What's New in Oracle Access Governance
Learn about new features and documentation updates.
November 2026
Access Guardrail Has a value Operator
| Feature | Description |
|---|---|
| Access guardrail Has a value operator | When defining guardrail rules that use the Identity matches an attribute condition, you can use the Has a value operator to match any specified value. For more information, see Define Rules for Access Guardrails. |
Approval Workflow Escalation Ceiling
| Feature | Description |
|---|---|
| Global approval workflow escalation ceiling | As an AG_Administrator, you can optionally select a default identity collection boundary for approval escalations when a workflow ceiling is absent or unreachable. For more information, see Set the Global Escalation Ceiling. |
| Approval workflow escalation ceiling | If you enable escalations for an approval workflow template, you can also define an escalation ceiling by specifying the identity collection whose members must not receive escalated approval requests. For more information, see Advanced Settings for Approval Templates. |
August 2026
Sequential Access Request Processing
| Feature | Description |
|---|---|
| Sequential access request processing | As an AG_Administrator, you can optionally enforce sequential processing of several access requests for a single identity, whether as an access bundle, role, or both. For more information, see Enable Sequential Access Request Processing. |
Reports
| Feature | Description |
|---|---|
| Reports | You can generate downloadable reports for identities, access bundle assignments, accounts, and access bundles. For more information, see Generate and Download Access Governance Reports. |
July 2026
Microsoft Entra ID Orchestrated Systems
| Feature | Description |
|---|---|
| Microsoft Entra ID | Microsoft Entra ID orchestrated systems now support using Oracle Cloud Infrastructure Vault as a credential store. Existing Microsoft Entra ID orchestrated systems that store credentials in Oracle Access Governance can also migrate those credentials to OCI Vault. For more details, see Integrate with Microsoft Entra ID. |
June 2026
PeopleSoft Orchestrated Systems
| Feature | Description |
|---|---|
| PeopleSoft | Oracle Access Governance now supports integration with PeopleSoft Enterprise Learning Management (ELM) and PeopleSoft Financials and Supply Chain Management (FSCM) applications as an authoritative source and a managed system. You can now perform identity reconciliation, account management, role assignments, and reconciliation operations in PeopleSoft ELM and PeopleSoft FSCM. For more details, see Configure Integration Between Oracle Access Governance and PeopleSoft. |
Campaigns
| Feature | Description |
|---|---|
| Primary and other campaign owners |
You can add one primary owner and up to 20 other owners to a campaign. For existing campaigns, the current owner becomes the primary owner, with no other owners. You can also run ownership reviews for Campaigns. See Add Owners. |
| Delete campaigns | You can now delete campaigns in the Terminated, System ended, Draft or Approved statuses. See Delete a Campaign. |
New Approval Workflow Template - Business Approvers
| Feature | Description |
|---|---|
| Approval workflow - Business Approvers |
A new approval workflow template is available for reviewing and approving access requests based on business needs. You can assign business approvers to access bundles and roles without granting ownership or management privileges for the associated access resources. See Business Approvers and Bundle Settings. |
May 2026
Oracle Customer Experience (CX) Sales Orchestrated Systems
| Feature | Description |
|---|---|
| Oracle Customer Experience (CX) Sales | Oracle Access Governance now supports Oracle CX (Sales) integration as a managed system. This integration supports account provisioning and reconciliation operations for resource users, organizations, resource roles, and organization role assignments in Oracle CX (Sales). For more details, see Integrate Oracle Access Governance with Oracle Customer Experience (CX) Sales, Configure Integration with Oracle Customer Experience (CX) Sales, and Oracle Customer Experience (CX) Sales Integration Reference. |
Data Browser for Orchestrated Systems
| Feature | Description |
|---|---|
| Data Browser |
You can now use the Data Browser dashboard to view reconciled accounts and granted permissions associated with a managed system. You can review access data and perform supported account and permission management operations. See Data Browser: View Accounts and Granted Permissions for Managed Systems and Performing Account Lifecycle Operations in Data Browser. |
Mask Sensitive Managed System Account Attribute Values
| Feature | Description |
|---|---|
| Mask sensitive managed system account attribute values | Oracle Access Governance supports masking managed system account attribute values from the Account Attributes page. When enabled, the selected attribute values are displayed as asterisks (*). See Configure Account Attributes. |
Generic REST (Standard UI Driven)
| Feature | Description |
|---|---|
| Generic REST (Standard UI Driven) | Oracle Access Governance now supports Generic REST (Standard UI-driven) integration to onboard REST-based applications as a managed system using the Oracle Access Governance Console for account provisioning and reconciliation. You can use this for applications where direct connectors aren't available. See Integrate with Generic REST (Standard UI-driven). |
Area of Responsibility Templates
| Feature | Description |
|---|---|
| Provision area of responsibility (AOR) assignments using AOR templates | Oracle Access Governance now supports provisioning of Area of Responsibility (AOR) assignments using AOR templates defined in Oracle Fusion Cloud Applications. See Area of Responsibility (AOR) and AOR Template-Based Provisioning. |
Global Identity Attributes Handling For Null Values
| Feature | Description |
|---|---|
| Identity attribute handling for null values |
For Global Identity attributes, you can now configure attribute mappings to ignore null or empty values received from identity sources, ensuring that existing attribute values remain unchanged during synchronization. See Manage Global Identity Attributes. |
Delete Orchestrated Systems
| Feature | Description |
|---|---|
| Delete orchestrated system |
You can now delete an orchestrated system in the Draft state. See Delete an Orchestrated System. |
April 2026
Control User Password Resets for Orchestrated Systems
| Feature | Description |
|---|---|
| Control password resets | Application owners can now enable or disable user password resets from the Account Lifecycle settings for orchestrated systems. Password resets are available only if supported by the system. See Manage Account Settings for your Orchestrated System. |
Session Idle Timeout
| Feature | Description |
|---|---|
| Administrative settings - session idle timeout | As an Oracle Access Governance administrator, you can now configure the session idle timeout for the Oracle Access Governance service instance. If no idle timeout is configured, then a default timeout of 60 minutes is applied to each session. See Session Idle Timeout. |
Access Guardrail Condition: Identity Account on a System
| Feature | Description |
|---|---|
| Access guardrail - new condition type | You can now define access guardrails using a new condition that requires identities to have an account on a specified system before access is granted. See Define Rules for Access Guardrails. |
Oracle Identity Governance (OIG) Supported Modes
| Feature | Description |
|---|---|
| Oracle Identity Governance (OIG) | Oracle Identity Governance (OIG): When creating a new orchestrated system, you can now configure Oracle Identity Governance (OIG) as an authoritative source for identities and attributes, or for identity attributes only. Oracle Access Governance always manages permissions for the Oracle Identity Governance (OIG) for orchestrated system. See Oracle Identity Governance - Add Details. |
Support of Resource Principal Authentication in Flat File Systems
| Feature | Description |
|---|---|
| Flat File: Resource principal | You can now integrate Oracle Access Governance with generic Flat File systems using Resource Principal authentication. Existing orchestrated systems must migrate from API key-based connections to the Resource Principal authentication method. See Migrate API Key Access to Resource Principal Access. |
March 2026
Integrations - Orchestrated Systems
| Feature | Description |
|---|---|
| Oracle Warehouse Management Cloud (WMS) | Oracle Warehouse Management Cloud (WMS): Oracle Access Governance now supports identity orchestration to reconcile and provision accounts, companies, facilities as a managed system. See Integrate with Oracle Warehouse Management Cloud (WMS). |
Approval Workflow templates
| Feature | Description |
|---|---|
| Approval workflow | Approval workflow templates are updated, as follows:
For approval workflow template details, see Approval Workflows in Oracle Access Governance. |
Account Lifecycle Management
| Feature | Description |
|---|---|
| Birthright access and early termination | You can now assign birthright access to users based on the joining date and revoke accesses in case of early termination. For details, see Granting Birthright Access and Revoke Access for an Early Termination. |
| Global account termination settings | Administrators can configure global account termination settings for all orchestrated systems. You can also define override rules based on identity attribute values to exclude specific users from account termination. See Global Account Termination Settings. |
| Account settings for orchestrated systems | If global account termination settings are enabled, application administrators (AG_AppOwner_Admin) can't manage account termination settings at the orchestrated system level. Configure the account settings to support account management for both early termination and final termination of identities. See Manage Account Settings for your Orchestrated System. |
