Changes in This Release for Oracle Deep Data Security

Learn about the new features available for Oracle Deep Data Security in Oracle AI Database 23.26.3.

Feature	Description
Multifactor authentication (MFA) support	You can configure MFA for end users managed in the database. See Create End User.
Cross-table data grants	You can define data grants that derive authorization from data privileges held on a related object. See About Data Grants and Create Data Grants.
Application identity enhancements	An application identity can serve as a logon principal: an application or AI agent can log on as its application identity to establish the database connection on which it attaches end-user security context payloads, or to access data directly under its own authorization. See Configure Application Identities.
OCI IAM auth token authentication	You can authenticate end users to the database with an Oracle Cloud Infrastructure Identity and Access Management (OCI IAM) auth token, which is a scoped proof-of-possession token issued by OCI IAM for database authentication. The database establishes the end-user security context directly from this token. A new integration use case shows how to use this token with the Oracle Database Tools MCP Server. See Integrate with the Database Tools MCP Server.
Data roles in local end-user security context payloads	For users managed in an application's own user store, the application can include data roles in the end-user security context payload, in addition to context attributes. See Prerequisites for Establishing a Local Security Context.