APEXSecurity

APEX authentication schemes I actually use in production

May 2, 2026 · 9 min

Every APEX project starts with the same question: how do people log in?

Default: SAML / OIDC via the customer's IdP If the client has Entra ID, Okta or Keycloak, use it. Zero password management for you and offboarding is automatic.

Second choice: Database Accounts For internal tooling where users already have DB credentials, Database Accounts save an entire user-management layer.

Custom is the last resort Rolling your own authentication in PL/SQL is fun exactly once. After that it is a maintenance tax you pay forever.

Keep reading

ORA-01555: Snapshot too old — a practical checklist

The classic 'snapshot too old' error rarely means what beginners think. Here is the checklist I run through before touching UNDO_RETENTION.

The hidden performance costs of APEX interactive reports

Interactive Reports are the fastest way to ship an APEX screen — and the fastest way to hide a full-table scan behind a friendly UI.