Exclusively use SSO for authentication
We have set up SSO in the Oracle Fusion environment with Azure Entera. The client is interested in controlling access to the system through Entera, however it seems as though there are multiple other points of entry into the application even if the "Chooser Option" for authentication is enabled. For example:
1. REST APIs and SOAP Web Services still use Basic Authentication. This means that it is impossible to monitor REST API calls from Entera like how we can monitor user access from the UI.
2. The mobile apps all provide the option for accessing the system using Basic Authentication. For example, even though the chooser option was disabled, I was able to access the Expenses app and the HCM Mobile app with my Oracle credentials rather than being forced to use SSO.