Oracle Identity Cloud Service (IDCS)

   Oracle Identity Cloud Service is the next generation comprehensive security and identity platform that is cloud-native and designed to be an integral part of the enterprise security fabric, providing modern identity for modern applications.

 IDCS is a cloud-based identity management system that works by associating specific rights and restrictions with each user’s established identity. User provisioning, access control, and directory services are critical components of Oracle’s cloud-based security portfolio.

Oracle Identity Cloud Service has been designed to meet the needs of organizations in a number of typical use-case scenarios, such as the cloud (allowing both on-premise and cloud resources to be secured from a single set of controls), mobile access (providing sign on for native or browser-based apps), employee-facing intranet and customer-facing extranet solutions. 

Key Features:

Oracle Identity Cloud Service provides the following functionality, licensed and enabled as required: 

 Single Sign On: Users sign in once into Identity Cloud Service and gain one click access to applications. 

 Identity and Access Management: Administrators can centrally manage users and their access to different applications. Administrators also have the ability to immediately shut off access to applications. 

 Integration with On-Premise AD/OAM: For organizations with existing enterprise systems like Active Directory, admininistrators can utilize automated synchronization of users and Single Sign On. 

 User Authentication Service: This service implements standard OpenID Connect (OIDC) 3-legged User Authentication flows on top of the standard OAuth2 protocol. Interactive web-based and native applications leverage standard browser-based OIDC flows to request user authentication, receiving standard JWT-based identity tokens conveying the user’s authenticated identity. 

 Identity Federation Service: This service provides support for standard SAML2 Browser POST Login & Logout Profiles. 

 Token Service: This service provides support for standard 2-legged and 3-legged interactions covering User Authentication, User Consent, Identity Propagation and Web Service Authorization patterns. 

 Reporting Service: This service generates dashboard information and reports from collected audit data

All components of IDCS are built on modern Cloud principles and use standard open stack protocols.

•  OpenID Connect for browser-based user authentication 
•  OAuth2 for securing REST API calls 
•  HTTP cookies for tracking user’s active sessions
•  JWT-based tokens for applications to map authenticated Cloud identities to local application identities 
•  SAML for providing Single Sign on for Cross Domain applications using Federation
•  SCIM for simplified user management in the Cloud by defining a schema for representing users and groups 
•  RESTful APIs for all identity functions for customization and headless operations

Below are some of the screens of IDCS.