1. Business Need / Problem Statement:
Currently, configuring an Oracle Analytics Publisher (BI Publisher) connection within the Fusion Data Intelligence (FDI) Console to extract and load data into FDI only allows Basic Authentication (username and password credentials).
With Oracle deprecating basic username/password authentication for SOAP and API endpoints across Fusion Cloud by March 2027, relying on basic credentials introduces compliance risks, security vulnerabilities, and potential service disruptions for custom data pipelines.
2. Requested Enhancement / Solution Description:
We request Oracle Product Management to enhance the FDI Console connection framework to support OAuth 2.0 / Token-based Authentication for Oracle Analytics Publisher integrations:
- OAuth 2.0 Authentication Support: Add support for configuring OAuth 2.0 (e.g., Client Credentials Grant, JWT Bearer Token, or IDCS/Identity Domain Confidential Application integration) when establishing an Analytics Publisher connection for Fusion OTBI in the FDI Console.
- Service-to-Service Secret Management: Allow token-based authentication options that bypass the requirement for stored basic user credentials.
- Backward Compatibility / Migration Guidance: Provide a seamless configuration pathway in the FDI Console to transition existing basic authentication setups to OAuth without disrupting active data pipelines.
3. Business Impact & Value:
- Compliance & Security: Aligns FDI and Fusion BI Publisher integration with Oracle's security best practices, eliminating hardcoded or basic credential dependencies.
- Business Continuity: Prevents automated data pipeline failures resulting from the deprecation of basic authentication on service and user accounts.
- Operational Efficiency: Reduces administrative overhead associated with updating and maintaining passwords for service accounts subject to password expiration or policy changes.
