Skip to main content
The client ID and secret must be generated by an Oracle Life Sciences IAMS customer-delegated administrator (CDA) with the system-admin role.

​
Find your tenant details

Your tenant details identify your Oracle Clinical One environment and the Oracle Life Sciences IAMS service that issues its access tokens.

1

Find your tenant name

Your Tenant Name is the full tenant name in the host URL your organization uses for Oracle Clinical One.

  • Format: https://{tenant}.clinicalone.oraclecloud.com/eclinical-portal/
  • Example: if your URL is https://acmepharma.clinicalone.oraclecloud.com/eclinical-portal/, your tenant name is acmepharma
  • If you don’t have this URL, ask your Oracle project manager.
  • Enter it in the Tenant Name field in StackOne Hub.
2

Get your token URL

Ask your Oracle project manager for the Oracle Life Sciences IAMS URL that issues access tokens. It is different from the URL you use to make Oracle Clinical One API calls.

  • Format: https://{token host}/ms_oauth/oauth2/endpoints/{tenant ID}/tokens
  • Example: if your token URL is https://login.example.oraclecloud.com/ms_oauth/oauth2/endpoints/hsgb/tokens, your token host is login.example.oraclecloud.com and your tenant ID is hsgb
  • Enter only the host, with no protocol and no /ms_oauth path, in the IAMS Token Host field in StackOne Hub.
  • Enter the tenant ID in the Tenant ID field in StackOne Hub. It is the abbreviated tenant name, while Oracle Clinical One API calls use the full tenant name.

​
Assign the system administrator role

The system-admin role lets a customer-delegated administrator sign in to the Oracle Life Sciences IAMS OAuth Admin Console. It is not assigned by default, and you only need to assign it once.

1

Sign in to Oracle Life Sciences IAMS

Sign in to Oracle Life Sciences IAMS as a customer-delegated administrator, using the URL specific to your organization.

  • Find the URL in your browser bookmarks or in the welcome email Oracle sent when your account was created. See Oracle Life Sciences IAMS bookmarks.
  • Under the Administration section, click Users.
2

Open your user details

Under the Search Users section, search for your own user.

  • In the Search Results table, click your user name.
  • On the User Details page, select the Roles tab.
3

Request the system-admin role

From the Actions drop-down, select Request.

  • Search for the system-admin role and click Add to Cart.
  • In the upper-right, click Checkout.

​
Create a client ID and secret

A Client Credentials client lets StackOne make system-to-system API calls without an end user’s password, so IAMS password rotation does not affect the connection.

1

Sign in to the OAuth Admin Console

Sign in to your Oracle Life Sciences IAMS OAuth Admin Console account with your customer-delegated administrator credentials.

  • The OAuth Admin Console URL is different from the Oracle Life Sciences IAMS URL. Get it from your Oracle project manager.
2

Request a new client

On the home page, click Request New Client and fill in the fields.

  • Client Name: StackOne Integration
  • Select Client Credentials as the Client Type.
3

