Configure Oracle Deep Data Security for a Sample Application
In this quick-start chapter, you’ll learn how to configure Oracle Deep Data Security (Deep Sec) in an Oracle AI Database environment for a sample Spring Boot application.
This quick start demonstrates how to propagate end-user identities through a Spring Boot application to the database, enabling Deep Sec to enforce row-level and column-level access controls. It also demonstrates how to implement dynamic privilege elevation to securely perform restricted operations without permanently granting excessive permissions.
Note:
- For a sample script that performs the database-side configuration for this scenario, see Scripts for the Employee Records Application. You must complete the Microsoft Entra ID, TLS, and Spring Boot application setup manually.
- This quick start uses Microsoft Entra ID as the identity and access management (IAM) system. You can also use Oracle Cloud Infrastructure Identity and Access Management (OCI IAM). For the corresponding configuration steps, see Configure OCI IAM for Application-Mediated Access.
Overview of tasks
The table below outlines the tasks you’ll complete in this chapter.
| Task | Topic |
|---|---|
| Learn about the sample application, the end-to-end security flow, and the Deep Sec capabilities you’ll implement | Concept and Architecture |
| Review host, database, network, and software prerequisites | Before You Begin |
| Register the database and Spring Boot application in Microsoft Entra ID to establish trust and define application roles | Create Application Registrations in Microsoft Entra ID |
| Create a test user in Entra ID and assign required roles | Manage Users and Role Assignments |
| Create a server wallet and a self-signed certificate for TLS encryption | Generate Wallets and Certificates |
| Configure the database listener and network layer for TCPS connections and token-based authentication | Configure Database Network Settings |
Create the sample hr schema, set up identity provider details, and define the Deep Sec data roles and data grants |
Configure Data Access Control |
| Clone the sample Spring Boot application, configure the JDBC provider, and set up environment variables | Set Up the Spring Boot Application |
| Build the application, obtain an Entra ID access token, and verify data access control and privilege elevation | Build, Run, and Verify |