Configure an Existing Authentication Scheme in Oracle APEX

 After creating an authentication scheme in Oracle APEX, you may need to modify its settings to adjust authentication behavior, session management, and custom logic. You can configure various settings and program hooks to customize the login and logout processes.

Steps to Configure an Existing Authentication Scheme

1. Access the Authentication Scheme

• Log in to your Oracle APEX workspace.

• Click on App Builder and select the application you want to modify.

• Click on Shared Components in the application menu.

• Under Security, click Authentication Schemes to view all available authentication schemes.

2. Select an Authentication Scheme

• Locate the authentication scheme you want to modify.

• Click on its name to open the Edit Authentication Scheme page.

3. Modify Authentication Settings

• Scheme Name: Update the name of the authentication scheme if needed.

• Scheme Type: The authentication type cannot be changed directly. If you need a different authentication type, create a new scheme.

• Authentication Function Name (for Custom Authentication): Modify the PL/SQL function that validates user credentials.

4. Configure Session Management

• Session Timeout: Set the timeout duration for user sessions.

• Session Timeout URL: Define a URL where users will be redirected after session timeout.

• Rejoin Sessions: Enable or disable users from automatically rejoining an existing session.

5. Set Up Program Hooks

• Post-Authentication Procedure: Define a PL/SQL procedure that runs after successful authentication (e.g., logging login attempts, setting user roles).

• Post-Logout Procedure: Specify a procedure that executes when a user logs out (e.g., clearing session variables, redirecting to a different page).

6. Control Public Access

• Run on Public Pages: Choose whether authentication should be enforced on public pages.

• If set to On, authentication will be checked even on pages marked as public.

7. Apply and Test Changes

• Click Apply Changes to save the modifications.

• Run the application and test the authentication process to ensure the changes work correctly.

By configuring an existing authentication scheme, you can fine-tune access control, session handling, and authentication logic to meet your application's security requirements.