Oracle Analytics and AI

Stefano_Mazzocca

I'm trying to setup SSO in FDI environment following these instructions: https://docs.oracle.com/en/cloud/saas/analytics/26r1/fawag/user-access-single-cloud-account.html

Unfortunately it seems more related to HCM because if I go to  Configure JWT Authentication Provider it seems referring to HCM

So does exist some tutorial to setup SSO in FDI?

Thank you

Arindam Sadhukhan-Oracle

Hi @Stefano_Mazzocca ,

There is FDI-specific documentation for SSO, but the setup can look confusing because one of the referenced
steps uses the Fusion Applications Security Console/JWT authentication flow, which is shown in an HCM-based
tutorial.

In simple terms, there are two parts:

1. JWT setup in Fusion Applications: This is not really “FDI SSO” by itself. It allows Oracle Fusion Data Intelligence to securely connect back to the Fusion Applications source. In the FDI documentation, Oracle specifically says to configure JWT and use FAWServiceJWTIssuer as the trusted issuer.
2. SSO setup for users logging into FDI : This is handled through OCI IAM identity domains / SAML / identity provider policies, depending on whether your Fusion Applications and FDI are in the same cloud account or separate cloud accounts.

So the HCM-looking page is expected because JWT/API authentication is configured in the Fusion Applications
Security Console. It does not mean the SSO setup is only for HCM.

The correct FDI starting point is:

• Set Up User Access to Oracle Fusion Data Intelligence Using Single Sign-On

From there, choose the scenario that matches your environment:

• Fusion Applications and FDI in the same cloud account
• Fusion Applications and FDI in separate cloud accounts

If your FDI instance is already created, check the documentation carefully because some SSO setup is expected
before instance creation, while some scenarios require additional post-creation setup such as identity provider
policy configuration.

References

• Oracle FDI SSO setup:

https://docs.oracle.com/en/cloud/saas/analytics/25r4/fawag/user-access-oracle-fusion-data-intelligence-using-single-sign.html

• Same cloud account scenario:
  https://docs.oracle.com/en/cloud/saas/analytics/25r4/fawag/user-access-case-single-cloud-account.html
• Separate cloud accounts scenario:
  https://docs.oracle.com/en/cloud/saas/analytics/25r4/fawag/user-access-case-separate-cloud-accounts.html
• Configure SSO between two identity domains:

https://docs.oracle.com/en-us/iaas/analytics-for-applications/doc/configure-single-sign-between-two-identity-domains.html

Regards,

Arindam.