Oracle HCM Cloud Common Features. What s New in Release 11

Oracle HCM Cloud Common Features What s New in Release 11 March 2016 Revised: January 2017

TABLE OF CONTENTS REVISION HISTORY... 3 OVERVIEW... 5 Give Us Feedback... 5 RELEASE FEATURE SUMMARY... 6 HCM COMMON FEATURES... 8 HCM SECURITY... 8 HCM Security - HCM Data Roles and Security Profiles... 8 HCM Data Roles and Security Profiles - Desktop User Interfaces Converted to Simplified Style... 8 Revoking Security Profiles from Job and Abstract Roles... 9 HCM Security - User and Role - Provisioning Enhancements... 10 Desktop User Interfaces Converted to Simplified Style... 10 User Account Updates for Multiple Users Using HCM Data Loader... 11 Enhanced Autoprovision Roles for All Users Process... 12 Enforcement of Single-Instance Running for Security Processes... 12 ROLE INFORMATION... 13 HCM DATA LOADER... 14 HCM Data Loader MultiThreaded Import... 14 Purge Person Data... 15 Upload of Assignment Records with Effective Dates That are Later Than the Termination Date... 16 Simplify Global Transfers Performed by Data Upload... 16 Enhanced Validation of Worker Records by HCM Data Loader... 17 HCM Data Loader Web-Service Method to Monitor Data-Set Status... 17 User-Key Support for Multirow Extensible Key Flexfields... 18 Enhanced Management of User Accounts Using HCM Data Loader... 18 HCM EXTRACTS... 20 Disable Extracts... 20 Troubleshoot Extract Runs... 20 Validate Extract Design and Delivery... 22 Compress Extracted Output... 23 View User Entity Details... 24 Create HCM Extracts Quickly... 27 Troubleshoot Extract Runs Further... 28 PAYROLL COMMON FEATURES... 30 Support for Values Defined by Criteria... 30 Fast Formula Support for Expression and Text Editors... 31 HCM MOBILE COMMON FEATURES... 33 Custom Mobile Menus... 33 Mobile - Themes... 37 Android Enhancements... 37 2

REVISION HISTORY This document will continue to evolve as existing sections change and new information is added. All updates are logged below, with the most recent updates at the top. The new functionality referenced in this document may not be immediately available to you if your organization chose to opt out of the optional monthly updates. Rest assured you will receive the new functionality in the next quarterly update which is required and cumulative. Quarterly updates are applied in February, May, August, and November. Release Date What's Changed Notes 06 JAN 2017 Oracle HCM Cloud HCM Extracts: Troubleshoot Extract Runs Further Added new feature information delivered in Update 13 (January), which will also be included in the February quarterly update. 02 SEP 2016 Oracle HCM Cloud HCM Data Loader: Enhanced Management of User Accounts Using HCM Data Loader 02 SEP 2016 Oracle HCM Cloud HCM Extracts: Compress Extracted Output 02 SEP 2016 Oracle HCM Cloud HCM Extracts: View User Entity Details 02 SEP 2016 Oracle HCM Cloud HCM Extracts: Create HCM Extracts Quickly 05 AUG 2016 Oracle HCM Security- Data Roles and Security Profiles: Revoking Security Profiles from Job and Abstract Roles 05 AUG 2016 Oracle HCM Data Loader: HCM Data Loader Web-Service Method to Monitor Data-Set Status 05 AUG 2016 Oracle HCM Data Loader: User-Key Support for Multirow Extensible Key Flexfields 01 JUL 2016 Oracle HCM Data Loader: Upload of Assignment Records with Effective Dates that are Later Than the Termination Date 01 JUL 2016 Oracle HCM Data Loader: Simplify Global Transfers Performed by Data Upload 01 JUL 2016 Oracle HCM Data Loader: Enhanced Validation of Worker Records by HCM Data Loader Added new feature information delivered in Update 8 (August). Added new feature information delivered in Update 1 (January). Added new feature information delivered in Update 1 (January). Added new feature information delivered in Update 1 (January). Added new feature information delivered in Update 8 (August). Added new feature information delivered in Update 8 (August). Added new feature information delivered in Update 8 (August). Added new feature information delivered in Update 5 (May). Added new feature information delivered in Update 7 (July). Added new feature information delivered in Update 6 (June). 03 JUN 2016 Oracle HDM Common: Role Information Added section on Role Information for Release 11. 03 JUN 2016 Oracle HCM Data Loader: Purge Person Data Added new feature information delivered in Update 5 (May). 3

