Request dataset in OIM 11gr2

Hi Experts,
I have integrated OIM 11gR2 with Siebel and able to provision by xelsysadm. My requirement is End User will be raising request for siebel resource and approval workflow associated with is triggered.
1. End user raising the request is able to view the process form, I need to restrict few attributes i.e. position and responsiblity should not be visible to end user
2. Position and Responsibility should be provided by approver (this is specified in request data set of provision resource)
3. As per Oracle document there is no request data set for PROVISION and MODIFY resource. What is the replacement for this?
4. After Request is raised it has been assgined to xelsysadm, how do i control the approval ?
Regards
A Abhinay

1. End user raising the request is able to view the process form, I need to restrict few attributes i.e. position and responsiblity should not be visible to end userEnd user will see Application Instance Form and you can customize the UI to hide attributes
2. Position and Responsibility should be provided by approver (this is specified in request data set of provision resource)
Make your Java Code/Beans/Expression to show/hide attributes conditionally.
3. As per Oracle document there is no request data set for PROVISION and MODIFY resource. What is the replacement for this?Application Instance Form
4. After Request is raised it has been assgined to xelsysadm, how do i control the approval ?Approval Policies

Similar Messages

  • Customizing request datasets in OIM 11g

    Hi Friends,
    I have couple of questions/issues while customizing request datasets in OIM 11g. Can you please help me?
    1) I gave read-only="true" in my request dataset for one of the attribute, but I was still able to edit that attribute value while raising requests.
    2) I gave hidden="true" in my request dataset for one of the attribute, but I was still able to see that attribute while raising requests.
    3) I have around 90 attributes in my request dataset. Is there any way to display category type and under that category display the attrbitues i.e. just like attributes in user profile.
    4) As I have 90 attributes, I am expecting the format will be like first 45 will be shown in left panel(column) and remaining 45 in right panel (column). Instead of this , it is showing first 70 in left panel and the remaining 20 in right panel which is very ugly to see. Is there any way to show frist 45 on left side and remaining 45 on the right side? Please help me.

    Regarding the first two points:
    1) The read only property applies to the approver only, i.e. approver can read and not modify the attribute. It does not apply to the requester. I don't believe you can configure a read-only attribute in the data set.
    2) If you want to hide an attribute, you can restrict it in your request template.

  • How to polulate data from lookup using request dataset in OIM 11g

    Hi,
    Using Request dataset in OIM 11g, I need to display one dropdown with the roles those need to come from Lookup.
    For Ex; I have 2 resources,i.e Resource A and Resource B. Resource A has 5 roles and Resource B has 3 Roles.
    While creating a request, If I select Resource A, then I should be able to get 5 Roles and if I select Resource B then I should be able to see corresponding 3 roles.
    Pls. note I have only one Look up definition , where I have roles for both Resource A and B.
    I have done simillar thing in OIM 10g , however I am unable to do it using OIM 11g Request dataset.
    Pls suggest.

    Hi BB,
    I am trying to follow up your response.
    You are suggestng to use prepopulate adapter for to populate respource object name, that means We have to just use an sql query from obj tabke to get the resource object name. right ?? it could be like below, what should I have entity-type value here ??
    <AttributeReference name="Field1" attr-ref="act_key"
    available-in-bulk="false" type="Long" length="20" widget="ENTITY" required="true"
    entity-type="????"/>
    <PrePopulationAdapter name="prepopulateResurceObject"
    classname="my.sample.package.prepopulateResurceObject" />
    </AttributeReference>
    <AttributeReference name="Field2" attr-ref="Field2" type="String" length="256" widget="lookup-query"
    available-in-bulk="true" required="true">
    <lookupQuery lookup-query="select lkv_encoded as Value,lkv_decoded as Description from lkv lkv,lku lku
    where lkv.lku_key=lku.lku_key and lku_type_string_key='Lookup.xxx.BO.Field2'
    and instr(lkv_encoded,concat('$Form data.Field1', '~'))>0" display-field="Description" save-field="Value" />
    </AttributeReference>
    Then I need think about the 'Lookup.xxx.BO.Field2' format.
    Could you please let me know if my understanding is correct?? What is the entity-type value of the first attribute reference value?
    Thanks for your all help.

