Security and access FAQ — page 5
All FAQ topics / Security and access
296 questions · page 5 of 8
Accidentally leaving 'Remember Password' ticked while testing with a different user login now results in 'Login is denied. User has already logged onto IFS Account' every time — how do you get back to a normal login screen to enter different credentials?
Is it possible to expose the Employee Portal to users outside the internal network by installing it on a separate, dedicated server, so the main Application Server itself doesn't have to be directly exposed to the internet?
Publishing a Custom Projection fails with 'Custom framework is not enabled. Please enable it from system parameters,' but the System Parameters window itself doesn't appear to be accessible/visible to check or change that setting.
With SSO enabled, is there an Aurena equivalent to the IEE '/admin' login option (used for support/investigation purposes to log in as a different end user in non-production) — and more broadly, is there any officially supported way to bypass SSO in Aurena for troubleshooting?
Trying to access the 'Middleware Server Admin Console' on IFS Cloud (IFS Managed Cloud hosted) to retrieve the OpenID Connect Client ID and Secret needed for external configuration — how do you get to this console on Cloud?
Is it possible to hide or restrict just one specific column (not an entire screen or tab) from a specific user through a permission set — for example, hiding the 'Over Delivery Tolerance' column on the Purchase Order Line table for one user?
Users get locked out after 3 failed login attempts — is there a way to see the configured number of allowed attempts per user before lockout, and is it stored per-user somewhere queryable?
Is there a way to disable the 'Layout' option in the Properties right-click menu, so users can't accidentally change/break a screen's layout — it doesn't seem to exist as an obvious permission?
The 'System Info' context panel doesn't appear at all for a user — it's not even available as an option when right-clicking to customize the visible panels.
Is it possible to attach permission sets to a User Group, so that any user placed into that group automatically inherits those permission sets, rather than having to grant them to each user individually?
Is there a pre-existing standard permission set that can be granted to users who just need basic access to log into Aurena, equivalent to FND_RUNTIME for logging into IEE — currently FND_ADMIN is being used, which grants far more access than intended?
Is there a way to track historical user activity in IFS/Oracle — which modules/transactions were used, by whom, how frequently, and which had the highest CPU usage — beyond what gv$session shows for currently active sessions, without access to Oracle Enterprise Manager?
How do you reopen an Oracle database user account that's shown as EXPIRED (as distinct from a locked account) in IFS10?
A personal (non-IFSAPP) user creates a new Lobby, saves it, and it correctly shows up in the Lobby Overview — but double-clicking it immediately afterward shows 'page not found,' even though the user is obviously the one who just created it. How do you get a user into a position where they can create and immediately access their own lobby?
A user's Application Search results include records (like RFQ header/line details) they get an access-denied error on when they try to open directly — does Application Search ignore permission-set restrictions?
A user can open a screen (like Customer) fine after being granted an EU/GDPR-related role in one environment, but the same role grant in another environment throws 'ORA-00904 ... IS_VALID_CONSENT_BY_KEYS: invalid identifier' when the same screen is opened — what's different?
Can additional standard screens be granted to a Lite User (LTU) permission set to cover a specific business need, without risking a license compliance issue?
Is there a database view that exposes the total/available seat counts for LTU, ATU, or CTU license types (not just current usage), the way a premade Lobby element already does for Full User licenses?
When configuring Azure AD as the authentication provider (with redirect/callback URIs pointing at a hostname like `test888.example.com`), does that hostname need to be registered in public DNS, or is a local/internal DNS entry sufficient?
Applying a new IFS Applications license file fails with a message like 'The new license does not meet the usage of IFS Applications' — what causes this and how is it resolved?
Is it possible to set a shorter automatic-logout idle timeout for one group of users (like office/finance staff) while leaving another group (like warehouse/scanner users) with no timeout at all, the way Oracle Profiles' Idle Time setting normally would for a database session?
Does IFS/Oracle licensing cover using the Java runtime for related tooling like the Print Agent or Report Designer, given that IFS Middleware Server ships with its own bundled Oracle JDK?
In an IFS Managed Cloud (SaaS-hosted) environment, a Redirect URI needs to be added or corrected (for example, to fix an 'invalid redirect URI' error in a mobile touch app) — but there's no direct access to the Admin Console to do it. How is this actually requested?
For Azure AD-authenticated external B2B partners who need to log into a customer-facing portal using their own organization's email address, is there a way to configure a different authentication/identity-provider behavior specifically for that one portal, separate from the rest of the environment's Azure AD setup?
Reconfiguring the Middleware Server with a renewed SSL/TLS wildcard certificate consistently fails with 'Unable to initialize SSL environment' and a client handshake error, regardless of which certificate file format (.pem, .crt, .pfx, .p12) is tried — what's one thing worth checking on the private key file itself?
Converting from local IFS authentication to Single Sign-On, where users currently log in with their Windows/email account rather than the IFS Identity's initials-plus-surname format — does every user account need to be recreated to match the new login format?
IFS Cloud's Aurena Client Session tracking feature (expected under IFSIAM > Client Sessions) doesn't appear in the environment even though it should be available for the release — what's missing?
Importing a large exported Permission Set XML file (to clone it) results in a new permission set that's only partially granted — some database objects end up not granted at all, with an error referencing something like SYS.ALL_TABLES appearing at the end of the import, and the freshly cloned permission set exports noticeably smaller than the file that was imported. What's going on, and how is this worked around?
Is it possible to configure an ordinary Event Action to deactivate a user account (for example, as an automated response to a suspicious action), using a standard API method?
Creating a persistent boolean/checkbox-type custom field and trying to add its custom Enumeration fails at the final step — the Enumeration LOV dialog shows nothing and its search is disabled, even though Normal and Multi-type custom fields work fine. What's blocking it?
Calling a projection endpoint exposed through the Main Application in Postman returns a 401 Unauthorized even when using ordinary Aurena login/password credentials — what authentication mechanism does this endpoint actually expect?
A user needs access to run a specific Order Report (like 'Customer Ledger Age Analysis') from the Order Report list, but it doesn't show up in her available reports — where is this actually granted?
Is it possible to grant a user write access to just one standard field on a screen (like the Note field on Customer Order Lines) while keeping every other field on that same screen read-only for them, purely through permission sets?
IFS Cloud environments no longer seem to use the classic Oracle Profile for password-expiration and related settings, even though a related System Parameter still references Oracle Profiles existing — where is password policy actually configured in Cloud, and can password expiration still be set?
Is there a built-in way to track and audit changes made to a specific sensitive field, to see who changed it and when, without building custom logging from scratch?
On Apps10, Solution Manager > Security in Aurena only shows 'User Groups' and 'Users' options, with no way to actually create a new user or view full user account details the way IEE's User screen allows — is this missing, or is there another place to do it?
Clicking 'Order Report' or 'Schedule Report' for an existing Operational Report in Aurena on IFS10 throws a permission-related error, even though the user has general permission to use Aurena — what's missing?
A user's Oracle account keeps showing status 'Locked (TIMED)' repeatedly, going active again after some time but then locking again — what does this status actually mean and how do you find the real cause?
Changing an expired login password sometimes fails with a generic 'Something went wrong while changing password' message that doesn't explain what was actually wrong with the new password (like a missing required symbol) — is there a way to get a more specific, actionable error message instead?
No questions match. Try a broader term or reset the filters.