Release Date What's Changed Notes 01 APR 2016 Oracle Fusion HCM Mobile: Custom Mobile Menus Added new feature information delivered in Update 4 (April). 01 APR 2016 Oracle Fusion HCM Mobile: Mobile - Themes Added new feature information delivered in Update 4 (April). 01 APR 2016 Oracle Fusion HCM Mobile: Android Enhancements Added new feature information delivered in Update 4 (April). 04 MAR 2016 Initial Document Creation 4

OVERVIEW This document outlines the information you need to know about new or improved functionality in Oracle HCM Release 11. Each section includes a brief description of the feature, the steps you need to take to enable or begin using the feature, any tips or considerations that you should keep in mind, and the resources available to help you. Oracle HCM Cloud release documents are delivered in five functional groupings: Suggested Reading for all HCM Products: HCM Cloud Common Features (This document pertains to all HCM applications. It is the base human resource information for all products and HCM Tools.) Global Human Resources Cloud (Global Human Resources contains the base application in which other application use for common data such as workforce structures and person information. Regardless of what products you have implemented you may want to see the new features for Global Human Resources that could impact your products.) NOTE: Not all Global Human Resource features are available for the base Talent and Compensation stand alone applications. Optional Reading for HCM Products (Depending on what products are in your cloud service): Talent Management (All Talent applications) Workforce Rewards (Compensation, Benefits, Payroll and Global Payroll Interface) Workforce Management (Absence Management and Time and Labor) Additional Optional Reading: Common Technologies and User Experience (This documents the common features across all Cloud applications and is not specific to HCM) NOTE: All of these documents can be found on the Oracle Help Center at: https://cloud.oracle.com/saasreadiness/hcm under Human Capital Management Release Readiness. GIVE US FEEDBACK We welcome your comments and suggestions to improve the content. Please send us your feedback at oracle_fusion_applications_help_ww_grp@oracle.com. Please indicate you are inquiring or providing feedback regarding the Global HR Cloud What s New for Release 11 in the body or title of the email. 5

RELEASE FEATURE SUMMARY Some of the new Release 11 features are automatically available to users after the upgrade and some require action from the user, the company administrator, or Oracle. The table below offers a quick view of the actions required to enable each of the Release 11 features. Action Required to Enable Feature Feature Automatically Available End User Action Required Administrat or Action Required Oracle Service Request Required HCM Security HCM Data Roles and Security Profiles Desktop User Interfaces Converted to Simplified Style Revoking Security Profiles from Job and Abstract Roles User and Role Provisioning Desktop User Interface Converted to Simplified Style User and Role Provisioning User Account Updates for Multiple Users Using HCM Data Loader User and Role Provisioning Enhanced Autoprovision Roles for All Users Process User and Role Provisioning Enforcement of Single-Instance Running for Security Processes HCM Data Loader HCM Data Loader Multi-threaded Import Purge Person Data Upload of Assignment Records with Effective Dates that are Later Than the Termination Date Simplify Global Transfers Performed by Data Upload Enhanced Validation of Worker Records by HCM Data Loader HCM Data Loader Web-Service Method to Monitor Data-Set Status User-Key Support for Multirow Extensible Key Flexfields Enhanced Management of User Accounts Using HCM Data Loader HCM Extracts Disable Extracts 6

Action Required to Enable Feature Feature Automatically Available End User Action Required Administrat or Action Required Oracle Service Request Required Troubleshoot Extract Runs Validate Extract Design and Delivery Compress Extracted Output View User Entity Details Create HCM Extracts Quickly Troubleshoot Extract Runs Further Payroll Common Support for Values Defined by Criteria Simplified Bank Account Page Enabled by Default Fast Formula Support for Expression and Text Editors HCM Mobile Custom Mobile Menus Mobile - Themes Android Enhancements 7

HCM COMMON FEATURES HCM SECURITY HCM SECURITY - HCM DATA ROLES AND SECURITY PROFILES HCM DATA ROLES AND SECURITY PROFILES - DESKTOP USER INTERFACES CONVERTED TO SIMPLIFIED STYLE Simplify the management of HCM data roles and security profiles using the simplified Manage Data Roles and Security Profiles interface. Manage Data Roles and Security Profiles Interface 8

