Using IDCS Integrated with OCI, the Access to Compartments are not Working with IDCS SSO
(Doc ID 2521827.1)
Last updated on SEPTEMBER 27, 2023
Applies to:
Identity Cloud Service (IDCS) - Version N/A and laterInformation in this document applies to any platform.
Symptoms
Using IDCS Integrated with OCI, the Access to Compartments are not Working with IDCS SSO.
Have single sign on configured in identity cloud in the classic data centre, and when moved across to ADWC the authentication works fine however finding rules around compartments do not work when we sign in this way.
So for example:
After created a new compartment as documented under:
https://docs.cloud.oracle.com/iaas/Content/Identity/Tasks/managingcompartments.htm
Then granted a user access to just this compartment, but no other area (access done via groups and creating a 'policy') However the user appears to still have 'root' compartment access despite not being in the 'Administrator' group.
The same functionality works fine in the new data centre if we login direct not using SSO from MyServices.
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
Symptoms |
Cause |
Solution |
References |