1. Security Guide
  2. AI Foundation Security Features
  3. Technology-Specific Security Features
  4. ORDS

ORDS

The following three security features are provided:

  • Single Sign On (SSO) - AIF integration with ORDS supports SSO, using ORDS-provided authentication schemes called the HTTP Header Variable. User credential verification is performed by OCI IAM, which passes the user's name to Oracle Application Express using an HTTP header variable such as IDCS REMOTE_USER. While setting up the scheme in ORDS, the logout URL is also configured by Oracle.

  • Schema used in the ORDS Workspace - AIF integration with ORDS includes defining a new schema called Retail Workspace Schema (RTLWSP01) in the ORDS workspace. This is provided to the retailer, and in turn is associated with the AIF product schema. The retailer may not create other workspaces; they are expected to use only the provided one in conjunction with AI Foundation applications.

  • Declarative REST API – AIF integration with ORDS also provides the retailer with a declarative way to create new service endpoints in the system. Access to such endpoints are enabled through oAuth2.0. This REST API request is authorized using the OCI IAM client credential grants type, where the retailer requests an access code from OCI IAM and passes the token in subsequent calls to access data.