Security and access FAQ — page 6
All FAQ topics / Security and access
296 questions · page 6 of 8
The same user can log into Aurena from multiple different devices at the same time (e.g. laptop and phone simultaneously) — is this a bug that needs fixing?
The IFSWEBCONFIG internal system account doesn't have a password-change option in the Installer the way other internal accounts (IFSPRINT, IFSCONNECT, IFSSYS, IFSPLSQLAP, IFSADMIN) do, yet an encrypted password value for it still appears in configuration.xml — does this password actually need to be changed or kept in sync somewhere?
After changing the IFSSYS database password directly in Oracle (without going through the Installer), the IFSSYS account got locked out and ManagedServer1 then fails to start on restart — what's the correct sequence for changing this password safely?
In a clustered Middleware Server setup (multiple Application Server hosts each running Managed Servers in the same IFS cluster), does changing the IFSSYS password via the Installer automatically propagate to every node, or does each clustered host need separate manual intervention?
Users lost access to a screen/window right after a new custom field was created on it, even though nothing about their existing permission sets was intentionally changed — where should this be checked first?
A custom, limited permission set (built without FND_ENDUSER, to qualify for LTU/Limited Task User licensing) has the DocReferenceObject connection added, the relevant database method granted, and every cache refreshed — but attachments on the target screen still show 'No Attachment Types Enabled.' What's commonly still missing?
A user has full create/approve access to a window (like Mixed Payment) in IEE, but the exact same operations are blocked for them in Aurena — why would access differ between the two clients for the same user?
Under ASFU (Application Specific Full Use) Oracle licensing with IFS Apps10, are integrations with third-party applications (like Workday) still permitted, and are there licensing-specific limitations to be aware of?
Where is access to view/edit the yellow sticky Notes feature in IEE actually controlled, if only a subset of users should be able to edit them?
All full-user license seats are currently in use, and a new user needs to be created — is deactivating an existing, no-longer-needed user account a valid way to free up a license seat for the new user?
Connecting the IEE client to a fresh IFS10 environment configured with a self-signed certificate (no load balancer) fails with 'The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel' — what's the fix?
A newly created user, granted the same permission sets that work fine for existing users, gets 'Database error occurred. Contact administrator' on specific Aurena projection calls (like GetIdentificationByCardEnabled) that work fine for other users — what's different about this new user?
Is there a database view or table that shows the Permission Set grant structure — which permission sets are granted to which users, and which permission sets are granted to other permission sets?
Is authenticating IFS Applications 10 via OpenID Connect through Keycloak (or Kerberos) supported, alongside the documented AzureAD/ADFS/database authentication options?
Is there a SQL query to determine exactly which users are able to execute a specific database method (like creating new parts via PART_CATALOG_API.New__), accounting for both grants and any specific revocations?
The Application Owner account (IFSAPP/IFSSYS) can't change other users' database passwords, failing with 'IFS Application Owner must have System privilege "ALTER USER" to execute this method' — even though every user-management permission/grant has already been checked. What's missing?
Touch Apps (like Scan iT / Account Manager) Azure AD authentication fails with an 'IDP_protocol_flaw' error immediately after correctly configuring the Azure AD App Registration and redirect URIs — is this a sign the configuration itself is wrong?
Users created via Active Directory User Integration sometimes get their Identity set to an abbreviated SamAccountName-style value, and other times to a FIRSTNAME.LASTNAME-style value, with no obvious difference visible in AD itself — why is the mapping inconsistent, and what controls it?
Which database tables hold the Active Directory User Integration Configuration data (AD group-to-user-group mappings shown in Solution Manager > Security > Users), for scripting bulk updates after a database clone (e.g. re-pointing ~30 group mappings from Production values to Test values)?
Which cipher/encryption algorithm does IFS use internally for encrypting sensitive stored values?
Users belonging to more than roughly 45 Active Directory groups (including groups carrying SID history) suddenly can't log into IFS via SSO — WebLogic logs show no login attempt at all for the affected user, even though connectivity and AD itself look fine. What's going on?
Is there a way to export the list of existing IFS user accounts to a file on Apps9 (the reverse of the batch-create-from-XML/text-file import), either through IEE or a database script?
A user, given the exact same permission sets as another user who can see the full company Employees list, still only sees their own name when searching or populating the Employees list under HR > Employee Management — since permissions are confirmed identical, what else controls this?
Does IFS Connect's HTTP_SENDER on Apps9 UPD1 support TLS 1.2 for outbound connections?
The very first page loaded in Aurena on a new environment throws "Unable to get property 'internalName' of undefined or null reference" — what's the likely cause of this generic-looking JavaScript error?
Is it possible to see, in real time, which users are currently logged into Enterprise Explorer?
A shared/technical IFS account gets stuck showing 'IFS Account is already logged in by <other user>' after a forced disconnection (e.g. the session hung and had to be killed), even though the session doesn't appear in the Database Sessions screen and the other user can still log in fine from their own machine — how is this cleared manually rather than waiting for it to time out?
What are the mandatory requirements for a reverse-proxy (like Azure Application Gateway) sitting in front of IFS Middleware Server, to expose the application safely over the internet?
Is there a SQL query to pull a list of active users along with their current IFS license usage/assignment?
Which specific permission controls whether the Export function is available to a user on an Aurena page?
History Log entries for changes to a Customer's Notes (stored via FIN_NOTE_TEXT_TAB) show the change details correctly, but don't include which specific Customer/Identity the note belongs to, making the log hard to use for reporting — how do you resolve the NOTE_ID key in a history log entry back to the actual Customer it belongs to?
Granting a projection (like PersonNavigator, under Human Capital Management) makes every navigator node connected to that projection visible to the user, even ones they shouldn't see (like Manager Services for non-managers) — since it's all tied to one projection, how can specific nodes be hidden from specific users?
On a freshly built permission-set structure, a user gets a Lobby 'data not found' error immediately at login, even without that user's own permission set explicitly granting any specific lobby yet — what's actually happening?
Is there a SQL query to list user accounts (not employees) along with their enabled/disabled status, default company, and default site?
Is it possible to configure IFS Applications 10 to respond on the standard SSL port 443 instead of the default port (like 48080), so the port number doesn't need to appear in the application URL?
The CRM Panel Outlook Add-In gets stuck in a login loop when using Azure AD authentication — pressing Log In opens the Azure AD page, credentials are entered successfully, but it just returns to the CRM Panel's own Log In screen again (Database authentication works fine for the same user). What's the fix?
Is it possible to merge more than two Permission Sets together into one combined permission set in a single operation?
Is there a screen in the application (rather than a database query) to search by a specific database View's name and see which Permission Sets have that view granted to them?
What's the fastest way to build a 'full access to everything' Aurena Permission Set — an Aurena equivalent of IEE's IFS_ALL — without manually granting every single Projection one at a time?
No questions match. Try a broader term or reset the filters.