{"id":245,"date":"2026-03-22T00:00:00","date_gmt":"2026-03-22T00:00:00","guid":{"rendered":"http:\/\/localhost\/cloudshine-cms\/2026\/03\/22\/oracle-oic-gen3\/"},"modified":"2026-06-17T08:43:47","modified_gmt":"2026-06-17T08:43:47","slug":"oracle-oic-gen3","status":"publish","type":"post","link":"https:\/\/api-demo.cloudshinepro.com\/cloudshine-cms\/in\/2026\/03\/22\/oracle-oic-gen3\/","title":{"rendered":"Practical Guide to Oracle OIC Gen3: Setup to Migration"},"content":{"rendered":"<p>If you&#8217;re provisioning oracle oic gen3, this article gives a compact, step\u2011by\u2011step playbook from OCI provisioning through network design, Projects management, and a tested migration checklist. CloudShine uses this exact checklist in live workshops and migration accelerators to make teams production\u2011ready.<\/p>\n<h2>Provisioning an integration instance in OCI \u2014 quick steps and post\u2011checks<\/h2>\n<p><strong>Takeaway:<\/strong> Create Gen3 through the OCI Console (Developer Services \u2192 Application Integration) selecting Oracle Integration 3, the appropriate edition and message packs, then run a short verification checklist before you build integrations.<\/p>\n<p>Prereqs: provision inside a child compartment for governance, confirm tenancy quotas and region support, and ensure admin IAM policies allow instance creation and subnet access. Prefer a dedicated dev\/test\/prod compartment hierarchy to avoid permission drift.<\/p>\n<table>\n<tr>\n<th>Field<\/th>\n<th>Recommended selection (dev\/test\/prod)<\/th>\n<\/tr>\n<tr>\n<td>Version<\/td>\n<td>Oracle Integration 3<\/td>\n<\/tr>\n<tr>\n<td>Edition<\/td>\n<td>Standard (core) \/ Enterprise (process, RPA, B2B)<\/td>\n<\/tr>\n<tr>\n<td>Shape<\/td>\n<td>Dev\/Test: small gen3 shape; Prod: larger OICGen3.* shapes<\/td>\n<\/tr>\n<tr>\n<td>License type<\/td>\n<td>BYOL or License Included per contract<\/td>\n<\/tr>\n<tr>\n<td>Message packs<\/td>\n<td>Set based on throughput forecast; scale up later<\/td>\n<\/tr>\n<tr>\n<td>File Server<\/td>\n<td>Enable for SFTP (500 GB default)<\/td>\n<\/tr>\n<\/table>\n<p>Post\u2011create verification \u2014 confirm the service console opens and instance is Active; check default payload retention (32 days), file server capacity, and message\u2011pack counts; verify outbound IPs via the instance \u201cAbout\u201d menu for allowlisting; and enable SSO or map application roles if using Identity Domains.<\/p>\n<ul>\n<li>Launch Service Console and confirm Instance status and retention settings.<\/li>\n<li>Enable File Server (if needed) and test SFTP access to the provided host.<\/li>\n<li>Run a simple echo API integration to validate inbound and outbound traffic.<\/li>\n<li>Capture outbound IPs from About \u2192 Network for allowlists.<\/li>\n<\/ul>\n<p>Operational note: provisioning and repeatable stacks are scriptable via OCI Resource Manager \/ Terraform or the OCI CLI. See the oci_integration_instance provider docs for examples to automate environment creation.<\/p>\n<p><strong>Actionable takeaway:<\/strong> Build a one\u2011page Provision Playbook with exact field values per compartment and the four post\u2011create checks above. Use that playbook in your first sandbox run.<\/p>\n<h2>Network flows and secure connectivity \u2014 public model vs private endpoints<\/h2>\n<p><strong>Takeaway:<\/strong> Gen3 runs by default on public OSN endpoints (no customer VCN\/NAT required). For sensitive traffic or on\u2011prem systems, create the single private endpoint and deploy a Connectivity Agent behind FastConnect or VPN.<\/p>\n<table>\n<tr>\n<th>Flow<\/th>\n<th>Source<\/th>\n<th>Destination<\/th>\n<\/tr>\n<tr>\n<td>Design-time inbound<\/td>\n<td>Internet (developers)<\/td>\n<td>Design Layer (public OSN)<\/td>\n<\/tr>\n<tr>\n<td>Runtime inbound<\/td>\n<td>Internet \/ API clients<\/td>\n<td>Run Layer (public OSN)<\/td>\n<\/tr>\n<tr>\n<td>Runtime outbound<\/td>\n<td>Run Layer<\/td>\n<td>External public endpoints (egress IP shown in About)<\/td>\n<\/tr>\n<tr>\n<td>Private calls<\/td>\n<td>Run Layer<\/td>\n<td>VCN\/private IPs via Connectivity Agent<\/td>\n<\/tr>\n<\/table>\n<p>Private endpoints are limited to one per instance. The typical on\u2011prem pattern is: FastConnect or VPN \u2192 customer VCN \u2192 subnet with Connectivity Agent \u2192 OIC private endpoint. For SaaS-only landscapes, public endpoints plus IP allowlists and WAF rules usually suffice.<\/p>\n<p>Practical architecture patterns:<\/p>\n<ul>\n<li>SaaS integrations: public endpoints + allowlisted outbound IPs and WAF in front of inbound APIs.<\/li>\n<li>On\u2011prem systems: FastConnect\/VPN \u2192 VCN \u2192 private endpoint + Connectivity Agent inside the VCN.<\/li>\n<li>Hybrid: public endpoints for low\u2011risk flows, private endpoint for PII\/regulated data paths.<\/li>\n<\/ul>\n<p>Secure the deployment by allowlisting the instance outbound IPs, opening HTTPS (443) and SFTP (22) where required, provisioning certificates for custom endpoints, and placing OCI API Gateway\/WAF in front of public APIs.<\/p>\n<p>For more detailed patterns and examples of OIC traffic flows, review the <a href=\"https:\/\/www.ateam-oracle.com\/oic-network-flows\" target=\"_blank\" rel=\"nofollow\">OIC network flows<\/a>, and if you need guidance on overall integration topology, our <a href=\"https:\/\/cloudshinepro.com\/system-integration-flows-best-practices-and-techniques\/\" target=\"_blank\">system integration flows best practices<\/a> article covers patterns and tradeoffs used across multiple projects.<\/p>\n<p><strong>Actionable takeaway:<\/strong> Start with public mode for PoC. Before production, provision a private endpoint in a sandbox and validate agent logs, routes and firewall rules end\u2011to\u2011end. For detailed configuration steps refer to Oracle\u2019s guidance on configuring a <a href=\"https:\/\/docs.oracle.com\/en\/cloud\/paas\/application-integration\/oracle-integration-oci\/configure-private-endpoint-instance.html\" target=\"_blank\" rel=\"nofollow\">private endpoint instance<\/a>.<\/p>\n<h2>Projects in Gen3 \u2014 create, deploy, version and manage integrations<\/h2>\n<p><strong>Takeaway:<\/strong> Projects replace Gen2 packages as the primary unit of work. They contain integrations, connections, lookups, RPA\/B2B artifacts, and provide Design \u2192 Deploy \u2192 Observe lifecycle and RBAC at project scope.<\/p>\n<p>Create a Project from the Projects UI, add artifacts under the Design tab, and use Move to Project to migrate existing resources. The Deploy tab handles project\u2011level promotions with built\u2011in versioning and rollback, which simplifies sprint releases compared with hand\u2011built package pipelines.<\/p>\n<p>For lifecycle control, use one Project per domain or sprint, keep a shared \u201cplatform\u201d project for common connections, and use naming conventions that include environment and version metadata. Projects support cloning and accelerator templates to speed repeatable builds. Teams building project delivery capability may also benefit from targeted <a href=\"https:\/\/cloudshinepro.com\/oracle-fusion-training-things-to-know-before-you-learn\/\" target=\"_blank\">Oracle Fusion training<\/a> to ramp authors and administrators quickly.<\/p>\n<p><strong>Actionable takeaway:<\/strong> In a sandbox, convert one critical package into a Project and run a deploy\u2192rollback drill with a short smoke test suite to validate your release process and RBAC settings.<\/p>\n<h2>Gen3 vs Gen2 \u2014 critical differences, limits and compatibility checks<\/h2>\n<p><strong>Takeaway:<\/strong> Gen3 raises limits and adds features (Projects, AI palette, Parallel action) but is not a drop\u2011in copy of Gen2. Audit artifacts early for parity issues and custom adapter compatibility.<\/p>\n<table>\n<tr>\n<th>Capability<\/th>\n<th>Gen2<\/th>\n<th>Gen3 (2026)<\/th>\n<\/tr>\n<tr>\n<td>Retention<\/td>\n<td>3\u201330 days<\/td>\n<td>32 days<\/td>\n<\/tr>\n<tr>\n<td>Active integrations<\/td>\n<td>~700<\/td>\n<td>~800<\/td>\n<\/tr>\n<tr>\n<td>File server<\/td>\n<td>External or smaller<\/td>\n<td>Embedded SFTP 500 GB<\/td>\n<\/tr>\n<tr>\n<td>For-each loops<\/td>\n<td>5,000<\/td>\n<td>Unlimited<\/td>\n<\/tr>\n<\/table>\n<p>Check for parity gaps: uncommon adapters, custom Java\/JS\/Groovy libraries, B2B profiles, scheduled jobs, and any Visual Builder custom endpoints. Oracle publishes a Differences page that should be reviewed for features explicitly removed or altered \u2014 for an in\u2011depth article on Gen3 capabilities see this deep dive into the <a href=\"https:\/\/www.hexstream.com\/tech-corner\/exploring-the-advanced-features-of-oracle-integration-cloud-oic-gen-3\" target=\"_blank\" rel=\"nofollow\">advanced features of Oracle Integration Cloud Gen 3<\/a>. If security model changes are a concern, pair your artifact audit with <a href=\"https:\/\/cloudshinepro.com\/oracle-fusion-security-best-practices-for-consultants-and-administrators\/\" target=\"_blank\">Oracle Fusion security best practices<\/a> to ensure RBAC and role mappings are correct.