This is a readme document for Oracle Advanced Authentication (OAA) and Oracle Adaptive Risk Management (OARM) 12.2.1.4.1.

1.1 OAA and OARM Installation Images

Oracle Advanced Authentication (OAA) and Oracle Adaptive Risk Management (OARM) can be installed as standalone products or can be installed together. The following modes of installation are supported:
  • OAA-OARM
  • OAA only
  • OARM only

To download the installation images see document ID 2723908.1 on My Oracle Support.

To install OAA or OARM, see Installing Oracle Advanced Authentication and Oracle Adaptive Risk Management.

1.2 Updates in OAA and OARM, March 2023 Refresh

OAA and OARM includes the following updates in this refresh:

  • Enhancements to the Geo Data Load:

    OAA/OARM now provides support for Neustar Version 7 Geo Data format. Data files supplied in this format can now be imported using the Location Loader utility included with the Management Container.

  • Support for Knowledge-Based Authentication API:

    OAA/OARM now supports Knowledge-Based Authentication question API for user challenge capabilities. See OAA Runtime API.

  • Support for Personal Image and Phrase for User Preferences API

    OAA/OARM now supports managing personal image and phrase using the User Preferences API. See OAA Runtime API.

1.3 Updates in OAA and OARM, October 2022 Refresh

OAA and OARM includes the following updates in this refresh:

  • Enhancements to the OAA/OARM Administration Console
    • OAA/OARM supports Knowledge-Based Authentication through Security Questions. Knowledge-based authentication is an authentication method which is used to challenge the user to prove identity based on the user’s answers substantiated by a real-time interactive question and answer process. OAA/OARM Administration Console provides capabilities to manage Questions, Registration Logic, and Answer Logic. See Configuring Security Questions for Knowledge-Based Authentication.
    • OARM provides export and import capabilities for questions, validations, groups, and profiles.
  • Factor Verification

    Factor verification allows users to verify a factor in the User Preferences UI after the factor has been added. This allows a user to check the factor is working, before it is used in a user challenge. See Configuring Factor Verification.

  • Partitioned Schema

    The introduction of partitioned schema allows for maintenance of transaction data. Scheduled jobs make sure that partitions are created for new data with correct details. Administrators can also purge and archive data to release data that is no longer required. See Understanding Partition Schemas.

1.4 Updates in OAA and OARM, April 2022 Refresh

OAA and OARM includes the following updates in this refresh:

  • OAA-OIM Integration

    You can implement the password management feature for OAA-protected applications by integrating OAA with Oracle Identity Manager (OIM). For details, see Integrating OAA with OIM.

  • Runtime Support for CRI-O Environment

    CRI-O is a lightweight container runtime for Kubernetes. When you deploy Kubernetes worker nodes, CRI-O can also be deployed. CRI-O allows Kubernetes to use any OCI-compliant (Open Container Initiative) runtime as the container runtime for running pods. It is an alternative to using Docker as the runtime for Kubernetes.

1.5 Updates in OAA and OARM, January 2022 Refresh

OAA and OARM includes the following updates in this refresh:

  • Oracle Adaptive Risk Management

    Oracle Adaptive Risk Management (OARM) is a comprehensive system that provides a way to monitor and control any user activity in your IT infrastructure (Single sign-on, Business Transactions). For details, see Introducing Oracle Adaptive Risk Management

  • Customization of OAA User Interface

    You can customize certain features of the OAA user interface (UI), such as the Administration Console UI, User Preferences Console UI, and the Runtime UI using the configuration properties. For details, see Customizing the OAA User Interface

  • Push Notification for Oracle Mobile Authenticator

    OAA allows you to configure push notification for the OMA app. For details, see Configuring Push Notification for Oracle Mobile Authenticator

  • Knowledge Based Authentication (Challenge Question)

    OAA supports Knowledge Based Authentication factor through challenge questions and answers.

1.6 Updates in OAA, July 2021 Refresh

Oracle Advanced Authentication includes the following updates in this refresh:

  • Support for Self Signed Certificates in OAA for OIDC Flow

    Self signed certificates can be added into the JRE truststore. This enables the OAA installation in test environments to use self signed certificates.

  • Support for Distributed Cache for High Availability (HA) Scenarios

    For HA scenarios, multiple replicas of pods can work together using a distributed cache.