1. How do I use AI Agent Studio?
  2. Enable Applications to Access Fusion Applications Agents

Enable Applications to Access Fusion Applications Agents

You can access the agents of Oracle Fusion Cloud Applications from other Oracle applications and from external applications, using the /invokeAsync API.

Access from Other Oracle Applications

To use /invokeAsync API, you must authenticate through Oracle Cloud Infrastructure Identity and Access Management (OCI IAM) using an OAuth 2.0 bearer token. For agent operations to function, integration must be bidirectional. Both systems must securely access each other’s services.

As an administrator, you create the confidential application in Fusion Applications IAM, representing the other Oracle application service. Then create a matching confidential application in the other application service, representing the AI Agent Studio's service. These two applications form the trusted link for the two-way communication.

Set Up Two-Way Trust Between Applications

  1. Create a confidential application in Fusion Applications IAM:
    This application acts as a representation of the external Oracle application in Fusion Applications IAM. After creating the confidential application, enable access to the AI Agent Studio service so the application can call the /invokeAsync API exposed by this service.
    • Identify the identity domain (authorization server) where you'll create your confidential application.
    • Specify OAuth grant types. For example, a 2-legged OAuth.
    • Define the access scope.
    • Generate the access token and use it to make REST API calls.

    For more information, see Configure OAuth Using the Fusion Applications Identity Domain.

  2. Create a confidential application in the external Oracle application's IAM:

    Similar to the previous confidential application you created, create another confidential application that acts as a representation of the Fusion Application service in the external Oracle application’s IAM. After creating the confidential application, configure it to allow AI Agent Studio to call the appropriate service endpoints.

    For more information, see Configure OAuth Using the Fusion Applications Identity Domain.

  3. Register the confidential application created in the external Oracle application's IAM (from step 2) in AI Agent Studio:
    1. Go to AI Agent Studio and open the Credentials tab.
    2. Go to the Data Source Applications tab and add the details of the external confidential application.
      • Base URL: Enter the base URL of the external API
      • IDCS URL: Enter the URL of the Fusion Applications IAM, to enable AI Agent Studio to get the OAuth token
      • Scope: Specify what access needs to be given whenever that OAuth token is retrieved.
      • Public and Private keys: Enter the keys for signing authentication requests. Used by IDCS to verify that the request is from a trusted and authorized source.
  4. Create a business object to access the external Oracle application:
    1. In AI Agent Studio, open the Business Object tab.
    2. Add a new business object with the Resource Type as Other Data Source Application.
    3. From the Oracle Data Source Application list, select the data source application that you've registered in step 3.

Access Flow During Runtime

At runtime, the external Oracle application obtains an access token from Fusion Applications using the configured credentials. The application then uses this token to call the /invokeAsync API in AI Agent Studio, enabling access to the agent team.

This illustration shows the interactions between Warehouse Management System (WMS), which is an Oracle application outside Fusion Applications, Fusion Applications IAM, AI Agent Studio, and WMS IAM.

Interaction between WMS and Fusion Applications, using /invokeAsync API

  • The user interacts with the WMS application and sends a chat message.
  • WMS requests an access token from Fusion Applications IAM using its configured credentials.
  • WMS calls the /invokeAsync API in AI Agent Studio, passing the user’s chat message and access token.
  • AI Agent Studio returns a Job ID to WMS, which WMS uses to track progress and get the response.
  • To call WMS API, AI Agent Studio requests an access token from WMS IAM.
  • AI Agent Studio calls the WMS API using the access token.
  • WMS returns the API response and requests for the job status.
  • AI Agent Studio returns the job status.
  • Final chat response is processed and delivered to the user.

Access from External Applications

Use /invokeAsync API to access the agents of Fusion Applications. For more information, see Agent Team REST Endpoints.