Using IDCS Integrated with OCI, the Access to Compartments are not Working with IDCS SSO
(Doc ID 2521827.1)
Last updated on FEBRUARY 18, 2020
Applies to:Identity Cloud Service (IDCS) - Version N/A and later
Information in this document applies to any platform.
Using IDCS Integrated with OCI, the Access to Compartments are not Working with IDCS SSO.
Have single sign on configured in identity cloud in the classic data centre, and when moved across to ADWC the authentication works fine however finding rules around compartments do not work when we sign in this way.
So for example:
After created a new compartment as documented under:
Then granted a user access to just this compartment, but no other area (access done via groups and creating a 'policy') However the user appears to still have 'root' compartment access despite not being in the 'Administrator' group.
The same functionality works fine in the new data centre if we login direct not using SSO from MyServices.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document