Introduction

This article explains how to set up a secure integration between CupixWorks, Oracle Integration Cloud (OIC), and Oracle Primavera Cloud. It covers provisioning the OIC environment, configuring security and REST connections, and registering the final integration in CupixWorks.

By following this guide, you can enable authorized project data synchronization between CupixWorks and Primavera Cloud.

1. Provisioning the Oracle Integration Instance

To begin, you need to create an Oracle Integration Cloud (OIC) instance in the OCI Console.

1. Log in to the OCI Console.
2. Open the navigation menu and select Developer Services.
3. Under the Application Integration header, select Integration.

4. Click the Create instance button.
5. In the Name field, enter a name (e.g. Cupix).
6. Leave all other settings at their default values (Version: Oracle Integration 3; Edition: Enterprise; Shape: Production).
7. Click the Create button.

Note: You must monitor the instance state and wait until the State transitions to Active before attempting any configuration.

To access the environment once active, click the three-dot menu next to the instance name and select Open Console.

2. Importing the Pre-configured Integration Project

Cupix provides a pre-configured integration package as a .car file. This file contains all the necessary project settings, connections, and integration flows — so you don't need to create them manually.

1. From the OIC Console, click the Projects tab in the left-hand navigation.
2. Click the Import button.
3. Select the .car file provided by Cupix and upload it.
4. Wait for the import to complete. You'll see the Cupix Integration project appear in the project list.

3. Configuring the Outbound Connection

After importing the project, you need to update the outbound connection with your Oracle Primavera Cloud (OPC) credentials. This allows the integration to connect to your Primavera Cloud environment.

1. Open the imported Cupix Integration project.
2. In the Connections panel, click the outbound connection to open it.
3. In the Connection URL field, enter your Primavera Cloud URL (e.g., https://primavera-us2.oraclecloud.com/).
4. Select Basic Authentication from the Security policy dropdown.
5. In the Username field, enter your dedicated Primavera Cloud service account email.
6. In the Password field, enter the password for that account.
7. Click Test to verify the connection.
8. Click Save.

Note: If the connection test fails, verify that your Primavera Cloud URL is correct and that the service account credentials are valid.

4. Activating the Integration

With the outbound connection configured, you need to activate the integration to start servicing requests.

1. In the Cupix Integration project, navigate to the Integrations panel.
2. Click the three-dot menu next to Cupix Integration and select Activate.
3. Select Production as the tracing level.
4. Click the Activate button.

Note: Do not activate the integration until the outbound connection test has passed successfully.

5. Security Configuration: OCI Identity Domain and Confidential Application

To allow external applications to consume the integration, you must configure an OAuth2 handshake via an OCI Confidential Application.

1. Navigate to Identity & Security → Domains → [Your Domain] → Integrated applications. Click Add application.

2. Select Confidential Application, and click Launch workflow.

3. Enter Cupix Integration as the Name and click Submit.

4. Navigate to the OAuth configuration tab and click Edit OAuth configuration.

5. In the Client configuration section, you must check the box for "Configure this application as a client now" to reveal the required security fields.
6. Under Allowed grant types, check Client credentials and Refresh token.

7. Under Client IP address, select Anywhere.

8. Toggle Add resources on, then click Add scope. Once two scopes are created, click Submit.

9. Click the three dots next to the application and select Activate.

6. Assigning Application Roles

Role-based access control (RBAC) is required to authorize the confidential application to perform developer actions within the OIC instance.

1. Within the Domain, click the Oracle cloud services tab and select your OIC instance.

2. Go to the Application roles tab. Find ServiceDeveloper, click the three dots, and select Manage applications.

3. Click Assign applications, select the Cupix Integration application, and click Assign.

7. Finalizing the Integration in CupixWorks

The final configuration is completed in CupixWorks, where the OCI security parameters are registered. You will need to collect and enter the following five input values:

• OIC OAuth Token URL
• Client ID
• Client Secret
• Scope
• OPC Access Token URL

How to Collect the Required Input Values

1. OIC OAuth Token URL

1. In OCI, navigate to Identity & Security → Domains. Select [Your Domain].
2. Copy the Domain URL.

3. Append /oauth2/v1/token to the end of the Domain URL. The final input value should be in the following format:

   https://<your-domain>/oauth2/v1/token

2. Client ID & Client Secret

1. Navigate to Identity & Security → Domains → [Your Domain] → Integrated applications.
2. Click the Cupix Integration application you created.
3. In the OAuth Configuration tab, copy the Client ID and Client Secret from the General Information section.

3. Scope

1. In the OAuth Configuration tab of the Cupix Integration application, locate the Resources section.
2. Copy the first Resource Scope URL that ends with ::all. Use this value as the Scope input.

4. OPC Access Token URL

1. In the OIC Integration list, click the three-dot menu next to your integration. Select Run.
2. Click Endpoint metadata. From this menu, copy the Endpoint URL, which is used to construct the final endpoint.
3. To generate the correct Final Endpoint URL:
   1. Replace the [scope_value] placeholder with your OPC (Primavera Cloud) base URL
   2. Append /api to the end of the OPC URL

Note: The URLs shown below are examples only. Your final URL may differ depending on your Primavera Cloud server (for example, us2, eu, or other regions).

Use the resulting Final Endpoint URL as the OPC Access Token URL value when registering the integration in CupixWorks.

Registering the Integration in CupixWorks

1. In CupixWorks, navigate to Project Setup → Integrations.
2. Click Link to Oracle Primavera Cloud.

3. In the registration modal, enter all collected values:
   • OIC OAuth Token URL
   • Client ID
   • Client Secret
   • Scope
   • OPC Access Token URL
4. Select the project and complete the registration.