The Manage Person Security Profiles Interface REVOKING SECURITY PROFILES FROM JOB AND ABSTRACT ROLES If you have both assigned security profiles directly to a job role and included the job role in a data role, then users may have greater access to data than you intended. Similarly, you may have assigned to an abstract role security profiles that you now want to remove. From this release, you can easily remove security profiles that you assigned directly to job or abstract roles. A new button, Revoke Security Profiles, appears on the Manage Data Roles and Security Profiles page. This button is enabled when security profiles are assigned directly to a selected job or abstract role. Click the button to remove all assigned security profiles from the role. 9

Revoke Security Profiles Button TIPS AND CONSIDERATIONS You cannot use the Revoke Security Profiles button to remove security profiles from HCM data roles. Instead, you edit the data role in the usual way to replace the currently assigned security profiles. HCM SECURITY - USER AND ROLE - PROVISIONING ENHANCEMENTS DESKTOP USER INTERFACES CONVERTED TO SIMPLIFIED STYLE Simplify the management of user and role-related information with these new, simplified user interfaces: Manage Users (for HCM Foundation customers) My Account Manage Users Interface 10

My Account Interface USER ACCOUNT UPDATES FOR MULTIPLE USERS USING HCM DATA LOADER You can now change user names, suspend and activate user accounts, and create requests to add or remove roles when you update person records using HCM Data Loader. You can also reset a user s credentials-sent indicator so that the user sign-in details can be resent. KEY RESOURCES For more information, go to My Oracle Support for the following guide: HCM Data Loader User s Guide on My Oracle Support (Document ID 1664133.1) 11

ENHANCED AUTOPROVISION ROLES FOR ALL USERS PROCESS A new parameter, Process Generated Role Requests, is added to the Autoprovision Roles for All Users process. This parameter lets you specify whether to process the generated role requests immediately or defer them as a batch to the next run of the Send Pending LDAP Requests process. Process Details Dialog Box Showing the New Parameter ENFORCEMENT OF SINGLE-INSTANCE RUNNING FOR SECURITY PROCESSES From this release, you can no longer run more than one instance of each of these processes at once: Send Pending LDAP Requests Retrieve Latest LDAP Changes Autoprovision Roles for All Users Any attempt to submit additional instances of any of these processes while a previous instance is running is now blocked. 12

ROLE INFORMATION For some Release 11 functions, new aggregate privileges, function security privileges, and transaction analysis duty roles have been added to predefined roles, such as Employee and Human Resource Specialist. If you are not using the predefined roles, then you need to add the new security privileges to your custom roles. Details of this step are provided for each function. If you are using the predefined roles and plan to use the new functions, then you must regenerate the relevant predefined roles to update their data security policies. You need to perform this step for: KEY RESOURCES Predefined abstract roles, such as Employee and Line Manager, to which aggregate privileges have been added. HCM data roles that include job roles to which aggregate privileges have been added. Any job roles to which aggregate privileges have been added and to which HCM security profiles are assigned directly. You do not need to regenerate job roles to which HCM security profiles have not been assigned. For instructions on regenerating roles, see Chapter 16 Customizing Security of the Securing Oracle HCM Cloud guide on the Oracle Help Center. 13

HCM DATA LOADER Oracle Fusion HCM Data Loader provides a flexible and efficient method of bulk loading business object data for data-migration and ongoing incremental updates to Oracle Human Capital Management Cloud. HCM DATA LOADER MULTITHREADED IMPORT When loading large volumes of data, HCM Data Loader initiates multiple concurrent processes to stream your file data and import it into stage tables ready for loading. This multithreading is controlled by a new parameter, Maximum Concurrent Threads for Import, which you can review when submitting your file. You set this parameter to the maximum number of available concurrent threads. Maximum Concurrent Threads for Import Parameter KEY RESOURCES For more information, review the HCM Data Loader User s Guide in My Oracle Support (MOS) (Document ID: 1664133.1) 14

