This document will continue to evolve as existing sections change and new information is added.

All
updates are logged below, with the most recent updates at the top.

The new functionality referenced in this document may not be immediately available to you if your
organization has chosen not to receive optional monthly updates. Rest assured you will receive the new
functionality in the next quarterly update which is required and cumulative. Quarterly updates are applied
in February, May, August, and November. As a one-off exception the February 2017 Quarterly update will
be applied in March 2017.

Date Whats Changed Notes

The following feature is included in the March Quarterly update.

Oracle HCM Data Loader: Automated Post-Load New feature delivered in Update 3, the March
17 MAR 2017
Processing for Worker Quarterly update.

The following features were delivered via monthly updates.

Oracle HCM Data Loader: New Source Key Object

14 FEB 2017 New feature delivered in Update 1 (February).
to Enable Update of Source Keys

Oracle HCM Data Loader: Job Family Code

14 FEB 2017 New feature delivered in Update 1 (February).
Attribute Added to the Job Family Object

14 FEB 2017 HCM Common Features: Deep Links New feature delivered in Update 1 (February).

Oracle HCM Security: Include Related Contacts Feature was included in the base release,
14 FEB 2017
Option No Longer on Person Security Profiles however just made a documentation adjustment.

05 DEC 2016 Initial Document Creation

For Detailed R12 New Feature Summary Information Please use the below link
HCM Common, R12 February Update, New Feature Summary

For Detailed information with screen shots on the New Feature, please use the below link
HCM Common, R12 February Update, What's New

Below are the quick pointers of HCM Common, R12 New Feature Summary: -

APPLICATIONS SECURITY
Oracle Fusion Applications Security provides a single console where IT Security Managers and
Administrators can perform various functions including user lifecycle management, role definition, security
policy management (both functional and data), role hierarchy maintenance, username and password policy
administration, and certificate management. The console also enables users to simulate the effect of
security changes, to run security reports, and download a connector for integration with Microsoft Active
Directory.

USER ACCOUNT MANAGEMENT

Create, manage, and assign user accounts using the Security Console. You can also search, retrieve, and
manage user accounts automatically created for employees, contingent workers, supplier contacts, or
partner contacts.

SECURING ORACLE HCM CLOUD ADMINISTRATOR PASSWORD MANAGEMENT

Manage passwords of other user accounts as an administrator. You can auto-generate or manually enter a
password for a user account. You can also define password lifecycle and complexity policies. Passwords will
be automatically validated against these policies.

USER PASSWORD MANAGEMENT (SELF-SERVICE)

Manage your own user account password. Your password will be automatically validated against the
defined password lifecycle and complexity policies.

USER ACCOUNT LOCKING

Lock user accounts as an administrator. If you lock a user account, you will be temporarily preventing the
user from logging in with that user account. You can also unlock a locked user account.

ENHANCED ROLE VISUALIZATION

View only certain components of a role in the graphic visualizer. You can also view the graphic visualizer in
full screen mode and pan over a specific region in the graph.

TABULAR ROLE HIERARCHY VIEW

View role hierarchies in a tabular view. You can switch between the graphic visualizer view and the tabular
view. You can also export the data you view in the tabular view.

SEARCH IN ROLE HIERARCHY VISUALIZATION

Search and quickly locate security artifacts (nodes) in the role hierarchy visualization. You can search for
privileges, roles or users in the visualization.
USER NAME GENERATION RULES
Define user name generation rules that will be used to auto-generate the user name when a user is
created. You can also choose to use a system generated user name if the rule fails to generate a user name.

PASSWORD POLICIES
Define policies for password management. These policies can define the duration for various password
lifecycle events like password expiration and password warning generation.

NOTIFICATION TEMPLATES
Define custom notification templates for your user account life cycle events. You can also use pre-defined
notification templates. These templates will be used to generate notifications for events like user account
created, user password reset and user password expiry warning.

UPGRADE-SAFE MANAGEMENT OF FACTORY SHIPPED ROLES

Identify a predefined (factory shipped) Oracle role when viewing the role. Predefined Oracle roles are
locked and you cannot customize the Oracle delivered functional and data security policies associated with
these roles. You can, however, add data security policies to these roles.

