Oracle Accessibility Conformance Report

VPAT® Version 2.3 - April 2019

Name of Product:

Oracle Mobile Authenticator(OMA) (updated3.1) 17.2.2

Product Description:

The Oracle Mobile Authenticator (OMA) supports following two types of 2nd factor authentication. The functionality is to have a 2nd factor authentication attached to a users account in addition to the user’s username and password.

1. One Time Pin (OTP) based: In this OMA generates OTP also called soft tokens that is based on time also known as TOTP that will be submitted to a server and then validated by the server component. When enabled the TOTP soft token is expected by the server component to complete the authentication flow. The TOTP token is refreshed every 30 seconds (that is configurable)

2. Push notification based: In this OMA registers for push notification and server sends the notification whenever user tries to access the Push notification protected resource. And server waits for the user action "ALLOW" or "DENY" from the OMA application. If the user presses "ALLOW" the server allows the access otherwise server denies the access.

This app needs to be downloaded into the mobile devices (ios, android or windows) of the user.

Date:

30-Mar-2018

Archive Note:

This VPAT applies to only version 17.2.2. It does not apply to any versions of Oracle Mobile Authenticator(OMA) after this.

Contact Information:

accessible_ww@oracle.com

Notes:

Accessibility is enabled on the mobile device rather than enabled in the Mobile App.

For example on iOS a user clicks on Settings --> General --> Accessibility and enables various accessibility features.

Evaluation Methods Used:

Oracle's policy is to design, develop and test both products and documentation to be accessible. The recommended styles of testing for accessibility include: (i) algorithmic automated tests, (ii) human judgement tests such as tool-assisted tests, visual inspection and manual operation, and (iii) testing with assistive technology by people with and without disabilities. Additional information about Oracle's accessibility program is available on http://www.oracle.com/corporate/accessibility/index.html

Accessibility Standards/Guidelines

This report covers the degree of conformance for the following accessibility standard/guideline:

Standard/Guideline	Included In Report
Web Content Accessibility Guidelines 2.1	Level A - Yes Level AA - Yes Level AAA - No
Revised Section 508 standards published January 18, 2017 and corrected January 22, 2018	Yes

Terms

The terms used in the Conformance Level information are defined as follows:

Supports: The functionality of the product has at least one method that meets the criteria without known defects or meets with equivalent facilitation.
Partially Supports: Some functionality of the product does not meet the criteria.
Does Not Support: Majority of functionality of the product does not meet the criteria.
Not Applicable: The criteria are not relevant to the product.

WCAG 2.1 Report

Table 1 also documents conformance with:

Section 508: Chapter 5 - 501.1 Scope, 504.2 Content Creation or Editing, and Chapter 6 - 602.3 Electronic Support Documentation

Note: When reporting on conformance with the WCAG 2.1 Success Criteria, they are scoped for full pages, complete processes, and accessibility-supported ways of using technology as documented in the WCAG 2.1 Conformance Requirements.

