OIC integration failing at connection level with message invalid security

---

🔐 Fixing the "Invalid Security" Error in Oracle Integration Cloud (OIC)

Published on: July 26, 2025
Author: [Aks]

---

🚨 Introduction: Struggling With "Invalid Security" in OIC?

Oracle Integration Cloud (OIC) is powerful—but nothing derails your integration flows faster than the dreaded:

⚠️ “InvalidSecurity: Error in processing the WS-Security security header”

This error is frustrating, vague, and often pops up during connection setup or runtime. But don’t worry—this post walks you through why it happens and how to fix it for good.

---

🧠 What Does "Invalid Security" Actually Mean?

This error generally signals a security mismatch between OIC and the external service you're connecting to. Common culprits include:

• ❌ Incorrect authentication (username/password or OAuth tokens)

• ❌ Mismatched security policies

• ❌ Missing or outdated certificates

• ❌ Connectivity agent or network/firewall issues

---

✅ The FIX That Worked: Refreshing Connection Metadata

After extensive troubleshooting, here’s what fixed the problem:

🔧 Steps:

1. Go to Connections in your OIC dashboard.

2. Find the failing connection.

3. Click on the three dots (⋮) on the right side.

4. Choose "Refresh Metadata".

🧹 Refreshing metadata ensures OIC re-reads the target system’s latest security headers, WSDL, and policy information.

---

🧪 Root Causes and How to Solve Them

Here’s a quick reference guide on what might be going wrong and how to fix it:

⚠️ Cause	🛠️ How to Fix It
Expired or invalid credentials	Double-check username/password or OAuth tokens. Avoid Basic Auth if MFA is enabled.
Security policy mismatch	Make sure OIC’s security policy matches what the target system expects.
Missing certificates	Upload needed SSL or intermediate certs (like msft.cer) to OIC’s trust store.
Connectivity agent config	Validate InstallerProfile.cfg and host resolution (/etc/hosts). Restart the agent.
Database adapter issues	Apply necessary DB patches (e.g., Patch 26482376) and confirm wallet configuration.
Network/firewall issues	Ensure no firewall or VCN rule is blocking your target URL.

---

🔎 Step-by-Step Troubleshooting Guide

Want to go deeper? Follow this order:

1. ✅ Verify credentials

2. 🔐 Match security policy

3. 📜 Import certificates

4. 🔌 Check agent config

5. 🧩 Resolve database issues

6. 🌐 Test endpoint accessibility

7. 📝 Enable and review trace logs

---

🛡️ Best Practices to Avoid This Error in the Future

• 🔄 Rotate credentials and update certs regularly

• 🔐 Use OAuth over Basic Auth where possible

• 🔍 Monitor error logs and set up alerts in the OIC console

• 🧪 Test in non-production before deployment

• 📦 Apply Oracle patches and keep adapters up-to-date

---

📘 References & Resources

• Oracle Troubleshoot Integration Runtime

• Known OIC Issues

• Managing Integration Errors

• Oracle Support Doc - Error Calling Fusion WebService

---

✅ Final Words

The "Invalid Security" error is solvable—and in many cases, it’s just outdated metadata causing the issue. Refresh the connection, validate your policies, and follow the checklist above for a smooth integration experience.

OIC interview questions and answers

• Great! Based on your detailed input, here’s a visually appealing and structured blog post titled “Oracle Integration Cloud (OIC) – Interview Questions & Answers” that you can directly copy into your Blogspot editor or any other blogging platform. It includes clean formatting, icons, and content blocks to enhance readability and engagement.

  ---

  🌐 Oracle Integration Cloud (OIC) – Interview Questions & Answers

  🗓 Updated: March 11, 2025
  👨‍💼 Author: [Your Name or Company Name]

  ---

  💡 What is Oracle Integration Cloud (OIC)?

  Oracle Integration Cloud (OIC) is a powerful Platform as a Service (PaaS) that helps organizations connect applications, automate processes, and streamline data integration across cloud and on-premise systems.

