Credential Handling
Everyone who works in Oracle Integration requires user credentials. Additionally, an integration that connects to an application requires credentials for the application.
Security goal | Owner | More information |
---|---|---|
Ensure that users handle their credentials securely |
|
About user credentials User credentials consist of a user name and password that people use to sign in to Oracle Integration, including File Server. You manage user credentials in Oracle Cloud Infrastructure Identity and Access Management, including creating users and resetting passwords. Oracle Integration authenticates users against Oracle Cloud Infrastructure Identity and Access Management. See IAM Credentials. Guidelines for handling credentials See IAM Credentials. |
Limit the people who can access connection credentials |
Create the credentials: Provide the credentials while configuring a connection: Instance users with the ServiceDeveloper role |
Oracle Integration uses credentials for a target application to connect to the application. An integration developer or an administrator for the target application provides these credentials when configuring a connection in an integration. After a user enters these credentials into Oracle Integration, sensitive security properties are obfuscated in the user interface. For example, the password appears as a series of asterisks (*****) rather than the password itself. Oracle Integration encrypts and stores these credentials securely in Oracle Cloud Infrastructure Vault. Your responsibilities You are responsible for securely handling credentials outside Oracle Integration. Oracle recommends limiting the people who can access the credentials. |