Credential Handling

Everyone who works in Oracle Integration requires user credentials. Additionally, an integration that connects to an application requires credentials for the application.

Security goal Owner More information

Ensure that users handle their credentials securely

Oracle Integration administrators

About user credentials

User credentials consist of a user name and password that people use to sign in to Oracle Integration, including File Server.

You manage user credentials in Oracle Cloud Infrastructure Identity and Access Management, including creating users and resetting passwords. Oracle Integration authenticates users against Oracle Cloud Infrastructure Identity and Access Management.

See IAM Credentials.

Guidelines for handling credentials

See IAM Credentials.

Limit the people who can access connection credentials

Create the credentials:

Other administrators

Provide the credentials while configuring a connection:

Instance users

Instance users with the ServiceDeveloper role

Oracle Integration uses credentials for a target application to connect to the application. An integration developer or an administrator for the target application provides these credentials when configuring a connection in an integration.

After a user enters these credentials into Oracle Integration, sensitive security properties are obfuscated in the user interface. For example, the password appears as a series of asterisks (*****) rather than the password itself. Oracle Integration encrypts and stores these credentials securely in Oracle Cloud Infrastructure Vault.

Your responsibilities

You are responsible for securely handling credentials outside Oracle Integration. Oracle recommends limiting the people who can access the credentials.