What synchronization is critical for a successful Single Sign-On (SSO) between the Fusion Application and the Cloud Account?

What synchronization is critical for a successful Single Sign-On (SSO) between the Fusion Application and the Cloud Account?

• A. Ensure synchronization between the Fusion Application's internal identity service and the Cloud Account identity domain.
• B. Align Fusion Applications' internal identity service with the Cloud Account identity domain.
• C. Enable OCI Vision on the Fusion Application.
• D. Synchronize the Fusion Application database with OTBI data model.

Answer: (A)

The key idea is that a successful SSO relies on a single, shared identity space that both systems trust. For Fusion Applications to accept tokens or assertions from the Cloud Account, the Fusion Application’s internal identity service must be kept in sync with the Cloud Account’s identity domain. This synchronization makes sure that user identifiers, groups, and entitlements line up across both systems, so when the identity provider proves who a user is, the Fusion Application can recognize that exact user and grant the correct access. If the identity data isn’t synchronized, the SSO process can fail or map a user to the wrong permissions, because the Fusion side and the Cloud Account wouldn’t be speaking the same user identity language. The other options don’t address this authentication linkage—enabling OCI Vision is unrelated to login, and syncing the application database with the OTBI data model concerns analytics, not authentication.

The key idea is that a successful SSO relies on a single, shared identity space that both systems trust. For Fusion Applications to accept tokens or assertions from the Cloud Account, the Fusion Application’s internal identity service must be kept in sync with the Cloud Account’s identity domain. This synchronization makes sure that user identifiers, groups, and entitlements line up across both systems, so when the identity provider proves who a user is, the Fusion Application can recognize that exact user and grant the correct access.

If the identity data isn’t synchronized, the SSO process can fail or map a user to the wrong permissions, because the Fusion side and the Cloud Account wouldn’t be speaking the same user identity language. The other options don’t address this authentication linkage—enabling OCI Vision is unrelated to login, and syncing the application database with the OTBI data model concerns analytics, not authentication.