Table 1: WCAG Conformance Criteria

Criteria	Conformance Level	Remarks and Explanations
1.1.1 Non-text Content (Level A)	Partially Supports	The product was tested for : Images that convey information have meaningful alternative text using the UIAccessibility Label attribute and are marked with the Image trait Images that are decorative are marked with “setIsAccessibilityElement:NO” Information shown in complex images such as charts is also available in an alternative textual form (e.g. a data table) or complex image is a container composed of individual accessible elements Controls have an associated name Text summary or alternative is provided for time-based media Non-text characters are not used or have meaningful alternative text CAPTCHAs are not used Exceptions : In the android accounts screen, decorative icons like company logo are not set to “setIsAccessibilityElement:NO” BUG 25620832 tracks the issue.
1.2.1 Audio-only and Video-only (Prerecorded) (Level A)	Supports	The product was tested for: Product does not have any prerecorded audio or video
1.2.2 Captions (Prerecorded) (Level A)	Supports	The product was tested for : Product does not have any prerecorded audio or video
1.2.3 Audio Description or Media Alternative (Prerecorded) (Level A)	Supports	The product was tested for : Product does not have any prerecorded audio or video
1.2.4 Captions (Live) (Level AA)	Supports	The product was tested for : Product does not have any live audio or video content.
1.2.5 Audio Description (Prerecorded) (Level AA)	Supports	The product was tested for: No pre-recorded audio or video is being used
1.3.1 Info and Relationships (Level A)	Supports	This product was tested for: User interface component labels are associated with the fields they are labeling through use of the label's text as the *Label* trait of the labeled field
1.3.2 Meaningful Sequence(Level A)	Supports	The product was tested for: The VoiceOver,TalkBack and Narrator reading/presentation sequence matches the logical reading sequence
1.3.3 Sensory Characteristics(Level A)	Supports	The product was tested for: Instructions provided do not refer to things solely based on their sensory characteristics such as shape, size, visual location, orientation, color, or sound
1.3.4 Orientation (Level AA)	Not Supported	This product has not yet been evaluated for this criteria
1.3.5 Identify Input Purpose (Level AA)	Not Supported	This product has not yet been evaluated for this criteria
1.4.1 Use of Color(Level A)	Supports	The product was tested for : Information conveyed by color is available in alternative formats, such as shape, text, font weight Information conveyed by color has a contrast ratio of at least 3:1
1.4.2 Audio Control(Level A)	Supports	The product was tested for: No automatically playing audio is used
1.4.3 Contrast (Minimum) (Level AA)	Supports	The product was tested for: Large-scale text and images of large-scale text have a contrast ratio of at least 3:1 All other text and images of text have a contrast ratio of at least 4.5:1
1.4.4 Resize text(Level AA)	Supports	The product was tested for: Text can be resized up to 200% without loss of content or functionality using the appropriate mechanism of the platform – e.g. Zoom or Large Print theme
1.4.5 Images of Text(Level AA)	Supports	The product was tested for: Images of text are not used
1.4.10 Reflow (Level AA)	Not Supported	This product has not yet been evaluated for this criteria
1.4.11 Non-text Contrast (Level AA)	Not Supported	This product has not yet been evaluated for this criteria
1.4.12 Text Spacing (Level AA)	Not Supported	This product has not yet been evaluated for this criteria
1.4.13 Content on Hover or Focus (Level AA)	Not Supported	This product has not yet been evaluated for this criteria
2.1.1 Keyboard(Level A)	Partially Supports	The product was tested for: ability to perform functions from the keyboard only proper operation of unique keystrokes, including those listed in the product documentation logical movement of focus through the controls Exception : End user is not able to select account in grid view when using Bluetooth keyboard. As a workaround end user can use list view and select account when using Bluetooth keyboard. Tracking Bugs 25620832 and 25601090.
2.1.2 No Keyboard Trap (Level A)	Supports	The product was tested for: movement of focus through each control only using the keyboard, with no "keyboard trap" that prevents focus from moving away from any control using the built-in VoiceOver, TalkBack and Narrator and Switch Control assistive technologies
2.1.4 Character Key Shortcuts (Level A)	Not Supported	This product has not yet been evaluated for this criteria
2.2.1 Timing Adjustable(Level A)	Partially Supports	OMA App generates an One Time Passcode which is used for Multi-factor Verification. As per RFC 6238 the default refresh interval (time step) for this is 30 seconds. Refreshing this One Time Passcode is an essential requirment as defined in RFC 6238. OMA also provides alternative Multi-factor verification option through push notifications. The product was tested for: Time limits used are part of a real-time event, or an essential activity
2.2.2 Pause, Stop, Hide (Level A)	Supports	The product was tested for: There is no moving, blinking or scrolling content
2.3.1 Three Flashes or Below Threshold(Level A)	Supports	The product was tested for: No portion of the screen flickers or flashes with a frequency between 2 Hz and 55 Hz
2.4.1 Bypass Blocks(Level A)	Supports	Oracle non-Web software products, including bundles and suites of software, do not behave as a set of software programs as the term is defined. Therefore this guideline is always automatically met.
2.4.2 Page Titled(Level A)	Supports	The product was tested for: The name of the software application is meaningful. The page titles are meaningful.
2.4.3 Focus Order(Level A)	Partially Supports	The product was tested for: Logical movement through the focusable components using only the keyboard, in an order that follows a meaningful sequence using the appropriate platform-specific technique for this, e.g. via a connected Bluetooth keyboard for touch devices, along with the built-in screen reader Exceptions : On the edit account screen after swiping right on icon field end user is expected to be taken to Save button. Tracking bug is 25601114. End user will have to swipe left to to reach the Save button.
2.4.4 Link Purpose (In Context)(Level A)	Supports	The product was tested for: The text of links and their surrounding paragraph, list or table cell (with marked up table headers) is sufficient to describe their purpose
2.4.5 Multiple Ways(Level AA)	Supports	Oracle non-Web software products, including bundles and suites of software, do not behave as a set of software programs as the term is defined. Therefore this guideline is always automatically met.
2.4.6 Headings and Labels(Level AA)	Supports	The product was tested for: Headers describe the topic or purpose of the content below them Labels describe the purpose of the associated field
2.4.7 Focus Visible(Level AA)	Supports	The product was tested for: Visual indication of the location of the focus using VoiceOver, TalkBack and Narrator to display a focus indicator
2.5.1 Pointer Gestures (Level A)	Not Supported	This product has not yet been evaluated for this criteria
2.5.2 Pointer Cancellation (Level A)	Not Supported	This product has not yet been evaluated for this criteria
2.5.3 Label in Name (Level A)	Not Supported	This product has not yet been evaluated for this criteria
2.5.4 Motion Actuation (Level A)	Not Supported	This product has not yet been evaluated for this criteria
3.1.1 Language of Page(Level A)	Supports	The product was tested for: Application is in the locale/language of the underlying platform (iOS, Android and Windows)
3.1.2 Language of Parts(Level AA)	Supports	The product was tested for: Proper use of lang attribute for text passages that are in a different language than that of the page
3.2.1 On Focus(Level A)	Supports	The product was tested for: When an element receives focus, it does not result in a substantial change to the user interface of the software, an additional change of keyboard focus, or the spawning of a new window
3.2.2 On Input(Level A)	Supports	The product was tested for: Changes in the value of user interface components does not result in a substantial change to the user interface of the software, an additional change of focus, or the spawning of a new screen
3.2.3 Consistent Navigation(Level AA)	Supports	Oracle non-Web software products, including bundles and suites of software, do not behave as a set of software programs as the term is defined. Therefore this guideline is always automatically met.
3.2.4 Consistent Identification(Level AA)	Supports	The product was tested for: Images and controls are used and identified consistently throughout the product
3.3.1 Error Identification(Level A)	Supports	The product was tested for: When input errors are detected, they are described to the user in text, including identifying the item where the error occurred
3.3.2 Labels or Instructions (Level A)	Supports	The product was tested for: Labels or instructions are provided when the product requires user input
3.3.3 Error Suggestion (Level AA)	Supports	The product was tested for: Where suggestions for fixing an input error are known, they are provided to the user
3.3.4 Error Prevention (Legal, Financial, Data)(Level AA)	Supports	The product was tested for: Submissions can be reversed by the user Data is checked for input errors with an opportunity for the user to correct them Data can be reviewed, corrected, and confirmed by the user before they are finalized
4.1.1 Parsing(Level A)	Supports	The product was tested for: Markup elements have complete start and end tags, are properly nested, do not contain duplicate attributes, and have unique IDs
4.1.2 Name, Role, Value (Level A)	Supports	The product was tested for: User interface components have a programmatically associated name and role using the UIAccessibility Label property and appropriate Attributes State information, properties, and values are programmatically exposed for user interface components using the appropriate part of the UIAccessibility API
4.1.3 Status Messages (Level AA)	Not Supported	This product has not yet been evaluated for this criteria

