Is there a way to produce a list of current and disabled IFS users, showing when each account was created and disabled, for SOX audit evidence — FND_USER itself only shows whether an account is currently active or inactive, with no creation/disable dates, and the environment uses Single Sign-On with no directly-managed Oracle passwords?

All FAQ questions / Security and access

Answer

Even in an SSO-authenticated environment, every IFS Applications user still has an underlying Oracle database account whose lifecycle can be queried via the standard Oracle dba_users view, which the application owner has default access to. Cross-reference the currently-inactive IFS users, from FND_USER where active = 'FALSE', against dba_users' own created, lock_date, and account_status columns to produce exactly this kind of active/inactive user list with creation and disable dates for SOX audit evidence, since account creation and lock dates are tracked at the underlying Oracle-account level even though FND_USER itself doesn't store them directly.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Security and access questions