Fusion AI Agents: Secure by Design Best-Practice Considerations
Outlines architectural considerations for Fusion agents, connecting business risk, identity context, instruction boundaries, segregation of duties, and available security controls.
Technical articles
Ideas, architectures,
and practical guides.
My articles on enterprise architecture, security, identity, observability, integration, and applied AI—authored and coauthored across Oracle A-Team and other Oracle publications.
28 articles · 2023–2026A-Team author profile
Showing 28 of 28 articles
2026
12 articlesFusion AI Agents: Secure by Enforcement Best-Practice Considerations
Examines runtime security patterns for Fusion agents, covering least privilege, constrained tool use, approval boundaries, and controls beyond model behavior.
Fusion AI Agents: Secure by Operations Best-Practice Considerations
Discusses operational architecture considerations for Fusion agents, including observability, sensitive data handling, adversarial testing, change governance, and containment controls.
Fusion Enterprise Scheduler Job Performance Analysis and Risk Management with BI Publisher SOAP Log Analytics
Describes collecting custom BI Publisher data for Fusion ESS performance and risk analysis in OCI Log Analytics through OCI Management Agent.
Securing Oracle Fusion Cloud Supplier Portal with IAM Domains and MFA
Explains supplier sign-in and MFA configuration through Fusion User Categories, alongside employee federation, rollout checks, and troubleshooting guidance.
Part 1 – Streaming Oracle Fusion Cloud Audit Events to OCI Streaming using Oracle Integration
Demonstrates scheduled extraction of Fusion audit records through Oracle Integration and publication to OCI Streaming for independent downstream consumers.
Part 2 – Integrating OCI Streaming with SIEM Platforms (Splunk) using OCI Functions and Kafka Connect
Compares two architectures for sending Fusion audit events from OCI Streaming to Splunk, using OCI Functions or Kafka Connect.
Invoking Oracle Integration Cloud (OIC) APIs Using OAuth 2.0 (Client Credentials and Authorization Code) Across IAM Domains
Explains OAuth grant selection and IAM configuration for calling OIC APIs, including resource scopes, service roles, and downstream identity boundaries.
Simplifying OAuth for OIC to Fusion Integrations: Authorization Code Across IAM Domains
Describes authorization-code integration patterns between OIC and Fusion, with guidance on identity domains, token trust, resource configuration, and authorization troubleshooting.
Who did what and with which access? Demystifying Oracle Fusion Security Audits
Clarifies how Fusion access assignments, security changes, and transaction audits relate, and explains the limits of attributing actions to roles.
Conversational Security in Oracle Fusion: An AI Agent for Least-Privilege Discovery
Presents a reference implementation that translates natural-language security questions into read-only Fusion privilege and role analysis through controlled integrations.
Beyond Monitoring : AI-Driven Fusion ESS Job Health & Risk Observatory – Operational Intelligence for ESS Jobs with OCI Log Analytics
Details a reference observatory for Fusion ESS jobs, combining runtime metrics, historical trends, dashboards, detection rules, and OCI Log Analytics.
2025
8 articlesUnderstand the permissions required for Fusion Applications Audit and Security Logs Ingestion in OCI Log Analytics – Part 1
Reviews service-account privileges and access requirements for collecting Fusion audit records into OCI Log Analytics through REST-based ingestion.
AI-Driven IAM Audit Analysis for Oracle SaaS: From Raw Logs to Actionable Security Insights with OCI Log Analytics
Shows how to analyze SaaS identity events with OCI Log Analytics, using example queries, detection rules, dashboards, and LoganAI assistance.
Enabling OAuth 2.0 JWT Authentication for Oracle SOAP Services in OIC Gen3
Discusses OAuth authentication options for SOAP integrations in OIC Gen3, including authorization-code configuration, client credentials, and adapter identity-propagation limitations.
Methods and ways to extract OCI Events using OCI Audit and Integrate into external systems
Compares OCI Audit extraction approaches using APIs, SDKs, service connectors, and logging interfaces for external analysis, monitoring, and archival workflows.
Methods and ways to extract Session Information using OCI Audit and Integrate into external systems
Explains extraction of Fusion sign-on and session events through OCI Audit, including APIs, SDKs, service connectors, and external monitoring integrations.
Restrict public access of Fusion Cloud Applications and enable access to OCI Resources using IPSEC VPN
Walks through Fusion network access restrictions and connectivity from on-premises networks through site-to-site VPN, a VCN, and an OCI service gateway.
Managing Pending Worker Accounts in Oracle Fusion IAM
Describes pending worker access through Fusion IAM, covering user categories, native MFA, employee federation, role provisioning, and identity lifecycle transitions.
How to Access Fusion Applications by Visual Builder in Different Identity Domain Using OAuth
Details OAuth configuration for Visual Builder connections across identity domains, covering trust setup, client credentials, user assertion, and optional identity synchronization.
2024
5 articlesMethods to extract audit & monitoring data from Fusion cloud applications for SIEM Integrations
Maps Fusion audit and monitoring sources to extraction methods, with retention considerations and references for planning integrations with external SIEM systems.
Part 3 – Extending Fusion Applications using VBCS: MFA Configurations
Demonstrates MFA policies for Visual Builder extensions in the Fusion identity domain, covering Fusion application users and local IAM user scenarios.
Part 2 – Extending Fusion Applications using VBCS: SSO Configurations
Explains single sign-on configurations for Visual Builder applications, distinguishing access by Fusion users, local IAM accounts, and externally federated identities.
Creating Innovative User Experience for Fusion Cloud Applications Scheduled Processes
Presents Visual Builder Studio extension ideas using Scheduler REST APIs, including summarized job views, calendar interfaces, and ESS orchestration options.
Part 1 – Extending Fusion Applications using VBCS: OAuth Configurations
Explains OAuth service connection configurations for Visual Builder extensions within the Fusion identity domain, relating authentication choices to application access requirements.
2023
3 articlesImplement JWT Token Authentication with Fusion Cloud Application (REST/SOAP) & extend in Node.js based applications
Demonstrates certificate-based JWT authentication for Fusion REST and SOAP integrations, with trust configuration, token generation, and examples for Node.js applications.
Oracle Cloud HCM Integration Using Oracle PaaS – Patterns & Use Cases
Organizes twelve inbound and outbound HCM integration patterns using Oracle Integration and Autonomous Transaction Processing, spanning files, APIs, and transformation requirements.
Network connectivity patterns for Oracle Cloud HCM and ERP applications on OCI.
Surveys connectivity architectures for Fusion applications, comparing public internet, VPN, and FastConnect approaches alongside CDN behavior and network access considerations.
No matching articles. Try another keyword or reset the filters.