Password Field not mapped between Request and Provisioning Form

Hi to all. I'm working with OIM 11g. I've faced a strange issue. I'm not sure I'm working properly, so let me explain you my case. In my installation I've got the SSH connector, which is correctly connected with the physical resources. I've loaded the resource dataset ProvisionResourceSSH User bundled with the connector. Consider now that the user "goofy", with "ALL USERS" role, tries to make a request Provision Resource SSH User (Request Based provisioning). He fills in all the field in the appropriate manner, but when OIM triggers "Create User" provisioning task, after the required approval process, the password field is always blank (although goofy filled it in!!!).
I've thought: "ok, it seems a role trouble". And effectively, if goofy has got also the role "REQUEST ADMINISTRATORS", the provisioning form shows the password field correctly valued (as goofy stated in his request).
Note that all the fields are correctly mapped between request dataset and the provisioning form (I'm using the original dataset and the original provisioning form installed by the connector). So all other fields filled by goofy on the request form (request based provisioning) are correctly passed to the provisioning form. All the fields, except for the password.
Am I wrong in something? How Could I make possible to pass the data filled on the request for the password field to the provisioning form even if the requester has not the role "REQUEST ADMINISTRATORS"?
Thank you in advance for the help.

This sure seems goofy! ;-) ... can you try making the ALL Users have all the permissions on the Resource Object and the Process Form and test it out? Also try from the backend at the database and see if the table has NULL for the password field? ... What's the type of password field in the dataset and the process form? Encrypted/Secret at both ends or mis match? Try making them plain text both the places as well.
-Bikash

Similar Messages

  • Difference in idoc adapter header mapping between SP14 and SP19

    Hi All,
    i have a very strange problem.......i have 2 XI systems : XI-sandbox and XI-dev.....
    XI-sandbox is on XI3.0 SP19 whereas XI-dev is on XI3.0 SP14...........
    I have a file->XI->idoc scenario which is same on both XI-sandbox and XI-dev....
    in receiver idoc adapter, i am using header mapping for sender service and in the sender service i am using XPATH of a field of control rec of idoc.........
    this scenario works fine on XI-sandbox which is on SP19 and the idocs are sent to SAP R/3 sandbox...........but this scenario on XI-dev gives error in SXMB_MONI in XI-dev of Call adapter - "No party conversion found".........
    So my question is that is there any difference in idoc adapter header mapping between SP14 and SP19.........
    Thanks,
    Rajeev Gupta
    Message was edited by:
            RAJEEV GUPTA

    ><i>so i cant use apply control rec values from payload.........</i>
    rajeev,
    I know this has nothing to do with the original problem but please do bear.
    If I undertood you posts correct, the Sender Partner Name is set in the Idoc Control record in the field SNDPRN in the mapping using some mapping logic.
    Now, this is the partner name with which the idoc is to be posted to thge R3 system.
    if yes, then like I have pointed above, using "Take Sender From Payload" in the Receivcer Idoc Adapter is a better option as pointed in the SAP help as well.
    As you are already populating the idoc control ecord with SNDPRN just make the SNDPRT as LS and then select "Take Sender from Payload" in the receiver Idoc adapter and the Sender Partner Name will not be taken from SDNPRN just as you want.
    This is different from "Apply Control Records From Payload" .
    Regards
    Bhavesh
    PS : you can ignore this reply if the situatios is too late to make this change and thanks for the patience.

  • Role mapping between Portal and Back end systems

    I am new to SAP EP.
    I just want to know how the mapping between portal and back end system happens.
    Scenario : There is a role in ECC system...say FI India. Now there is a request by the FI team that they want to access this role from Portal. In this case, please tell me how the security team will do it. Because I guess, it has to be done by the security team.

    Hi,
    Usually the role from backend is uploaded to portal then it will be seen as Group and we need to assign our portal roles to this group. Please refer [this|http://help.sap.com/saphelp_nw73/helpdata/en/d6/7859ec80df46738e23ccb4f4c8c502/content.htm].
    Regards,
    Samir

  • Explicity mapping between ActionScript and Java objects for the BlazeDS Messaging Service

