Prerequisites
Before getting started, please carefully read the following to make sure you fulfill all requirements for the integration to work:
To set up this integration, you must have the necessary permissions (IT Security Manager) to access the "Security Console."
To find out how to access the "Security Console," please follow the first steps below.
If you don't have access, please contact whoever has the necessary permissions in your company before continuing.
Find your Oracle HCM Address
- Log into your Oracle HCM instance.
Copy the value of the URL and paste it into the connection flow. We will cut the URL automatically for your convenience.
Create a new custom role for this integration
Note: Your connection flow will be personalized. The roles/privileges shown in your flow might differ from the ones shown in this guide. Always use the roles/privileges from your connection flow and not from the images shown below.
- Click on the 3-bar menu in the top left of your Oracle HCM instance:
- Next, scroll down to "Tools" open the menu, then go to "Security Console":
Note: If you don't see the "Security Console" setting, you don't have the right permissions to complete the connection. - In the Security Console click on "Create Role"
- Follow your enterprises naming and code conventions for custom roles. You will not be able to change the code or delete the role after creation. For "Role Category" select "HCM - Job Roles".
Click Add Function Security Policy and add the Privileges shown in your connection flow:
Navigate to the "Role Hierarchy" step and add the Roles shown in your connection flow:
- Navigate to the Summary step and click Save and Close.
- Wait for the custom role to be created. You can monitor the progress in the "Administration" tab of the "Security Console"
Assign a security profile to the custom role
- In the right top menu, click on "Setup and Maintenance":
- Click on the box on the right side and click on "Search"
or use the global search if your are using redwood:
- Search for "Assign Security Profiles to Role" in the search bar, press enter and select the entry as pictured:
- Search for the role you created earlier.
- Select the entry as it appears, and select "Edit"
- Click "Yes" when prompted.
- Simply click "Next" to go to step 2:
- The Security Criteria shown will depend on the Roles added in the previous steps of this guide. Select the following default Criteria if shown:
- Organization Security Profile: select "View All Organizations"
- Position Security Profile: select "View All Job Positions"
- Country Requisition Security Profile: select "View All Job Countries"
- LDG Security Profile: select "View All Legislative Data Groups"
- Person Security Profile: select "View All People"
- Public Person Security Profile: select "View All People"
- Document Type Security Profile: select "View All Document Types"
- Payroll Security Profile: select "View All Payrolls"
- Flow Pattern Security Profile: select "View All Flows"
- Job Requisition Security Profile: select "View All Job Requisitions"
- Talent Pool Security Profile: select "View All Talent Pools"
- Element Security Profile: select "View All Elements"
- Hit next until you reach the "Review" step.
- Finally hit "Submit":
- If you click on "Search" again a green check mark will appear:
Create a new integration user
- Click on the 3-bar menu in the top left of your Oracle HCM instance:
- Next, scroll down to "Tools" open the menu, then go to "Security Console":
Note: If you don't see the "Security Console" setting, you don't have the right permissions to complete the connection.
- Next, go to "Users" then "Add User Account"
- Fill in the necessary information, saving the "User Name" and "Password" for later. If you have a custom "User Category" for service users without password expiration policy make sure to select it.
- Next, click on "Add Role":
Note: Save the Username and Password, as you'll need it later.
- Add the custom role you created earlier to the user.
- Press "Save and Close".
- Enter the "Username" and "Password" in the connection flow or follow the instructions to setup JWT authentication: