Process Description for Using OAuth 2.0 Authorization

At a high level the following steps show you how to set up OAuth 2.0 authorization for the EPM Integration Agent.

Before configuring OAuth authentication, make sure that:

• You have upgraded to the latest Cloud EPM version.
• The Identity Domain Administrator has access to Oracle Cloud Console.
• The Cloud EPM Service Administrator has the required administrative privileges.
• The EPM Integration Agent installation package is available.
• You have identified the target Cloud EPM environment that the Integration Agent will access.

To set up the OAuth 2.0:

1. Configure OAuth in the Oracle Cloud Console:
   • Register the OAuth client and provide the Domain URL and Client ID.
   • Configure the secondary audience for the Cloud EPM service

   See Setting Up Authentication with OAuth 2.

2. Update the EPM Integration Agent configuration: Update the active agentparams.ini file with OAUTH_ENABLED, CLIENT_ID, and RESOURCE_SCOPE. Do not store tokens, passwords, or client secrets in the file. See Updating the Integration Agent Configuration.
3. Initialize OAuth, start the agent, and validate connectivity: Generate the initial OAuth token, complete device code authorization, restart the agent, and run a small test job to validate connectivity and authorization. See:
   • Running the createoauthtoken.bat or createoauthtoken.sh File to Generate Tokens
   • Starting and Validating the Integration Agent

Note:

When using OAuth authentication, you must use the EPM Integration Agent included with the latest Cloud EPM release. In addition, the RESOURCE_SCOPE parameter is required for OAuth 2.0 authentication and must match the scope configured in the identity domain. An incorrect or missing scope prevents the EPM agent from authenticating with Cloud EPM.