    The BlazeDS documentation shows how to explicitly map between ActionScript and Java objects. For example, this works fine for RPC services, e.g.
    import flash.utils.IExternalizable;
    import flash.utils.IDataInput;
    import flash.utils.IDataOutput;
    [Bindable]
    [RemoteClass(alias="javaclass.User")]
    public class User implements IExternalizable {
            public var id : String;
            public var secret : String;
            public function User() {
            public function readExternal(input : IDataInput) : void {
                    id = input.readObject() as String;
            public function writeExternal(output : IDataOutput) : void {
                    output.writeObject(id);
    and
    import java.io.Externalizable;
    import java.io.IOException;
    import java.io.ObjectInput;
    import java.io.ObjectOutput;
    import java.util.HashSet;
    import java.util.Iterator;
    import java.util.Set;
    public class User implements Externalizable {
        protected String id;
        protected String secret;
        public String getId() {
            return id;
        public void setId(String id) {
            this.id = id;
        public String getSecret() {
            return secret;
        public void setSecret(String secret) {
            this.secret = secret;
        public void readExternal(ObjectInput in) throws IOException,
                    ClassNotFoundException {
            id = (String) in.readObject();
        public void writeExternal(ObjectOutput out) throws IOException {
            out.writeObject(id);
    If I called an RPC service that returns a User, the secret is not sent over the wire.  Is it also possible to do this for the messaging service? That is, if I create a custom messaging adapter and use the function below, can I also prevent secret from being sent?
    MessageBroker messageBroker = MessageBroker.getMessageBroker(null);
    AsyncMessage message = new AsyncMessage();
    message.setDestination("MyMessagingService");
    message.setClientId(UUIDUtils.createUUID());
    message.setMessageId(UUIDUtils.createUUID());
    User user = new User();
    user.setId("id");
    user.setSecret("secret");
    message.setBody(user);
    messageBroker.routeMessageToService(message, null);

    Hi Martin. The way that AMF serialization/deserialization works for BlazeDS is the same regardless of which service is being used, so yes that code will work for messaging as well. On the server, the serialization/deserialization of messages happens at the endpoint. For an incoming message for example, the endpoint deserializes the message and then hands it off to the MessageBroker which decides which service/destination to deliver the message to.
    That was a good question. Thanks for asking it. Lots of people are used to doing custom serialization/deserialization with the RPC services (RemoteObject/RemotingService) but I'm not sure everyone realizes they can do this for messaging as well.
    -Alex

  • Users mapping between EP and ABAP system

    Hello
    I'd like to ask for some guidance in my quest
    Current situation looks like this:
    I've configured UME in AS Java to work with LDAP as read only data source. Then I've configured SPNego to run SSO - It works, users from MS AD can log into portal.
    Now I have application in WD which authorizes via EP/AD - works fine.
    And next step is users mapping between AD and ABAP backend (serving some BAPI's for WD app)
    I've found a bunch of help pages starting from
    http://help.sap.com/saphelp_nwce711/helpdata/en/0b/d82c4142aef623e10000000a155106/frameset.htm
    But somehow it's quite complicated to achieve this mapping. I've tried to set RFC destinations logon type to user mapping but without succes.
    Can anyone point me to some more clear example or give path to configure this scenario? Is there a way of configuring this with NWA or some XML file editing is required?
    Any help will be appreciated.
    BTW: whole environment is in version 7.11
    Best regards
    Maciej

    There is no equivalent to SPNEGO on the ABAP side.
    If your goal is to propagate the user, then possible options are:
    -> Wait for SAML 2.0 or invest now in a SAML 1.0 provider.
    -> Use the same kerberos ticket for the EP as what your ABAP system will accept: route = SNC and 3rd party libraries.
    -> Issue SAP logon tickets for the ABAP system from the EP, and use these in your WDA.
    Another option is to expose the service with saved logon data in the ICF. If the service is just a wrapper for the BAPI, then you can also consider using trusted RFC between the service and the backend, but this might not be acceptable for your service.
    I have only done experimental stuff with this and some of the above is not released yet. Also consider the consequences, even if it "does work"...
    Cheers,
    Julius

  • TS1925 iPad IOS 7.0.2 and Mountain Lion 10.8.5 Calendar colors do not match between computer and device.  Problem did not exist until updated IOS arrived.  Colours change of their own free will despite being corrected on both iPAD and MacBook Pro.  Any an

    iPad IOS 7.0.2 and Mountain Lion 10.8.5 Calendar colors do not match between computer and device.  Problem did not exist until updated IOS arrived.  Colours change of their own free will despite being corrected on both iPAD and MacBook Pro.  Any answers?

    Please do not post the entire messages log as it takes up unnecessarily a lot of space.  It seems that there is a corrupt/nonfunctional file called
    [email protected]nt.plist
    Go to your hard drive, enter library, go into users, and go into launch agents and delete the thing above.  Empty the trash and restart.

  • Photos not streaming between iPad and iPhone

    Photos are not streaming between iPhone and iPad?

    Sorted it. I went to settings, photos and camera, turned off my photo stream and deleted photos, then turned back on my photo stream and the photos I had taken with my iPhone were on my iPad.

  • Anytime I try to download pages to my MacBook Pro a window comes up that says we could not complete your request and that there was an error in the app store. someone please help

    anyime that i try to download pages on my macbook pro from the app store a window comes up that says we could not complete your request and that there was an error in the app store. someone please help

    Error
    what is error code 1009?

  • My iMessage is not working between mine and another's iPhone. What can I do to fix it?

    My iMessage is not working between mine and another's iPhone. What can I do to fix it?

    What does not working mean?

  • Photos not syncing between Mac and iPhone since update to Photos on Mac.

