1 Introduction

Welcome to the Oracle Utilities Application Framework Security Guide.

This document describes how you can configure security by using the default features. It includes the following:

• What's New In Security
• Introducing Security
• Authentication
• Authorization
• Managing Security
• Advanced Security
• Audit Facilities
• Database Security
• Security Integration
• Keystore and Truststore Support
• Encryption Feature Type
• Web Services Security
• Allowlist Support
• Custom Authentication Service Provider
• Federated Security Support
• Securing JNDI Access
• Object Erasure Support
• Key Ring Support
• Redaction Rules
• Cookies Used by the Product

This guide applies to the following products:

• Oracle Utilities Customer Care and Billing v26.10
• Oracle Utilities Customer to Meter v26.10
• Oracle Utilities Customer Program Management v26.10
• Oracle Utilities Market Settlements Management v26.10
• Oracle Utilities Meter Data Management v26.10
• Oracle Utilities Operational Device Management v26.10
• Oracle Utilities Smart Grid Gateway v26.10
• Oracle Utilities Work and Asset Management v26.10

Note:

Oracle Utilities Application Framework refers to the underlying framework on which different Oracle Utilities applications are built. In this document, we use that term when talking about functionalities or features that apply for all the applications listed above.

Related Documents

For more security-related information, see these Oracle resources:

• Oracle Utilities Application Framework Server Administration Guide
• Oracle Utilities Application Framework Advanced Security (KB KB547261))
• Technical Best Practices for Oracle Utilities Application Framework-based Products (KB679040)
• Oracle Utilities Application Framework - Batch Best Practices (KB504761)
• Web Services Best Practices for Oracle Utilities Application Framework (KB704711)
• Oracle Utilities SaaS Cloud Security (KB580246)

These documents are available from My Oracle Support and Oracle Documentation.

Critical Patches

Oracle recommends that customers get all their security vulnerability information from Oracle Critical Patch Update Advisories available from links at Critical Patches, Critical Security Updates, Security Alerts and Bulletins. It is strongly recommended that all critical patches be applied in a timely manner.

Additional full details are available at Oracle Software Security Assurance.