2.160 IDENTITY_PROVIDER_OAUTH_CONFIG

Use IDENTITY_PROVIDER_OAUTH_CONFIG to configure the database to use Oracle Cloud Infrastructure Identity and Access Management (OCI IAM) domain OAuth2 authentication.

Property Description

Parameter type

String

Syntax

IDENTITY_PROVIDER_OAUTH_CONFIG =
'{ "app_id" : "string",
   "domain_url" : "string" }'

Where:

  • The app_id value is the application ID of the database application registered in OCI IAM.

  • The domain_url value is the OCI IAM domain URL. This URL is used to retrieve the public signing key for OAuth2 token validation.

Default value

None

Modifiable

ALTER SYSTEM

Modifiable in a PDB

Yes

Basic

No

Oracle RAC

The same value must be used on all instances.

This parameter is effective only when the database is enabled to use OCI IAM as an external identity provider, that is, when the IDENTITY_PROVIDER_TYPE initialization parameter is set to OCI_IAM.

Example:

ALTER SYSTEM SET IDENTITY_PROVIDER_OAUTH_CONFIG =
  '{ "app_id" : "f500000008d12000000005d000000000",
     "domain_url" :
       "https://idcs-c20000000074da21000000009d83.identity.mycloud.com:443" }'
   SCOPE=BOTH;

Note:

Setting the value of this parameter is only one step in a series of steps for configuring the database to use OCI IAM domain OAuth2 authentication. Refer to Oracle AI Database Oracle Deep Data Security Guide for the complete steps before you set this parameter.

Note:

This parameter is not available to update directly for Oracle Autonomous AI Database Serverless.

Note:

This parameter is available starting with Oracle AI Database 26ai, Release Update 23.26.2.