Integrations - Orchestrated Systems
| Feature | Description |
|---|---|
| OCI Vault for storing credentials for Oracle Fusion Cloud Applications | Oracle Access Governance uses OCI Vault to store credentials for Oracle Fusion Cloud Applications. See Integration Settings. |
| Generic REST Connector: Resource principal | You can now integrate Oracle Access Governance with Generic REST Connector using Resource Principal authentication. You must migrate from API Key-based connections to Resource Principal. See Migrate API Key Access to Resource Principal Access and Configure Generic REST. |
Identity/Account Matching Rules
| Feature | Description |
|---|---|
| Enhanced account correlation and dynamic matching rules | Improved identity/account correlation capabilities to apply rules to all incoming data, only new data, or disable matching entirely. You can now view insights for match results, including matched, unmatched, or multimatched identities/accounts. See Match Identity and Account Attributes using Correlation Rules and Insights for Match Results. |
Authoritative Source - Source of Identity Attributes
| Feature | Description |
|---|---|
| Enhanced configuration for authoritative sources | When creating a new orchestrated system, you can now configure whether to set the authoritative source as a source of identities and attributes, or identity attributes only. See Integrate with Flat File. |
February 2026
Self Service - Password Reset
| Feature | Description |
|---|---|
| Reset password for accounts managed by Oracle Access Governance | You can now reset password for accounts managed by Oracle Access Governance. AG_Administrator can configure the password policy for the enterprise. For details, see Reset Password for managed system Accounts and Configure Password Policy. |
Integrations - Update to Orchestrated Systems
| Feature | Description |
|---|---|
| Integrate with Oracle Transport and Global Trade Management (OTM/GTM) | Oracle Transport and Global Trade Management (OTM/GTM): You can now provision several user roles from an access bundle and assign a default user role from Oracle Access Governance. See Integrate Oracle Access Governance with Oracle Transport and Global Trade Management (OTM/GTM). |
January 2026
Integrations - Update to Orchestrated Systems
| Feature | Description |
|---|---|
| Integrate with Palo Alto Networks Prisma Cloud | Palo Alto Networks Prisma Cloud: Oracle Access Governance now supports identity orchestration to reconcile and provision accounts and manage groups as a managed system. For details, seeIntegrate with Palo Alto Networks Prisma Cloud. |
| Integrate with Atlassian Jira | Atlassian Jira: You now have support for JIRA integration using experimental APIs to reliably retrieve all necessary attributes from the JIRA environment. For details, see Configure Integration Between Oracle Access Governance and Atlassian JIRA. |
| Integrate with Eloqua | Eloqua: You can now configure Eloqua using OAuth for secure authentication. For details to connect Oracle Access Governance to Eloqua using OAuth, see Integrate with Eloqua. |
| Integrate with Oracle Fusion Cloud Applications | Oracle Fusion Cloud Applications: Manage provisioning of procurement agents from Oracle Access Governance configured for ERP or Both application types. For details, see Integration Settings and Default Supported Attributes. |
Event-driven Access Reviews
| Feature | Description |
|---|---|
| Event-based Setup → Change Events | You can create, edit or delete change event configurations and apply filters to narrow the review scope to specific applications/permissions. For details, see Configure and Manage Event-based Access Reviews. |
December 2025
Support for Editing User Capabilities from Oracle Access Governance for OCI IAM Orchestrated System
| Feature | Description |
|---|---|
| Integrate with Oracle Cloud Infrastructure | OCI : You can now edit user capabilities from Oracle Access Governance by creating an account profile for one or more OCI IAM domains, configured as managed system. See Edit User Capabilities for OCI Users. |
Account Lifecycle Settings - Delete Permissions for Disabled Accounts
| Feature | Description |
|---|---|
| Account lifecycle settings - leaver workflow | For an orchestrated system, in the Account Lifecycle settings, you can now configure the system to delete all associated permissions for all accounts that are disabled when someone leaves the organization, or when a Leaver workflow is triggered for any reason. See Configure Orchestrated System Account Settings. |
Inbound Data Transformation - Multi-Attribute Association
| Feature | Description |
|---|---|
| Inbound data transformation | You can use inbound transformation rule to map a value to several attributes at one time. For example, see Multiple Attribute Rule in Inbound Transformation. |
Oracle Fusion Cloud Applications Orchestrated System
| Feature | Description |
|---|---|
| Integrate with Oracle Fusion Cloud Applications |
Oracle Fusion Cloud
Applications
|
Microsoft Active Directory Orchestrated System
| Feature | Description |
|---|---|
| Integrate with Microsoft Active Directory |
Microsoft Active Directory
: New configuration fields are added
See Integration Settings. |
Manage Identity Attributes - Any System Available
| Feature | Description |
|---|---|
| Manage Identity Attributes | To load attribute value when unique identity data is received from different authoritative sources, in the Identity Attributes page, select Any system available to retrieve the value from the orchestrated system with the most recent data load. See Manage Global Identity Attributes. |
November 2025
Administrative Settings from Oracle Access Governance Console
| Feature | Description |
|---|---|
| Administrative settings from Oracle Access Governance Console | As an AG_Administrator, you can customize console settings from the Service Administration → Settings tab. You can restrict or permit nonadministrator users to export identity, account and enterprise-wide data to CSV from the Oracle Access Governance Console. For more details, see Administrative Settings in Oracle Access Governance. |
Approval Workflows - Auto Approval Decision Matrix
| Feature | Description |
|---|---|
| Approval workflows - auto approval decision | The approvals workflow automatically approves access requests based on specific workflow configurations and presence of guardrails or SOD violations. For more details, see Auto Approval Decision Matrix. |
Support to Create Complex Identity Attributes from Oracle Access Governance Console
| Feature | Description |
|---|---|
| Create simple and complex Identity Attributes for an authoritative source | You can now create simple and complex identity attributes for an authoritative source and source its value from the source system or derive its value from a rule. In cases where complex custom attributes are defined, create an affiliation to use them for Oracle Access Governance features. For more details, see Manage Custom Attributes. |
Configure Partial Data Load Schedule Settings for an Orchestrated System
| Feature | Description |
|---|---|
| Configure partial data load schedule settings for an orchestrated system | Enable incremental data ingestion by loading only the new or updated records since the last load, instead of performing a full data load on entire dataset. This applies only for Oracle Fusion Cloud Applications . For more details, see Configure Partial Data Load Settings and Enable Atom Feeds for Partial Data Load. |
Change Password for Directly Provisioned Accounts and Manager-Led Password Reset
| Feature | Description |
|---|---|
| Change password | You can now change the password for reconciled accounts, that is, accounts provisioned directly in the Managed Systems with Grant type as DIRECT. Also, Managers can change password on behalf of their direct reports from the Who Has Access to What, and then the My Directs' Access page. For more information, see Change Account Password and My Directs' Access
|
Identity Attribute Visibility Controlled by Enabled Identity Flags on Who Has Access to What Pages
| Feature | Description |
|---|---|
| Identity attribute visibility for enabled identity flags | Identity attributes are displayed on the Who Has Access to What pages and the identity attribute details page only if the corresponding identity flags are enabled. If these flags aren't enabled, the identity attributes aren't displayed. To enable flags, see Manage Global Identity Attributes. |
UI Console Navigation updates to Manage System Identity Attributes and Affiliations
| Feature | Description |
|---|---|
| Navigation updates to manage attributes and affiliations. | You can now manage identity attributes and affiliations from the Manage Integrations page for a specific orchestrated system. See Manage System Identity Attributes and Manage and Configure Affiliations. |
October 2025
Revision Management support for Oracle Access Governance resources
| Feature | Description |
|---|---|
| Revision management with approval workflow support | Oracle Access Governance enables you to propose, review, and manage changes to key resources such as Identity Collections, Organizations, Active and Consumer Identities before implementation. If configured, resource edits or deletions go through an approval workflow, and users can track all changes, view detailed revision history, and approval request trail for the resources. For more information, see Revision Management in Oracle Access Governance. |
Flat File Orchestrated System supports Virtual Systems
| Feature | Description |
|---|---|
| Integrate with Flat File |
