Single Sign-On (SSO) implemented across applications in an Enterprise allows users to access all applications with just one secure login, streamlining the sign-in process and making it quicker and more convenient.
What is SSO in the Context of Oracle Fusion?
Oracle Fusion Cloud uses Oracle Identity Cloud Service (IDCS) or OCI IAM as its default identity provider, where user accounts and credentials are managed.
Enterprises commonly integrate their own SSO systems, such as Microsoft Entra ID, Active Directory Federation Services (ADFS), Okta, or Ping, by configuring identity federation in IDCS/OCI IAM.
When federation is enabled, users trying to access Oracle Fusion Cloud are redirected to the enterprise SSO login page, authenticate there, and are then sent back to Fusion with a valid session.
How CloudSQL Connects to an SSO-Enabled Oracle Fusion Environment?
CloudSQL is designed to connect to Oracle Fusion Cloud environments – whether they use Single Sign-On (SSO) or not – and lets you quickly develop and run SQL statements against your Fusion data model. When connecting to an SSO-enabled environment, the setup process is slightly different. Here’s how to configure it:
Step 1: First, open your CloudSQL dashboard and click on “Create a New Connection.”
Step 2: Enter a name and the oracle fusion home page link.
| Connection Type (Radio Button) | Select the radio button “SSO” |
| Connection Name | Provide an appropriate name for the connection. |
| Connection URL | Provide your Oracle fusion homepage Link Eg: https://fa-abcd-dev5-saasfademo1.ds-fa.oraclepdemos.com/ |
Step 3: Click the“Test and Create Connection” option. A login page will appear based on your enterprise single sign on solution. Enter your correct Oracle fusion Username and password to continue.
Note: If your organisation has configured Single Sign-On to support integrated Windows authentication (for example, Entra ID Seamless SSO or ADFS with Kerberos), you may not see a login popup. In this case, your browser can silently authenticate using the credentials from your Windows login or other active sessions.
Step 4: All done. You are ready to write your SQL against Oracle Fusion.
Common Problems and Solutions
Sometimes, there can be small issues while setting up SSO. Here are the common ones:
- Using Incorrect URL or Login URL Instead of Home page URL: You should use your Home page URL. It usually seems like https://fa-abcd-dev1-saasfademo1.ds-fa.oraclepdemos.com . Login URLs are URLs that are shown on the browser window when the login window is shown. This will not work with CloudSQL. So pick up the URL after logging in to your Fusion environment.
- Login Window does not appear: This could be due to enterprise security blocking pop-ups. CloudSQL uses Microsoft’s embedded webview2 browser. If this happens, contact your local IT administrator for resolution.
- Missing BI Role Access: Your fusion account must have the BI Author role, BI Administrator role or a custom role with similar privilege to run SQL. Please request role assignment from your Fusion Security Admin if missing.
- Device ID Validation for Microsoft Entra ID: The user receives the following error when the SSO provider is Microsoft Entra ID and Device ID Validation is enabled.
“You cannot access this right now. Your sign-in was successful but does not meet the criteria to access this resource. For example, you might be signing in from a browser, app, or location that is restricted by your admin”.
CloudSQL 3.0 or later supports Device Id validation. So upgrade to our latest version for resolving this.
Our DataFusing support team is always ready to help you fix these issues quickly. Please reach out to us using our website chat or submitting our Contact us form.
SSO Connection makes login simple, secure, and smart. With CloudSQL, you and your team will be able to connect to SSO enabled Oracle Fusion environment and run your SQL without having to have separate service accounts for development purposes.
At DataFusing, we believe Oracle Fusion consultants work can be simplified, and SSO Connection support is one more step toward that goal.
At DataFusing, we are constantly improving CloudSQL for you by adding more and more features. Click here to start a 30-day free Trial today.
Also Read: How to Query Oracle Fusion HCM Tables SQL?