PURGE PERSON DATA The Purge Person process, available from the Diagnostic Framework, purges the following personrelated data from your stage and test environments: Absences Benefits Compensation Documents and Attachments Performance Data Goals and Performance Talent Profile Payroll Relationships Element Entries Calculation Cards Addresses Assignments (including Extra Information Types) Work Relationships Contacts and Contact Relationships Worker Personal Information (including Passport, Citizenship, E-Mails, Licenses, National Identifiers, and Extra Information Types) Roles and User Details The Purge Person process does not purge data that was created using HCM File-Based Loader, nor does it purge predefined person data. You can specify which records to purge by supplying comma-delimited person numbers or person IDs. Alternatively, supply a SQL query to return the person IDs for all person records that you want to purge. Raise a service request through My Oracle Support (MOS) to request enablement of the Purge Person process on your stage and test pods. This process cannot be enabled in production environments. TIPS AND CONSIDERATIONS You can run the Purge Person process without committing the purge so that you can review the results before you delete the data permanently. 15

KEY RESOURCES For more information on purging person data, refer to My Oracle Support (MOS) for the following document: Purging HCM Data from Test and Stage Environments (Document ID 2132109.1) UPLOAD OF ASSIGNMENT RECORDS WITH EFFECTIVE DATES THAT ARE LATER THAN THE TERMINATION DATE New validation is introduced to prevent the upload of invalid assignment records using HCM Data Loader. Prior to this enhancement, it was possible to load an assignment record for a terminated work relationship where: The status of the assignment record was set to either ACTIVE or SUSPENDED. The effective dates of the assignment record were later than the termination date of the work relationship. You can continue to load assignment records for a terminated work relationship where the effective dates are later than the work relationship termination date, provided that the assignment status is INACTIVE. No other assignment status is valid. SIMPLIFY GLOBAL TRANSFERS PERFORMED BY DATA UPLOAD A global transfer involves the termination of an existing work relationship with one legal employer and the creation a new work relationship with a different legal employer. The addition of the GlobalTransferFlag attribute enables you to perform global transfers efficiently in uploaded work relationship records. To perform a global transfer when the source work relationship is the worker s primary work relationship, you load: The new work relationship record with the GlobalTransferFlag set to Y and an action code from the EMPL_GLB_TRANSFER action type The child components of the new work relationship record HCM Data Loader automatically terminates the existing primary work relationship and sets the termination date to the day before the start date of the new work relationship. You can perform a global transfer of the primary work relationship only when no active secondary work relationships exist. 16

To perform a global transfer when the source work relationship is a nonprimary work relationship, you load: The new work relationship record with the GlobalTransferFlag attribute set to Y and an action code from the EMPL_GLB_TRANSFER action type The existing nonprimary work relationship record without the GlobalTransferFlag attribute The child components for the new work relationship record but not for the existing nonprimary work relationship record The parent worker record HCM Data Loader automatically terminates the existing nonprimary work relationship and sets the termination date to the day before the start date of the new work relationship. ENHANCED VALIDATION OF WORKER RECORDS BY HCM DATA LOADER When you create workers or update existing workers, you can now include only one row for each worker in the data file. As no date-effective attributes are exposed on the worker component, there is no functional reason for storing date-effective history in the PER_ALL_PEOPLE_F table. To correct any attribute of an existing worker record, you must perform a correction. For new worker records created using HCM Data Loader, the Start Date and Effective Start Date attributes of the worker component must equal the start date of the worker s earliest work relationship. Any mismatch in these dates now causes an error to be raised. HCM DATA LOADER WEB-SERVICE METHOD TO MONITOR DATA-SET STATUS When automating HCM Data Loader to load data to Oracle HCM Cloud, you can now retrieve the current status of your data set using the getdatasetstatus method. The getdatasetstatus method accepts one of these values: The process ID that was returned when you invoked your data file for processing The Oracle WebCenter Content ID that was returned when you uploaded your file to the WebCenter Content server It returns the current status, percentage complete, and record counts for your data file. 17

