Skip to main content

Oracle Cloud Identity Integration

Connect Oracle Cloud Identity to bring the users and groups of an OCI identity domain into Cloud ex Machina.

DataOCI APIApp role
Users and groups of the identity domainIdentity Domains REST APIAudit Administrator

This connection uses the Identity Domains API. It gives identity data only. It gives no cost data.

Prerequisites​

  • Cloud ex Machina Admin access.
  • The Identity Domain Administrator role in the OCI identity domain.

Step 1: Create a confidential application​

  1. In the OCI console, open the navigation menu and click Identity & Security > Domains.
  2. If the identity domain is in another compartment, select that compartment.
  3. Click the identity domain.
  4. Click Integrated applications > Add application.
  5. Select Confidential Application.
  6. Click Launch workflow.
  7. Name the application Cloud ex Machina.
  8. Click Next.
  9. Select Configure this application as a client now.
  10. In Authorization, select Client credentials only.
  11. In App roles, click Add roles.
  12. Select Audit Administrator and click Add. Do not add other roles.
  13. Click Next.
  14. Click Finish.
  15. Click Activate.
  16. Copy the Client ID and the Client secret.

The Audit Administrator role reads users and groups. It cannot change them.

Step 2: Find the identity domain instance​

  1. Open the identity domain and click the Domain information tab.
  2. Copy the Domain URL. It has the form https://idcs-<id>.identity.oraclecloud.com:443.
  3. Keep only the idcs-<id> part.

Step 3: Add the connection in Cloud ex Machina​

  1. In the sidebar, click Integrations.
  2. Find Oracle Cloud Identity and click Sign in. If the integration already has a connection, the button is Add connection.
  3. Fill in:
    • IDCS Service Instance: the idcs-<id> value from Step 2.
    • Client ID and Client Secret: the values from Step 1.
  4. Submit the form. Cloud ex Machina checks the credentials with OCI and saves the connection.

Remove a connection​

  1. Click the connection row under the Oracle Cloud Identity card.
  2. Click Disconnect.
  3. Deactivate and delete the confidential application in OCI.

Next Steps​