How to Secure ADF applications on Java Cloud Service

Kumaran Raviprakash

Any Pointers or steps which are to be followed in configuring security and using the same for ADF applications deployed on Java Cloud Service and can we configure our own authenticator in JCS weblogic or we would need to use Oracle Cloud identity itself?Any documentation or sample which could be pointed to will be really helpful.

Bhuwanesh

Hi

You have not mentioned if you mean JCS-SX or JCS? They do have quite a few difference in a way security works.

Follow this documentation to secure ADF application for JCS-SX. https://docs.oracle.com/cloud/latest/javacs_gs/CSJSU/GUID-584D7322-2626-4EA2-BCE6-2F25F4186837.htm#CSJSU7201

For JCS normal form based custom login security will work too.

You can also configure third party authenticator in JCS weblogic server just like any stand alone weblogic server. Here again if you are working on JCS-SX things will be different

as you do not have weblogic console access in that case.

Hope this helps

Bhuwanesh

Kumaran Raviprakash

This is Pure JCS  not JCS-SX in JCS case can we make use of existing Oracle Cloud security ?

Bhuwanesh

Can you pleas explain what do you mean by "make use of existing Oracle Cloud Security " ?

Kumaran Raviprakash

Make use of existing Cloud security is make use of the users which are created in the cloud console as part of the JCS subscription which we get and assign custom roles to these users and use the same custom roles in our application role mapping in ADF application.

This is what is meant by using Oracle Cloud Security

Bhuwanesh

Hi Ravi

Yes you can make use of the default users and custom roles created in JCS console to secure your ADF application. You need to create custom roles with exactly same name, as your enterprise roles in jazn-data.xml once you secure your application and then assign users to that role in JCS console. Security will work as expected in the JCS environment.

You will find many examples in google/oracle documents regarding steps to secure your application.

Does it answer your question ?

Bhuwanesh

Bhuwanesh

one of the links i mentioned above is https://docs.oracle.com/cloud/latest/javacs_gs/CSJSU/GUID-584D7322-2626-4EA2-BCE6-2F25F4186837.htm#CSJSU7201

Kumaran Raviprakash

Hi Bhuwanesh,

Link mentioned provides the steps for securing applications on JCS-SX, so the same will hold good for JCS (Java Cloud Service) also is my understanding correct?

Regards,

Kumaran

oladslw

thanks for this, i'll try this out too