Flat File: Oracle Access Governance now supports several applications in a single Flat File orchestrated system as Virtual Systems. Virtual Systems permit you to manage several related applications or domains as logical subsystems within a single orchestrated system integration. Each virtual system shares the same structural schema but contains different data. See Understanding Virtual Systems and Integrate with Flat File. |
OCI IAM Domains as Authoritative Source or Managed System
| Feature | Description |
|---|---|
| Integrate with OCI |
OCI
: You can now select one or more OCI IAM domains as either authoritative source or managed system, or both. Authoritative source domains are used to build identity profiles. The domains selected as managed systems are used for tasks such as managing identities, running access reviews, and setting up access controls. See Integrate with Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM). |
September 2025
Integrate Oracle Access Governance with Orchestrated Systems
| Feature | Description |
|---|---|
| Integrate with Oracle Infinity |
Oracle Infinity
: Oracle Access Governance now supports identity orchestration for provisioning and reconciliation of accounts in Oracle Infinity as a managed system. Oracle Infinity is a cloud-based digital analytics platform that helps organizations track, analyze, and optimize customer interactions and behavior, providing insights to improve customer experiences and business results. To connect successfully, you must have an active connection with OCI orchestrated system in the same tenancy and domain as Oracle Infinity. With this integration, you can create and revoke Oracle Infinity accounts using Oracle Access Governance. See Integrate with Oracle Infinity. |
Safeguard against Data Loss with Safety Check Settings
| Feature | Description |
|---|---|
| Safety checks to prevent data loss | You can now configure safety checks in the data load settings of the orchestrated system to prevent accidental or unintended data loss when managing identities in Oracle Access Governance. Specify the maximum permitted percentage decrease (% ↓) for identities, accounts, or permissions during data load. If a data load exceeds this limit, the operation automatically fails. See Configure Safety Checks for Orchestrated Systems. |
Access Bundles
| Feature | Description |
|---|---|
| Request limited to members of organization | As an Access Control Administrator, you can now configure access bundles and roles in Oracle Access Governance to limit their availability in the self-service request flow to members of specific organizations. You must create the relevant organization in Oracle Access Governance. This provides granular access control by ensuring that only members of an organization can request designated permission sets. See Request Access |
August 2025
Integrate Oracle Access Governance with Orchestrated Systems
| Feature | Description |
|---|---|
| Integrate with Oracle Transport and Global Trade Management (OTM/GTM) |
Oracle Transport and Global Trade
Management (OTM/GTM)
: Oracle Access Governance now supports identity orchestration for provisioning and reconciliation of accounts in Oracle Transport and Global Trade
Management (OTM/GTM) as a managed system. Oracle Transport and Global Trade Management (OTM/GTM) is a cloud-based solution that helps organizations manage, optimize, and streamline the transportation and global trade operations. With this integration, you can create, update, enable, disable, delete accounts, change password for accounts. You can also manage roles and business intelligence role assignments for identities from Oracle Access Governance. See Integrate Oracle Access Governance with Oracle Transport and Global Trade Management (OTM/GTM) |
| Integrate with Oracle Configure, Price, Quote (CPQ) |
Oracle Configure, Price, Quote (CPQ)
: Oracle Access Governance now supports identity orchestration for provisioning and reconciliation of accounts in Oracle Configure, Price, Quote (CPQ) as a managed system. Oracle Configure, Price, Quote (CPQ) is a cloud-based solution that streamlines and automates the configuration, pricing, and quoting processes for complex products and services, helping sales teams deliver accurate quotes. With this integration, you can create, update, enable, disable accounts. You can also change password for accounts and manage permissions and group assignment (Add/Remove Sales and Admin Group) for identities from Oracle Access Governance. See Integrate with Oracle Configure, Price, Quote (CPQ) |
| Integrate with Oracle Unity |
Oracle Unity
: Oracle Access Governance now supports identity orchestration for provisioning and reconciliation of accounts in Oracle Unity as a managed system. To connect successfully, you must have an active connection with OCI orchestrated system in the same tenancy and domain as Oracle Unity. With this integration, you can create, update, enable, and disable accounts. You can also manage role assignments for identities from Oracle Access Governance. See Integrate Oracle Access Governance with Oracle Unity |
Access Guardrails for Identity Collections
| Feature | Description |
|---|---|
| Access guardrails for identity collections | Access Guardrails support is extended to Identity Collections. This permits Access Control Administrators to establish preventive access control measures, ensuring that authorized and compliant identities, those meeting predefined criteria, are members of an Identity Collection. If these conditions aren't met, a violation is raised, and you can block access immediately or permit a grace period for compliance. |
July 2025
Integrate Oracle Access Governance with Orchestrated Systems
| Feature | Description |
|---|---|
| Integrate with Oracle APEX |
Oracle APEX
: Oracle Access Governance now supports identity orchestration for provisioning and reconciliation of accounts in Oracle APEX as a managed system. Oracle APEX is a low-code development platform that enables users to rapidly design and build scalable, secure, and feature-rich applications with minimal programming required. With this integration, you can create, update, delete accounts, change password for accounts. You can also manage group and privilege assignment at workspace and global level for identities from Oracle Access Governance. See Integrate Oracle Access Governance with Oracle APEX |
| Integrate with SAP Fieldglass |
SAP Fieldglass
: Oracle Access Governance now supports identity orchestration for provisioning and reconciliation of accounts in SAP Fieldglass as a managed system. SAP Fieldglass is a cloud-based vendor management system that helps organizations efficiently manage their external workforce providing visibility, compliance, and cost control over contract workers. With this integration, you can create, update, delete accounts. You can also manage group assignment for identities from Oracle Access Governance. |
| OCI IAM: Use Resource Principal authentication | You can now integrate Oracle Access Governance with an OCI IAM instance using Resource Principal authentication. You must migrate from API Key-based connections to Resource Principals, enabling more secure, streamlined, and compliant access to OCI IAM resources. For more information, see Integrate with Oracle Cloud Infrastructure (OCI) Identity and Access Management (IAM) and How To Migrate API Key Access To Resource Principal Access. |
| Integrate with Database Application Tables |
Oracle Access Governance now retains mapping for the associated identity attributes even after you update the Day N DBAT schema. Changes such as changing display names or adding new attributes don't override existing mappings. For example, if you map the "firstName" account attribute to a specific identity attribute and later change attribute display names, the original "firstName" mapping remains intact. |
| Integrate with Flat File | Oracle Access Governance now supports schema extension for Flat File orchestrated systems. You can create, edit, delete, and associate identity attributes for these custom attributes from the Oracle Access Governance Console. See Schema Extension - Adding Custom Account Attributes. |
Campaigns and Access Reviews
| Feature | Description |
|---|---|
| Pending access reviews for a campaign | You can now view pending access review tasks for an in-progress campaign from the View Campaign Details page. You can reassign pending access reviews to another reviewer, provided the reviewer isn't a beneficiary. In addition, you can download a list of pending access reviews for a campaign for audit and analysis purposes. |
June 2025
Integrate Oracle Access Governance with Orchestrated Systems
| Feature | Description |
|---|---|
| Integrate with SAP User Management (UM) |
SAP User Management
(UM)
: Oracle Access Governance now supports identity orchestration for provisioning and reconciliation of accounts in SAP User Management
(UM) as a managed system. SAP User Management (UM) handles the creation, maintenance, and control of user access across SAP systems. With this integration, you can create and update accounts and change account passwords. You can manage group and role assignment for identities using Access Bundles from Oracle Access Governance. For more information, see Integrate Oracle Access Governance with SAP User Management (UM). |
| Oracle Fusion Cloud Applications: Automated SoD Approvals handling through Oracle Access Governance | Oracle Access Governance now automates the provisioning of SoD-flagged violations by passing approval decisions—including justifications and conditional acknowledgments—directly to Risk Management Cloud (RMC). This eliminates the need to reapprove SoD-flagged entitlement in RMC. For more information, see Preventive Segregation of Duties. |
Campaigns
| Feature | Description |
|---|---|
| Access reviews only for Certifiable entitlements in OIG | For Oracle Identity Governance (OIG) system, you can only review entitlements that have the Certifiable flag selected.