BRIDGE FOR MICROSOFT ACTIVE DIRECTORY

Simplify Single Sign-On with Microsoft Active Directory by downloading and installing the Active Directory
Bridge from the Security Console. Automatically synchronize user account information between Oracle
Fusion Applications Security and Microsoft Active Directory.

USER PASSWORD CHANGES AUDIT REPORT

Generate a report that lists password changes made by users. The report can be generated for changes
made by specific users or for all changes made during a specific period.

INTEGRATE CUSTOM IDENTITY MANAGEMENT SOLUTION

Integrate optionally with your Identity Management solution for user and role management using industry
standard System for Cross-domain Identity Management (SCIM) REST APIs and ATOM feeds.

PASSWORD RESET
Enhanced password reset flow. Now a notification email will be sent to the user who requests a password
reset. The user will be required to click on this link within a specific period of time to change the password.
This replaces the previous flow where users were required to answer a series of challenge questions to
reset the password

SECURITY CONSOLE
Streamline use of some of the functionality that you have used in the past with the Security
Console. The Security Console now includes the following functionality:

IT Security Managers manage all User Account information such as password, lock and unlock are
managed in the security console.
IT Security Managers manage roles directly in the Security Console. They no longer use Oracle
Identity Manager or Authorization Policy Manager.
Privileges are predefined by Oracle and are no longer created or managed by the user.
You can now view, create or change roles without first selecting an application.
Resources are now granted through privilege and are no longer granted directly to Roles.
HCM SECURITY
HCM Security includes enhancements to person security profiles, new-person task flows, role mappings,
the Retrieve Latest LDAP Changes process, predefined job and abstract roles, and security setup.

PERSON SECURITY PROFILES SUPPORT AREAS OF RESPONSIBILITY

Improve performance by securing person records in person security profiles based on areas of
responsibility, without having to write custom SQL. Existing person security profiles are unaffected by these
enhancements.

HCM DATA ROLES SUPPORT AREAS OF RESPONSIBILITY

Secure access to person records based on areas of responsibility while creating HCM Data Roles. The new
Area of Responsibility section appears on the Assign Security Profiles to Role: Person Security Profile page
when you create or edit an HCM data role that accesses person records.

ROLE PROVISIONING SUPPORTS AREAS OF RESPONSIBILITY

Manage base autoprovisioning of roles on assigned areas of responsibility. Role mappings now include a
Responsibility Type condition. The Autoprovision Roles for All Users process can now create requests to
add and remove roles based on a users areas of responsibility.

ACCESS TO FUTURE-DATED PERSON RECORDS

Control user access to future-dated person records using the new Include Future People option in person
security profiles, which is deselected by default. Select the option to enable user access to future-dated
person records that satisfy all other criteria in the security profile.

INCLUDE RELATED CONTACTS OPTION NO LONGER ON PERSON SECURITY PROFILES

Simplify management of person security profiles with the removal of the Include Related Contacts option.
You no longer need to select this option to allow access to a workers contacts. Access to a workers record
generally includes access to the workers contacts.

NEW LOCATION FOR ROLES INFORMATION IN NEW-HIRE TASK FLOWS

Streamline new-person task flows with the removal of the Roles page. Information about roles for new
hires now appears in the Roles section on the Compensation and Other Information page.

PROVISION ROLES AUTOMATICALLY TO ORACLE SERVICE CLOUD EXTERNAL CONTACTS

Automate provisioning of roles to Oracle Service Cloud external contacts with the addition of the Contact
Role attribute to role mappings. This enhancement is specific to Oracle Sales Cloud customers.

REDUCED FREQUENCY FOR THE RETRIEVE LATEST LDAP CHANGES PROCESS

Run the Retrieve Latest LDAP Changes Process only to correct data integrity issues or synchronize data
among security components. For example, you run the process if you perform an LDIF (LDAP Data
Interchange Format) load for new users. You no longer need to schedule the process to run daily.

