Ability for Fusion Cloud SaaS SOAP Web Service to take IDCS based confidential application provided
Description
IDCS provides the ability to create a confidential application and use the provided Secret token as the credentials within OIC(PaaS) connections which in turn makes the credential non-expiring credentials as well as can be used within other 3rd party applications as well as for Integrations with Fusion/PaaS systems.
Use Case and Business Need
Fusion Web Services which has SOAP WSDL within needs the credentials for the same to be authenticated and we were planning to use the IDCS based confidential application provided secret key for authorization which could benefit, instead of the need of maintaining individual user accounts for this authentication.
More details
Currently, Fusion SaaS Web Services only supports IDCS federated individual user accounts for authentication whereas when we tried to use the IDCS Confidential application it failed to authenticate with an error. When reached out to Oracle, this particular use case has never been tested out and in turn needed to be raised as n ER. This is a much-needed business requirement as IDCS confidential application in a way provides us an opportunity to use a secret key that doesn't have any password policy as such attached to it whereas an individual account gets associated with the custom or default password policy which makes it difficult to maintain and avoid the password from not getting expired and in case a password reset is not done for this user on time, this Web Service authentication fails and all the associated integrations fail.
Original Idea Number: 76a8cb4dac
Comments
-
This will make connections between OIC and Oracle fusion much more simpler when you don't have to use an expiring login from OIC
0 -
Good idea, this will simplified the connection between OIC and SaaS.
0