KEY RESOURCES For more information, go to My Oracle Support (MOS) for the following guide: Automating HCM Data Loader, available from the HCM Data Loader: Users Guide document (Document ID 1664133.1) USER-KEY SUPPORT FOR MULTIROW EXTENSIBLE KEY FLEXFIELDS When you configure a multirow extensible key flexfield, you can configure one or more segments as the key that uniquely identifies a single row of the multirow context. HCM Data Loader treats these segments as user-key attributes, which ensures that you can reference a single flexfield record using only user keys. KEY RESOURCES For more information, go to My Oracle Support (MOS) for the following guide: HCM Data Loader User s Guide (Document ID 1664133.1) ENHANCED MANAGEMENT OF USER ACCOUNTS USING HCM DATA LOADER The User object allows you to upload requests to manage user accounts using HCM Data Loader. Two enhancements are made to the User object in this release. A User Role component is added to the User object to enable you to add and remove multiple roles for a user. To add or remove a single role, you continue to use the User object rather than its User Role child component. You can also use the User object to create a user account for an existing person record. In the User.dat file, you identify the person record by its person number. Creating a user account is a two-step process: You upload a User.dat file to create a request for the user account. Once the account exists, it is immediately suspended as it has no roles. You upload a second User.dat file to activate the user account and add roles so that the account remains active. To add more than one role to the new account, you use the new User Role component of the User object. 18

KEY RESOURCES For more information, go to My Oracle Support for the document: HCM Data Loader: Loading User Update Requests (Document ID 2089377.1) 19

HCM EXTRACTS HCM Extracts provide a method for extracting data from your HCM applications that can be used for interfacing data to another source or extracting data to integrate reporting across systems. DISABLE EXTRACTS Focus on the extracts you use frequently by hiding the extracts you no longer use or that have become obsolete. Disabling an extract removes it from the search results; therefore you can search for and view the extracts you work on currently. If required, you can search for disabled extracts. Manage HCM Extract Definition User Interface with the Status Field TROUBLESHOOT EXTRACT RUNS Use the new View Extract Run Details UI to troubleshoot extract runs that are not successful or have not produced the expected data. 20

View Extract Run Details User Interface Review the parameters, the number of records archived and the information for each child process the extract definition executed. Parameters Region for the Selected Extract 21

Use the View Extract Run Details UI to trace the exact failed step or process and review the process log to identify the issue. Find the record that did not retrieve the expected amount of data, and identify the most time-consuming process to explore the possibilities for improving performance. Archive Details Region for the Selected Extract Process Details Region for the Selected Extract VALIDATE EXTRACT DESIGN AND DELIVERY Ensure extract design and delivery options are set up correctly using the additional validate features. For example, you can check that all the necessary steps, actions, and connections are performed and that the validity of the configuration is accurate. 22

Manage HCM Extract Definition User Interface with the Valid Field COMPRESS EXTRACTED OUTPUT Use the compress option with the HCM Connect delivery option to extract a compressed output that is more manageable. This option helps to speed up transfers for large files and compressing the output uses less disk space. Using this feature also improves the overall integration with Fusion HCM. 23

Extracts Delivery Options VIEW USER ENTITY DETAILS Use the new View User Entity Details UI to discover the data model, the user entities and DBIs you require to create an extract definition. Using the new UI, you can: View the database item groups available in a user entity. Search for user entities and database item groups using key words. For example, search for a Person retrieves all user entities and DBIs that have either the name or its description carrying a Person keyword. Verify if a specific user entity or the database item group exists. Understand the usage of the user entity and decide whether to use it in the fast formula or an extract. Validate whether a user entity is fit to use at the root data group level or otherwise. Understand whether the user entity is a single row user entity or multiple rows, historic or effective dated. Review the contexts that it uses and the contexts you need to set in order to use it. 24

View the underlying SQL query behind the user entity and calculate the number of rows that the user entity can retrieve.. Review any predefined extracts that are using the given user entity to leverage the design and usage, as needed. Access the UI while choosing the user entity or directly from the task pane. View User Entity Details User Entity Details Tab Region in the View User Entity Details 25

Context Tab Region in the View User Entity Details Query Tab Region in the View User Entity Details 26

Extracts Using User Entity Tab Region in the View User Entity Details CREATE HCM EXTRACTS QUICKLY Use the predefined Work Structure and Worker extract definitions to quickly set up downstream extracts that generate work structure and worker details. The work structure extract generates details of business units, legal entities, departments, grades, jobs, locations, and positions. The worker extract generates details of person names, phones, emails, national identifiers, address, legislative data, accruals, absences, work relation, work term, assignment, work measure, supervisor, and salary. Perform minimum configurations to adjust these seeded extracts to meet your requirements and you are ready to start extracting the data from Fusion Applications. 27