<\/p>\n<p><strong>Actionable takeaway:<\/strong> Produce an artifacts inventory tagged by risk (low\/medium\/high) and run tests for anything marked medium or high, prioritizing custom adapters and scheduled workflows.<\/p>\n<h2>Migration playbook \u2014 precheck, dry\u2011run and cutover checklist<\/h2>\n<p><strong>Takeaway:<\/strong> Migrate using Oracle\u2019s automatic upgrade when available, otherwise follow a manual path: Inventory \u2192 Sandbox dry\u2011run \u2192 Controlled cutover with a rollback plan and 48\u201372 hours of post\u2011go\u2011live validation.<\/p>\n<ol>\n<li>Inventory: catalog integrations, connections, agents, scheduled jobs, file server contents, message packs, certificates, and accelerators.<\/li>\n<li>Sandbox dry\u2011run: provision a Gen3 sandbox, import or recreate Projects, validate the Connectivity Agent for on\u2011prem access, execute smoke and load tests, and confirm observability metrics.<\/li>\n<li>Cutover (timeboxed): final export\/sync, update DNS or endpoints, flip traffic, run validation suite (top business transactions) and monitor message pack consumption and dashboards.<\/li>\n<li>Rollback &#038; contingency: keep Gen2 read\u2011only, retain file server backups, and have DNS\/endpoint rollback steps documented with owners and timestamps.<\/li>\n<\/ol>\n<p>Oracle documents an automatic upgrade path and phased approaches; follow Oracle\u2019s upgrade guidance and test in a sandbox first \u2014 see the official upgrade guidance for details on the upgrade phases and prerequisites in Oracle\u2019s documentation.<\/p>\n<p>For migration-specific reporting or post\u2011cutover reconciliation you may find the <a href=\"https:\/\/cloudshinepro.com\/oracle-ebs-to-fusion-cloud-migration-best-practices-for-consistent-reporting\/\" target=\"_blank\">Oracle EBS to Fusion Cloud migration best practices<\/a> article helpful when aligning validation scripts and reconciliation reports during cutover.<\/p>\n<p><strong>Actionable takeaway:<\/strong> Build a migration runbook with named owners, a pre\u2011cutover go\/no\u2011go checklist and a 48\u201372 hour monitoring window post\u2011cutover.<\/p>\n<h2>Runbook, observability, CloudShine help and FAQs<\/h2>\n<p><strong>Takeaway:<\/strong> Post\u2011migration focus on a short runbook: key metrics, agent health, message pack usage and a 30\/60\/90\u2011day audit cadence. Automate alerts and keep export snapshots of Projects.<\/p>\n<p>Key metrics to automate: AsyncInboundRequestsDepth, SchedulerTriggeredInstancesCount, FileserverInboundConnections, integration error rate, latency percentiles and trace level counts. Daily checks should verify integration error queues and agent heartbeats; weekly checks should include file server consumption and certificate expirations.<\/p>\n<p>Troubleshooting starts at Observe \u2192 Instance logs \u2192 Agent logs. Common fixes: refresh credentials, restart connectivity agent containers, increase message packs for throughput spikes, and roll back a recent Project deployment if smoke tests fail.<\/p>\n<p>How CloudShine helps: CloudShine runs hands\u2011on OIC Gen3 workshops with live instances, a migration accelerator that builds your migration runbook, and an optional 1\u2011day readiness audit to validate cutover plans and smoke suites. To understand how integration initiatives align with broader ERP programs, review our guidance on <a href=\"https:\/\/cloudshinepro.com\/oracle-cloud-erp-benefits-challenges-and-best-practices-in-implementation\/\" target=\"_blank\">Oracle Cloud ERP benefits and challenges<\/a>.<\/p>\n<h3>FAQs<\/h3>\n<h4>Is Oracle Integration Gen3 a free upgrade from Gen2?<\/h4>\n<p>Oracle provides an automatic upgrade path in many cases with a preparation window (typically a multi\u2011month notification). Follow Oracle\u2019s upgrade guidance and test in a sandbox first.