Overview of Security in Oracle Analytics Server

Oracle Analytics Server is tightly integrated with the Oracle Fusion Middleware Security architecture and delegates core security functionality to components of that architecture. Specifically, any Oracle Analytics Server installation makes use of the following types of security providers:

  • An authentication provider that knows how to access information about the users and groups accessible to Oracle Analytics Server and is responsible for authenticating users.

  • A policy store provider that provides access to application roles and application policies, which forms a core part of the security policy and determines what users can and cannot see and do in Oracle Analytics Server.

  • A credential store provider that is responsible for storing and providing access to credentials required by Oracle Analytics Server.

By default, an Oracle Analytics Server installation is configured with an authentication provider that uses the Oracle WebLogic Server embedded LDAP server for user and group information. The Oracle Analytics Server default policy store provider and credential store provider store credentials, application roles, and application policies in a database.

After installing Oracle Analytics Server you can reconfigure the domain to use alternative security providers, if desired. For example, you might want to reconfigure your installation to use an Oracle Internet Directory, Oracle Virtual Directory, Microsoft Active Directory, or another LDAP server for authentication. You might also decide to reconfigure your installation to use Oracle Internet Directory, rather than a database, to store credentials, application roles, and application policies.