To use the custom authentication module, user directories that contain EPM System user and group information can be individually configured to delegate authentication to the custom module.
EPM System users who are authenticated using a custom module must be present in one of the user directories included in the search order (see Search Order). Also, the user directory must be configured to delegate authentication to the custom module.
The identity of the user in the custom provider (for example, 1357642 in RSA SecurID infrastructure) may be different from the user name in the user directory (for example, jDoe in an Oracle Internet Directory) configured in Shared Services. After authenticating the user, the custom authentication module must return the user name jDoe to EPM System.
Note: | As a best practice, Oracle recommends that the user name in the user directories configured in EPM System be identical to those available on the user directory used by the custom authentication module. |