|
Application Roles
| Feature | Description |
|---|---|
Application owner AG_App_Owner_Restricted_Admin
|
For new integrations, AG_App_Owner_Restricted_Admin can't configure an authoritative source. Only AG_App_Owner_Admin or AG_Administrator can configure an authoritative source for an application. |
Revoke OCI IAM Groups or OCI Application Roles from Manage Identities
| Feature | Description |
|---|---|
| Revoke OCI IAM groups or OCI application roles | From the Manage Identities page, users with AG_ServiceDesk_Admin role can now directly revoke one or more permissions (OCI IAM Groups or Application Roles) assigned directly or provisioned through request. For example, using Oracle Access Governance, you can revoke an application role for an identity. |
User Experience Enhancements
| Feature | Description |
|---|---|
| User experience enhancements | With the new UI improvements, you can now search, filter, and select access bundles, roles, and self-service access requests. These enhancements provide better visibility and enable more informed decision-making |
May 2025
Affiliations in Oracle Access Governance
| Feature | Description |
|---|---|
| Identity Attributes → Affiliations |
Oracle Access Governance now supports Affiliations, enabling flexible and complex identity representation. A single identity can represent several roles or relationships, such as being both an employee and a student, each with distinct access needs. Administrators ( Using Affiliations, you can also segregate and simplify complex data types (such as object arrays) into simpler data types. |
Integrate Oracle Access Governance with Orchestrated Systems
| Feature | Description |
|---|---|
| Integrate with Database User Management (PostgreSQL) |
Database User Management
(PostgreSQL)
: Oracle Access Governance now supports identity orchestration for provisioning and reconciliation of accounts in Database User Management
(PostgreSQL) as a managed system. PostgreSQL is an open source relational database management system widely used in big data applications, enterprise software, and web services. With this integration, you can create and manage accounts, role assignments, and privilege assignment from Oracle Access Governance. |
| Integrate with Oracle Fusion Cloud Applications: OAuth-based authentication | Oracle Fusion Cloud Applications : Oracle Access Governance now supports OCI OAuth-based authentication to integrate with the Oracle Fusion Cloud Applications instance. In the integration settings, you must select the Do you want to use OCI IAM for authentication? checkbox and include the OCI IAM tenancy and confidential application details. For more information, see Authenticating with OCI OAuth. |
| Integrate with Oracle Fusion Cloud Applications HCM: Areas of Responsibility Support as an account attribute |
Oracle Fusion Cloud
Applications HCM: Oracle Access Governance now supports data synchronization and reconciliation operations based on the additional Area of Responsibility (AOR) attributes. In Oracle Fusion Cloud Human Capital Management (Fusion HCM), AOR defines security roles based on a person's or team's scope of responsibility, determining which records they can access and act upon. To enable AOR integration, select the Do you want to enable areas of responsibility? checkbox in integration settings. When an identity is linked to an AOR, Oracle Access Governance performs data loads and syncs the updated value based on AOR account attribute value. For reference AOR attributes, see Default Supported Attributes. |
| Integrate with Microsoft Active Directory: Active Directory Lightweight Directory Services (AD LDS) |
Microsoft Active Directory
: Oracle Access Governance now supports Active Directory Lightweight Directory Services (AD LDS) as an extension to the existing Microsoft Active Directory orchestrated system. In the integration settings, select the Is this Active Directory is a Lightweight Directory Services (AD LDS) environment checkbox. This integration supports dedicated directory services for each application. For more information, see Integrate Oracle Access Governance with Microsoft Active Directory. |
| Integrate with ServiceNow User Management |
ServiceNow User Management
: Oracle Access Governance now supports identity orchestration, reconciliation, and centralized provisioning of identity accounts for ServiceNow, both as an authoritative source and a managed system. ServiceNow is a cloud-based platform that delivers digital workflows to automate business processes. The integration is facilitated through the Oracle Access Governance User Management application, certified and available on the ServiceNow marketplace. With this integration, you can create and manage accounts, role assignment and group assignment from Oracle Access Governance. For more information, see Integrate with ServiceNow. |
| Integrate with Microsoft Entra ID |
Microsoft Entra ID
: Oracle Access Governance now supports Azure AD B2C integration as an extension to the existing Microsoft Entra ID orchestrated system. With this integration, you can now manage internal and external identities, such as customers and partners, directly within Oracle Access Governance. You can manage identity accounts and group assignments for these identities. |
Granting Time-Bound Access in Oracle Access Governance
| Feature | Description |
|---|---|
| Access bundle | In the access bundle creation workflow, in the Time limits task, you can set the expiration period. Select Indefinitely for permanent access, or specify the maximum number of days or hours for which this access is granted. Users also receive notifications before the access permission is revoked, and can request an extension if permitted from the My Access page. |
| Approvals | As an approver, you can now grant temporary access to an access bundle in addition to the existing configuration. Access can be approved for a specified duration, even if the access bundle permits a longer period. You can set the number of days or hours needed or define a specific start and end time for the access. |
| Request Access → Request access bundle | As an AG_USER, you can now request temporary access to an access bundle. When making a request, select Indefinitely for permanent access, specify the maximum number of days or hours needed, or set a specific start and end time for the access. |
| Access reviews | You can now grant time-based access for a defined number of days while approving access review tasks. In the My Access Review page, while approving a request, select Indefinitely for permanent access or set an expiration period for temporary access. This action is available for individual requests, ensuring precise control over each access approval. |
| Manage Identities | As an AG_ServiceDesk_Admin user, you can now request an extension for the soon-to-expire access, based on the permitted number of days defined during access bundle configuration. Users can also request an extension themselves from the My Access page. |
Configure Approval Workflows only for Violations in Access Bundle Requests
| Feature | Description |
|---|---|
| Configure approval workflows only for violations in access bundle requests | You can now configure access bundles to trigger selected approval workflow only when an access request results in a violation against an access guardrail or Segregation of Duties (SoD), else request gets automatically approved. |
Campaigns
| Feature | Description |
|---|---|
| Update campaigns configuration to prevent generation of account review tasks | In the Create Campaign workflow, you can now create identity access reviews only for permissions without creating account access reviews. This functionality isn't available in campaigns created for OCI. For more information, see Add Campaign Details. |
April 2025
Integrate Oracle Access Governance with Orchestrated Systems
| Feature | Description |
|---|---|
| Integrate with Oracle Enterprise Performance Management (EPM) |
Oracle Enterprise
Performance Management (EPM)
: Oracle Access Governance now supports identity orchestration for provisioning and reconciliation of accounts in Oracle Enterprise
Performance Management (EPM) as a managed system. Oracle Enterprise Performance Management (EPM) is a cloud-based software that helps businesses make informed decisions by streamlining planning, budgeting, forecasting, and financial close processes with advanced analytics and automation. With this integration, you can create and manage predefined roles, application roles, and EPM group assignment from Oracle Access Governance. To connect successfully, you must have an active connection with OCI orchestrated system in the same tenancy and domain as Oracle Enterprise Performance Management (EPM). For more information, see Integrate with Oracle Enterprise Performance Management (EPM). |
Get Failed Event Details with Diagnostic Service Logs using Oracle Cloud Infrastructure Logging service
| Feature | Description |
|---|---|
| Diagnostic service logs | You can now view diagnostic logs from Oracle Access Governance for performing informed troubleshooting using the Logging service. You can view details in a JSON format whenever an operation fails, such as a campaign that is system ended. As an OCI Administrator, you can configure the Oracle Access Governance service logs for the service instance. For more information, see Diagnostic Service Logs in Oracle Access Governance Overview. |
Campaigns
| Feature | Description |
|---|---|
| Campaign ownership change | You can now change campaign ownership for ongoing In Progress or Ready For Approval campaigns. For more information, see Campaign Ownership Change. |
March 2025
Oracle Access Governance REST APIs Availability
| Feature | Description |
|---|---|
| Oracle Access Governance REST APIs availability | Oracle Access Governance released REST APIs to automate and extend Identity Governance and Administration (IGA) capabilities. The REST APIs are available with an Oracle Access Governance Premium license. You can streamline access control processes, improve compliance, and enhance the overall identity management across diverse environments. For more details, see Oracle Access Governance REST APIs. |
Audit Events and Event Data Publisher in Oracle Access Governance
| Feature | Description |
|---|---|
| Audit events as part of Event Data Publisher | You can now get a comprehensive audit trail of actions performed within Oracle Access Governance, in near real-time for compliance, creating customized reports, or for troubleshooting purposes. To configure receiving audit events in the OCI stream, select the Audit event option on the Data Feed configuration page. You receive a JSON response, containing detailed interaction points, such as who started the request, which resource IDs were involved, what action was performed, request and response payloads for each action, along with additional details. |
| Additional Oracle Access Governance components supported for Event Data Publisher | You can now receive additional data events, such as Access Guardrails, Permission Assignments, Roles, and so on for all orchestrated systems managed by Oracle Access Governance. The setup configuration remains unchanged, Day 0 events are exported to OCI Buckets and later events are published to OCI Streams. |
Integrate Oracle Access Governance with Orchestrated Systems