Predefined Extracts in the Search Results KEY RESOURCES For more information, go to My Oracle Support (MOS) for the following document: HCM Extracts: Work Structure and Worker Predefined Extracts Document ID 2062561.1 TROUBLESHOOT EXTRACT RUNS FURTHER Use the Extract Delivery Options tab on the View Extract Results UI to further troubleshoot extract runs that are not successful or have not produced the expected data. Access the Extract Delivery Options tab if using the HCM Connect or Inbound Interface delivery options, and if successful, download the output file. 28

29

PAYROLL COMMON FEATURES This section describes new features that are relevant if you use features such as elements, formulas, payroll definitions, and database items, even if you don't use Global Payroll. SUPPORT FOR VALUES DEFINED BY CRITERIA Use the Manage Values Defined by Criteria task to generate rates or values that are based on one or more criteria. For example, you can calculate: Annual salaries based on employee position Bonus payments based on employee department, years of service, and annual salary Rates of pay based on employee state, county, and profession Each calculation value definition requires you to specify one or more evaluation conditions. These conditions are evaluated in the order in which they appear in the tree structure that you define. You can have multiple evaluation conditions in each branch of the tree. You can also set up default criteria that are used in cases where no evaluation conditions are met. Create Criteria Page Showing the Conditions that Must Be Met to Receive a Bonus 30

Criteria and Values Section Showing the Flat Rate Bonus Defined for 5 or More Years Service TIPS AND CONSIDERATIONS In most calculation value definitions there should be at least one default criteria definition to cover all conditions. If you specify a unique value identifier for each value, you can enter multiple values for a single criterion. The tree structure shows this identifier instead of the value definition name. KEY RESOURCES For more information about values defined by criteria, go to Applications Help for the following topics: Manage Values Defined by Criteria: Examples Values Defined by Criteria: Explained Using Values Defined by Criteria to Pay Bonuses Based on Age and Location: Worked Example FAST FORMULA SUPPORT FOR EXPRESSION AND TEXT EDITORS Switch to the text editor when you need to build more complex formulas for formula types previously restricted to the expression editor easily. For example, you can use the text editor for the payroll relationship group formula type to write rules for validations or building criteria to define the group. The Create Formula window provides an option to switch formula editor types. If you select a formula type that uses the text editor there is no change. If you select a formula type where the expression editor is used, the Type of Editor field provides you with the option to select the Text editor. 31

Create Fast Formula Pop-Up Window Showing the Formula Editor Options IMPORTANT: Once the formula is saved, you cannot change the editor type. KEY RESOURCES For more information about the Fast Formula editors, go to Applications Help for the following topics: Writing a Fast Formula Using Expression Editor: Worked Example Writing a Fast Formula Using Formula Text: Worked Example 32

HCM MOBILE COMMON FEATURES This section describes new features that are available across the applications with mobile technology. Mobile technology allows users to access and perform task from any smart device such as a phone or tablet. CUSTOM MOBILE MENUS Custom Mobile Menus give customers the ability to add menu items for self-service functions that are not natively built within Mobile. For example, if you want users to navigate to an internal travel site or launch other mobile apps, you can create a custom menu to navigate to these different systems or apps. Highlights of the Custom Mobile Menus feature include: Ability to create a custom Mobile menu category where one or more mobile menu items point to a URL. Each menu item is secured using named functional privileges so access to the menu can be controlled. Ability to configure each menu item to: Access an internal or external website using a punch out to Safari or Chrome. Launch another mobile app using a punch out to Safari or Chrome. Open a URL in a view similar to BI reports or the Worklist Details page delivered in Mobile. Your Administrator can create a custom Mobile menu category and define how menu items under this category will behave. Use these instructions to configure custom menus to enable you to: Access an internal or external website using a punch out to Safari or Chrome. Launch another mobile app using a punch out to Safari or Chrome. Open an application as an embedded web view within the Mobile app. 1. Login to Fusion with Administrator privileges. 2. Use Navigator to access the Structure menu under Tools. 33

3. Click on Edit. If you have not activated a sandbox, select Activate Sandbox. NOTE: You must be in a sandbox to perform customizations. 4. Select or create a sandbox and click on Set as Active. You will see a warning that states Entering the sandbox will take you to the home page. Do you want to continue? Click Yes. 5. Now that a sandbox is activated, use Navigator to access the Structure menu again. 6. Select Create Category from the Create dropdown. 7. Enter the name of the new category for punch out, or the new mobile category if opening an app as an embedded web view within the Mobile app. 8. Select an icon. 9. Select EL Expression from the Visible dropdown then click the edit icon. 34

