Mandatory Attributes in Create User Form

Hi All
i want to make the mandatory fields in create user form (ie Organization name) as optional.
For this i edited the FormMetada.xml file by making optional as true. (in the attribute reference for Organization field in User management section), as mentioned in the docs.
Now when i try creating user, it shows me 'You do not have permissions to perform this operation' error.
while when i give some value in the organization field, then it creates the user.
please provide some pointers in this regard.
Thanks.

You MUST provide an organizatation name. There is a system entity adapter on the Users data object. You cannot avoid populating this.
-Kevin

Similar Messages

OIM 11gR2 - custom attribute with illegal binding on Create User form in published sandbox

Hi,
I think I have managed to paint myself into a corner!
In OIM 11gR2 I have added a number of custom attributes to the "User Form" - some Text-, some Lookup-type attributes.
While customizing the "Create User" page within a sandbox and adding a SelectOneChoice item and fiddling around with its binding, I was distracted by a phone call and the browser timed out.
The binding property on the new item is now not correct and the sandbox has unfortunately been published, and I am now unable to enter the "Create User" page - when I try, I get the following:
<Sep 23, 2013 2:39:11 PM CEST> <Warning> <oracle.adf.view.rich.component.fragment.UIXRegion> <ADF_FACES-00009> <Error processing viewId: /user/createView URI: /oracle/iam/ui/runtime/form/view/pages/userCreateForm.jsff actual-URI: /oracle/iam/ui/runtime/form/view/pages/userCreateForm.jsff.
javax.el.PropertyNotFoundException: Target Unreachable, 'ekstraresource1__c' returned null
        at com.sun.el.parser.AstValue.getTarget(AstValue.java:108)
        at com.sun.el.parser.AstValue.isReadOnly(AstValue.java:149)
        at com.sun.el.ValueExpressionImpl.isReadOnly(ValueExpressionImpl.java:248)
        at oracle.adfinternal.view.faces.renderkit.rich.EditableValueRenderer._getUncachedReadOnly(EditableValueRenderer.java:486)
        at oracle.adfinternal.view.faces.renderkit.rich.EditableValueRenderer.cacheReadOnly(EditableValueRenderer.java:416)
        at oracle.adfinternal.view.faces.renderkit.rich.LabeledInputRenderer.beforeEncode(LabeledInputRenderer.java:128)
        at org.apache.myfaces.trinidad.render.CoreRenderer.encodeEnd(CoreRenderer.java:340)
<Sep 23, 2013 2:39:11 PM CEST> <Warning> <oracle.adf.view.rich.component.fragment.UIXRegion> <ADF_FACES-00009> <Error processing viewId: /catalog-tf/cart-details URI: /oracle/iam/ui/catalog/pages/cart-details.jsff actual-URI: /oracle/iam/ui/catalog/pages/cart-details.jsff.
javax.el.PropertyNotFoundException: Target Unreachable, 'ekstraresource1__c' returned null
        at com.sun.el.parser.AstValue.getTarget(AstValue.java:108)
        at com.sun.el.parser.AstValue.isReadOnly(AstValue.java:149)
        at com.sun.el.ValueExpressionImpl.isReadOnly(ValueExpressionImpl.java:248)
        at oracle.adfinternal.view.faces.renderkit.rich.EditableValueRenderer._getUncachedReadOnly(EditableValueRenderer.java:486)
        at oracle.adfinternal.view.faces.renderkit.rich.EditableValueRenderer.cacheReadOnly(EditableValueRenderer.java:416)
        at oracle.adfinternal.view.faces.renderkit.rich.LabeledInputRenderer.beforeEncode(LabeledInputRenderer.java:128)
        at org.apache.myfaces.trinidad.render.CoreRenderer.encodeEnd(CoreRenderer.java:340)
Caused By: java.io.IOException: javax.el.PropertyNotFoundException: Target Unreachable, 'ekstraresource1__c' returned null
        at oracle.adfinternal.view.page.editor.renderkit.PageCustomizableRenderer.encodeAll(PageCustomizableRenderer.java:764)
        at oracle.adf.view.rich.render.RichRenderer.encodeAll(RichRenderer.java:1396)
        at org.apache.myfaces.trinidad.render.CoreRenderer.encodeEnd(CoreRenderer.java:341)
        at org.apache.myfaces.trinidad.component.UIXComponentBase.encodeEnd(UIXComponentBase.java:767)
        at javax.faces.component.UIComponent.encodeAll(UIComponent.java:937)
        at org.apache.myfaces.trinidad.render.CoreRenderer.encodeChild(CoreRenderer.java:405)
etc.
Of course the sandbox should not have been published - but it is - and I am stuck trying to figure out how to somehow undo this mess.
Is it possible to clean up this mess by diving to the database and removing some rows from the right tables - or perform some other operations undo my mistake?
Thanks in advance,
- Tom

