Application Security Preferences

There are a number of options on the Security Console that you can use to control the default behavior of functionality such as working with roles or certificates.

Some of these options can be overridden, but it's a good idea to set these options during implementation, before you start to create application users or configure your security environment.

To configure the security preferences, the initial user, or a setup user with the IT Security Manager job role, performs the task Manage Applications Security Preferences. This task opens the Administration tab of the Security Console from where you can set these default values and preferences:

  • On the General subtab of the Security Console Administration tab, you can set these values:

    • Specify for how long certificates remain valid by default.

      Note: The sales and service applications don't use certificate functionality.
    • Specify how often a warning appears to remind Security Console users to import latest user and role information.

  • On the Roles subtab of the Security Console Administration tab, you can set these values:

    • Specify default prefix and suffix values for copied roles.

    • Specify a limit to the number of nodes that can appear in graphical representations of roles on the Roles tab of the Security Console.

    • Specify whether hierarchies on the Roles tab appear in graphical or tabular format by default.

  • On the User Categories tab of the Security Console, you can set these values:

    • Create user categories and add users to a category.

    • Specify the default format of user names for the user category.

    • Manage the password policy for a user category.

    • Manage the notification of user and password events to users in a selected user category.

    • Create notification templates for a user category.

You can also configure security preferences by navigating directly to the Security Console (Navigator > Tools > Security Console). For detailed information about configuring default functionality for user names, roles and notifications, see the topics in the remainder of this chapter. For information about configuring the password policy for a user category, see the chapter Manage Passwords.

Options on the Security Console also allow you to implement location-based access, to configure a bridge between Oracle Applications Cloud and Microsoft Active Directory, and to set up single sign-on authentication. For information on these configuration tasks, see the relevant chapters in the guide.