Database Security - Enterprise User Security (EUS)

About Enterprise User Security (EUS)

• Enterprise User Security (EUS) is a way of integrating Oracle Database with LDAP compliant directory server like Oracle Internet Directory (OID) or Microsoft AD
  so that database Users , Passwords & Roles can be centrally managed in a LDAP Directory Server.
• Belongs to Database Security category of the IdM stack.

Advantages 

• Offers low costs & centralized authentication.
• Increases security & compliance.
• No data migration needed , clients continue to use existing directories.

Architecture

• Oracle Virtual Directory (OVD) has a EUS Adapter and EUS Plugins OOTB.
• The LDAP Directory (OID or AD or Novell or Sun eDirectory) needs to be setup for EUS.
• The Oracle Database/s need to be EUS enabled using NETCA & DBCA utility.
• The Database/s can be logged into using a centralized EUS User/s later.
• Kerberos authentication can be enabled to do native authentication for SQL clients like sql plus & SQL Developer.

Useful Resources 

1. EUS DataSheet with Architecture
2. Enterprise User Security Guide
3. Integrating Enterprise Security with AD
4. Oracle Whitepaper
5. Atul Kumar’s Blog
6. How To Configure EUS with OVD 11.1.1.6 and Active Directory - AD (Doc ID 1449132.1)
7. Expected Issues - How To Avoid Extending The Active Directory Schema With extendAD For OVD-OID-AD-EUS 11g Integration? (Doc ID 1159337.1)

Oracle SOA : SFDC Adapter Issue - Total Requests Exceeded

We faced an issue wherein total API calls to SFDC to check for updated accounts exceeded the limit (due to Quartz Scheduler Polling at regular intervals )

Analysis : 

Once limit is reached , this cannot be undone till 24 hours !

http://bconeadapters.blogspot.com/2014/02/what-are-limitexceeded-errors-i.html

https://help.salesforce.com/apex/HTViewHelpDoc?id=integrate_api_rate_limiting.htm&language=en

Quick Fix : Use a different sandbox if using developer edition of SFDC

Correct way should be to (Work In Progress) -

1)Optimizing API calls to Salesforce.com

Although the Oracle Cloud Adapter for Salesforce.com incorporates several measures to reduce API calls to Salesforce.com (for instance, session management for limiting login calls and cache for limiting metadata fetch calls), you can further reduce calls to Salesforce.com while designing your composites through the offline configuration feature of Oracle Cloud Adapter for Salesforce.com.

2)Use polling interval of Quartz scheduler in couple of minutes than seconds.