2018 Section 508 Report

Chapter 3: Functional Performance Criteria (FPC)

Criteria	Conformance Level	Remarks and Explanations
302.1 Without Vision	Not Applicable	The product does not rely on equivalent functionality, and all aspects are addressed by the technical standards.
302.2 With Limited Vision	Not Applicable	The product does not rely on equivalent functionality, and all aspects are addressed by the technical standards.
302.3 Without Perception of Color	Not Applicable	The product does not rely on equivalent functionality, and all aspects are addressed by the technical standards.
302.4 Without Hearing	Not Applicable	The product does not rely on equivalent functionality, and all aspects are addressed by the technical standards.
302.5 With Limited Hearing	Not Applicable	The product does not rely on equivalent functionality, and all aspects are addressed by the technical standards.
302.6 Without Speech	Not Applicable	The product does not rely on equivalent functionality, and all aspects are addressed by the technical standards.
302.7 With Limited Manipulation	Not Applicable	The product does not rely on equivalent functionality, and all aspects are addressed by the technical standards.
302.8 With Limited Reach and Strength	Not Applicable	The product does not rely on equivalent functionality, and all aspects are addressed by the technical standards.
302.9 With Limited Language, Cognitive, and Learning Abilities	Not Applicable	The product does not rely on equivalent functionality, and all aspects are addressed by the technical standards.

