Introduction
Oracle APEX offers a variety of preconfigured authentication schemes to help developers quickly secure their applications. These built-in schemes provide ready-to-use options for common authentication needs, such as workspace accounts, LDAP, social sign-in, and single sign-on (SSO). Understanding these preconfigured schemes enables you to select the most appropriate authentication method for your application, ensuring security and ease of use.
Understanding Preconfigured Authentication Schemes in Oracle APEX
-
Access Authentication Schemes
-
Open your application in Oracle APEX.
-
Navigate to Shared Components > Authentication Schemes.
-
Review the list of available preconfigured schemes.
-
-
Types of Preconfigured Authentication Schemes
-
APEX Accounts: Uses workspace user accounts. Suitable for development and simple applications.
-
Database Accounts: Authenticates users with Oracle database credentials. Less common for web apps.
-
LDAP Directory: Integrates with corporate LDAP or Active Directory for enterprise authentication.
-
Social Sign-In: Supports OAuth 2.0 providers like Google, Facebook, or Microsoft for easy user login.
-
Oracle Single Sign-On (SSO): Connects to Oracle Identity Cloud Service or Oracle Access Manager for seamless enterprise authentication.
-
Open Door Credentials: No authentication required, for public-facing apps.
-
-
How to Use Preconfigured Schemes
-
Select a scheme and review its default settings.
-
Customize configuration details as needed, such as LDAP server info or OAuth client IDs.
-
Activate the scheme by making it the current authentication method.
-
-
Benefits of Using Preconfigured Schemes
-
Quick setup with minimal coding required.
-
Supported and maintained by Oracle, ensuring compatibility and security updates.
-
Easy integration with popular authentication providers and enterprise systems.
-
Oracle APEX provides several preconfigured authentication schemes that simplify user authentication and session management. These authentication schemes allow developers to quickly implement secure user authentication without writing complex authentication logic.
What Are Preconfigured Authentication Schemes?
Preconfigured authentication schemes are built-in authentication methods that Oracle APEX provides by default. They follow standard authentication and session management practices, making it easier to enforce security and control user access.
When creating an authentication scheme from the Authentication Scheme Gallery, you can choose from a list of predefined authentication schemes that handle different authentication methods, including database accounts, LDAP, social sign-in, and more.
Types of Preconfigured Authentication Schemes
1. Builder Extension Sign-in
Allows users to log into an Extension App without signing in again if they have an active APEX session.
Checks for an existing APEX session and grants access accordingly.
2. Custom Authentication
Enables developers to create a fully customized authentication process.
Typically implemented using PL/SQL functions to verify user credentials against a custom user repository.
3. Database Accounts
Uses Oracle database user accounts for authentication.
Users log in with their database schema credentials.
4. HTTP Header Variable
Authenticates users externally using an HTTP header variable.
The web server must be configured to set the username in an HTTP header.
5. LDAP Directory
Authenticates users against an LDAP server.
Requires LDAP configuration details such as server address, port, and search filters.
6. No Authentication (Using DAD)
Uses the current database user as the authenticated user.
Works with mod_plsql Database Access Descriptor (DAD) for authentication.
7. Open Door Credentials
Allows anyone to access the application.
Provides a basic login page where users can enter any username.
8. Oracle APEX Accounts
Uses APEX workspace user accounts for authentication.
Users must be registered in APEX’s internal user repository.
9. Oracle Application Server Single Sign-On (SSO)
Delegates authentication to Oracle Application Server SSO.
Requires registering the application with the SSO server.
10. SAML Sign-In
Uses Security Assertion Markup Language (SAML) for authentication.
Commonly used in enterprise applications for federated authentication.
11. Social Sign-In
Allows users to log in using Google, Facebook, Microsoft, or other social providers.
Supports authentication via OpenID Connect or OAuth2.
Choosing the Right Authentication Scheme
For internal applications using APEX accounts → Use Oracle APEX Accounts.
For database security where users have individual accounts → Use Database Accounts.
For enterprise authentication with an existing user directory → Use LDAP or SAML Sign-In.
For public applications without user restrictions → Use Open Door Credentials or No Authentication.
For single sign-on (SSO) in Oracle environments → Use Oracle Application Server SSO.
For external authentication via social providers → Use Social Sign-In.
For applications behind a proxy or load balancer → Use HTTP Header Variable authentication.
Implementing a Preconfigured Authentication Scheme
1. Navigate to Authentication Schemes
Open App Builder and select your application.
Click Shared Components > Authentication Schemes.
2. Create a New Authentication Scheme
Click Create.
Select Based on a preconfigured scheme from the gallery.
Choose the authentication scheme that fits your requirements.
3. Configure Authentication Settings
Provide necessary credentials, server details, or API configurations.
Define post-authentication and post-logout procedures, if needed.
4. Activate the Authentication Scheme
Click Make Current to set the new authentication scheme as active.
Preconfigured authentication schemes in Oracle APEX provide a quick and secure way to implement authentication. They cover a variety of use cases, from database authentication to enterprise SSO and social login. By selecting the appropriate authentication method, developers can ensure their applications meet security and usability requirements.
Best Practices
-
Choose the authentication scheme that best fits your user base and security requirements.
-
Test your chosen scheme thoroughly in development before deploying.
-
Keep authentication credentials and secrets secure and up to date.
-
Document your authentication choices and configurations for maintenance and auditing.
-
Avoid using Open Door Credentials for sensitive applications.
Oracle APEX Documentation
For detailed information, visit:
https://docs.oracle.com/en/database/oracle/apex/23.2/aeapp/preconfigured-authentication-schemes.html
Conclusion
Understanding preconfigured authentication schemes in Oracle APEX helps you quickly implement secure login mechanisms tailored to your application's needs. By leveraging these built-in options, you can reduce development time and ensure your application aligns with best security practices. Proper selection and configuration of these schemes contribute to a safe and user-friendly experience.
