4Authentication

Authentication

In addition to the built in username and password authentication capability, Cloud WMS can also use customer’s systems to authenticate users. Currently only authentication is supported and groups or authorization policies are not supported (they can be managed within the WMS). The following methods are supported:

• ADFS Backend: Cloud WMS can authenticate against Active Directory Federated Services
• OAuth2 Backend: This is supported using only this grant type: Resource Owner Password Credentials Grant
• HTTP POST Backend: This can be any HTTP service defined by the customer to which we can POST the username and password. Upon receiving a specific previously agreed upon response, user will be allowed into the application.
• SAML2 Single Sign On (SSO): In this mechanism, Cloud WMS will redirect to the configured SAML2 compliant identity provider’s login page and the username and password are entered there instead of on the Cloud WMS login page. Upon successful authentication, the user is redirected back to the application.

Configuration for the above authentication methods is performed by Oracle Cloud Operations. Customers should raise a support request via MOS. You should also setup the alternate username within the application for users that need to be authenticated using one of the above methods.

Note: Since SAML2 is a web-based mechanism, it is not supported for logging into the mobile RF application, however it is possible to use one of the other methods above for the same user.