Data Security in Simplified Loader

Introduction

All Simplified Loader apps (Excel templates and Mobile apps) exchange data only between the app and the selected Oracle Fusion environment. The following figure illustrates the high-level data flow and security used by Simplified Loader apps.

Simplified Loader - Security

Security in Excel templates

  1. Transactional data from Excel template is ONLY transferred to the selected Oracle Fusion environment.
  2. The username/password entered in Excel template is ONLY validated against the selected Oracle Fusion environment or SSO service provider.
  3. In the case of Non-SSO login, login credentials are validated against the username and password managed within Oracle Fusion.
  4. In the case of SSO login, login credentials are validated by your SSO service provider. Users or administrator do not need to perform additional changes to use SSO Login feature. Simplified Loader apps automatically identify the SSO service provider associated with the selected Oracle Fusion environment and validate the session.
  5. When transferring data between Excel template and Oracle Fusion, the selected Oracle Fusion environment defines the Data encryption policies. Typically Oracle Fusion provides 128-bit key, TLS 1.2 encryption.
  6. Using Lookup Type associated with the Excel template, the administrator controls user access to exchange data with Oracle Fusion.
  7. Data pulled from Oracle Fusion to Excel templates is controlled using the BI reports. The BI administrator can review and amend BI reports used by Simplified Loader.
  8. Simplified Loader Excel templates are macro-enabled Excel files. The Excel templates can be shared by email or other file transfer mechanism, e.g. SharePoint. The only pre-requite to use Excel template is a Windows operating system with MS Office 2010 or above.
  9. Simplified Loader Excel Templates do not require installation of any Plug-In in users machine or otherwise.
  10. Using AllowedOperations and LatestVersion preferences, the administrator can control operations permitted to the user.
  11. When using Get Lookup Values functionality in Excel template, the lookup values from Oracle Fusion gets stored in the Excel file.
  12. The only occasion when the Excel template exchange data with a server other than the selected Oracle Fusion environment is when the administrator chooses to setup TransactAs[SRVR] preference.

Security in Mobile apps

  1. Transactional data from Mobile app is ONLY transferred to the selected Oracle Fusion environment.
  2. The username/password entered in Mobile app is ONLY validated against the selected Oracle Fusion environment or SSO service provider.
  3. In the case of Non-SSO login, login credentials are validated against the username and password managed within Oracle Fusion.
  4. In the case of SSO login, login credentials are validated by your SSO service provider. Users or administrator do not need to perform additional changes to use SSO Login feature. Simplified Loader apps automatically identify the SSO service provider associated with the selected Oracle Fusion environment and validate the session.
  5. When transferring data between Mobile app and Oracle Fusion, the selected Oracle Fusion environment defines the Data encryption policies. Typically Oracle Fusion provides 128-bit key, TLS 1.2 encryption.
  6. Using Lookup Type associated with the Mobile app, the administrator controls user access to exchange data with Oracle Fusion.
  7. Data pulled from Oracle Fusion to Mobile app is controlled using the BI reports. The BI administrator can review and amend BI reports used by Simplified Loader.
  8. Access to the LIVE environment is controlled using the Company Code and Passcode.
  9. Simplified Loader supports organisations which distributes the Mobile app using internal mobile app distribution methods.
  10. Data pulled from Oracle Fusion is temporarily stored within the Mobile app in the SQLite database.
  11. Using AutoLogoutAfterExitingApp, DisableDataShare, AllowedDays, AllowedHours, and AllowedPastCalendarDays preferences, the administrator can centrally control the behaviour of the Mobile app.
  12. The only occasion when the Mobile app exchange data with a server other than the selected Oracle Fusion environment is when setting up Environments using Company Code and Passcode.