4.2.13 User Management

This topic provides information on user management.

Oracle FLEXCUBE Investor Servicing enables creation of users through SMDUSRDF. On authorization of the newly created user, the credentials are automatically mailed to the user’s email id. This reduces the risk of password been known to the administrator, who creates users for the bank.

User is forced to change the password on first login. The password supplied is hashed iteratively after being appended with a randomly generated salt value. Hashing algorithm used is of SHA-2 family and above.

User privileges are maintained by roles. Roles definition is captured via another UI. These roles are mapped to a user in the SMDUSRDF. Basing on these user- roles mapping the user will have access to different modules in Oracle FLEXCUBE.

This topic consists the following sub-topics:

• Credential Over mail
  This topic provides information on
• Access Enforcement
  This topic provides information on access enforcement.
• Information Flow Enforcement
  This topic describes about information flow enforcement.
• Separation of Duties
  This topic provides information separation of duties.
• Least Privilege
  This topic provides information on least privilege.
• Continuous Monitoring
  This topic provides information on continuous monitoring.
• Information System Backup
  This topic provides information on information system backup.
• User Identification and Authentication
  This topic provides information on user identification and authentication.
• Privacy controls
  This topic provides information on privacy controls.
• Transmission Integrity and Confidentiality
  This topic provides information on transmission integrity and confidentiality.
• Password Management
  This topic provides information on password management.