Recent Posts by Gustavo Saurez

OCI has recently started providing new daily csv reports that include cost data for each resource instance.  The Cost Reports incorporate fields like SKU, mycost, billedQuantity, and billingUnit that allow to do data mining and analytics on resource instance usage and cost down to the hour.  More information on the included fields for both reports can be found in the documentation. A difference between the new Cost Reports and the Usage Reports, besides the cost related...

The OCI Administrators group grants manage acess to all resources in all compartments including the root compartment.  So, any member of this group is considered a super user.  Is a normal practice to keep Administrators members to a small number of users and create additional groups/policies to restrict access to specific compartments. If there's a requirement to have policies at the root level that grant specific permissions to all compartments except the root compartment...

As of version 11gR2PS1 (11.1.2.1.0), OIM relies on JGROUPS to implement cache coordination among all it's cluster nodes.  Out of the box OIM is configured to use Multicast (one to many) for JGroups for cluster messaging.  This could be a showstopper when deploying OIM in datacenter where Multicast is blocked or unsupported, which is the case in many cloud IaaS environments. OIM 11gR2 PS1 and onwards can be easily configured to use unicast for caching as follows:   1. In EM...

This post shows a way to make REST API calls to Oracle Identity Cloud Service from an Oracle Database using PL/SQL.  The idea is that a PL/SQL application can manage and search for user and group entities directly in Identity Cloud Service. In the sample code we'll see how to obtain an access token from Identity Cloud Service and make calls to create users, query group membership, and retrieve user profile attributes.  The PL/SQL code uses APEX 5.1 with the packages APEX_WEBSER...

Starting with Bundle Patch 11.1.2.3.161018 (Patch 24326201), Oracle Identity Gorvernance or OIM, adds a new REST API for self service requests.   The REST Service includes endpoints to invoke self service calls for tasks like Catalog, Requests, Certification, Users, Role, Organization and others.  Documentation and examples are available here. The REST Service has to be installed manually after applying BP 11.1.2.3.161018 by deploying an ear file.  The service requires HTTPS...