Oracle Corporation

12/06/2024 | Press release | Distributed by Public on 12/05/2024 21:48

Oracle Access Governance expands with OCI Event Streaming

Securely managing and granting access to authorized users, including employees, customers, and external partners, remains a significant challenge for organizations, often straining IT resources. Oracle Access Governance simplifies these complexities, offering real-time insights into identity activities, seamless integrations, and enhanced data streaming capabilities.

Event Streaming for OCI
Oracle Access Governance enables organizations to export and continuously stream critical identity-related data events, as shown in Figure 1. This capability enhances security by analyzing real-time access events, helps address compliance, and provides actionable insights for identity security.

You can publish events, such as identity changes, policy updates, and access activities, to Oracle Cloud Infrastructure (OCI) Streaming for real-time analysis or to OCI Object Storage buckets for long-term storage. This flexibility supports security operations (SecOps) teams and audit processes effectively.

Initially, the streaming functionality using the OCI Streaming service, covers updates synchronized from OCI. Oracle is working to expand this capability to include other applications and systems comprehensively, making it easy to build own data lake and use existing business intelligence (BI) tools to analyze these events.

Access Governance data feed.
Figure 1: Oracle Access Governance console showcasing Event Streaming functionality
Deep integrations for simplified management
Oracle Access Governance now offers expanded integrations with critical platforms, enabling streamlined identity orchestration.

Microsoft Entra ID integration
Oracle Access Governance administrators now have the following capabilities:

Manage groups: Create, update, and delete Microsoft Entra ID groups directly from Oracle Access Governance.
Assign roles: Use robust control mechanisms (policy-based, attribute-based, role-based, and request-based) to manage application roles in Entra ID and Entra ID B2C.
Oracle Autonomous Database integration
Integration with Oracle Autonomous Database with Oracle Access Governance facilitate secure way of managing database users, including the following methods:

Provisioning: Create, update, or delete users.
Permission management: Assign or revoke roles and privileges.
Password management: Reset or change passwords.
Segregation of duties (SoD) with Oracle Risk Management Cloud
Oracle Access Governance integrates with Oracle Risk Management Cloud to perform SoD scans during access requests. These preventative scans automatically use predefined rules to find and flag access violations, which helps address compliance with regulatory mandates like SOX and GDPR.

SoD violation details.
Figure 2: Preventive SoD violation details in Oracle Access Governance
Conclusion
With its latest updates, Oracle Access Governance empowers organizations to streamline identity management, enhance security, and maintain regulatory compliance. Real-time event streaming, robust integrations, and advanced compliance tools make it an indispensable solution for modern businesses. To learn more about Access Governance, see the following resources:

Oracle Access Governance product tour
Oracle Access Governance datasheet
Introduction to Oracle Access Governance (Oracle University)
What's New in Oracle Access Governance
Integrate with Microsoft Entra ID (formerly Azure Active Directory)
Oracle Access Governance introduces next-gen access dashboard and more integrations (blog post)
Oracle Access Governance optimizes identity orchestration and enables unlimited integrations with generic connectors (blog post)
Oracle Access Governance adds support for OCI group membership reviews, orphan account management, and more integrations (blog post)
Oracle Access Governance adds identity lifecycle management and expanded targets (blog post)