Ensure Location-Based Access Control (LBAC) is enabled

Trung bìnhCấp 1Xem xét thủ côngoracle-saas

Mô tả

Location-Based Access Control (LBAC) restricts user access to Oracle Fusion SaaS products based on network location. It applies to both user interface (UI) and API sign-ins. Access is allowed only from registered IP ranges, such as corporate offices or VPN gateways. Enabling LBAC enforces a perimeter-based restriction on where users and integrations can connect from. This complements authentication and role-based authorization by ensuring that even valid credentials cannot be used ... Reported as a manual review item: these Fusion/EPM/OCI IAM settings are reviewed in the Oracle SaaS and OCI consoles or reports.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

1. Confirm that the IT Security Manager role is assigned 2. In a test or non-production environment, validate LBAC configuration before enabling in production 3. Navigate to Navigator, Tools, Security Console, Location Based Access 4. Verify that Enable Location Based Access is selected 5. Review the IP Address Allowlist to ensure it contains valid IPv4 or CIDR ranges for trusted networks 6. Confirm that the IT Security Manager role is designated as public to preserve administrative access 7.

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

1. Use an account with the IT Security Manager role to configure LBAC 2. In the Security Console, open the Location Based Access tab and select Enable Location Based Access 3. Add trusted IP addresses or CIDR ranges, including the administrator's current IP to avoid lockout 4. Save the configuration and confirm the change 5. Mark the IT Security Manager role as public to preserve console access even from unregistered networks 6. If disabling LBAC, deselect the option; allowlist entries remain stored for reuse 7. Validate by testing login from both trusted and untrusted IPs

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: oracle-saasnetwork
Tham chiếu: CIS Oracle SaaS Cloud Applications Benchmark v1.0.0 - 2.4 Ensure Location-Based Access Control (LBAC) is enabled