Scanning Organizations and Environments

Once you have onboarded the OCI WIF to Britive, use the Scan button in the Settings tab to start a new scan.

You can perform an organization scan(s) or environment scan(s). The organization scan in Britive applies only to the default identity domain account. The organization scan collects all the compartments and domains within it.  

• Scanning Organizations

• Scanning Environments

The scans that you have submitted for organizations and environments are visible in the Scans tab of the onboarded Oracle application.

Scanning Organizations

Perform the following steps in Britive for scanning the organizations or environments of the Oracle Cloud account associated with the onboarded OCI WIF application:

1. After testing the onboarded OCI WIF application (as explained in the section Onboarding an OCI WIF Application in Britive), select Scan from the Settings tab on the Create Application page. A Scan Submitted message is displayed.

2. The page refreshes and provides you with the details of the scan on the Scans page.

3. Once the scan is complete, you can see the domains and compartments collected in the Scan Data Summary.

The Overview page shows the detailed scan summary data.

Scanning Environments

You can scan the environment(s) within the onboarded OCI WIF applications from Britive.

Perform the following steps to scan an environment in an onboarded OCI WIF application:

1. Log in to the Britive application with administrator privileges.

2. Click System admin > Tenant Applications. The Tenant Applications page is displayed.

3. Click the Manage icon inline with the OCI WIF application.

4. Click Properties.

5. Pick a domain from the drop-down list and click Settings.

6. Click Edit to enter the following values:

   • Connection Properties:

     1. Compartment ID: Enter the Compartment ID of the domain if this field has no value after the organization scan has been run.

     2. Client ID of the OCI confidential application: The client ID of the confidential app that we had created in the step (Link to Creating a Confidential Application in Oracle Cloud).

     3. Identity Domain URL: The URL under the domain settings from Oracle Cloud. To get the domain URL:

        1. Log in to the Oracle Cloud Console and click on Identity->Domains.

        2. Click on the Default domain.

        3. Copy the domain URL displayed.

   • SSO Settings:

     1. Check Enable SSO to enable SSO.

     2. Upload SAML metadata from Oracle Cloud.

   • Account Mapping Settings:

     1. Select the Britive attribute for account mapping from the drop-down list.

     2. Check Use another domain for account mapping if the email domain of Britive users is different from the primary domain in OCI.

     3. Enter the domain of the Britive users in the field Email Domain of Britive Users.

     4. Enter the domain from OCI in the primary domain in Oracle.

     5. Click Save.

   • Profile Settings: Configure the maximum session duration for profiles. You can select the duration between 15 minutes to 7 calendar days. This allows setting an expiration duration for each profile while creating/updating the profile up to this configured value. If existing profiles are created with more than 12 hours and the above setting is changed, then it cannot be lowered until all profiles are updated with a lower expiration duration.

7. From the Scans page, select Scan Environments.

8. Select the checkbox inline with the environment that you want to scan, and click Scan Selected. The scan results are displayed on the Scans page.

The Overview page shows the detailed scan summary data and analytics.