Optimizing Your JD Edwards Security and Licensing Status

Author: Serge Desloover
Sales Manager @Quistor
It can be very challenging to keep tabs on your ERP usage and adhere to regulations with your license contract. Additionally, knowing your license position is key to developing your ERP system and supporting your strategic goals. At the same time, being under-licensed prevents you from upgrading your ERP on security and new functionalities. This makes your organization vulnerable to GDPR breaches and ERP outages, which could result in significant costs. Not even to speak about the large financial risk when undergoing an Oracle LMS audit.
License conformity goes hand in hand with the security of your ERP system. In this article, I will provide you with some insights on the need to make sure you can get on track with your licensing and security status in JD Edwards without any effort or knowledge from your side.
Security setup & Licenses
How security settings in JDE will impact your license position might surprise you.
Oracle licensing is a way for JDE users to gain access to the software and its modules. Within Oracle, the LMS is the group that is authorized to review and provide opinions on your compliance status.
Your License contract with Oracle covers your usage, but over time, is your contract still covering the current usage? Within the JDE license structure, there is no prevention to start using modules that you have no license for.
With security, you need to make sure you manage any SoD conflict. Auditors recommend Segregation of Duties (SoD) as an effective means of preventing internal fraud. There is an urgent need to identify possible SoD conflicts in your systems and how these are caused.
What we have seen over the years is that customers have difficulties with the maintenance of SoD conflicts in JDE, simply because it is complex and there is no native functionality in JD Edwards to help you out here. While struggling to resolve your SOD conflicts, an incorrect setup of security also allows the usage of a non-licensed module. In general, if a user has access to a module, you should have a JDE license for this.
Being on top of your security setup in JDE will help you to control your SOD and help you to have a clear license position towards Oracle
Within Quistor, we have our License & Security experts who can help you out in resolving the challenges above. Every year, we help multiple clients optimize their security and therefore create a positive impact on the effective use of their JDE modules related to the licenses. We understand that this topic is sensitive, so 100% confidentiality is guaranteed. This service is done without any connection, communication, or involvement of Oracle, even within Quistor, these analyses are only known by the License & Security department.
Our way of working is by using the powerful toolset of our partner Pathlock. We run a health check on your system and, within days, you have insight into your security and license position. The QAgent from Pathlock is being used to extract and encrypt the necessary data and subsequently upload it in Quistor QCloud for analysis.
1. Quistor experts analyze this raw data.
2. We give you insight into your SOD conflicts and their causes.
3. We apply the license access to your current license position.
4. Together we discuss possible actions to be taken by you, with or without our support.
5. After mitigation a second check is to be done to see if the results are ok.
Some examples of customer feedback:
“After Quistor's analysis, we found out that we were not license compliant and came up with a plan to get back to license conformity". - Client in Asia.
“The Quistor license conformity service made us realize that we had to make changes on the security side, and we didn't have to buy licenses.” - Client in Europe.
“We thought we needed to buy 350K dollars on JDE licenses, but by implementing the security changes advised by Quistor, that number has been more than halved.” - Client in USA.
Therefore, I would like to advise you to contact me in case you have doubts about your security and/or license situation. Our experts can run a quick scan of your environment and give you clear, transparent, and confidential feedback on your current situation.
Don’t let this sensitive but crucial topic surprise you, take action! Especially now that the Oracle fiscal year is almost ending.
Before you go
Feel free to ask us any question, ask for more information or simply say hello in this contact form.