| Feature | Description |
|---|---|
| Integrate with Atlassian Jira |
Atlassian Jira
: Oracle Access Governance now supports identity orchestration for provisioning and reconciliation of accounts in Atlassian JIRA as a managed system. Atlassian Jira is a comprehensive project management and issue tracking tool that enables teams to plan, prioritize, monitor tasks effectively. With this integration, you can create and manage identity accounts and group assignment from Oracle Access Governance. |
| Integrate with PeopleSoft Human Capital Management (HCM) | For PeopleSoft, you can now:
|
| Integrate with Oracle Fusion Cloud Applications Human Capital (HCM) | For Oracle Fusion Cloud
Applications Human Capital (HCM):
|
Managed System Account Management - Account Lifecycle Settings
| Feature | Description |
|---|---|
| Account lifecycle settings | In the orchestrated system Account Lifecycle settings, the following enhancements have been done:
|
Additional Service Enhancements
| Feature | Description |
|---|---|
| Campaigns → My Access Reviews | You can now search identity access reviews based on Oracle Access Governance Organization name. |
| Who Has Access to What → Enterprise-wide Browser compartment reports | For an OCI orchestrated system, you can export a compartment report using the Export compartment report button from the Enterprise-wide Browser page to view available resource details in that compartment along with access information for identities associated with these resources. For more information, see Generate Compartment Report. |
February 2025
Integrate Oracle Access Governance with New Orchestrated Systems
| Feature | Description |
|---|---|
| Integrate with SAP SuccessFactors |
SAP SuccessFactors
: Oracle Access Governance now supports onboarding of identities, provisioning, and reconciliation of accounts in SAP SuccessFactors as an authoritative source and as a managed system. SAP SuccessFactors is a cloud-based Human Capital Management (HCM) software that helps organizations manage various HR functions, including talent management, onboarding, payrolls, or other HR processes. With this integration, you can manage identity accounts and group assignment from Oracle Access Governance. For more information, see Integrate with SAP SuccessFactors. |
| Integrate with Workday |
Workday
: Oracle Access Governance now supports onboarding of identities, provisioning, and reconciliation of accounts in Workday HCM as an authoritative source and as a managed system. Workday is a cloud-based Human Capital Management (HCM) and workforce management software that helps organizations streamline various HR functions, including talent management, workforce planning, onboarding, payrolls, or other core HR processes. With this integration, you can manage identity accounts and security group assignment from Oracle Access Governance. For more information, see Integrate with Workday. |
Modify Account Attributes from Oracle Access Governance Console
| Feature | Description |
|---|---|
| Modify account attributes | As a Service Desk Administrator (AG_ServiceDesk_Admin), Oracle Access Governance permits you to directly update default or custom account attributes without any approval workflow. Select Manage Identities, then select Account details, then select the Edit Account operation to change the value of account attributes. After you have updated the account attributes, it triggers the Update Account operation on the orchestrated system. For example, based on the attributes supported for an orchestrated system, you can use this feature to update Account Name, Locked status, address change, password and so on. For more information, see Modify Account Attributes from Oracle Access Governance. |
January 2025
Access Guardrails in Oracle Access Governance
| Feature | Description |
|---|---|
| Access guardrails in Oracle Access Governance | Access Guardrails in Oracle Access Governance, permits you to establish preventive access control measures to ensure that authorized and compliant identities gain access. You can define a set of conditions that an identity must meet before gaining an access to a permission, such as completing mandatory trainings, or meeting policy requirements. If these conditions aren't met, a violation is raised, and you can block access immediately or permit a grace period for compliance. For more information, see Enforce Preventive Access Control Conditions. |
AI-Powered Access Bundle Recommendation Engine in Oracle Access Governance
| Feature | Description |
|---|---|
| AI-powered Access Bundle Recommendation engine in Oracle Access Governance | Oracle Access Governance now supports AI-powered intelligent Access Bundle Recommendation capability to instantly get a list of prebundled sets of permissions, based on usage patterns and relationship mapping from managed systems. Instead of manually creating access bundles and associating permissions, the system suggests access bundles that you can accept, edit, or reject, making access provisioning faster and more efficient. For more information, see AI-Powered Access Bundle Generation for Orchestrated Systems. |
Account Profiles in Oracle Access Governance
| Feature | Description |
|---|---|
| Account profiles in Oracle Access Governance |
Oracle Access Governance simplifies permission management by letting you define account profiles with supported or custom account attributes and default values. This avoids repeatedly entering the account details required for provisioning in each Access Bundle. While defining account profiles, you can provide default values or ask the requester to provide values during the self-service request. For Policy-Based Access Control (PBAC), default values are used. You can associate an account profile with an access bundle to ensure consistent attribute application and easier updates. For more information, see Account Profiles - Reusable Templates for Access Bundle Generation. |
Global Key Values in Oracle Access Governance
| Feature | Description |
|---|---|
| Global Key Values |
Global Key Values in Oracle Access Governance is a set of key-value pair {label,value} containing keys for identity or account attributes with values, such as project codes with project names, language codes with languages, and so on. This simplifies transformation or account management operations. You can import the defined key-value pairs using a CSV file and use these values across orchestrated systems.For example, you can import project codes with project names in a CSV file and use the values to derive a value in inbound or outbound transformations and use it across the integrations. You can also use this to supply values for custom account attributes. For more information, see Manage Global Key-Values. |
Account Attributes for Account Management and Transformations in Oracle Access Governance
| Feature | Description |
|---|---|
| Account attributes for account management and transformations in Oracle Access Governance |
Account Attributes in Oracle Access Governance enables administrators to configure custom account attributes beyond the default account attributes supported for an orchestrated system, providing flexibility over account management operations. You can source values of these additional account attributes from the managed system, from Global key values reference file, or define it when creating an access bundle. You can use and configure these attributes for inbound or outbound transformations, or for account provisioning operations, such as account creation. You can also use these account attributes to define the account profile required for provisioning. For example, you can dynamically construct nested attributes containing array of values, such as address, and use it during provisioning access to a user. For more information, see Account Attributes. |
Integrate Oracle Access Governance with Arcon Privileged Access Management (Arcon PAM)
| Feature | Description |
|---|---|
| Integrate with Arcon Privileged Access Management (Arcon PAM) |
Arcon Privileged Access Management
(Arcon PAM)
: Oracle Access Governance now supports identity orchestration for provisioning and reconciliation of accounts in Arcon Privileged Access Management
(Arcon PAM) as a managed system. Arcon Privileged Access Management (Arcon PAM) is a comprehensive solution managing privileged access across various IT environments, ensuring that only authorized users can access critical systems. With this integration, you can centrally manage and monitor privileged accesses, streamline access reviews, enforces security policies across all systems, ensuring compliance with internal and regulatory requirements. For more information, see Integrate with Arcon PAM. |
New Orchestrated System: Database Application Tables (MySQL) and Database Application Tables (MSSQL)
| Feature | Description |
|---|---|
| Integrate with Database Application Tables (MySQL) | Database Application Tables (MySQL) : Oracle Access Governance now supports on-boarding of identity (user) data, identity orchestration for provisioning and reconciliation of accounts in Database Application Tables (MySQL) as an authoritative source and as a managed system. For more information, see Integrate with Database Application Tables (MySQL). |
| Integrate with Database Application Tables (MSSQL) | Database Application Tables (MSSQL) : Oracle Access Governance now supports on-boarding of identity (user) data, identity orchestration for provisioning and reconciliation of accounts in Database Application Tables (MSSQL) as an authoritative source and as a managed system. For more information, see Integrate with Database Application Tables (MSSQL). |
ePrescribe, PPR and Taxonomy Attribute Support in Oracle Health EHR (formerly Cerner Millennium) Orchestrated Systems
| Feature | Description |
|---|---|
| Extending support of default attributes for Oracle Health EHR (formerly Cerner Millennium) orchestrated system |
Oracle Health EHR
(formerly Cerner Millennium) orchestrated system now supports additional default attributes for provisioning and transformation to enable seamless data integration. Oracle Health EHR
(formerly Cerner Millennium) orchestrated system now supports account attributes from the following functionalities :
For more information, see Oracle Health EHR (formerly Cerner Millennium) Integration Reference. |
New Service Helpdesk Administrator role in Oracle Access Governance
| Feature | Description |
|---|---|
| New Service Helpdesk Administrator role for advanced administration in Oracle Access Governance | A new application role AG_ServiceDesk_Admin is introduced in Oracle Access Governance. This role empowers administrators to change accounts and perform other advanced administrative functions directly in the Oracle Access Governance Console. Users with this role can enable, disable, or delete accounts and can revoke permissions managed by Oracle Access Governance. Furthermore, users with this role can retry provisioning for failed or pending accesses. For more information, see Application Roles and Responsibilities Reference. |
Account Lifecycle Management Operations in Oracle Access Governance
| Feature | Description |
|---|---|
| Account lifecycle management in Oracle Access Governance |
Oracle Access Governance users with AG_ServiceDesk_Admin role can now directly perform the following operations from the Manage Identities page.
