summary: Oracle documentation states that: 1. "Oracle will begin enforcing multifactor authentication (MFA) for Fusion Applications environments." , 2. "environments tha… -
Guidance about reviewing July 2026 Critical Patch UpdateWe are reviewing the July 2026 Critical Patch Update and the following CVEs: CVE-2026-60880 (Oracle E-Business Suite – Work in Process) CVE-2026-60198 (Oracle WebLogic S…
-
Need to display consolidated Salary Budget and Salary Spend on the Compensation WorksheetSummary: We need to configure a unified Salary Budget vs. Salary Spend view in the Oracle Fusion Compensation Allocation Worksheet. We want an analytical banner, dashboa…
-
Oracle Fusion MFA Enforcement - Toggling MFA On and Off before Enforcement Date in non ProductionHi all, Our enforcement date for Oracle Fusion MFA is coming up soon, and we would like to test this out in one of our non-production environments. If we enable MFA proa…
-
Cookie List for Oracle HCMSummary: Does a comprehensive list of cookies used by Oracle HCM Cloud exist, including their purpose and retention period? If so, where can we find it? Content: We are …
-
Need a password expiry Notification for Specific Users who use Inline Passwords to Sign-inWe would like to enable Password Expiry Notifications in oracle so users are notified in advance of password expiry to update there passwords. Please advise if we enable…
-
ADFdi Excel templates could represent any risk vector or vulnerabilityOur Environment: Oracle ERP Cloud (Fusion Applications – SaaS) Usage of ADF Desktop Integration (ADFdi) Excel templates for data import/export We would like to confirm w…
-
Create role for Manage CarriersSummary: Hi all, I have a requirement to create a new role that provides access to Manage Carriers. I created a custom role and assigned the Carrier Management role to i…
-
Oracle SSO keeps on logging out after 30 minutes & logs user out of all other SSO's sessionsSummary: Oracle SSO logs users out after approximately 30 minutes of inactivity, and the logout also terminates all other active SSO sessions in the browser (e.g. Micros…
-
How to Identify Historical User Role Assignment Changes When the Role Has Already Been Removed?We are currently investigating a security access issue where we believe a user may have been assigned an incorrect role in the past. The challenge is that the role has a… -
Is Employee role cost license? Is there a document that list all the roles that may consume license?Summary: We are finalizing our security matrix and making sure we will not exceed the number of license available for different roles. One thing we want to know if Emplo…
-
what are the privileges required to access My Client GroupsSummary: Content (please ensure you mask any confidential information): Version (include the version you are using, if applicable): Code Snippet (add any code snippets t…
-
Concurrent SSO and Direct login ability for a userSummary: Oracle documentation isnt really clear. SSO enabled as well as chooser page. Can a user have login via SSO and also optionally with the direct login via chooser…
-
In a threat actor situation, is there an alternative path for limited access to fusion applications?Summary: In a scenario where an employee turns into a threat actor and hacks the network blocking normal access to Oracle Fusion HCM Payroll, can Oracle provide an alter… -
Critical Security Vulnerabilities (CVSS > 9.5) – Impact on ERP Cloud, OCI, OIC and ADFdi (July 2026Summary: Dear Community, we received a security alert for following relevant CVEs. CVE-2026-60880 (Oracle E-Business Suite – Work in Process) CVE-2026-60198 (Oracle WebL…
-
Region/Country-Based Geo-Fencing Support for Oracle EPM CloudSummary: Region/Country-Based Geo-Fencing Support for Oracle EPM Cloud Content (please ensure you mask any confidential information): We have a query regarding access re…
-
Critical Security Vulnerabilities (CVSS > 9.5) – (July 2026 CPU)Problem Description: We have received an official security alert from Costa Rica CSIRT (MICITT) regarding multiple critical vulnerabilities affecting Oracle products, pu…
-
SAML Metadata file details change after refresh?Summary: We are in the process of configuring Okta-based SSO for our Fusion ERP environments. After completing our first refresh (T2T | Dev > Test), it looks as though o…
-
Custom Role to view Schedule process is not coming under ToolsSummary: In Fusion HCM, my requirement is to view the scheduled process only, no other action can be performed. So I created a Custom abstract role , as Role Category: C…
-
Convert to Federated UsersSummary: we have users setup to allow both user name-password and single sign-on in the Sign-on Policies under Domain Policies. We want to convert these users to federat…
-
Representatives can see employees in all organizations the employee is assigned toOur person security profiles are secured by Area of Responsibility. The Scope of Responsibility is "Organization hierarchy for department" and we have an organization hi…
-
Stuck Privilege (from creating ESS Job), Cannot be removed in security console.Summary: We created an ESS job for a report. I completed creating the ESS Job and ran the ImportUser and Role Application Security Data. Privilege for the ess job was cr…
-
Restrict Chart of Account Segment Access from One Entity, While Allowing access on different entityIs there a way to restrict access at the COA segment combination? For example, can you restrict access for users on reporting/transactional access from Account 1000 with…
-
Security Console User Category Notifications vs. Identity Domain NotificationsSummary: The User Category area within the Security Console in HCM has always been the main hub for user notifications. Now we have noticed a Notifications area in the H…
-
How to Create a Data Security Policy for the Customer Screen and AP ScreenHi , We have requriment to hide the specific person customer information from user X. For Example wherer Party_id =[speciefic number] Same we have the requirment to hide…
-
How to generate fingerprint for public keySummary: We are setting up sftp connection with bank and have generated the private and public keys but they are requesting to share the fingerprint as well which is lik…
-
Oracle Fusion MFA Enforcement — PROD options for automation/service accountsHello Everyone, We are reviewing the upcoming Oracle-enforced MFA change for Fusion Applications after OCI IAM migration. Oracle documentation appears to state that MFA …
-
Placing BIP output in oic file serverHi , We have a requirement to place BIP report output in OIC file server. We have received a private key file from OIC team , We are trying to configure that set up in O…
-
Data Model is not available Under Create option in BIPSummary: Data Model is not available Under Create option in BIP Content (please ensure you mask any confidential information): Hi All, Greetings! We have added the needf…