--- title: Oracle Fusion Cloud EPM API Integration on Truto slug: oraclefusioncloudepm category: Business Intelligence canonical: "https://truto.one/integrations/detail/oraclefusioncloudepm/" --- # Oracle Fusion Cloud EPM API Integration on Truto **Category:** Business Intelligence **Status:** Beta ## Unified APIs ### Unified User Directory API - **Groups** — Groups are a collection of users in the source application. In some applications, they might also be called Teams. - **Role Assignments** — - **Roles** — The Role object represents a role of a User. - **Users** — The User object represents a User. ## MCP-ready AI tools Truto exposes 3 tools for Oracle Fusion Cloud EPM that AI agents can call directly. - **list_all_oraclefusioncloudepm_groups** — List groups in Oracle Fusion Cloud EPM. Returns each group's groupname, description, type, and identity. The operation result and status are included in the response. - **list_all_oraclefusioncloudepm_roles** — Get available roles in Oracle Fusion Cloud EPM. Returns application and predefined roles with fields name and id in the response. Requires no parameters; type query may be used to filter by role type. - **list_all_oraclefusioncloudepm_users** — List users in Oracle Fusion Cloud EPM. Returns userlogin, firstname, lastname, and email. The response may also include EPM groups and roles assigned to each user. Requires no parameters. ## How it works 1. **Link your customer's Oracle Fusion Cloud EPM account.** Use Truto's frontend SDK; we handle every OAuth and API key flow so you don't need to create the OAuth app. 2. **Authentication is automatic.** Truto refreshes tokens, stores credentials securely, and injects them into every API request. 3. **Call Truto's API to reach Oracle Fusion Cloud EPM.** The Proxy API is a 1-to-1 mapping of the Oracle Fusion Cloud EPM API. 4. **Get a unified response format.** Every response uses a single shape, with cursor-based pagination and data in the `result` field. ## Use cases - **Automate SOX User Access Reviews for Financial Systems** — GRC and compliance SaaS platforms can pull the full list of Oracle EPM users, roles, and groups via Truto to continuously audit who has access to sensitive financial planning and close data — flagging terminated employees or unauthorized role assignments before they become audit findings. - **Centralize Identity Governance Across Cloud Finance Tools** — Identity governance (IGA) platforms can sync Oracle EPM user directories, group memberships, and role assignments alongside other enterprise apps to give IT and security teams a single pane of glass for managing least-privilege access to financial systems. - **Detect Segregation of Duties Violations in EPM** — Security and risk management SaaS products can cross-reference EPM roles and group memberships against HR and IdP data to automatically identify users with conflicting access — such as someone who can both submit and approve journal entries in consolidated close workflows. - **Streamline Onboarding and Offboarding for Finance Teams** — IT automation and ITSM platforms can monitor EPM user and role data through Truto to verify that new finance hires have correct EPM access on day one and that departing employees are promptly deprovisioned, reducing security gaps. - **Power SaaS-Embedded Compliance Dashboards with EPM Access Data** — Audit and compliance SaaS products can offer their customers a real-time dashboard showing exactly who has access to Oracle EPM, what roles they hold, and which groups they belong to — making quarterly access certification painless. ## What you can build - **EPM User Directory Sync** — Continuously import all Oracle Fusion Cloud EPM users — including login, name, and email — into your product to maintain an authoritative roster of who can access the financial system. - **Role-Based Access Audit Report** — Generate detailed reports mapping every EPM user to their assigned roles (Service Administrator, Power User, Viewer, etc.) for quarterly SOX access reviews. - **Group Membership Visibility Panel** — Display EPM group structures and their members so compliance teams can quickly understand how access is partitioned across business units like 'EMEA Controllers' or 'NA FP&A Analysts'. - **Orphaned Account Detection Alerts** — Cross-reference EPM user lists against your HR or IdP data to automatically flag accounts that belong to terminated or transferred employees who should no longer have financial system access. - **Segregation of Duties Policy Engine** — Define SoD rules against EPM roles and groups, then continuously evaluate user assignments to surface policy violations before they become audit exceptions. - **Unified Multi-App Access Review Workflow** — Combine Oracle EPM user, role, and group data with directory data from other enterprise apps via Truto's Unified User Directory API to run a single access certification campaign across all systems. ## FAQs ### What data can I pull from Oracle Fusion Cloud EPM through Truto? Truto supports listing all users (login, first name, last name, email), roles (predefined and application-level), and groups (name, description, type) from Oracle Fusion Cloud EPM via the Unified User Directory API. ### How does authentication work for Oracle Fusion Cloud EPM integrations? Oracle Fusion Cloud EPM uses basic authentication (username and password) or OAuth-based credentials for API access. Truto manages the auth lifecycle so your end users can connect their EPM instance without your team handling credential storage or token refresh. ### Does Truto handle pagination when listing EPM users, roles, or groups? Yes. Truto abstracts away Oracle EPM's pagination mechanics. When you call list_all endpoints for users, roles, or groups, Truto handles pagination automatically and returns complete result sets. ### Can I write data back to Oracle Fusion Cloud EPM through Truto? Currently, the available tools support read operations: listing users, roles, and groups. Write-back capabilities (e.g., provisioning users or assigning roles) are not available in the current tool set but can be discussed with the Truto team for your specific use case. ### What Oracle EPM role types are returned by the roles endpoint? The roles endpoint returns both predefined service-level roles (such as Service Administrator, Power User, User, and Viewer) and application-specific roles that control access to individual EPM modules like Planning, Consolidation, or Account Reconciliation. ### How does Truto's Unified User Directory API normalize Oracle EPM data? Truto maps Oracle EPM's user, role, and group objects to a standardized schema (Users, Roles, Groups, Role Assignments) shared across all integrations in the Unified User Directory API. This means you write one integration and get consistent data shapes regardless of whether the source is Oracle EPM, Okta, Azure AD, or another directory.