oim version is oim 11gR2 with BP4

Gaps appear in IE 6 browser window for hidden fields in Create User form

Hi,
I need an urgent input on this one.
I hid an OIM default attribute for users in the 'Create User' form by modifying clear_all_fields.js
The field is hidden from the 'Create User' page fine!
But if I open the page from Internet Explorer 6 it shows a gap in the place of the hidden field.
For Mozilla 3.0.5 the gaps are not appearing.
I tried removing these gaps by deleting the tags and the field in the clear_all_fields.js
or, by reducing the dimension of the spacer.gif in GenerateCreateUserForm.jsp.
But it reflected no change in the form look n feel.
The requirement is to hide the fields and not remove them.
Any suggestion as to what may be the way out?

Thanks for the update Leonard. This would be an extremely useful plugin. I've been looking for it on http://labs.adobe.com/technologies/ under the plug-ins tab but have been unable to find it. It wasn't even there in the Pre-Release Programs. Is it located somewhere else or with a different name? Please let me know.
Meanwhile, I've been trying to write my own VB script to get the button clicked. Here's what I've come up till now-
FindText
HiliteList.Add->CreateWordHilite->SetTextSelect->GetBoundingRect->PointToDevice
The last function seems to be deprecated. Also there's nothing to connect the text highlighted by findtext with HiLiteList.Add. I guess
I may have to use the JSO word search method.
Any advice, as always, would be much appreciated.

Want to add a prepopulated User defined field in create user form

Hi,
I have an entity adapter which will perform a pre-insert check on the user group of the user logged in to the oim.
If the logged in user belongs to a group say "IT ADMIN", another validation check will be imposed on the create user action performed by him.
If not from "IT ADMIN" group then create user action will be handled normally.
Now the catch is, how would I determine the group name of the user logged in from the adapter code I have written?
I decided to keep an User defined field "Created by" in the create user form which will be non-editable and auto-prepopulated with the group name of the logged in user. This way I will be able to map the variable field from the User definition drop down list while mapping the adapter variables.
May you please guide me how I can achieve this?
Would highly appreciate suggestion/inputs.

Thanks for all your replies!
However I am still in dark.
I tried to retrieve the groupname using tcUSerOperationsIntf. But iit tries to retrieve the group name of the user getting created.
Please note, the group name I want is not of the user yet to get created, but that of the user creating it i.e., the logged in user.
My requirement is to have this created_by field in the create user form already prepopulated with the group name of the logged in user.
So that I can put a check based on this field value in the netity adapter.
If the group is IT ADMIN then proceed with the validation.
Else no validation required.
In short, I want to know,how can I auto-prepopulate a UDF in Create USer form?

How to avoid special charecters in create user form

Hi all,
I am new to Sun IDM.Please u people have to help me in giving the solution.
Actually,in create user form ,we have first name and last name text fields.These two fields accept any special charecters.I want these fields to accept only alphabets.Do i need to create new rule for it?Please tell me the steps to be done to allow only alphabetic charecters in this fields.Thanks in advance,
regards,
suresh

Hi,
I should thank for the quick response u have done.But,still my problem was not solved.I did wat u hav said in the last reply...Now iam getting "1" in that create user form.I have send the XML code of the "isAlpha" and "Firstname"..Please check whether i have done any mistake..waiting for ur reply.
<Rule name='isAlpha'>
<Description>Tests to see if testStr is comprised of only alpha characters.</Description>
<RuleArgument name='testStr' value='testStr'/>
<block>
<defvar name='testList'>
<appendAll>
<rule name='Alpha Numeric Rules:AlphaCapital'/>
<rule name='Alpha Numeric Rules:AlphaLower'/>
</appendAll>
</defvar>
<containsAll>
<ref>testList</ref>
<rule name='Alpha Numeric Rules:stringToChars'>
<argument name='testStr' value='$(testStr)'/>
</rule>
</containsAll>
</block>
</Rule>
<Field name='global.firstname'>
<Display class='Text'>
<Property name='title' value='_FM_FIRSTNAME'/>
<Property name='size' value='32'/>
<Property name='maxLength' value='128'/>
</Display>
<Validation>
<rule name='Alpha Numeric Rules:isAlpha'>
<argument name='global.firstname'/>
</rule>
</Validation>
</Field>