For more information, see Manage Identities. |
December 2024
Publish Initial Data Event of Day-0 to Oracle Cloud Infrastructure Object Storage Buckets
| Feature | Description |
|---|---|
| Event Data Publisher | Event Data Publisher is now enhanced to export the initial data event (Day 0) to OCI Buckets irrespective of file size. The publishing status for the Day 0 export is sent as stream messages to OCI Streams. The incremental ongoing data events (Day N) are still published based on file size, either to OCI Buckets or OCI Streams. |
Orchestrated Systems
| Feature | Description |
|---|---|
| New orchestrated system: Integrate with SAP Ariba |
SAP Ariba
: Oracle Access Governance now supports identity orchestration for provisioning and reconciliation of accounts in SAP Ariba as a managed system. SAP Ariba is a comprehensive cloud-based procurement and spend management service that helps businesses streamline and optimize their procurement processes, from sourcing to payment. With this integration, you can create, update, enable, and disable identity accounts. You can manage group assignment for identities using Access Bundles from Oracle Access Governance. For more details, see Integrate with SAP Ariba. |
| New orchestrated system: Integrate with SAP S/4HANA |
SAP S/4HANA
: Oracle Access Governance now supports identity orchestration for provisioning and reconciliation of accounts in SAP S/4HANA as a managed system. SAP S/4HANA is an Enterprise resource planning (ERP) platform built to help businesses run real-time analytics and simplify complex business processes such as order-to-cash, procure-to-pay, plan-to-product, and request-to-service. With this integration, you can enable and disable identity accounts. You can manage role assignment for identities using Access Bundles from Oracle Access Governance. You can also update account by locking or unlocking identity accounts. |
November 2024
Preventive Segregation of Duties (SOD) Analysis using Oracle Fusion Cloud Risk Management and Compliance (RMC)
| Feature | Description |
|---|---|
| Segregation of Duties (SOD) analysis for Oracle Fusion Cloud Applications | Oracle Access Governance now supports preventive SOD checks through Oracle Fusion Cloud Risk Management and Compliance (RMC). With this update, Oracle Access Governance raises potential conflicts as part of access request approval task. The SOD violations check is scoped for Oracle Access Governance Access Bundles. For more details, see Manage Approvals. |
Access Controls: Manage Assignment of OCI Cloud Services Application Roles
| Feature | Description |
|---|---|
| Assign users to OCI cloud service application roles from Oracle Access Governance | You can now assign OCI cloud services application roles to identities with Oracle Access Governance. For this, package one or more OCI cloud services application roles in an access bundle, and assign it to users through a policy or an access request. You can further run identity access reviews for these assignments, if these are granted through user request. For more details, see Create an Access Bundle. |
Identity Access Reviews for OCI Permissions managed by Oracle Access Governance
| Feature | Description |
|---|---|
| Run Identity Access reviews for OCI permissions managed by Oracle Access Governance | For assignments managed by Oracle Access Governance, you can certify identities assigned to OCI IAM groups and OCI cloud services application roles as part of OCI Access Bundles reviews (Grant Type as REQUEST). For more details, see Review Accesses to Cloud Services Managed by Oracle Cloud Infrastructure (OCI). |
Event-Driven Incremental (Day-N) Data Load for Oracle Identity Governance (OIG) Orchestrated System
| Feature | Description |
|---|---|
| Event-driven incremental data load for OIG | Oracle Access Governance now supports both event-driven and periodic snapshot-based incremental data load for OIG orchestrated system. For event-driven data load, you can enable a new option, Do you want to enable OIG database incremental data load?, to load data automatically based on occurrence of specific system events or changelog, ensuring real-time updates. To enable this feature, the database user must be granted required privileges. |
Data Load Settings for Orchestrated Systems
| Feature | Description |
|---|---|
| Data load settings for orchestrated systems | You can now set how often data is loaded and updated between Oracle Access Governance and orchestrated systems. You can configure the timing and frequency for all orchestrated systems except for Flat File and OCI (OCI IAM). For more details, see Configure Data Load Schedule Settings for Orchestrated Systems. |
September/October 2024
Event Data Publisher in Oracle Access Governance
| Feature | Description |
|---|---|
| Event Data Publisher in Oracle Access Governance | With Oracle Access Governance, you can export and continually publish data events to the cloud tenancy. You can perform an initial export and continually publish ongoing data events to OCI Buckets or OCI Streams depending on the file size. See Understanding Data Event Publishing Flow. |
Orchestrated Systems
| Feature | Description |
|---|---|
| Database Application Tables and Oracle Database user management |
|
| New orchestrated system: Integrate with Oracle Health EHR (formerly Cerner Millennium) | Oracle Health EHR (formerly Cerner Millennium) : You can enable identity orchestration for provisioning of accounts in Oracle Health EHR (formerly Cerner Millennium) as a managed system. See Oracle Health EHR ( formerly Cerner Millennium ) Integration Reference. |
Delegations
| Feature | Description |
|---|---|
| Delegations |
|
Microsoft Entra ID Group Management
| Feature | Description |
|---|---|
| Microsoft Entra ID Group Management | You can now manage group for Microsoft Entra ID. Oracle Access Governance supports provisioning of Security Group and Office Group using the Identity Collections functionality. |
August 2024
New Application Roles in Oracle Access Governance
| Feature | Description |
|---|---|
| New application roles related to orchestrated system | New Application Owner Roles introduced for orchestrated system:
See Predefined Application Roles Reference listing all application roles. |
| New application roles related to access controls | New Access Control Restricted Administrator Role introduced for Access Controls:
See Predefined Application Roles Reference listing all application roles. |
Run Ownership Reviews and Identity Access Reviews based on Direct Permissions
| Feature | Description |
|---|---|
| Ownership reviews | You can schedule campaigns to review ownership of resources that are created within Oracle Access Governance, either periodically or as needed. By performing this review, you can ensure accountability of resources lies only with the designated owners. See Resource Ownership. |
| Run identity access reviews for directly assigned permissions | You can now quickly certify privileges for all orchestrated systems based on the permissions ingested directly (DIRECT) from a managed system without provisioning it first from Oracle Access Governance. See Identity Access Reviews based on Permissions Assigned Directly in Managed Systems. |
Add Resource Owners
| Feature | Description |
|---|---|
| Add primary and additional owners for orchestrated systems, access control resources, and organizations | You can now add primary and additional owners for Oracle Access Governance resources. Any Oracle Access Governance active identity can be assigned as the resource owner. All the owners can read, update, or delete the resources that they own. See Add Primary and Additional Owners. |
Orchestrated Systems
| Feature | Description |
|---|---|
| New orchestrated system: Integrate with Oracle Fusion Cloud Applications | Oracle Fusion Cloud Applications : You can enable identity orchestration, including on-boarding of identity (user) data, and provisioning of accounts for Oracle Human Capital (HCM) and Oracle Enterprise Resource Planning (ERP) accounts. This includes using Oracle Fusion Cloud Applications as an Authoritative source and as a managed system for account provisioning. See Integrate with Fusion Cloud Applications. |
| New orchestrated system: Integrate with Database Application Tables | Database Application Tables : You can enable identity orchestration, including on-boarding of identity (user) data, and provisioning of accounts for Database Application Tables both as an Authoritative source and as a managed system. See Integrate with Database Application Tables (Oracle). |
| Configure account settings | You can now configure the account settings to support the Joiners, Movers, and Leavers process for the orchestrated system. You can configure to send email to user or user manager when a new account is created. You can also either disable or delete the account whenever an identity moves within or leaves the enterprise. |
Access Controls
| Feature | Description |
|---|---|
| Provisioning users to OCI IAM groups from Oracle Access Governance | You can now provision users to OCI IAM groups from Oracle Access Governance. You can package several OCI IAM groups in an access bundle, and provision it to users through a policy or an access request. |