  🧱 Key OIC Components:

  • 🔄 Integration Cloud Service (ICS): Build and run integrations

  • 🧰 Visual Builder Cloud Service (VBCS): Low-code app development

  • 🔁 Process Cloud Service (PCS): Automate workflows and business processes

  ---

  🔁 Common Integration Patterns in OIC

  Pattern	Description	Example
  Scheduled Orchestration	Triggers integration on a timed schedule	🕓 Run every 4 hours to import journal files via FTP
  App-Driven Orchestration	Starts via API or external event	🛒 REST endpoint receives order, pushes to ERP
  Basic Routing	Direct data flow with simple mapping	👥 Send HCM employee data to Fusion Apps
  File Transfer	Moves files across systems	💰 Upload payment files to bank FTP
  Publish to OIC	Sends messages to internal OIC topics	📣 Broadcast a payload to subscribers
  Subscribe to OIC	Listens to topic messages	📥 Inserts data into a DB when message arrives

  ---

  🔍 Key Differences: Basic Routing vs App-Driven Orchestration

  Feature	Basic Routing	App-Driven Orchestration
  Use Case	Simple 1:1 integration	Complex logic with conditions
  Components	Single mapping	Orchestration with loops, switches
  Example	Employee sync	Order processing workflow

  ---

  🧩 Essential OIC Components Explained

  🔌 Adapters:

  • File Adapter – Works via agent, supports files up to 10 MB.

  • FTP Adapter – Directly connects to FTP; supports 1 GB+ files.

  • Database Adapters (ATP/DBaaS) – Uses wallets/agents for secure connections.

  🌉 Connectivity Agent:

  • Secure bridge between OIC and on-prem systems (HTTPS, port 443).

  • Limits: 10 MB per payload (can segment large files).

  • Install via: java -jar connectivityagent.jar (after setting InstallerProfile.cfg)

  🧾 ERP Cloud Adapter:

  • Requires roles: Integration Specialist, SOAOperator.

  • Configure CSF Key for callback support.

  • Use metadata refresh if catalog sync lags (~30 mins wait time).

  ---

  🔬 When to Use ERP Adapter vs. Generic Adapters

  Use ERP Cloud Adapter	Use SOAP/REST Adapters
  ✔️ Pre-built catalog/API	✔️ Custom or unsupported APIs
  ✔️ Built-in callback support	❗ Manual XSD/JSON import required

  ---

  🚀 Advanced Features and Patterns

  📥 FBDI Integrations

  • Use for bulk file uploads into Fusion ERP

  • Supports callback status monitoring

  🧮 Global Variables & Data Stitching

  • Define reusable variables (primitive or complex types)

  • Use ASSIGN, APPEND, REMOVE in Stitch for payload manipulation

  🧯 Error Handling

  • Try-Catch per scope + Global fault handler

  • Use Throw for custom faults, Rethrow to escalate

  • Use “Parking Lot Pattern” for async error resubmission

  📊 Logging & Monitoring

  • Use short-term OIC logger or persist logs in DB/VBCS

  • Implement “heartbeat” checks for external endpoints

  ---

  🧪 Versioning, CI/CD & Feature Flags

  • Semantic versioning (v1.0.2, v2.3.1, etc.)

  • Automate deployments via OIC REST APIs

  • Integrate with GitHub/Jenkins for CI/CD

  • Feature flags progress from Internal → Controlled → GA (log SR for early access)

  ---

  🔐 Security & Certificates

  • OIC integrates with IDCS SSO

  • Use Service Accounts for system-to-system calls (bypass SSO)

  • Import 3rd-party SSL certificates via:
    Settings → Certificates → Import

  ---

  📦 Lookups & Packages

  • Lookups = Domain constants/value maps

  • Packages (.par) = Group and export integrations across environments

  ---

  🎯 Interview Tips & Focus Areas

  🎤 Topics to Highlight:

  • Real-world use cases: FTP → ERP file imports, retry patterns

  • Error handling strategies (sync vs async)

  • SOAP vs REST, XSDs, and when to use each

  • Queues vs Topics in Publish/Subscribe

  • REST verbs (GET, POST, PUT, DELETE)

  • CI/CD implementation with OIC APIs

  🧠 Troubleshooting Knowledge:

  • Metadata refresh for stale WSDLs

  • Dealing with agent connection failures

  • Handling locked or suspended integrations

  ---

  📚 Final Thoughts

  Oracle Integration Cloud (OIC) continues to be a cornerstone of enterprise cloud connectivity, and mastering it can unlock powerful automation and data orchestration capabilities. Preparing for an interview? Use this guide to solidify your fundamentals and demonstrate real-world knowledge with confidence.

  ---