Scanning Organizations and Environments

Once you have onboarded the OCI WIF to Britive, use the Scan button in the Settings tab to start a new scan.

You can perform an organization scan(s) or environment scan(s). The organization scan in Britive applies only to the default identity domain account. The organization scan collects all the compartments and domains within it.  

• Scanning Organizations

• Scanning Environments

The scans that you have submitted for organizations and environments are visible in the Scans tab of the onboarded Oracle application.

Scanning Organizations

Perform the following steps in Britive for scanning the organizations or environments of the Oracle Cloud account associated with the onboarded OCI WIF application:

1. After testing the onboarded OCI WIF application (as explained in the section Onboarding an OCI WIF Application in Britive), select Scan from the Settings tab on the Create Application page. A Scan Submitted message is displayed.

2. The page refreshes and provides you with the details of the scan on the Scans page.

3. When the scan is complete, click the completed scan entry under the Summary column to view the Scan Data Summary.

The Overview page shows the detailed scan summary data.

Scanning Environments

You can scan the environment(s) within the onboarded OCI WIF applications from Britive.

Perform the following steps to scan an environment in an onboarded OCI WIF application:

1. Login to the Britive application with administrator privileges.

2. Click System admin > Tenant Applications. The Tenant Applications page is displayed.

3. Click the Manage icon inline with the OCI WIF application. The Overview page is displayed.

4. Click Properties -> Settings.

5. Click Edit to enter the following values:

   1. OCI ID of the tenancy: The unique ID is called the Oracle Cloud Identifier (OCID) of the Oracle tenant application.

   2. Name of the tenant: The name of the Oracle tenant application.

   3. Client ID of the OCI confidential application : The client id of the confidential app that we had created in the step (Link to Creating a Confidential Application in Oracle Cloud)

   4. Region: The region of the Oracle cloud. To get the region code:

      1. Log in to the Oracle Cloud Console and click on the region at the top right corner, followed by Manage regions.

      2. Copy the region identifier. For example, us-phoenix-1

   5. Domain URL: The URL under the domain settings from Oracle Cloud. To get the domain URL:

      1. Log in to the Oracle Cloud Console and click on Identity->Domains.

      2. Click on the Default domain.

      3. Copy the domain URL displayed.

   6. Profile Settings: Configure the maximum session duration for profiles. You can select the duration between 15 minutes to 7 calendar days. This allows setting an expiration duration for each profile while creating/updating the profile up to this configured value. If existing profiles are created with more than 12 hours and the above setting is changed, then it cannot be lowered until all profiles are updated with a lower expiration duration.

   7. Click SAVE.

6. From the Scans page, select Scan Environments.

7. Select the checkbox inline with the environment that you want to scan, and click Scan Selected. The scan results are displayed on the Scans page.

The Overview page shows the detailed scan summary data and analytics.