User and Password Administration in EBS
Understand the standard mechanisms for managing user accounts, password policies, and account lifecycle in EBS
EBS user administration centers on FND_USER, where system administrators create, enable/disable, and manage password policies for application user accounts through the Users form (or, in more modern setups, through SSO/identity-provider-delegated administration where EBS accounts are provisioned automatically from a central identity system). Key administrative concerns include configuring appropriate password expiration policies (via profile options like Signon Password Hard to Guess, Signon Password Length, and Signon Password No Reuse), managing account lockout behavior after repeated failed login attempts, and periodically auditing for dormant or orphaned accounts (former employees whose accounts weren't properly deactivated).
Disabling rather than deleting a user account is like revoking someone's building access badge when they leave a company while keeping the security camera footage and visitor logs referencing their past visits intact — you cut off future access without erasing the historical record of what happened while they had access.