    Ever since I updated to Photos on my Late 2013 macbook pro retina, photos are not syncing between it and my iPhone 6. Both are updated to the most recent software update. Photo stream is on. Does anyone have this problem or know a solution?

    You will have to go the the Photos tab in iTunes when you connect the iPhone.  Then reset the photo sync options.  They were reset with the upgrade to use iCloud by default, but you can change the settings back to sync folders, just like before.

  • Firefox is not loading the requests and invites on the right side of the Facebook home page. AOL is loading everything correctly.

    Firefox in not loading the "requests and invites" on the right side of the Facebook Home Page. I don't think it is a Facebook problem because AOL loads it correctly. This is the third day I have had this problem. I don't like to use AOL because it is much slower. Please help.
    == This happened ==
    Every time Firefox opened
    == I opened Facebook three days ago

    "Clear the Cache": Tools > Options > Advanced > Network > Offline Storage (Cache): "Clear Now"
    "Remove the Cookies" from sites that cause problems: Tools > Options > Privacy > Cookies: "Show Cookies"
    Start Firefox in [[Safe Mode]] to check if one of your add-ons is causing your problem (switch to the DEFAULT theme: Tools > Add-ons > Themes).
    See [[Troubleshooting extensions and themes]] and [[Troubleshooting plugins]]

  • IBooks not syncing between iOS7 and Maverick

    iBooks not syncing between iOS7 and Maverick
    Just updated my MBP to Mavericks and only a few items have synced from my phone to the mac in iBooks.  The phone was also updated to iOS7.0.3 (the latest) today too before the Mavericks update.
    Does anyone else have this problem?  Is this a bug which will hopefully be fixed shortly? Or is there something I can do to resolve this?
    I have a number of .pdf´s in iBooks (.pdf books) on the phone and would obviously want everything on the phone accessible on the computer, as is the idea.
    Many thanks for your help/advice.
    Susan :S

    This has been my headache since day one and a complete swing and a miss by Apple.  I haven't been able to get ANYTHING I have not explicitely purchased from iTunes to sync in iBooks across device.
    For example:  If I load an ePub or PDF into iTunes and "manually" add to a device, this works just fine.
    However, if I open a PDF file on my iPhone into iBooks, it doesn't show up in any of my other devices, including the new iBooks on my iMac with Maverick.  it doesn't matter which device it's added, nothing syncs if it's not purchased from iTunes.
    Please, someone make me a liar and tell me I've completely missed something.
    Apple:  Why or why can't I add PDF files to iBooks on my iMac and have them automagically show up in the collection I created on all my devices?  Because I didn't purchase them from you, you say?  Stupid, stupid, stupid.
    Then don't let me add it in the first place and stop advertising "my content anywhere on any device" because this has been broken from day one.

  • Notes not syncing between outlook and itunes

    Itunes (12.1.1.4) is not syncing my notes correctly between outlook and my iphone.
    new notes transfer, but changes are not working.
    I have one note that if I changed it in outlook, it kept revertting to whatever was on my iphone
    Then another one, any changes made in the phone, will revert to what was saved in outlook.
    This does not happen consistently (not with all notes) but I can get it to repeatedly happen.
    Also, If I make changes to the same note in both places and then sync, the sync procedure used to give mt he option to pick the one I wanted.  That is no longer happening either.
    I am using outlook 365, current version.
    And, I'm using an iphone 5 with 8.1.2 os

    On your Mac open System Preferences > iCloud
    Deselect Notes then reselect it.
    On your iOS devices, tap Settings > iCloud
    Switch Notes off then back on.
    Give iCloud a few minutes to re sync the data.

  • Form load rules are not working on display and edit forms

    Hi
    I have customized SharePoint 2013 list form using InfoPath 2013. I want to hide certain fields based on user group. I created rules on form load for that. These rules are working fine on New Form but are not working on display and edit form.
    What can I do?

    It could be because the value might have not changed ie, you might be checking for a particular value, the values might have got overwritten when the new form is saved, see if that value is blank or overwritten in display and edit forms.
    I would first check the form load rules and check those values again in Display form and edit form, if the values are not getting cleared/overwritten.
    It would be better if you could upload the screenprint.
    Hope this helps!
    Ram - SharePoint Architect
    Blog - SharePointDeveloper.in
    Please vote or mark your question answered, if my reply helps you

  • Difference between "Export" and "Export form Fact Table" package

    Hi experts!
    Could you tell me what is the difference between "Export" and "Export form Fact Table" package?
    Tkanks
    Gabriel

    Hi,
    Basic difference between Export and Export from Fact Table is
    In standard package "Export" : We can perform this function when we are online and we have adequate amount of data to be exported. We can run this package eg: weekly or monthly. Here we use u201CExport Packageu201D to pull the data
    And in the administrative package "Export from Fact Table"   Mostly it is used to do the backend data loading  basically bulk data , also any formula logic has to be implemented on the data in that case we use the administrative package.
    Hope this helps.

Maybe you are looking for