Security and access FAQ — page 3
All FAQ topics / Security and access
296 questions · page 3 of 8
Is there a way to disable/hide the Database Authentication login option on the Aurena login screen in IFS Cloud, leaving only SSO available — particularly for an externally-facing Cloud site?
Saving in Page Designer fails with 'Your system administrator has not granted permission to complete that action' on a brand-new database, even for a user who otherwise seems to have broad access.
Application Messages keep failing every few seconds with an error tied to a NotifyMe/ManageMobileApplication XML message, and the error text points at IFSAPP, but nothing about IFSAPP's own configuration seems wrong — even editing 'Installed Apps/Devices' for NotifyMe (which isn't even in use) triggers the identical error.
A user gets 'user has not been granted access to activity ClientApplication' when trying to log in to the client. What permission actually controls this?
During the concept/development phase of an IFS Cloud implementation, what access should key users and integrators' users be given — full access so they can see everything while the business processes are still being defined, or should fine-grained permission sets be built out from the start?
A PL/SQL script that programmatically copies a user's roles to another user (via Fnd_User_Role_API.Set_Role in a loop, followed by Fnd_User_Role_API.Refresh__ and Security_SYS.Refresh_Active_List__) shows the roles correctly assigned in the application afterward, but the target user still doesn't have full access once they actually log in.
A small group of users sharing a single Apps10 login sometimes get a warning that someone else is using that login, but other times get silently logged out with lost work instead, with no consistent notification. Is there a way to make that notification reliable, or a better approach entirely?
Can a single user account be logged into IFS from more than one device at the same time — for example a PC and a tablet, for someone moving around a warehouse?
For Cloud licensing purposes, does 'concurrent user' mean per browser tab/session a user has open at once, or per user ID regardless of how many tabs are open?
Is there a way to generate a report listing employees/users and which license type (Full vs Limited) each has been assigned?
Requesting environment passwords through the IFS Support Portal's Cloud Services 'Password Request' form doesn't list IFSADMIN as an available account to request, even though other IFS system accounts appear in that dropdown.
Is there a way to use Permission Set Filters (restricting which specific object-level records a user can see within a broader permission grant) in IEE or the standard (non-native-mobile) Aurena client, the way they already work for mobile?
After customizing a base form (window) that was already granted in an LTU (license-generated) permission set, users with that permission set lose access to the form entirely — the base form still shows as granted in the permission set, but it's the customized version that actually gets displayed, and that one isn't granted.
A permission set is tied to an LTU license key, and it needs an additional presentation object granted — but the normal 'Merge grants from other permission set' option isn't available, and using the 'Remove License Connection' option instead throws an error. How do you actually modify a license-connected LTU permission set?
Is there a way to use Active Directory (rather than a PIN code) for Security Checkpoint electronic sign-off in IFS Cloud, to support 21 CFR Part 11-style compliance requirements (non-sequential codes, periodic forced changes, no code reuse)?
Connecting hundreds or thousands of users to a Company (and potentially multiple Sites) in a Managed Cloud environment with no direct database access — is there really no way to do this in bulk, short of manually repeating the same steps in the client for every single user?
Is there a way to see which users are (or aren't) connected to a specific Base Profile?
An Active-Directory-authenticated user gets an access-denied login error ('User not allowed access... User not set as Active / User is not granted connect privileges'), even though the user's IFS account shows as Active and unlocked, and the database-level user is confirmed connected.
A user can see a full menu of options for a functional area (like Engineering) in IEE, but the exact same area shows only one or two menu items in Aurena for that same user.
Is there a way to see a list of every user/permission set that has access to a specific feature-form window (like Print Manager), when the window itself doesn't expose a 'grantees' view directly?
Is there a way to prevent one user account from being logged in simultaneously from multiple devices/browsers in Aurena, the way it wasn't possible in some earlier IFS client technologies?
SSO with ADFS lets users log in by manually entering AD credentials, but choosing 'Sign in as current user' (integrated/Kerberos-style authentication) fails with a 401 Unauthorized from the application server, even though the ADFS configuration otherwise appears correct per IFS's own SSO documentation.
Trying to configure SCIM to sync users from Azure AD to IFS Cloud, a request to the SCIM endpoint returns 404 Not Found, even after generating a SCIM client token — what's the correct endpoint URL and setup sequence?
Is there a way to build a Quick Report showing login details (who logged in and when) for a specific set of users, like everyone assigned a particular role?
A specific presentation object (like History Log) is missing from the Presentation Objects by Component tree in Production, but shows up fine in a Test environment with the same effective user permissions — how do you get it to appear/re-enable it in Production?
Can a single user be granted more than one LTU (Limited Task User) permission set at the same time — for example, being both a PO authorizer and an invoice authorizer, each via a separate LTU permission set — without that combination upgrading them to a Full User?
Setting up SSO from Azure AD to IFS Cloud using SAML fails with a generic 'Unexpected error when authenticating with identity provider,' even though the Azure Enterprise Application's own Test SSO check reports success.
A user working without SSO can't get past IEE's automatic single-sign-on attempt to manually enter their own credentials — holding Shift and unticking 'Use single sign on' still results in IEE automatically trying (and failing) to log them in via SSO, with no option shown to enter credentials manually.
When a permission-set structure is too restrictive and something can't be accessed, the client's own log window shows no useful detail — is there an easier way to diagnose exactly which permission is missing, short of digging through the browser's developer tools?
Where are Permission Set descriptions actually stored in the database — querying for permission set names and what's granted to users works, but the descriptions themselves aren't obvious where to find?
A permission set grants select-only access to accounting tables for a read-only database user, but when querying those tables, only the column headers show — no actual row data comes back, even though the permission set itself looks correctly configured.
A user gets 'entity instance not found' trying to run a specific Quick Report from a screen's RMB menu (Print Highlighted), even though running the exact same report manually works fine and nothing appears in the Debug Console when the user's attempt fails — where is access to run a specific Quick Report actually controlled?
The IFS login page's change-password function fails in the browser with NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM, even though the installed SSL certificate isn't expired.
How do you create an IFS user/permission set with read-only access to essentially everything in the system, without manually checking off access to every individual object?
In Apps10, specific reports could be granted to a Permission Set through a 'Reports' option under Presentation Objects by Navigator — IFS Cloud doesn't seem to have that same screen. How do you grant access to a specific report under a Permission Set in Cloud?
Is there a way to disable the Sticky Notes option on the toolbar for a specific permission set or base profile, rather than it being available to everyone?
After upgrading to IFS Cloud 22R1 SU2, some users see 'No access; Your system administrator has not granted permission to complete that action' immediately after login (clicking OK lets them continue normally) — temporarily granting the FULL permission set makes the error stop appearing permanently, even after removing FULL again, but only once the browser cache is cleared.
With Azure AD (AAD) SSO authentication enabled for an environment, is it still possible to log in using a direct Oracle database account instead, and if so, how do you get IFS to actually prompt for those credentials?
Is there a database-level query to find every screen (window) a specific user is authorized to access, rather than manually tracing through Permission Sets in Solution Manager one by one?
No questions match. Try a broader term or reset the filters.