Beginning Oracle® Application Express

9.1. Security Basics

Before you can start to implement security for your APEX application, you will have to understand some of the basics about how APEX implements security.

9.1.1. Authentication

Authentication is the process of establishing the identity of a user. You no doubt deal with authentication processes every day, from logging in to your network to using personalized web sites.

Typically, authentication is implemented by using a unique combination of a user name and a password. APEX applications use this type of approach. The exact method used for establishing and referencing the identities of users is implemented through an authorization scheme.

9.1.2. Authentication Schemes

All APEX applications use an authentication scheme. An authentication scheme describes the method APEX will use for authenticating the user name and password. An application can have more than one authentication scheme defined, although only one scheme can be used at any time.

APEX includes a number of preconfigured authentication scheme options:

• Open Door Credentials: Allow anyone to access the application. The application still uses a login page to capture a user name, but no password is required. This scheme is particularly useful when you are developing an application and want to test your access without using real user accounts.

• Application Express Account Credentials: You create and manage users for the APEX environment. This scheme gives you complete control over users and authentication ...