Ensure Basic Authentication Is Blocked for SOAP and REST API Integrations

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

1. Review your Service Request history with Oracle to confirm a request has been submitted to disable Basic Auth for APIs. 2. Confirm Oracle's response/documentation showing that Basic Auth is disabled in the environment. 3. Attempt API calls using Basic Authentication and verify they fail. 4. Use supported authentication (JWT, SAML, OAuth) to confirm the API works with secure methods.

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

1. Submit a Service Request to Oracle SaaS Operations asking to disable Basic Authentication for APIs in your Fusion instance. 2. Include details of your current integrations (endpoints, methods) that rely on Basic Auth. 3. Confirm with Oracle that Basic Auth has been disabled in your environment. 4. Update all integrations to use supported methods (JWT, OAuth, SAML) per Oracle guidance. 5. Test all APIs to validate they function correctly under the new authentication method.