Overview

Torii integrates with Oracle HCM and syncs:

• Workers as users, including their status, job title, department, manager, start date and termination date.
• A license for each active worker.
• You can constantly stay updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table.

Requirements

To connect this integration, we require the following:

Accounts & Permissions

• An Oracle Fusion Cloud HCM administrator who can use the Security Console (the IT Security Manager job role or equivalent) to create a user and a role.
• A dedicated integration user in Oracle HCM that holds the following duty roles:
  • Use REST Service - Worker Details Read Only (ORA_PER_REST_SERVICE_ACCESS_WORKER_PERSON_RO) - to read worker names and email addresses.
  • Use REST Service - Worker Employment Read Only (ORA_PER_REST_SERVICE_ACCESS_WORKER_EMPLOYMENT_RO) - to read worker employment details such as job, department, manager, start and termination dates.
• To use Torii actions (Create Oracle HCM user account, Change Oracle HCM user account user name, Suspend Oracle HCM user account), the integration user also needs the duty role Use REST Service - User Accounts (ORA_PER_REST_SERVICE_ACCESS_USER_ACCOUNTS). To create user accounts, the Manage Enterprise HCM Information task in Oracle HCM must also allow user account creation.

Required keys

• Oracle HCM host - the host name of your Oracle HCM environment, without https:// (for example, abcd.fa.us2.oraclecloud.com).
• Username - the user name of the integration user.
• Password - the password of the integration user.

How to Generate the Required Values

Follow these steps in Oracle HCM to create an integration user with only the access Torii needs. The exact screen labels may vary slightly between Oracle releases. See Oracle's documentation: Create Roles in the Security Console, Add User Accounts and Workers REST resource security.

Step 1: Find your Oracle HCM host

1. Sign in to Oracle HCM.
2. Copy the host name from your browser address bar, without https:// and without anything after the first slash.

Step 2: Create a custom role

1. Sign in to Oracle HCM as a user with the IT Security Manager job role (or equivalent) and open the Security Console.
2. Go to the Roles tab and click Create Role.
3. Enter a role name, a role code and a description (for example, "Torii Integration"). Do not start the role code with ORA_, which Oracle reserves for its predefined roles. Set the role category to HCM - Job Roles.
4. Go to the role hierarchy step and add these two duty roles: Use REST Service - Worker Details Read Only and Use REST Service - Worker Employment Read Only.
5. Continue to the summary and click Save and Close.

Both duty roles are also included in Oracle's predefined job role Human Capital Management Integration Specialist. You can assign that role instead, but it grants Torii more access than it needs.

Step 3: Create the integration user

1. In the Security Console, go to the Users tab and click Add User Account.
2. Enter the user details, including a user name and a password that meets your password policy.
3. In the Roles section, click Add Role and select the custom role you created.
4. Click Save and Close.

If your organization provisions roles to users through role mappings, make sure the new user receives the custom role through your standard process.

How to Connect the Integration

1. Go to the Integrations page in Torii.
2. Search for Oracle HCM and click Connect.
3. Enter the Oracle HCM host, the username and the password of the integration user.
4. Click Connect.

Update the User Lifecycle settings

To make sure you get user lifecycle information in Torii, define Oracle HCM as your HR management system.

1. Go to Settings >> Users & Employees and, under User lifecycle, click Manage sources.
2. Under Human Resource Management Systems, select Oracle HCM. If Oracle HCM is your only source for user management, make sure the other sources are unselected.
3. Click Preview changes, then Apply changes.

Actions

• Create Oracle HCM user account - creates an Oracle sign-in account for a worker who already exists in Oracle HCM. It requires the worker's Oracle HCM Person ID, and it does not hire a worker.
• Change Oracle HCM user account user name - changes the sign-in user name of an existing account. Torii finds the account by matching the Oracle user name to the user's email address.
• Suspend Oracle HCM user account - suspends the worker's sign-in account. It does not terminate employment or delete the worker. Torii finds the account by matching the Oracle user name to the user's email address.

These actions require the integration user to have user account management access in Oracle HCM (see Requirements).

For any further questions, please contact Torii Support.