<\/p>\n<h4>How many private endpoints does Gen3 support per instance?<\/h4>\n<p>One private endpoint per instance is supported; plan your VCN and subnet appropriately.<\/p>\n<h4>What hard limits should I plan for?<\/h4>\n<p>Plan to support 32\u2011day payload retention, ~800 active integrations, built\u2011in file server of 500 GB, and unlimited for\u2011each loops\u2014verify message pack sizing for throughput.<\/p>\n<h4>Will my Gen2 adapters and custom scripts work unchanged?<\/h4>\n<p>Many adapters will work, but custom Java\/JS\/Groovy code and uncommon adapters require testing. Tag and test custom artifacts early.<\/p>\n<h4>How long does a typical migration take?<\/h4>\n<p>Sandbox + dry\u2011run phases commonly take 1\u20134 weeks depending on complexity; cutover is usually a weekend operation with a 48\u201372 hour validation window.<\/p>\n<p><strong>Summary:<\/strong> Start with a scripted provisioning playbook, validate network patterns (public then private), convert a package into a Project and run deploy\/rollback drills, and execute a timeboxed migration with a 48\u201372 hour smoke window. For hands\u2011on training, migration accelerators, or a readiness audit, contact CloudShine to schedule a workshop and get your runbook validated.<\/p>\n<p><script type=\"application\/ld+json\">\n{\n  \"@context\": \"https:\/\/schema.org\",\n  \"@type\": \"Article\",\n  \"datePublished\": \"2026-03-22T11:01:37.101Z\",\n  \"dateModified\": \"2026-03-22T11:01:37.115Z\",\n  \"headline\": \"Practical Guide to Oracle OIC Gen3: Setup to Migration\",\n  \"description\": \"Hands\u2011on Oracle OIC Gen3 guide \u2014 provision instances, design secure network flows, use Projects, and run a tested migration checklist. Read the step\u2011by\u2011step plan.\",\n  \"publisher\": {\n    \"@type\": \"Organization\",\n    \"name\": \"CloudShine\"\n  },\n  \"mainEntityOfPage\": {\n    \"@type\": \"WebPage\",\n    \"@id\": \"https:\/\/cloudshinepro.com\/oracle-oic-gen3\/\"\n  },\n  \"image\": [\n    \"https:\/\/cloudshinepro.com\/wp-content\/uploads\/2026\/03\/practical-guide-to-oracle-oic-gen3-setup-to-migration.webp\"\n  ],\n  \"url\": \"https:\/\/cloudshinepro.com\/oracle-oic-gen3\/\"\n}\n<\/script><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hands\u2011on Oracle OIC Gen3 guide \u2014 provision instances, design secure network flows, use Projects, and run a tested migration checklist. Read the step\u2011by\u2011step plan.<\/p>\n","protected":false},"author":1,"featured_media":322,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"seo_title":"","seo_description":"","post_key_takeaways":"","post_faqs":"","footnotes":""},"categories":[101],"tags":[],"class_list":["post-245","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud-implementation"],"_links":{"self":[{"href":"https:\/\/api-demo.cloudshinepro.com\/cloudshine-cms\/in\/wp-json\/wp\/v2\/posts\/245","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/api-demo.cloudshinepro.com\/cloudshine-cms\/in\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/api-demo.cloudshinepro.com\/cloudshine-cms\/in\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/api-demo.cloudshinepro.com\/cloudshine-cms\/in\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/api-demo.cloudshinepro.com\/cloudshine-cms\/in\/wp-json\/wp\/v2\/comments?post=245"}],"version-history":[{"count":1,"href":"https:\/\/api-demo.cloudshinepro.com\/cloudshine-cms\/in\/wp-json\/wp\/v2\/posts\/245\/revisions"}],"predecessor-version":[{"id":323,"href":"https:\/\/api-demo.cloudshinepro.com\/cloudshine-cms\/in\/wp-json\/wp\/v2\/posts\/245\/revisions\/323"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/api-demo.cloudshinepro.com\/cloudshine-cms\/in\/wp-json\/wp\/v2\/media\/322"}],"wp:attachment":[{"href":"https:\/\/api-demo.cloudshinepro.com\/cloudshine-cms\/in\/wp-json\/wp\/v2\/media?parent=245"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/api-demo.cloudshinepro.com\/cloudshine-cms\/in\/wp-json\/wp\/v2\/categories?post=245"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/api-demo.cloudshinepro.com\/cloudshine-cms\/in\/wp-json\/wp\/v2\/tags?post=245"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}