Enabling Microsoft Azure SSO in Oracle APEX
Single Sign-On improves user experience by providing seamless access across applications with one login. Integrating Oracle APEX with Microsoft Entra ID (Azure AD) centralizes identity management, strengthens security, and simplifies user access. This guide outlines an OpenID Connect configuration for Oracle APEX.
Prerequisites
- An Oracle APEX environment—version 20.x or later is recommended.
- Administrator access to the Microsoft Entra or Azure portal.
- Accurate time-zone and UTC settings in the APEX environment.
- The final HTTPS URL for the APEX environment.
Step 1: Register Oracle APEX in Microsoft Entra ID
Open App Registrations
Sign in to the Microsoft Entra admin center, go to Identity → Applications → App registrations, and select New registration.
Register the APEX Application
Enter an application name, choose supported account types, and add the APEX authentication callback as the Web redirect URI.
Record Identifiers & Secret
Copy the Application (client) ID and Directory (tenant) ID. Create a client secret and store it securely.
APEX Authentication Scheme Configuration
Security Checklist
- Never place client secrets in source code or client-side files.
- Use HTTPS exclusively for the APEX environment with strict redirect URI matches.
- Apply least-privilege Entra permissions and rotate secrets before expiration.
- Validate claims to map identity tokens to application authorization roles.
Conclusion
Integrating Microsoft Entra ID with Oracle APEX improves security, convenience, and IT efficiency. Using OpenID Connect with securely stored credentials provides a standards-based authentication flow that adheres to modern enterprise identity policies.