Add user validation in create user form during Configure User Object Classe

Hi friends,
I like to add a user validation code (javaScript or PL/SQL) into create user form during Configure User Object Classes.
Is any way to pick user information and role assignment for validation in Portal side?
or pre event in OID provisioning befor loading LDAP?
We like to make a rols assignment validation. But portal does not have this function.
TOM, Any suggestion?
Thanks!!

after study, portal form --LOVGroupSearch take a role search and display user name for select role.
Who know we are can find system object LOVGroupSearch in portal or OID?
the source SCR as /oiddas/ui/oracle/ldap/das/search/LOVGroupSearch?title=Role%3Fredirect=/oiddas/ui/oracle/ldap/das/search/LOVGroupSearch%3Ftitle=Role
When we search a role and added it. selected role appears in form Search and Select:.
When click role name in Search and Select form. system will display Group Members and group owner.
Who can find behind codes for this form or samilar pl/sql codes?
Thanks!!

Why doesn't default CREATE USER form show a "Check" Page before submitting

Hi
Interesting question.
When I create a User (using my Customized Create User Form), and I press SAVE, the Form is submitted immediately. There is no "stop-and-check" page, which allows one to review the entries made BEFORE submitting the form itself.
For example : when EDITING or UPDATING a User, and you press "Save", the form is not submitted right away. Instead, a new page opens, where you can review the changes you made, to ensure that they are correct. In fact, at the bottom of this new page, there are 4 standard buttons : SAVE...........RETURN TO EDIT............CANCEL
This is a very good system, because it allows you to check your entries, and make sure they are correct, before pressing SAVE again to submit.
However, the "Create User" form does not have this same arrangement.
Is there any way to customize the Form, so that, when creating a User, and you press SAVE, a "check-page" first shows up (just like when updating/editing a user) ?
Thanks

Hi
Interesting question.
When I create a User (using my Customized Create User Form), and I press SAVE, the Form is submitted immediately. There is no "stop-and-check" page, which allows one to review the entries made BEFORE submitting the form itself.
For example : when EDITING or UPDATING a User, and you press "Save", the form is not submitted right away. Instead, a new page opens, where you can review the changes you made, to ensure that they are correct. In fact, at the bottom of this new page, there are 4 standard buttons : SAVE...........RETURN TO EDIT............CANCEL
This is a very good system, because it allows you to check your entries, and make sure they are correct, before pressing SAVE again to submit.
However, the "Create User" form does not have this same arrangement.
Is there any way to customize the Form, so that, when creating a User, and you press SAVE, a "check-page" first shows up (just like when updating/editing a user) ?
Thanks

Restrict list of Organizations on Create User form

Running OIM 11.1.1.5.0.
We have a couple of companies using our OIM for delegated administration. In the Create User form, if the user searches for an organization they see a list of all of our organizations not just the ones that they can place a user in.
If they place a user in an organization that is not in their auth policy they receive an error:
"You are either not authorized to create user in XXX organization or not authorized to create user in XXX organization without specifying a value for manager."
Is there any way to restrict the list of organizations in the search to the list in their auth policy?

I have have this:
Company A
-- Department A1 (although these are actually set as Organization type Company in OIM)
-- Department A2
Company B
-- Department B1
User Management Auth Policy for AdminA:
-- Data Constraint - Users who are members of Department A1, A2
But when AdminA uses Create User he gets a list of all Company and Department names in the Organization search popup.
Do I take it from your reply that this is supposed to work and it's something that I have setup incorrectly then?
Edited by: Ewan on May 4, 2012 7:37 AM

