Check out our hottest stories


More articles

SSO for Apache Fineract: OAuth2, OIDC, and the multi-tenant catch

6/15/2026

SSO for Apache Fineract: OAuth2, OIDC, and the multi-tenant catch

Putting Fineract behind your corporate IdP with OAuth2/OIDC. What Fineract's OAuth actually is (a resource server, not a login portal), the exact env vars, the sub-claim mapping that causes every 401, why authorization stays in Fineract, and the single-issuer multi-tenant trap.

Interest recalculation in Fineract: why your loan schedule changed overnight

6/15/2026

Interest recalculation in Fineract: why your loan schedule changed overnight

A Fineract loan schedule that changes by itself is usually the interest-recalculation engine doing its job, not a bug. What triggers it, the settings that control it, the nightly job behind overnight changes, and how to tell a real bug from working-as-designed.

Reporting in Apache Fineract after Pentaho: Stretchy SQL reports and the runreports API

6/15/2026

Reporting in Apache Fineract after Pentaho: Stretchy SQL reports and the runreports API

Pentaho left Fineract's core years ago over licensing, and most guides still tell you to install it. Here is how reporting actually works now: Stretchy SQL reports, the runreports API, the JSON-vs-CSV-vs-PDF split, how to add your own report, and the security you must not skip.

Accounting rules and frequent postings in Apache Fineract: how journal entries are really made

6/15/2026

Accounting rules and frequent postings in Apache Fineract: how journal entries are really made

Accounting rules, frequent postings, journal entry templates: what they actually are in Apache Fineract, the three ways a journal entry gets created, why "frequent" does not mean recurring, and the "Advanced Accounting Rules" name trap.

Migrating Apache Fineract from MySQL or MariaDB to PostgreSQL: the gotchas

6/15/2026

Migrating Apache Fineract from MySQL or MariaDB to PostgreSQL: the gotchas

Apache Fineract has deprecated MySQL and MariaDB and will not ship migration tooling. The engine swap is the easy part; what breaks is your custom surface: reports written in MySQL SQL, and datatables that live outside Liquibase. A practical migration guide.

Webhooks in Apache Fineract: why you shouldn't use them, and how to do real-time events properly

6/15/2026

Webhooks in Apache Fineract: why you shouldn't use them, and how to do real-time events properly

Apache Fineract has an old webhook feature, but it is fire-and-forget and loses events. The right way to do real-time events is the transactional-outbox-to-broker framework it already ships. A decision guide for polling, webhooks, and Kafka or JMS.

A security-hardening checklist for self-hosted Apache Fineract

6/14/2026

A security-hardening checklist for self-hosted Apache Fineract

A practical, layered security-hardening checklist for self-hosted Apache Fineract, built from its real CVE history: keep it off the internet, kill the defaults, real TLS, OAuth2 and 2FA, a least-privilege database, and stay patched.

Is Apache Fineract production-ready in 2026?

6/14/2026

Is Apache Fineract production-ready in 2026?

The honest answer to whether Apache Fineract is production-ready in 2026. The engine is battle-tested and real institutions run it at scale; the catch is that Fineract is a backend you assemble, so production-readiness is something you supply.