> ## Documentation Index
> Fetch the complete documentation index at: https://docs.stackone.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Oracle Clinical One OAuth 2.0 (Password Grant) connector profile – StackOne setup guide

> Set up the OAuth 2.0 (Password Grant) connector profile for Oracle Clinical One in StackOne. One-time admin setup required before your users can link Oracle Clinical One accounts via Hub.

> [!WARNING]
>
> The client ID and secret must be generated by an Oracle Life Sciences IAMS customer-delegated administrator (CDA) with the system-admin role.

Select Actions to adjust the guideSome actions may require additional configuration in the provider to be accessible. Choose the actions you need and the guide will be updated.

Select all
Clear

ActionScope(s)

Loading actions...No actions match your search.

Dynamic Guide URL

Copy URL

Scopes Selected

<pre role="textbox" aria-readonly="true" tabIndex="0" />

Separator

Copy scopes

## Find your tenant details

Your tenant details identify your Oracle Clinical One environment and the Oracle Life Sciences IAMS service that issues its access tokens.

**1. Find your tenant name**

Your **Tenant Name** is the full tenant name in the host URL your organization uses for Oracle Clinical One.

<ul>
  <li>Format: `https://{tenant}.clinicalone.oraclecloud.com/eclinical-portal/`</li>
  <li>Example: if your URL is `https://acmepharma.clinicalone.oraclecloud.com/eclinical-portal/`, your tenant name is `acmepharma`</li>
  <li>If you don't have this URL, ask your Oracle project manager.</li>
  <li>Enter it in the **Tenant Name** field in the StackOne Connector profile.</li>
</ul>

**2. Get your token URL**

Ask your Oracle project manager for the Oracle Life Sciences IAMS URL that issues access tokens. It is different from the URL you use to make Oracle Clinical One API calls.

<ul>
  <li>Format: `https://{token host}/ms_oauth/oauth2/endpoints/{tenant ID}/tokens`</li>
  <li>Example: if your token URL is `https://login.example.oraclecloud.com/ms_oauth/oauth2/endpoints/hsgb/tokens`, your token host is `login.example.oraclecloud.com` and your tenant ID is `hsgb`</li>
  <li>Enter only the host, with no protocol and no `/ms_oauth` path, in the **IAMS Token Host** field in the StackOne Connector profile.</li>
  <li>Enter the tenant ID in the **Tenant ID** field in the StackOne Connector profile. It is the abbreviated tenant name, while Oracle Clinical One API calls use the full tenant name.</li>
</ul>

## Assign the system administrator role

The system-admin role lets a customer-delegated administrator sign in to the Oracle Life Sciences IAMS OAuth Admin Console. It is not assigned by default, and you only need to assign it once.

**1. Sign in to Oracle Life Sciences IAMS**

Sign in to Oracle Life Sciences IAMS as a customer-delegated administrator, using the URL specific to your organization.

<ul>
  <li>Find the URL in your browser bookmarks or in the welcome email Oracle sent when your account was created. See [Oracle Life Sciences IAMS bookmarks](https://docs.oracle.com/en/industries/life-sciences/clinical-one/user-provisioning/bookmarks.html).</li>
  <li>Under the **Administration** section, click **Users**.</li>
</ul>

**2. Open your user details**

Under the **Search Users** section, search for your own user.

<ul>
  <li>In the **Search Results** table, click your user name.</li>
  <li>On the **User Details** page, select the **Roles** tab.</li>
</ul>

**3. Request the system-admin role**

From the **Actions** drop-down, select **Request**.

<ul>
  <li>Search for the `system-admin` role and click **Add to Cart**.</li>
  <li>In the upper-right, click **Checkout**.</li>
</ul>

## Create a client ID and secret

A Password Grant client makes API calls with an end user's Oracle Life Sciences IAMS account, so each linked account signs in with its own user.

**1. Sign in to the OAuth Admin Console**

Sign in to your Oracle Life Sciences IAMS OAuth Admin Console account with your customer-delegated administrator credentials.

<ul>
  <li>The OAuth Admin Console URL is different from the Oracle Life Sciences IAMS URL. Get it from your Oracle project manager.</li>
</ul>

**2. Request a new client**

On the home page, click **Request New Client** and fill in the fields.

<ul>
  <li>Client Name: `StackOne Integration`</li>
  <li>Select **Password Grant** as the **Client Type**.</li>
  <li>For **Business Service**, select `clinicalone-CNE`, the business service of the users who will connect.</li>
</ul>

