Thank you for supporting the Cloud Customer Connect Community in 2024. It's a gift to work with you!

Look back
You're almost there! Please answer a few more questions for access to the Applications content. Complete registration
Interested in joining? Complete your registration by providing Areas of Interest here. Register

Exclusively use SSO for authentication

in Applications Security 4 comments

Hello,


We have set up SSO in the Oracle Fusion environment with Azure Entera. The client is interested in controlling access to the system through Entera, however it seems as though there are multiple other points of entry into the application even if the "Chooser Option" for authentication is enabled. For example:


1. REST APIs and SOAP Web Services still use Basic Authentication. This means that it is impossible to monitor REST API calls from Entera like how we can monitor user access from the UI.

2. The mobile apps all provide the option for accessing the system using Basic Authentication. For example, even though the chooser option was disabled, I was able to access the Expenses app and the HCM Mobile app with my Oracle credentials rather than being forced to use SSO.

Tagged:

Howdy, Stranger!

Log In

To view full details, sign in.

Register

Don't have an account? Click here to get started!