For punch outs enter #{(securitycontext.userinrole['mobile_only'])} in the Expression Editor. For an embedded web view enter #{(securitycontext.userinrole['mobile_only_embedded'])} in the Expression Editor. These EL expressions identify items under this category as mobile-specific menus and define their behavior. 10. Click OK to close the Expression Editor. 11. Click Save and Close to return to the Structure menu. 12. Select Create Page Entry from the Create dropdown. 13. The Administrator will need to: a. Enter a name for the page. b. Select an icon. c. Select your Mobile category by name. d. Select EL Expression from the Visible dropdown and then click on the edit icon. Enter #{(securitycontext.userinrole[ PER_EMPLOYEE_ABSTRACT'])} in the Expression Editor to give access to the Employee role. Enter #{(securitycontext.userinrole[ PER_LINE_MANAGER_ABSTRACT'])} in the Expression Editor to give access to the Line Manager role. NOTE: Fusion will not allow you to save the new menu page unless it has a valid EL expression. 35

e. Click OK to close the Expression Editor. f. Select Yes from Show on Welcome Springboard. g. Select Static URL from Link Type. h. Enter a valid URL scheme in Destination. To punch out to a mobile app instead of a website, use a URL Scheme instead of http:// or https://. For example, you would use a URL scheme like osn://conversation=<conversation ID> to launch OSN on your device. 14. Click on Save and Close. 15. Click on Sandbox name and select More. 16. Click Publish. 17. A warning will display stating that publishing the sandbox will take you to the home page. Do you want to continue? Click Yes 36

MOBILE - THEMES Oracle Tap supports six out-of-the-box color themes that you can define within the settings area of the mobile application. You can also set the mobile logo and watermark that appears in the application by configuring this within Fusion. To enable delivered themes in Mobile, the administrator needs to go into the Fusion tools appearance area and select the appropriate company logo and watermark background image. The user can select from a list of themes in the Mobile settings page that will set the theme on Mobile. KEY RESOURCES For more information about enabling delivered themes, go to the Mobile Capabilities Guide. ANDROID ENHANCEMENTS To expand our support for more Mobile security requirements, we have added two new features to the Android client, a security archive using an Android APK and 2-way SSL. Although we already support a security archive and 2-way SSL on ios, we wanted to offer parity for these same features on Android. A security archive using an Android APK file will be available on OTN. This version of the app can be used by customers using a Mobile Device Management (MDM) provider as part of their implementation. This archive is signed with the customer s enterprise license, wrapped and posted on their internal corporate portal for downloads. To further extend Mobile security, we now support 2-way SSL for Android. The Oracle IDM and MAF teams delivered this enhancement and the Oracle Mobile Application team has included these changes in the 4.2 version of the Android client. Security Archive using an Android APK Download Oracle Tap security archive from Oracle Technology Network These are the general requirements that must be met to deploy this security archive: Must use a shared keychain group in the app entitlement file. Package and sign the app with your Enterprise provisioning profile and certificate with authority on shared keychain group ID. Distribute the app through your internal Enterprise app store. You must separately deploy client SSL certificates to mobile devices using customer- provided tooling. Must install certificate to the same shared keychain group specified in the Oracle Tap app entitlement file. 37

Certificates must be signed by root CA trusted by the device. Only supports specific server 2-way SSL. KEY RESOURCES Must use one of these SSLVerifyClient configurations required, optional, or none. For detailed instructions on how to enable Two-Way SSL for Android, please refer to Oracle HCM Cloud Mobile: How to Prepare App for 2-Way Authentication. --- 38

Copyright 2017, Oracle and/or its affiliates. All rights reserved. This document is provided for information purposes only, and the contents hereof are subject to change without notice. This document is not warranted to be error-free, nor subject to any other warranties or conditions, whether expressed orally or implied in law, including implied warranties and conditions of merchantability or fitness for a particular purpose. We specifically disclaim any liability with respect to this document, and no contractual obligations are formed either directly or indirectly by this document. This document may not be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without our prior written permission. Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners. Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group. 11.13 39