Overview

Torii integrates with Oracle Cloud and syncs:

• You can constantly stay updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table.

Requirements

Accounts & Permissions

To connect this integration, we require the following:

• An Oracle Cloud (OCI) account with an Identity Domain, and permission to add integrated applications in that domain (for example, the Identity Domain Administrator role).
• A confidential application in the domain, with the Client Credentials grant enabled.
• To sync users: the application must hold an app role that can read users, such as the read-only Audit Administrator, Security Administrator or Application Administrator role. Oracle documents these roles as read-only for users.
• To use the Create, Update and Delete user actions: grant the application the User Administrator app role instead.

Required keys

To connect this integration, we require the following:

• Identity Domain URL - the URL of your identity domain, for example https://idcs-xxxx.identity.oraclecloud.com
• Client ID - of the confidential application.
• Client Secret - of the confidential application.

How to Generate the Required Values

Follow these steps to generate the required values:

Step 1: Copy the Identity Domain URL

1. Sign in to the Oracle Cloud (OCI) Console.
2. Go to Identity & Security >> Domains and select the domain you want to connect.
3. On the domain overview page, copy the Domain URL. Remove any trailing slash or path, so it looks like https://idcs-xxxx.identity.oraclecloud.com

Step 2: Add a confidential application

1. In the domain, go to Integrated applications and click Add application.
2. Select Confidential Application and click Launch workflow.
3. Enter a name (for example, Torii) and click Next.
4. Under Configure OAuth, select Configure this application as a client now.
5. Under Allowed grant types, select Client credentials.
6. Complete the wizard. See Oracle's guide: Adding a Confidential Application.

Step 3: Assign an app role that can read users

1. In the application's configuration, open OAuth configuration >> Client configuration and go to Add app roles.
2. Add a read-only role, such as Audit Administrator. Oracle documents this role as read-only for users. See Required roles per endpoint.
3. If you plan to use the Create, Update or Delete user actions, add the User Administrator app role instead.

Step 4: Activate the application and copy the credentials

1. Click Activate on the application and confirm.
2. Open the application's OAuth configuration and copy the Client ID and Client Secret. See Oracle's guide: OAuth 2.0 client credentials for a confidential application.

How to Connect the Integration

1. Go to the Integrations page in Torii.
2. Search for Oracle Cloud and click Connect.
3. Enter the Identity Domain URL, Client ID and Client Secret.
4. Click Connect.

Actions

• Create user - creates a user in your identity domain with a first name, last name and email. Requires the User Administrator app role.
• Update user - updates a user's first name, last name and job title. Empty fields are left unchanged. Requires the User Administrator app role.
• Delete user - deletes a user from your identity domain. Requires the User Administrator app role.

For any further questions, please contact Torii Support.