|

Configuration – Disabling MFA Oracle Fusion OCI Console

ByMandeep Gupta

Multi-Factor Authentication (MFA) is enabled by default for Oracle Fusion Applications and is enforced through the sign-on policy of your Identity Domain in Oracle Cloud Infrastructure (OCI). While MFA is strongly recommended for production environments, there are scenarios — such as sandbox or test environments, break-glass access, or troubleshooting — where you may need to temporarily disable the additional authentication factor prompt. This post walks through the exact steps to do that from the OCI Console.

In this post

Step 1: Access the OCI Console

  1. Login to your cloud console using cloud.oracle.com.
  2. Provide your tenant name and log in to the OCI Console with your administrator credentials.

From the OCI Console navigation menu, locate Domains under the Identity & Security section.

Navigating to Domains under Identity and Security in OCI Console
Identity & Security → Domains in the OCI Console navigation menu

Step 3: Locate Your Identity Domain

On the Domains page, find and select the identity domain associated with your Oracle Fusion Applications instance.

Locating the current identity domain in OCI Console
Selecting the correct identity domain from the domains list

Step 4: Open Domain Policies

Click the domain name to open the domain details page, then navigate to the Domain policies tab.

Domain details page with Domain policies tab in OCI Console
Domain details page — Domain policies tab

Step 5: Edit the Sign-On Rule

Look for the user category based sign-on policy. Click its name to open it, then go to the Sign-on rules tab and select the Default User category based SignonRule to edit it.

Sign-on rules tab showing the Default User category based SignonRule
Sign-on rules tab — selecting the Default User category based SignonRule

On the Edit Sign-on rule page, locate the Actions section.

Actions section on the Edit Sign-on rule page in OCI Console
Actions section on the Edit Sign-on rule page

Step 6: Disable the Additional Factor Prompt

Action: Uncheck the “Prompt for an additional factor” checkbox to disable any MFA-related configuration for this sign-on rule.
Unchecking Prompt for an additional factor checkbox to disable MFA
Unchecking “Prompt for an additional factor” to disable MFA

Save the changes once the checkbox is unchecked. The sign-on rule will no longer prompt users in this category for an additional authentication factor when they log in to Oracle Fusion Applications.

Final Notes

Security consideration: Disabling MFA reduces the authentication security of your environment. This should generally be limited to non-production instances, temporary troubleshooting scenarios, or environments with compensating controls in place. Re-enable the “Prompt for an additional factor” setting once the activity requiring MFA to be off is complete.

Changes to sign-on rules take effect for new sessions and are typically applied within a few minutes. If users still see an MFA prompt, ask them to log out completely and sign in again, and confirm that no other sign-on rule (higher in priority) is enforcing an additional factor for their user category.

Oracle Fusion Applications OCI Identity Domains MFA Sign-On Policy Oracle Cloud Console

Similar Posts