Add permissions

Enables actions: Add A Kit In A Study, Add A Subject, Add A Visit, Add Comment Or Reply To An Object, Add Form In A Study Version, Add Study, Bulk Assign Forms To Visits, Bulk User Effective Dates Update, Bulk User Sites Update, Create A New Treatment Arm For A Study Version, Create A Site, Create A Subject Transfer, Create All Visits, Forms And Questionnaires, Create And Assign Bulk Users, Create Codelist, Create Data Elements For The Flat Part Of A Multi Section Form, Create Data Elements For The Repeating Part Of A Multi Section Form, Create Manual Shipment In Resupply Strategy, Create Multiple Data Elements For A Subject, Create Open Query, Create Organization, Create Randomization List, Create Visit Status Record, Delete A Site By ID, Delete A Specific Form, Delete A Visit, Delete Data Elements In A Form Within A Visit, Export Kit Details For The Inventory, Export Randomization List, Get A Global User’s Details By User ID, Get A List Of All Studies, Get A List Of Study Forms, Get A List Of Study Visits, Get A Specific Form, Get A User’s Modes And Roles, Get All Comments For An Object, Get All Items With Source Data Verification Information, Get All Visits, Forms And Questionnaires, Get Associated And Dynamic Forms For A Subject Visit, Get Codelist By Name, Get Country Name, Get Data Elements Based On Subject, Visit, And Form, Get Data Elements By Subject And Event ID, Get Global Users, Get Inventory Statuses, Get Kit List Details, Get Kit Types, Get List Of Randomization Designs In A Study Version, Get List Of Treatment Arms For All Study Versions, Get List Of Visits Status For A Subject, Get Non-Serialized Inventory Order Items, Get Number Of Open Queries In A Study For Selected Subjects, Get Organizations, Get Query By ID, Get Query Data Based On Multiple Parameters, Get Randomization List, Get Sign Information, Get Site Or Depot Details By Study ID Using Filters, Get Study Design Visits, Get Study Site Details With Study Version Property By Site ID, Get Study Visit, Get Subject Details, Get Subject History, Get Subjects And Their Visit Schedule, Get Subjects For The Specified Study And Mode, Get Subjects With Open Queries In A Study, Get The Audit History For A Data Element, Get The Number Of Queries In A Study, List Available Order Status Values, List Codelists, Search For Kits In A Given Range For A Site, Search Shipments For A Site, Search Shipments For A Study, Update Data Elements For The Repeating Part Of A Multi Section Form, Update Single Data Element, Update Subject, Update Visit Status For A Given ID, Upload Kit List File, Upsert Data Elements For The Flat Part Of A Multi Section Form, Verify Multiple Data Elements For A Subject

Click Add Permissions, select the permissions below in the Add permissions dialog, and click Add. Each permission gives access to one Oracle Clinical One API category, and you can refine them later.

4

Save the client ID and secret

Save the generated Client ID and secret displayed on the Request New Client dialog, and store them securely for use later.

  • Paste the client ID into the Client ID field in StackOne Hub.
  • Paste the secret into the Client Secret field in StackOne Hub.
  • Enter the permissions you added, separated by spaces, in the Permissions field in StackOne Hub.
  • Example: ec-designer-svc ec-dc-svc ec-site-svc ec-query-svc
  • Leave out the tenant ID prefix and the .all suffix. StackOne requests each permission as {tenant ID}.{permission}.all.

​
Create the integration user

A Client Credentials client needs a matching user account in Oracle Life Sciences IAMS and in Oracle Clinical One. That user’s study roles decide what StackOne can access.

1

Create the user in Oracle Life Sciences IAMS

In Oracle Life Sciences IAMS, create an Oracle Life Sciences single sign-on for the integration.

  • User Login: the tenant ID and the full client ID in dot notation, {tenant ID}.{client ID}
  • Last name: include the external data source, {lastName}_{externalDataSource}
  • Example: a user login of hsgb.{client ID} and a full name of John Doe_Source
2

Assign the clinicalone-CNE role

Assign the new user the clinicalone-CNE role. See Assign roles in Oracle Life Sciences IAMS.

3

Add the user to your studies

In Oracle Clinical One, create the same user at a study level and assign the appropriate study role in each study mode. See Add a user to a study in Oracle Clinical One Platform.

  • A global user manager or a user administrator must do this.
  • Make sure each study role has the Oracle Clinical One permissions for the tasks StackOne will perform.

​
Linking the Account from the Hub

1

Navigate to the Hub

Use one of the three Linking Account Methods to access the Hub.
2

Fill out the fields

Fill out the following fields using details from your provider:
  • Tenant Name
  • Tenant ID
  • IAMS Token Host
  • Client ID
  • Client Secret
  • Permissions
3

Connect

  • Click Connect
  • If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider’s authorization flow.
  • Once authorization is successful, you will see a confirmation popup

If the account linking is successful, you will see the newly linked account on your Accounts page.