Search Results fnd_user_s

Overview

APPS.FND_WEB_SEC is a core Oracle E-Business Suite security package body that governs the authentication, credential management, and password lifecycle for EBS application users and Oracle database accounts. Operating within the Applications (APPS) schema, it encapsulates the logic that validates logins, enforces password policies, obfuscates stored credentials, and supports Single Sign-On and LDAP integration paths. Because it touches both the FND_USER repository and the FND_ORACLE_USERID mapping, it sits at the intersection of application security and database account provisioning. The package is classified as VALID and OTHER in ETRM 12.2.2, indicating it is a supporting internal utility rather than a formal public API. Its broad dependency graph — spanning FND_FUNCTION_SECURITY_CACHE, FND_PROFILE, FND_MESSAGE, FND_VAULT, and the DBMS_OBFUSCATION_TOOLKIT — reflects its central role in EBS sign-on and password maintenance across releases 12.1.1 and 12.2.2.

Key Procedures and Functions

The package exposes roughly 33 documented procedures and functions grouped around authentication and credential handling:

• Authentication: VALIDATE_LOGIN verifies user credentials during sign-on; UNSUCCESSFUL_LOGIN records failed attempts against FND_UNSUCCESSFUL_LOGINS for lockout policy enforcement.
• User provisioning: CREATE_USER, CREATE_ORACLE_USER, and START_USER_MIGRATE support creation of application and database accounts and migration of existing users.
• Password management: CHANGE_PASSWORD, CHANGE_GUEST_PASSWORD, VALIDATE_PASSWORD, UPGRADE_WEB_PASSWORD, and UPDATE_NO_REUSE manage password changes and enforce no-reuse history.
• Encryption and re-encryption: ENCRYPT, URLENCRYPT, GET_ENCRYPTED_PASSWORDS, GET_REENCRYPTED_PASSWORD, SET_REENCRYPTED_PASSWORD, GET_REENCRYPTED_ORACLE_PWD, CVT_REENCRYPTED_ORACLE_PWD, and GET_PWD_ENC_MODE handle obfuscation, key rotation, and encryption-mode detection.
• Configuration utilities: GET_OP_VALUE reads operating-profile values, and UPDATE_NO_REUSE_FUNCTION supports no-reuse enforcement logic.

Parameter lists are intentionally omitted; only purpose is documented here.

Tables Accessed

The package reads and writes several core EBS security tables through APPS synonyms:

• FND_USER / FND_USER_S — the primary user repository, read for validation and written during creation and password changes.
• FND_ORACLE_USERID / FND_ORACLE_USERID_S — maps application users to Oracle database schemas, supporting CREATE_ORACLE_USER and re-encryption routines.
• FND_UNSUCCESSFUL_LOGINS — records failed authentication attempts used for lockout policy.
• FND_USER_PREFERENCES and FND_LANGUAGES — supply user preference and language context during validation.
• DBMS_LOCK, DBMS_RANDOM, DBMS_SESSION, DBMS_SQL, DBMS_UTILITY, DUAL, USER_TABLES — supporting PL/SQL and dictionary objects used for serialization, random salt generation, session state, and metadata lookups.

Usage Notes

FND_WEB_SEC is invoked automatically by the EBS sign-on flow, by the Oracle Applications Manager (OAM) user-management screens, and by password-change forms. It is referenced by 37 other database objects, confirming its role as a shared internal service. Custom code should avoid direct calls, since password and encryption behavior is version-sensitive between 12.1.1 and 12.2.2, particularly around re-encryption and Oracle DB account integration. Administrators typically interact with it indirectly through the Change Password and User Management concurrent programs and forms rather than through direct invocation.