My Oracle Support Banner

R12: OIE: Enabling Corporate Card Administrators To Access Decrypted Credit Card Numbers In Oracle Internet Expenses (Doc ID 1192868.1)

Last updated on DECEMBER 04, 2019

Applies to:

Oracle Internet Expenses - Version 12.1.3 to 12.1.3 [Release 12.1]
Information in this document applies to any platform.

Details

Oracle Internet Expenses now enables authorized corporate card administrators to view decrypted corporate card numbers to help them manually assign the correct employees to the correct cards when corporate cards are unassigned.

Issue

Oracle Payments (IBY) is continuously enhancing its features to conform to the latest Payment Application Data Security Standard (PA-DSS) to enable customers to be PCI compliant. In R12, IBY provides masking and encrypting credit card numbers and related information. Since OIE stores corporate credit cards and related details in IBY, the credit card numbers are masked in expense entry and corporate card administration pages if masking or encryption is enabled. There is no ability to unmask the credit card numbers just for the credit card administrators.

 

Business Need

OIE provides the ability to automatically create corporate cards and assign them to the correct employees when the charges arrive in the corporate card transactions file for the first time. This reduces administrative effort as corporate card administrators do not need to manually set up the cards.

The employee matching for newly created credit cards is based on the matching rules selected for a corporate card program. When transactions for a new card come in the corporate card transactions file, the system will apply the matching rules to determine the employee for the card. On successful identification of an employee, the system will activate the card and the employee will be able to select the credit card transactions in the expense report.

If the system failed to identify a unique match, the system will leave the card as unassigned. The system cannot determine a unique match if any of the information used in the matching rule does not exist in the HR application. This includes incorrect employee number, employee name, and/or social security number. In this case, the administrator needs to manually assign the card to an employee.

When the card numbers and cardholder information is masked, the administrator does not have the necessary information to assign the card to the correct employee. This results in fines and late charges as the employee is unable to submit expense reports on time.


Solution

The following Patch enhances the existing Assign action available in the ‘New Credit Card Accounts’ page available under Internet Expenses Administration -> Credit Card -> New Credit Card Accounts to display credit card numbers and related information in clear text to authorized administrators. When the administrator clicks on the Assign icon, the resulting page contains a new region which displays the card number in clear text. 

<Patch 9909767>: R12.OIE.B Oracle Internet Expenses Enhanced Credit Card Assignment User Interface.

Actions

Patch Application

Apply <Patch 9909767>:  R12.OIE.B Oracle Internet Expenses Enhanced Credit Card Assignment User Interface.
If prompted for password, contact Global Software Support to receive password.

Required Setup

To see the full credit card number, the new function named "Payments Credit Card Super User" should be added to ‘Expenses Policy Menu (OIE_POL_MENU)’ that is generally used by Internet Expenses Setup & administration responsibility.

To allow the administrators to view card numbers in clear text, perform the following:

1. Add the function ‘Payments Credit Card Super User’ to ‘Expenses Policy Menu’ and save.
2. Bounce Apache. The complete card number must be visible from the New Credit Cards Accounts -> Assign page.

Customers using custom responsibilities for administrators must verify the menus that are used by the responsibilities to ensure that functional needs are met.

Note: If there are multiple responsibilities using the same menu and the credit card number should be visible only to one of the responsibility then this new function should be added to the menu exclusions tab of the responsibilities for which the credit card number should not be visible.

Upgrade Impact

After applying this patch, a new function named "Payments Credit Card Super User" can be added to the menu ‘Expenses Policy Menu (OIE_POL_MENU)’ that is generally used by the seeded Internet Expenses Setup & administration responsibility. There is no functional change. 

Please note that unmasked card numbers are shown only to the administrators in the new cards assignment page in Internet Expenses Setup and Administration.
The card number will be masked in the Credit Cards form in Oracle Payables:  APXWCARD
.

 

Join the Oracle Payables Community to discuss further with other Oracle Payables Experts and learn more from your peers.


Contacts

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Details
 Issue
 Business Need
 
Solution
Actions
 Patch Application
 Required Setup
 Upgrade Impact
Contacts
References

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.