Chapter 4: Hardware

These criteria are all Not Applicable because the product is not Hardware

Chapter 5: Software

Criteria	Conformance Level	Remarks and Explanations
501.1 Scope - Incorporation of WCAG 2.0 AA	Supports	See the responses in the WCAG 2.0 section of this report.
502 Interoperability with Assistive Technology	Heading cell - no response required	Heading cell - no response required
502.2.1 User Control of Accessibility Features	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.2.2 No Disruption of Accessibility Features	Supports	Product was tested for: Software does not disrupt platform features that are defined in the platform documentation as accessibility features.
502.3 Accessibility Services	Heading cell - no response required	Heading cell - no response required
502.3.1 Object Information	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.2 Modification of Object Information	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.3 Row, Column, and Headers	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.4 Values	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.5 Modification of Values	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.6 Label Relationships	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.7 Hierarchical Relationships	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.8 Text	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.9 Modification of Text	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.10 List of Actions	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.11 Actions on Objects	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.12 Focus Cursor	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.13 Modification of Focus Cursor	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.3.14 Event Notification	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
502.4 Platform Accessibility Features	Not Applicable	The product is not a platform or does not have access to platform accessibility features.
503 Applications	Heading cell - no response required	Heading cell - no response required
503.2 User Preferences	Supports	The product was tested for: Responds to platform settings for color, contrast, font type, font size, and focus cursor
503.3 Alternative User Interfaces	Not Applicable	The product does not have assistive technology features.
503.4 User Controls for Captions and Audio Description	Heading cell - no response required	Heading cell - no response required
503.4.1 Caption Controls	Not Applicable	The product has no multimedia.
503.4.2 Audio Description Controls	Not Applicable	The product has no multimedia.
504 Authoring Tools	Heading cell - no response required	Heading cell - no response required
504.2 Content Creation or Editing	Not Applicable	The product is not an authoring tool.
504.2.1 Preservation of Information Provided for Accessibility in Format Conversion	Not Applicable	The product is not an authoring tool.
504.2.2 PDF Export	Not Applicable	The product is not an authoring tool.
504.3 Prompts	Not Applicable	The product is not an authoring tool.
504.4 Templates	Not Applicable	The product is not an authoring tool.

Chapter 6: Support Documentation and Services

Criteria	Conformance Level	Remarks and Explanations
602 Support Documentation	Heading cell - no response required	Heading cell - no response required
602.2 Accessibility and Compatibility Features	Not Supported	BUG 26175494 Product does not have Accessibility Features documentation
602.3 Scope - Incorporation of WCAG 2.0 AA	Supports	See the responses in the WCAG 2.0 section of this report.
602.4 Alternate Formats for Non-Electronic Support Documentation	Not Applicable	Product documentation is in electronic format
603 Support Services	Heading cell - no response required	Heading cell - no response required
603.2 Information on Accessibility and Compatibility Features	Supports	Oracle Global Customer Support can provide information about accessibility features of the product.
603.3 Accommodation of Communication Needs	Supports	Oracle customers have access to electronic support through My Oracle Support or by calling Oracle Support at 1.800.223.1711. Hearing-impaired customers in the U.S. who wish to speak to an Oracle Support representative may use a telecommunications relay service (TRS). Information about the TRS is available at http://www.fcc.gov/cgb/consumerfacts/trs.html, and a list of telephone numbers is available at https://www.fcc.gov/general/telecommunications-relay-services-directory. International hearing-impaired customers should use the TRS at +1.605.224.1837. An Oracle Support engineer will respond to technical issues according to the standard service request process.

Oracle Legal Disclaimer

The information above describes this product's ability to support the applicableStandards/Guidelines, subject to Oracle's interpretation of those standards(available at https://www.oracle.com/corporate/accessibility/policy.html#standards-tab) and the remarks in this document. For more information regarding the accessibility status of this product or other Oracle products, see http://www.oracle.com/corporate/accessibility or contact: accessible_ww@oracle.com.

This document is provided for information purposes only and the contents hereof are subject to change without notice. Oracle Corporation does not warrant that this document is error free, nor does it provide any other warranties or conditions, whether expressed orally or implied in law, including implied warranties and conditions of merchantability or fitness for a particular purpose. Oracle Corporation specifically disclaims any liability with respect to this document and no contractual obligations are formed either directly or indirectly by this document. Oracle further makes no representation concerning the ability of assistive technologies or other products to interoperate with Oracle products. This document addresses the named product(s) only and not prerequisite products for which Oracle supplies restricted use licenses.