**3. Add permissions**

Enables actions: Add A Kit In A Study, Add A Subject, Add A Visit, Add Comment Or Reply To An Object, Add Form In A Study Version, Add Study, Bulk Assign Forms To Visits, Bulk User Effective Dates Update, Bulk User Sites Update, Create A New Treatment Arm For A Study Version, Create A Site, Create A Subject Transfer, Create All Visits, Forms And Questionnaires, Create And Assign Bulk Users, Create Codelist, Create Data Elements For The Flat Part Of A Multi Section Form, Create Data Elements For The Repeating Part Of A Multi Section Form, Create Manual Shipment In Resupply Strategy, Create Multiple Data Elements For A Subject, Create Open Query, Create Organization, Create Randomization List, Create Visit Status Record, Delete A Site By ID, Delete A Specific Form, Delete A Visit, Delete Data Elements In A Form Within A Visit, Export Kit Details For The Inventory, Export Randomization List, Get A Global User's Details By User ID, Get A List Of All Studies, Get A List Of Study Forms, Get A List Of Study Visits, Get A Specific Form, Get A User's Modes And Roles, Get All Comments For An Object, Get All Items With Source Data Verification Information, Get All Visits, Forms And Questionnaires, Get Associated And Dynamic Forms For A Subject Visit, Get Codelist By Name, Get Country Name, Get Data Elements Based On Subject, Visit, And Form, Get Data Elements By Subject And Event ID, Get Global Users, Get Inventory Statuses, Get Kit List Details, Get Kit Types, Get List Of Randomization Designs In A Study Version, Get List Of Treatment Arms For All Study Versions, Get List Of Visits Status For A Subject, Get Non-Serialized Inventory Order Items, Get Number Of Open Queries In A Study For Selected Subjects, Get Organizations, Get Query By ID, Get Query Data Based On Multiple Parameters, Get Randomization List, Get Sign Information, Get Site Or Depot Details By Study ID Using Filters, Get Study Design Visits, Get Study Site Details With Study Version Property By Site ID, Get Study Visit, Get Subject Details, Get Subject History, Get Subjects And Their Visit Schedule, Get Subjects For The Specified Study And Mode, Get Subjects With Open Queries In A Study, Get The Audit History For A Data Element, Get The Number Of Queries In A Study, List Available Order Status Values, List Codelists, Search For Kits In A Given Range For A Site, Search Shipments For A Site, Search Shipments For A Study, Update Data Elements For The Repeating Part Of A Multi Section Form, Update Single Data Element, Update Subject, Update Visit Status For A Given ID, Upload Kit List File, Upsert Data Elements For The Flat Part Of A Multi Section Form, Verify Multiple Data Elements For A Subject

Click **Add Permissions**, select the permissions below in the **Add permissions** dialog, and click **Add**. Each permission gives access to one Oracle Clinical One API category, and you can refine them later.

<ul>
  <li>
    ec-designer-svc
  </li>

  <li>
    ec-designer-edc-svc
  </li>

  <li>
    ec-designer-ors-svc
  </li>

  <li>
    ec-designer-study-svc
  </li>

  <li>
    ec-dc-svc
  </li>

  <li>
    ec-dataaction-svc
  </li>

  <li>
    ec-query-svc
  </li>

  <li>
    ec-comment-svc
  </li>

  <li>
    ec-codelist-svc
  </li>

  <li>
    ec-site-svc
  </li>

  <li>
    ec-ors-svc
  </li>

  <li>
    ec-auth-svc
  </li>
</ul>

**4. Save the client ID and secret**

Save the generated **Client ID** and secret displayed on the **Request New Client** dialog, and store them securely for use later.

<ul>
  <li>Paste the client ID into the **Client ID** field in the StackOne Connector profile.</li>
  <li>Paste the secret into the **Client Secret** field in the StackOne Connector profile.</li>
  <li>Enter the permissions you added, separated by spaces, in the **Permissions** field in the StackOne Connector profile.</li>
  <li>Example: `ec-designer-svc ec-dc-svc ec-site-svc ec-query-svc`</li>
  <li>Leave out the tenant ID prefix and the `.all` suffix. StackOne requests each permission as `{tenant ID}.{permission}.all`.</li>
</ul>

## Creating the StackOne Connector Profile

To create the Connector Profile in StackOne for **Oracle Clinical One**:

**1. Open the connector**

Log in to StackOne, open [Connectors](https://app.stackone.com/connectors), and select **Oracle Clinical One**.

**2. Choose actions and events**

<ul>
  <li>Click **Add Profile**.</li>
  <li>If the connector offers more than one authentication method, set the **Auth Method** filter to **OAuth 2.0 (Password Grant)**.</li>
  <li>Select the actions, and any events, to enable for this Connector Profile.</li>
  <li>Click **Continue**.</li>
</ul>

**3. Set up authentication**

<ul>
  <li>Select **Authentication Type** as **OAuth 2.0 (Password Grant)**.</li>

  <li>
    Fill out the fields using details retrieved from your provider:

    <ul>
      <li>**Tenant Name**</li>
      <li>**Tenant ID**</li>
      <li>**IAMS Token Host**</li>
      <li>**Client ID**</li>
      <li>**Client Secret**</li>
      <li>**Permissions**</li>
    </ul>
  </li>

  <li>Click **Create Profile**.</li>
</ul>

Congratulations! The new Connector Profile now shows up on the connector page. If you created it as a project member rather than an admin, it starts disabled until a project admin enables it. You can now continue to [Link Accounts](https://docs.stackone.com/connect/managing-connectors/linking-accounts.md) for **Oracle Clinical One**.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.