Cannot create user form portal

Hi
We have installed NW 2004 server on windows SPS9
While creating user form portal , i am getting the following error:
##0#0#Error#1#/System/Security#Java###An exception was thrown in the UME/ABAP user management connector. Message: . --> #2#BAPI_USER_CREATE1@QSACLNT000: ID=01, NUMBER=491, MESSAGE=You are not authorized to create users in group#BAPI_USER_CREATE1@QSACLNT000: ID=01, NUMBER=491, MESSAGE=You are not authorized to create users in group#
#1.5#000C295F1EB3004900000003000000B80004346CD09B385F#1183541868109#com.sap.security.core.persistence.datasource.imp.R3Persistence#sap.com/irj#com.sap.security.core.persistence.datasource.imp.R3Persistence.createPrincipalDatabag()#J2EE_ADMIN#313##pun45idmqa45vm1_QSA_5696050#Guest#104e58202a1211dcab81000c295f1eb3#Thread[PRT-Async 0,5,PRT-Async]##0#0#Error#1#/System/Audit#Java###An exception was thrown in the UME/ABAP user management connector. Message: . --> #2#BAPI_USER_CREATE1@QSACLNT000: ID=01, NUMBER=491, MESSAGE=You are not authorized to create users in group#com.sap.security.core.persistence.datasource.PersistenceException: BAPI_USER_CREATE1@QSACLNT000: ID=01, NUMBER=491, MESSAGE=You are not authorized to create users in group
            at com.sap.security.core.persistence.datasource.imp.R3PersistenceBase.handleBapiRet2Table(R3PersistenceBase.java:3136)
            at com.sap.security.core.persistence.datasource.imp.R3Persistence.doBapiUserCreateChange(R3Persistence.java:5265)
            at com.sap.security.core.persistence.datasource.imp.R3Persistence.doDispatchWrite(R3Persistence.java:3622)
            at com.sap.security.core.persistence.datasource.imp.R3Persistence.createPrincipalDatabag(R3Persistence
Any clue what has to be dome to make it working
Best Regards
Manoj

Hi Manoj,
Looks like your Portal uses the ABAP backend system QSACLNT000 as the
UME. Please ensure that the user being used to create other users in the portal
has sufficient permissions in the backend system also.
Regards
Srikishan

Change label of Standard user attributes in Create user page

Hi,
Can any one tell me where I must change labels names for standard attributes like "Form of address" and "Position"
in the Portal.
Please, I am aware of adding custom attributes. I do not need Information on that.I need to rename only standard labels. So the method getSalutation() UME API will return values for the new label (used in place of the old label"Form of address"). "datasource configuration database only.xml" does not have any fields where I can edit this Information. Can this be done anywhere in Portal Content translation.
I have seen an existing scenario,where this was implemented. Can you provide information ,As I am not sure how exactly this was done.There does not seem to be any major modification on the useradministration par file either. Where should I modify.
Regards,
Harish
(helpful answers will be suitably rewarded)

Hi,
1.Get com.sap.portal.usermanagement.admin.par.bak from PCD .
2.Rename com.sap.portal.usermanagement.admin.par.bak to com.sap.portal.usermanagement.admin.par
3.Create a project from com.sap.portal.usermanagement.admin.par
The form labels are defined in the property file adminlabels_*.properties within the umeuseradminbase.jar. umeuseradminbase.jar resides in Portal-inf/lib folder.
4. change the values for the required key.
5. deploy the file with the name com.sap.portal.usermanagement.admin.par.
6. restart the server
Please refer this thread for more.
how to change the text "form of address" while Create User in EP6.0??
Regards
Ganesan S

Updating AD Attributes via OIM user forms

Hi,
I have configured an AD connector. Firstly, I did a trusted recon to create the OIM. Next, I did a user recon to link the AD user to the OIM user. After that I have configured to pre-populate to show the AD attributes onto the OIM user form.
Now, what I want to do is to update the AD attributes (eg. Mobile) in the OIM web interface, and has it reflect back to AD.
Appreciate a detail description as I am very new to OIM.
Cheers, SK

You may want to try this:
a. Add an entry in Lookup.USR_PROCESS_TRIGGERS
b. Add a Process Form field and a Process task in each Process where you want to push the value.
The task should have a name "<UDF label> Updated"
c. Create another one called "Change <UDF label>"
d. Make the tasks conditional, "allow multiple instances"
e. Wire the "Change <UDF label>" to copy values from the user profile to the process form
f. Wire the "<UDF Label> Updated" to the connector adapter.
--Deepak

