3 Recommended Deployment Configurations

  • PSP endpoints must use default ports 80 and 443. Other ports must be added to the OPI Cloud egress endpoint allowlist and must also receive OCI approval

  • Use CA-signed certificates to protect PSP endpoints

  • Update the default session duration for PSP users

Since IDCS sets the default session duration, the administrator who manages PSP configurations should log in to IDCS and update the duration to 15 to 30 minutes.


This image shows Configure PSP Session Settings
  • Periodically update user’s passwords.

  • Periodically login to PSP configuration portals to check endpoints and certificate status.