| Identity lifecycle - Joiners, Movers, Leavers process | New article describing automated provisioning for Joiners, Movers, and Leavers (JML) process in Oracle Access Governance. See Identity Lifecycle Management . |
New Articles for My Access and Language Support
| Feature | Description |
|---|---|
| Self-service - My Access | New article on viewing access details and managing accounts in Oracle Access Governance. See View Access Details and Manage Account. |
| Language support in Oracle Access Governance | New article that lists various languages supported by Oracle Access Governance Console and steps to update the browser's locale settings. See Supported Languages in Oracle Access Governance. |
July 2024
Access Reviews
| Feature | Description |
|---|---|
| Access reviews fallback mechanism | New fallback process is introduced to assign a valid reviewer or a campaign owner whenever an invalid reviewer or an invalid campaign owner is detected. This prevents sudden termination of a campaign. |
| New or updated access reviews articles | New or updated articles for Access Reviews:
|
June 2024
Orchestrated Systems
| Feature | Description |
|---|---|
| Integrate with orchestrated systems | PeopleSoft : You can now perform identity reconciliation, user management, and role assignment with PeopleSoft integration. |
May 2024
Who Has Access to What
| Feature | Description |
|---|---|
| Who Has Access to What |
Enterprise-wide Browser
As an Enterprise-wide Access Administrator or Administrator, get a comprehensive and centralized view of access information across the enterprise. Enterprise-wide Browser permits you to:
|
| Who Has Access to What |
My Access
As an Oracle Access Governance user, you can view access profile details in the self service section. Go to My Stuff → My Access to view the access details. The account details visible on the My Accounts page are now available on the My Access → Accounts page. |
Notifications
| Feature | Description |
|---|---|
| Notifications | The following enhancements have been added to notifications:
|
OCI Data Handling
| Feature | Description |
|---|---|
| OCI data handling | The Identity Attributes functionality has been enhanced to provide the ability to define which OCI domain Oracle Access Governance uses as the source of truth when ingesting identity data from a multidomain OCI instance. |
Integrations
| Feature | Description |
|---|---|
| System integration | PeopleSoft : You can now perform identity reconciliation, user management, and role assignment with PeopleSoft integration. |
| Integrations | Updated Data Transformation topic within the Integration documentation. |
March/April 2024
Orchestrated Systems
| Feature | Description |
|---|---|
| Integrate with orchestrated systems |
|
| Integrate with orchestrated systems | Integration documentation for the following managed systems has been updated:
|
Integration
| Feature | Description |
|---|---|
| New/updated integration articles | New/updated articles for integration:
|
| Integration landing page | Integration landing page has been updated:
|
February 2024
Orchestrated Systems
| Feature | Description |
|---|---|
| Integrate with orchestrated systems | You can now integrate Oracle Access Governance with:
|
Unmatched Accounts
| Feature | Description |
|---|---|
| Delete unmatched accounts | You now have the option to delete accounts which are unmatched from a Managed System. This is in addition to the current functionality permitting you to match an unmatched account to an identity. |
Configurable Notifications
| Feature | Description |
|---|---|
| Configurable notifications | You can now customize and configure notifications. Notifications are sent for different types of event. You can now customize notifications in the following ways:
|
Data Transformation and Matching Rules
| Feature | Description |
|---|---|
| Identity Attributes | For custom identity attributes, you now have the option to add a rule on how the attribute is populated. You can either use the value directly, or you can create a rule around the active value. |
January 2024
Orchestrated Systems
| Feature | Description |
|---|---|
| Integrate with orchestrated systems | You can now integrate Oracle Access Governance with:
|
Data Transformation and Matching Rules
| Feature | Description |
|---|---|
| Outbound and inbound data transformation | You can transform the data coming into Oracle Access Governance or going out (provisioned) of Oracle Access Governance. You can apply transformation rules on the inbound and the outbound data, by writing methods in JavaScript, for objects, identity (user) object, account object, and custom user attributes. |
| Matching rules | You can now use matching or correlation rules to avoid orphan or unmatched accounts during the data ingestion process. You can set up these rules to match the identity data imported from different authoritative sources, match several accounts with an identity, or do both to avoid unmatched accounts. |
December 2023
Orchestrated Systems
| Feature | Description |
|---|---|
| Integrate with orchestrated systems | You can now integrate Oracle Access Governance with Oracle Fusion Cloud Applications. With this integration, you can perform User management and Role grant management operations through Oracle Access Governance. |
Outbound Data Transformations
| Feature | Description |
|---|---|
| Outbound data transformation | Through Oracle Access Governance, you can now perform data transformation on the data provisioned into the orchestrated system account. |
Identity Collection can manage a new or existing Active Directory group on a Orchestrated System
| Feature | Description |
|---|---|
| Identity collection can manage a new or existing Active Directory group on an orchestrated system | While creating an identity collection in Oracle Access Governance, you can now opt to manage a group on an orchestrated system. The selected (new or existing) group in this orchestrated system is managed by this identity collection. |
Reassignment of Identity and Access Reviews
| Feature | Description |
|---|---|
| Reassign Identity and access reviews | Oracle Access Governance gives you the provision to reassign identity reviews or access review items, or both to other users. In reassignment, the review tasks move from the original reviewer to the new reviewer. |
Access Governance Organization
| Feature | Description |
|---|---|
| Oracle Access Governance organizations | Oracle Access Governance administrators can now structure identities and form relationships between identities by creating and managing Organizations in the Oracle Access Governance Console. |
Approval Workflows in the Event-Based Access Reviews
| Feature | Description |
|---|---|
| Approval workflows in the event-based access reviews | You can now configure approval workflows for all the three event types - change event, timeline event and multievent access reviews. |
Unmatched Accounts Access Reviews
| Feature | Description |
|---|---|
| Unmatched accounts access reviews | You can now review unmatched accounts by using event-based access reviews. This permits application owners and custom users to match an unmatched account to an existing Oracle Access Governance identity, or remove the account from the orchestrated system. |
Enhancement in Reporting of Campaign Details
| Feature | Description |
|---|---|
| Campaign details' report enhancement | In the campaign details page, for approval workflow summary, you can see count of total and pending reviews. A new link, View pending link, has been added that provides reviewer details, such as reviewer's name, email addresses, and count of pending reviews for each reviewer. |
November 2023
Orchestrated Systems
| Feature | Description |
|---|---|
| Orchestrated systems | The following types of orchestrated system have been added to Oracle Access Governance:
|
| Unmatched accounts | The ability to manage unmatched accounts has been added. You can search for unmatched accounts, and where appropriate, match them to an Oracle Access Governance identity. |
| OCI group membership review | OCI IAM group memberships can now be reviewed as part of Identity Collection access reviews. |
| Timeline event based microcertification | Timeline based microcertification to trigger user access reviews based on specific dates, such as anniversary dates, has been added to the Event-Based Access Review functionality. |
| Active Directory group management | AD groups can now be managed from Oracle Access Governance using the Identity Collections functionality. |
September 2023
Time-based Events
| Feature | Description |
|---|---|
| Time-based Events | Time-based Events refer to an event which is raised for a particular date, for example, weekly, monthly, or when a user is granted access to an application on a specified date, which is subject to an annual review. A review task is generated for the user on the date configured for the time-based event, to determine whether the permission associated with the event is still appropriate |
July 2023
List Requests that needs Approvals
| Feature | Description |
|---|---|
| Approvals |
