Search Results icx_sec




Overview
Explore in AI Chat

Overview

APPS.ICX_SEC is the core session and security management package body within the Oracle E-Business Suite Internet Computing Architecture (ICX) layer. Its primary business function is to establish, validate, and terminate authenticated user sessions across the EBS web tier, and to govern the transaction context associated with each session. The package acts as the security gateway between the Oracle HTTP Server / Forms servlet layer and the underlying Applications security model, reconciling thin-client browser sessions against FND_USER credentials, responsibilities, and function security. It also supports delegated administration, plug (portlet) session validation, and audit trail generation, making it a foundational dependency for the vast majority of self-service and JSP-based pages in EBS 12.1.1 and 12.2.2.

Key Procedures and Functions

The package exposes 49 documented procedures and functions. Principal among them are session lifecycle routines such as CREATESESSION, NEWSESSION, and CREATETRANSACTION, which instantiate a browser session and its associated transaction context. CREATESESSIONCOOKIE and REMOVECOOKIE manage the client-side cookie that anchors the session, while VALIDATESESSION, VALIDATESESSIONPRIVATE, and VALIDATEPLUGSESSION verify that an incoming request belongs to a legitimate, non-expired session, including portlet-level validation. VALIDATEPASSWORD performs password policy enforcement during authentication. DISABLEUSERSESSION and REMOVETRANSACTION provide controlled teardown. Session visibility is governed by SETSESSIONPUBLIC and SETSESSIONPRIVATE, and PSEUDOSESSION supports internally generated, non-interactive contexts. SERVERLEVEL and SET_ORG_CONTEXT establish operating context, including org (business unit) context for multi-org access. Supporting utilities include GETID, GETRESPONSIBILITYLIST, PUTSESSIONATTRIBUTEVALUE, and WRITEAUDIT, which records session-related audit events.

Tables Accessed

ICX_SEC reads and writes a defined set of application tables through APPS synonyms. Session state is persisted in ICX_SESSIONS and ICX_SESSION_ATTRIBUTES, with transaction linkage in ICX_TRANSACTIONS. Security validation draws on FND_USER, FND_RESP_FUNCTIONS, FND_FORM_FUNCTIONS, FND_MENU_ENTRIES, FND_LANGUAGES, FND_NODES, and FND_PRODUCT_GROUPS. Delegated administration attributes are held in AK_WEB_USER_SEC_ATTR_VALUES. Failure diagnostics are logged to ICX_FAILURES and ICX_PARAMETERS, while portlet and page configuration is read from ICX_PAGE_PLUGS. Workflow integration relies on WF_EVENT_T. The package also depends on many APPS utility bodies, notably FND_WEB_SEC, FND_SIGNON, FND_CRYPTO, FND_GLOBAL, ICX_CALL, ICX_UTIL, ICX_ADMIN_SIG, and WF_CORE.

Usage Notes

ICX_SEC is not typically invoked directly by end users; rather, it is called implicitly by the ICX JSP/servlet framework, the Oracle Applications Forms listener, and the Single Sign-On integration layer whenever a page or form request requires session or function-security verification. Custom self-service applications and JSP extensions commonly call VALIDATESESSION and related routines to protect their entry points. Because the metadata records ICX_SEC as referenced by 166 other database objects while it is itself not referenced by any database object, it functions as a low-level dependency consumed broadly across the APPS schema. Customizations should avoid modifying the package and instead rely on its public interface, since changes may affect session behavior across the entire EBS web stack in both 12.1.1 and 12.2.2.