OIM 11gR2 Add combo box UDF on Create User Form

Hi.
We have created a new UDF on user form. It is a lookup field and has the following lookup associated: "Lookup.Users.Continente"
"Lookup.Users.Continente" has two values, both of them checked as Enabled.
From the form designer all the values are displayed when selecting one default value so it is reading correctly from the lookup.
We published the sandbox after this.
Then we created a new sandbox and tried to add that field to the Create User Page. We went to "Create User Page", customize it and add content from "Data Component - Catalog" -> "userVO" -> Select the UDF, clicked on "Add" and selected "ADF Select One Choice".
A new combobox is added but no values are shown. We have plublished the sandbox, restarted OIM, purged cache, etc... but it still shows an empty combo box. We have also tried adding it as "ADF Input List of values" but it does not add the field to the create user page.
Any ideas of what are we doing wrong?
The idea is very simple, just create a field with the same behaviour as, for example, "User Type" field. A combobox that displays the enabled values from a lookup...
We have also tried creating the UDF cheking the searchable option, searchable picklist and all the possible combinations.
Thanks in advance!!

oim version is oim 11gR2 with BP4

Displaying Session Owner Attributes on Tabbed User Form

How i can get an attribute from a session's owner inside the form?
For example, I want to display the email address of the admin who logged in and I want to display this on the Tabbed User Form.
I know, that :display.session is a session descriptor, but I can't work out how to display anything other than account ID.
Thanks in advance,
Darren.

Have a look at the javadocs for the com.waveset.ui.FormUtil class. There's some methods in there for getting user information from the repository based on the context you've got and the user ID you provide.
Something like this might work for you:
<invoke name="getObject" class="com.waveset.ui.FormUtil">
    <select>
      <ref>context</ref>
      <ref>:display.session</ref>
      <invoke name='getLighthouseContext'>
          <ref>WF_CONTEXT</ref>
      </invoke>
    </select>
    <s>User</s>
    <ref>your accountid</ref>
</invoke>That will get you back the user from the repository as a WSUser object. You should be able to extract the email attribute using the WSUser object's getAttribute method. If you need to construct a full view then there's more work to be done but that should get you the email address. (Assuming of course that you're saving it in the IDM repository.)

Custom Attribute in OIM user Form is not populated.

Hi Friends,
I am new to this Identity Manager Technology. I really all ur support.
I am using oracle Identity Manager 9.1.0.2 version with JBoss server. The Target System is Sun One directory.
1. I added the custom field street in Resource Object--Object Reconciliation Tab for Xellerate User and also for Iplanet Users objects.
2. In Process definition, for iplanet user provisioning Process and Xellerate Users provisioning process, in Reconciliation Field Mappings. I mapped the street field to the UDF(street) and also for UD_iplanet_Street .
3. When I run the task schedular for Iplanet User Recon, the string associated with the field in Iplanet is reflecting in resource profile of the user view/Edit. However, it is not populated in OIM User Form Field.
Can you please help me in resolving the issue. I will provide any further needed information.
Thanks and Regards,
Manjula

Thank you for your prompt reply.
Yes. I tested it.. I can see the street field in the process form is populated with the string. However, I cannot see the same in the OIM User Profile Form. That Means, When I go to User folder in Admin and User Console, Manage Users and then select the user associated with the street field, the street field for the user is not populating and is empty without any string.
Please clarify me.
Thanks and Regards,
Manjula.

How Can we change the Lookup in the Create User Form ??? Please Help

Hi ,
Can anyone let me know that how can the Value of the Lookup be changed in the Organization ? Like when we click on the Lookup of the Organization we see the names of the companies with Radio Boxes and we select a Company. If I want another value to be added beside the company then How I need to do that ? eg:
Org1: com1
Org1: com2
Org2: com3
Org3: com4
This lookup How can I do it ?

With what you are referring to, there is no lookup required.
When you log into your administration console, you can create a new organization:
Organizations --> Create.
After you create, there will be more than the default organizations.
However, if you want to create a new organization type (Company, Department, etc) you can do this by:
Go to your Design Console --> Administration --> Lookup
Search for: Lookup.Organization.Type
Add a new value.
Save your formOnce you are done, go and create a new organization like before, and in the drop-down, that type will appear.

Mandatory Attributes in Create User Form

Similar Messages

Maybe you are looking for