Security and access FAQ — page 8
All FAQ topics / Security and access
296 questions · page 8 of 8
In Apps9, some users authenticate via Active Directory while others (like shared manufacturing 'workcenter' accounts) authenticate via Database authentication. Moving to Apps10 with ADFS authentication, is it still possible to have this same 'mixed mode,' with some users going through ADFS and others through Database authentication?
In the security/permission-set screens, what do the different text colors (blue vs black) and diamond icon styles (filled vs unfilled) actually mean on the Database Objects and Presentation Objects tabs?
When creating a new IFS user, the Oracle Profile is always automatically set to Oracle's default profile — how can a custom Oracle Profile (for example one enforcing a custom password verification function) be used instead for newly created users?
What's the recommended baseline Permission Set to grant every new user just so they can log in and use common environment functionality, without granting excessive extra access — FND_ENDUSER, FND_RUNTIME, and FND_CONNECT all seem to have either too much or too little?
What does the IMPERSONATE USER system privilege actually do, and can it be used to log in and see the application the way a specific other user would see it?
A user wants System Info added to their Context Pane in Apps9, but nothing in the security settings seems to expose this option.
Following a Microsoft security advisory about LDAP channel binding and LDAP signing enforcement on Active Directory Domain Controllers, what needs to be in place for Apps9 SSO with AD synchronization to keep working correctly?
Setting a newly created Lobby as the home page for a Base Profile works fine while testing as the profile's own creator, but end users get an error trying to load that same Base Profile after logging in.
Is there a way to see the FULL effective list of permission sets assigned to a user, including ones nested indirectly inside a directly-assigned permission set (since one permission set can itself be composed of other permission sets), rather than just the directly-assigned ones?
Is there a way to automate role/permission changes as employees move between departments or roles frequently, for example offshore personnel changing positions often, rather than manually reconfiguring each affected user's IFS roles every time?
Is it possible to configure a single user account so it can log in via BOTH Single Sign-On AND Database Authentication at the same time on Apps10?
Is there a way to produce a list of current and disabled IFS users, showing when each account was created and disabled, for SOX audit evidence — FND_USER itself only shows whether an account is currently active or inactive, with no creation/disable dates, and the environment uses Single Sign-On with no directly-managed Oracle passwords?
A Permission Set restricting a user to only one specific step of a multi-step process, like entering Investigation Data on a CAPA while blocking the later Action Data and Verification Data steps, correctly shows only one step's grant checked under the screen's Actions node — but testing shows the user can still enter and save data for the other, supposedly ungranted steps.
Is there a faster way to get an overview of all presentation objects granted per permission set, rather than manually browsing each permission set's own tree and expanding every branch in the UI?
Is there a smarter way to grant permission to database objects for a permission set across many components, rather than doing RMB on roughly 200 folders one by one in the UI?
No questions match. Try a broader term or reset the filters.