The Approvals page in the Oracle Access Governance console, lists access requests requiring your attention. All requests requiring approval are displayed. These requests are listed as one access per row. If a request is made for several accesses, for example access to a database, a directory, and a cloud service, the request appears as three rows requiring separate approvals in the approval list. |
Viewing Access Requests
| Feature | Description |
|---|---|
| View my requests |
The My Access Requests screen, in the Oracle Access Governance console displays a list of access requests raised by the logged-in user for Self or for others. You can either view the details, cancel a request or provide information on requests. |
Request Access for Yourself or for Other Users
| Feature | Description |
|---|---|
| Request Access |
As an Oracle Access Governance user you can request access to resources and roles. Requests can be made for yourself, or for others. This process creates an access request which is subject to an approval workflow. |
Simplifying Process of Requesting Resource Permission
| Feature | Description |
|---|---|
| Create and manage access bundle |
An Access Bundle is a collection of permissions that packages access to resources, application features, and functionality into a requestable unit. To access a specific resource, you don't have to request each permission associated with that resource individually, instead you request an access bundle containing all permissions associated with that resource. This simplifies the process of requesting resource permissions. Using Oracle Access Governance console, you can now create a new access bundle and manage it. |
Maintain Policies within Oracle Access Governance Service
| Feature | Description |
|---|---|
| Manage policies |
Using policies you can now provide access to resources within the organization. These policies associate resources and permissions with identities by means of roles and access bundles. You can create and manage policies by using Oracle Access Governance Console. |
Manage Roles
| Feature | Description |
|---|---|
| Manage Roles |
You can now create and manage roles using Oracle Access Governance console. These roles are a group of access bundles. The access bundles contained within a role can span multiple targets. For example, a Database Administrator role groups together the DBAdmin_Oracle, DBAdmin_DB2, and DBAdmin_MySQL access bundles. To use a role you must associate identities with it through a policy. |
Create and Manage Approval Workflow
| Feature | Description |
|---|---|
| Create and manage approval workflow |
In Oracle Access Governance, every permission, access request, or role that needs to be assigned to a user must be processed through an approval workflow. You as a resource administrator can design an approval workflow by specifying the required approval level and the number of approvers. Later, as a Permission Manager you can use these workflows to obtain approvals before assigning or revoking user privileges. You as a resource administrator can monitor and manage the approvals using the Oracle Access Governance Console. |
Integrate Oracle Access Governance with Target Systems
| Feature | Description |
|---|---|
| Integrate with orchestrated systems |
You can now connect Oracle Access Governance with the following systems by entering connection details and credentials for the target system.
|
May 2023
New License Types for Oracle Access Governance
| Feature | Description |
|---|---|
| New license types |
Oracle Access Governance rolls out new license types for its users:
|
Added Identity Activation Rules for License Management in Oracle Access Governance
| Feature | Description |
|---|---|
| Manage Identities | You can now optimize Oracle Access Governance instance operating cost by managing which identities can use the Oracle Access Governance service. Identities excluded from the service do not have access to Oracle Access Governance functionality and aren't billed. |
Identity Orchestration: Integrate Oracle Access Governance with OCI IAM
| Feature | Description |
|---|---|
| Integrate with OCI IAM | You can now implement codeless integration of Oracle Access Governance directly with cloud services. This release supports Identity Orchestration set up between Oracle Access Governance and OCI IAM system. |
Policy Reviews
| Feature | Description |
|---|---|
| Policy reviews | You can review OCI IAM policies once or periodically from Oracle Access Governance by creating Policy Review campaigns. In this campaign, access control of each cloud resource is evaluated up to the policy statement-level. The policy statements can either be accepted or revoked. |
Who Has Access to What: Enterprise-wide Access and Individual's Access to Cloud Resources
| Feature | Description |
|---|---|
| Who Has Access to What | The Who Has Access to What capability now includes:
|
New Capability that supports Custom Identity Attributes in Oracle Access Governance
| Feature | Description |
|---|---|
| Custom Identity Attributes. | Oracle Access Governance now supports custom identity attributes in addition to core identity attributes for running various Oracle Access Governance operations. |
Introduced Identity Collections functionality in Oracle Access Governance
| Feature | Description |
|---|---|
| Identity collection | You can now create and manage a collection of identities to perform Oracle Access Governance functions collectively on a group rather than performing for each individual identity. You can create an identity collection by defining conditional rules, known as Membership Rules, by directly selecting identity names, or by using both methods. |
Added Capability to Delegate your Access Review Tasks to an Identity or an Identity Collection
| Feature | Description |
|---|---|
| Delegation | Oracle Access Governance now provides the capability to delegate your tasks by setting up your preferences. In this release, from the My Preferences screen, you can delegate your access review tasks to an identity or to an identity collection. |
For this release, you must upgrade the current Oracle Access Governance agent to enable codeless integration with the systems. See Agent Example Usage to enable the automatic upgrade flag and upgrade the agent with the latest updates.
February 2023
New Available Region in Central UAE: Abu Dhabi
| Feature | Description |
|---|---|
| Available in UAE Central: Abu Dhabi | Oracle Access Governance rolls out its services and is now available in the UAE Central Abu Dhabi region. |
New Enterprise-wide Access functionality in Who Has Access to What
| Feature | Description |
|---|---|
| Who Has Access to What | The Who Has Access to What capability now includes 360-degree visibility into organization resources, resource types, identities that can access these resources, and assigned permissions. Here, you can view a comprehensive list of all resources across various Orchestrated with Oracle Access Governance. |
Auto Upgrade Feature for Oracle Access Governance Agent in Orchestrated Systems
| Feature | Description |
|---|---|
| New auto upgrade flag for Oracle Access Governance agent in Orchestrated Systems. | You can now automatically install updates for the Oracle Access Governance Agent by enabling the autoupgrade flag during the configuration process. Through this flag, a scheduled task is run every 24 hours to find updates, install updates, or perform both actions for the Oracle Access Governance agent. This is a crucial step and you must set this to prevent any issues in communication from the agent to the Access Governance Service. See Agent Example Usage to enable the automatic upgrade flag. |
October 2022
What's New in the October 2022 Update
Event-based Access Reviews
| Feature | Description |
|---|---|
| Event-based access reviews | You can now create event-based access reviews from Oracle Access Governance that start whenever a change is detected in a user lifecycle state or a user attribute, such as onboarding of new users, department change, job-code change, location change, retirement or exit of users, or manager change. After configuration, these are automatically triggered when one or more predefined event types occur. |
Access Review Scheduler
| Feature | Description |
|---|---|
| Access review scheduler | You can now schedule and run the Access Review Campaigns periodically which can be Monthly, Quarterly, Half-Yearly, or Yearly. |
June 2022
On-Demand Access Reviews
| Feature | Description |
|---|---|
| On-demand access reviews | You can create on-demand Access Review Campaigns to review user access assignments where individual access to a specific source is checked and either certified or remediated. |
Who Has Access to What
| Feature | Description |
|---|---|
| Who Has Access to What | You can use the Who Has Access to What functionality as a user or a user manager to see the number of applications, permissions, and roles assigned to you (self) or to direct reports. |
Identity Orchestration in Oracle Access Governance
| Feature | Description |
|---|---|
| Identity Orchestration | Oracle Access Governance enables codeless integration with on-premises and cloud systems. You can now configure Identity Orchestration in Oracle Access Governance Console. This release supports Identity Orchestration set up between Oracle Access Governance and Oracle Identity Governance (OIG) system. |