Find your tenant details
Your tenant details identify your Oracle Clinical One environment and the Oracle Life Sciences IAMS service that issues its access tokens.
Find your tenant name
Your Tenant Name is the full tenant name in the host URL your organization uses for Oracle Clinical One.
- Format:
https://{tenant}.clinicalone.oraclecloud.com/eclinical-portal/ - Example: if your URL is
https://acmepharma.clinicalone.oraclecloud.com/eclinical-portal/, your tenant name isacmepharma - If you don’t have this URL, ask your Oracle project manager.
- Enter it in the Tenant Name field in the StackOne Connector profile.
Get your token URL
Ask your Oracle project manager for the Oracle Life Sciences IAMS URL that issues access tokens. It is different from the URL you use to make Oracle Clinical One API calls.
- Format:
https://{token host}/ms_oauth/oauth2/endpoints/{tenant ID}/tokens - Example: if your token URL is
https://login.example.oraclecloud.com/ms_oauth/oauth2/endpoints/hsgb/tokens, your token host islogin.example.oraclecloud.comand your tenant ID ishsgb - Enter only the host, with no protocol and no
/ms_oauthpath, in the IAMS Token Host field in the StackOne Connector profile. - Enter the tenant ID in the Tenant ID field in the StackOne Connector profile. It is the abbreviated tenant name, while Oracle Clinical One API calls use the full tenant name.
Assign the system administrator role
The system-admin role lets a customer-delegated administrator sign in to the Oracle Life Sciences IAMS OAuth Admin Console. It is not assigned by default, and you only need to assign it once.
Sign in to Oracle Life Sciences IAMS
Sign in to Oracle Life Sciences IAMS as a customer-delegated administrator, using the URL specific to your organization.
- Find the URL in your browser bookmarks or in the welcome email Oracle sent when your account was created. See Oracle Life Sciences IAMS bookmarks.
- Under the Administration section, click Users.
Open your user details
Under the Search Users section, search for your own user.
- In the Search Results table, click your user name.
- On the User Details page, select the Roles tab.
Request the system-admin role
From the Actions drop-down, select Request.
- Search for the
system-adminrole and click Add to Cart. - In the upper-right, click Checkout.
Create a client ID and secret
A Password Grant client makes API calls with an end user’s Oracle Life Sciences IAMS account, so each linked account signs in with its own user.
Sign in to the OAuth Admin Console
Sign in to your Oracle Life Sciences IAMS OAuth Admin Console account with your customer-delegated administrator credentials.
- The OAuth Admin Console URL is different from the Oracle Life Sciences IAMS URL. Get it from your Oracle project manager.
Request a new client
On the home page, click Request New Client and fill in the fields.
- Client Name:
StackOne Integration - Select Password Grant as the Client Type.
- For Business Service, select
clinicalone-CNE, the business service of the users who will connect.
Add permissions
Click Add Permissions, select the permissions below in the Add permissions dialog, and click Add. Each permission gives access to one Oracle Clinical One API category, and you can refine them later.
Save the client ID and secret
Save the generated Client ID and secret displayed on the Request New Client dialog, and store them securely for use later.
- Paste the client ID into the Client ID field in the StackOne Connector profile.
- Paste the secret into the Client Secret field in the StackOne Connector profile.
- Enter the permissions you added, separated by spaces, in the Permissions field in the StackOne Connector profile.
- Example:
ec-designer-svc ec-dc-svc ec-site-svc ec-query-svc - Leave out the tenant ID prefix and the
.allsuffix. StackOne requests each permission as{tenant ID}.{permission}.all.
Creating the StackOne Connector Profile
To create the Connector Profile in StackOne for Oracle Clinical One:Open the connector
Choose actions and events
- Click Add Profile.
- If the connector offers more than one authentication method, set the Auth Method filter to OAuth 2.0 (Password Grant).
- Select the actions, and any events, to enable for this Connector Profile.
- Click Continue.
Set up authentication
- Select Authentication Type as OAuth 2.0 (Password Grant).
- Fill out the fields using details retrieved from your provider:
- Tenant Name
- Tenant ID
- IAMS Token Host
- Client ID
- Client Secret
- Permissions
- Click Create Profile.