My Oracle Support Banner

Using IDCS Integrated with OCI, the Access to Compartments are not Working with IDCS SSO (Doc ID 2521827.1)

Last updated on FEBRUARY 18, 2020

Applies to:

Identity Cloud Service (IDCS) - Version N/A and later
Information in this document applies to any platform.

Symptoms

Using IDCS Integrated with OCI, the Access to Compartments are not Working with IDCS SSO.

Have single sign on configured in identity cloud in the classic data centre, and when moved across to ADWC the authentication works fine however finding rules around compartments do not work when we sign in this way.

So for example:
After created a new compartment as documented under:
https://docs.cloud.oracle.com/iaas/Content/Identity/Tasks/managingcompartments.htm

Then granted a user access to just this compartment, but no other area (access done via groups and creating a 'policy') However the user appears to still have 'root' compartment access despite not being in the 'Administrator' group.
The same functionality works fine in the new data centre if we login direct not using SSO from MyServices.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.