REDUNDANT PRIVILEGES REMOVED FROM PREDEFINED JOB AND ABSTRACT ROLES

Streamline security administration with the removal of the Copy Personal Data to LDAP and Send User
Name Request to LDAP function security privileges from the Line Manager and Human Resource Specialist
roles.
USER AND ROLE PROVISIONING OPTIONS MOVED TO THE SECURITY CONSOLE
Control the default format of user names by setting User Preferences on the Security Console
Administration tab. Specify whether users receive their sign-in details by setting Notification Preferences
on the Security Console Administration tab. The enterprise-level options Default User Name Format and
Send User Name and Password no longer appear on the Manage Enterprise HCM Information page.

DEFAULT USER NOTIFICATION PREFERENCES MANAGED ON THE SECURITY CONSOLE

Control the default behavior of User Notification Preferences on the Create User page from the Security
Console.

RESET PASSWORD LINK REPLACES GENERATED TEMPORARY PASSWORDS

Simplify user access to accounts by including a reset password link rather than a generated temporary
password in user account notifications that require a password change.

CHANGED BEHAVIOR OF THE CREDENTIALS SENT INDICATOR

Enforce accurate setting of the Credentials Sent indicator, which can be set once only for any user. The
Credentials Sent indicator is now set whenever an attempt is made to send a user name and password to a
user, regardless of whether the attempt succeeds.

USER ACCOUNTS NO LONGER CREATED AUTOMATICALLY FOR USERS LOADED IN BULK

Control the automatic creation of user accounts and notification of user credentials for users loaded in
bulk. From this release, the GeneratedUserAccountFlag and SendCredentialsEmailFlag attributes of the
Worker object default to N (No). Set them to Y (Yes) for selected workers to create user accounts and send
notifications.

ALTERNATE CONTACT E-MAIL ADDRESS NO LONGER ON THE USER INTERFACE

Specify an alternate contact e-mail address for users loaded in bulk by setting the CredentailsEmailAddress
attribute of the Worker object. You can no longer specify an alternate contact e-mail address for the
enterprise on the Manage Enterprise HCM Information page.

HCM DATA LOADER

HCM Data Loader provides a flexible and efficient method of bulk loading business object data for data-
migration and on-going incremental updates to Oracle Human Capital Management Cloud.

ESTIMATED TIME TO COMPLETE LOAD

Streamline the loading of large data volumes by monitoring the progress of the load and the estimated
time for the load to complete. The Import and Load Data page includes a load progress icon for each
business object.

SPREADSHEET DATA LOADING

Simplify bulk data loading using HCM Data Loader spreadsheets for all business objects that HCM Data
Loader supports. Use the predelivered spreadsheet templates, copy and edit the templates, or create your
own templates from scratch to include just the attributes needed for your use case.

NEW SOURCE KEY OBJECT TO ENABLE UPDATE OF SOURCE KEYS

Update existing source key values, including default source keys, using the new Source Key object from
HCM Data Loader.
JOB FAMILY CODE ATTRIBUTE ADDED TO THE JOB FAMILY OBJECT
Specify a non-translatable job family code to identify a job family uniquely.

AUTOMATED POST-LOAD PROCESSING FOR WORKER

Automate post-load processing when you load workers using HCM Data Loader. The Refresh Manager
Hierarchy and Update Person Search Keywords processes are now initiated automatically.

HCM COMMON FEATURES

This section contains features delivered across all applications.

DEEP LINKS
Open pages immediately without navigating through the menu structure using the Deep Links feature. This
capability is most useful if you have corporate internal portals and you want to enable direct navigation
from the portals into the Fusion HCM Application for your employees. For example, you can enable direct
navigation to the Payslips, Personal Information, Absence Entry, Directory Search, My Team page and other
pages.

HCM COMMON TRANSACTIONAL BUSINESS INTELLIGENCE

Oracle Fusion Transactional Business Intelligence is a real time, self-service reporting solution offered to all
Oracle Fusion application users to create ad hoc reports and analyze them for daily decision-making.

OBIEE ANSWERS ENHANCEMENT: SUBJECT AREA SEARCH

Enhance your ability to search for columns within the subject areas with the new search option. With this
enhancement you can enter a value with wildcards to search for columns that match with the entered
value.

OBIEE ANSWERS ENHANCEMENT: SAVE A COLUMN

Enhance your reporting capabilities with create, save and re-use of the calculated metrics in Answers.