HOW TO Understand Preconfigured Authentication Schemes in Oracle APEX

Introduction
Oracle APEX offers several preconfigured authentication schemes that make it easy to control access to your applications. These ready-to-use options help developers secure apps quickly without writing custom authentication logic. Understanding what each preconfigured scheme does and when to use it allows you to align your app with your security and user management requirements—whether you're building for a small team or a large enterprise.

Understanding Preconfigured Authentication Schemes in Oracle APEX

1. Accessing Authentication Schemes

   • Open your application in Oracle APEX

   • Go to Shared Components

   • Click on Authentication Schemes under Security

   • You’ll see the current authentication scheme and a list of available options

2. Common Preconfigured Authentication Schemes
   Oracle APEX includes several prebuilt schemes you can enable with minimal setup:

   • APEX Authentication
     Authenticates users against APEX workspace accounts. Useful for development and testing.

   • Database Account
     Uses Oracle database user accounts to authenticate. Not typically used in modern web apps.

   • LDAP Directory
     Integrates with corporate LDAP systems (e.g., Microsoft Active Directory). Requires LDAP host, port, and base DN.

   • Oracle APEX Accounts
     Similar to APEX Authentication, allows you to manage users directly within APEX.

   • Social Sign-In
     Lets users log in with external providers like Google, Facebook, and Microsoft. You configure OAuth 2.0 credentials under Web Credentials.

   • Oracle Single Sign-On (SSO)
     Integrates with Oracle Identity Cloud Service or Oracle Access Manager. Ideal for enterprise environments with centralized user control.

   • Open Door Credentials
     Allows anyone to access the app without login. Used only for public applications.

3. How to Enable a Preconfigured Scheme

   • Click Create under Authentication Schemes

   • Choose a preconfigured scheme (e.g., LDAP Directory)

   • Enter the required configuration details

   • Click Create and Make Current to activate it

   • Test the login to confirm setup

4. Switching Authentication Schemes
   You can change the current scheme at any time:

   • In the Authentication Schemes list, click the scheme name

   • Click Make Current
     This allows you to switch between development (APEX accounts) and production (LDAP, SSO) environments easily.

Oracle APEX provides several preconfigured authentication schemes that developers can use to control access to applications. These built-in authentication methods simplify user identity verification without requiring extensive custom development.

Types of Preconfigured Authentication Schemes

1. Oracle APEX Accounts
   This method uses Oracle APEX’s built-in user repository for authentication. Developers can create and manage user accounts directly within APEX, making it ideal for applications that don’t require external authentication services.

2. Database Accounts
   Authentication is performed using database schema credentials. Users log in with their database usernames and passwords, ensuring security at the database level.

3. LDAP Directory
   Authentication is delegated to an LDAP (Lightweight Directory Access Protocol) server. Users log in with their LDAP credentials, enabling integration with enterprise directory services.

4. Social Sign-In
   Supports authentication using social identity providers like Google, Facebook, Microsoft, or any provider that supports OpenID Connect or OAuth2. This allows users to log in with their existing social media or enterprise accounts.

5. SAML Sign-In
   Allows authentication through Security Assertion Markup Language (SAML). This method is commonly used for integrating with corporate identity providers, enabling Single Sign-On (SSO) across multiple applications.

6. Oracle Application Server Single Sign-On (SSO)
   Authentication is managed by an Oracle Single Sign-On (SSO) server, allowing seamless login across multiple Oracle applications.

7. HTTP Header Variable
   Authentication is performed by checking the username stored in an HTTP header variable set by a web server. This is useful in environments where authentication is handled externally, such as reverse proxies or enterprise authentication gateways.

8. No Authentication (Public Access)
   This scheme disables authentication, allowing anyone to access the application without logging in. This is typically used for public applications where authentication is unnecessary.

9. Open Door Credentials
   Allows users to access the application using a built-in login page that captures a username without requiring a password. This is useful for simple access control scenarios.

10. Builder Extension Sign-In
    Used for APEX Builder extensions, allowing users to access extension apps without signing in again if they are already logged into APEX.

Configuring a Preconfigured Authentication Scheme

To configure an authentication scheme:

• Navigate to App Builder > Shared Components > Authentication Schemes

• Select an existing scheme or create a new one from the authentication scheme gallery

• Configure the settings based on the chosen authentication method

• Click Make Current to activate the authentication scheme for the application

Oracle APEX allows developers to switch between authentication schemes as needed, ensuring flexibility and security for different application requirements.

Best Practices

• Use APEX Accounts only for internal or development purposes

• Use LDAP or SSO for enterprise security and centralized control

• Use Social Sign-In for public apps or customer-facing platforms

• Avoid using Open Door in apps that manage any sensitive or restricted data

• Always test each authentication scheme in a secure environment before deploying to production

Oracle APEX Documentation
Read the official documentation on configuring authentication schemes:
https://docs.oracle.com/en/database/oracle/apex/23.2/aeapp/preconfigured-authentication-schemes.html

Conclusion
Oracle APEX simplifies user identity management with a set of powerful preconfigured authentication schemes. These built-in options let you match your app's login system to your business or security requirements without needing to build complex custom logic. By understanding and selecting the right authentication scheme, you ensure your APEX application remains secure, user-friendly, and aligned with your organization’s access policies.