  • Lookup codekey value in Request dataset in OIM 11g

    Hi,
    Below is my Attribute reference in Request dataset in OIM 11g.
    Could you please suggest what could be the possible Lookup code key values in lookup 'Lookup.AccountingControl.Roles'
    I tried giving CodeKey values as "ACCOUNTING CONTROL~" then Decode value as "Administrator" , However it does not give any value.
    So I think what I am giving as Codekey value is wrong based on below lookup query.
    What could be the correct value for CodeKey ? Thanks!!
    <AttributeReference name = "Role Name" attr-ref = "Role Name" type = "String" length = "256" widget = "lookup-query"
    available-in-bulk = "true"
    required = "true"
    primary = "true">
    <lookupQuery
    lookup-query = "select lkv_encoded as Value,lkv_decoded as
    Description from lkv lkv,lku lku where lkv.lku_key=lku.lku_key and
    lku_type_string_key='Lookup.AccountingControl.Roles' and instr(lkv_encoded,concat('ACCOUNTING CONTROL','~'))>0"
    display-field = "Description"
    save-field = "Value"/>
    </AttributeReference>

    Yes..You were right.
    You resolved one of my issue. I have marked it as answered giving 10 pts ;-)
    I think I have already raised another forum question where I needed to pass this Accounting Control as dynamic and this is one Resource Obkect selected from previous page.
    You asked me to use Prepopulate adapter to get the Resource Object name.
    I have still some questions to solve that issue.I will put that question there. It would be great yo answer it.

  • Develop pre-populate adapter in request dataset in OIM 11G

    Hi Friends,
    I have a field say UD_TEMP_FORM_FIELDA on the process form which is going to be populated based on the value of a field SAY UD_TEMP_FORM_FIELDB on the request dataset.
    So my request dataset will have only one field which is UD_TEMP_FORM_FIELDB.
    And my process form will have two fields UD_TEMP_FORM_FIELDA and UD_TEMP_FORM_FIELDB.
    And I developed a pre-populate adapter on the process form to populate UD_TEMP_FORM_FIELDA field based on the value of UD_TEMP_FORM_FIELDB during provisioning. But pre-population is not at all getting triggered during provisioning. I believe I need to put UD_TEMP_FORM_FIELDA also on the request dataset and pre-populate its value in request dataset itself and pass the value from request data set to process form. Is this correct?
    If so, as per the documentation, we need to create a request dataset with pre-pop adapter in the below format.
    <AttributeReference name="Domain" attr-ref="domain" available-in-bulk="true" type="String" length="20" widget="text">
    <PrePopulationAdapter classname="oracle.iam.request.DomainPrepopulateAdapter"/>
    </AttributeReference
    As we are specifying only the class name in the above statement,
    1) How to pass the value of UD_TEMP_FORM_FIELDB to this class.
    2) Which method in the class will execute
    3) How to Registert this class.
    Can you please provide me some steps/urls for the above requirement?
    Thanks,
    Mike

    Hi Nishith,
    Thanks for your response.
    As per my requirement I am going to keep UD_TEMP_FORM_FIELDA (Group Owner) and UD_TEMP_FORM_FIELDB (AD Group Name) in the child forms and I am going to use the below pre-populate adapter code to get the value for UD_TEMP_FORM_FIELDA based on value of UD_TEMP_FORM_FIELDB.
    My question is:
    If I raise a request with only one value in the child form, then the below code will code work. But, If I add more than one value say AD groups in the child form while raising a request, this code is going to retrieve same owner value for all AD groups as it will go by FOR loop.
    How to pre-populate the individual owner for the individual AD group given in the child form? Please let me know.
    public class PrepopEBSRespValue implements PrePopulationAdapter {
    public Serializable prepopulate(RequestData requestData) throws RequestServiceException,
    tcAPIException,
    tcInvalidLookupException,
    tcColumnNotFoundException {
    List<Beneficiary> beneficiaries = null;
    List<RequestBeneficiaryEntity> benEntities = null;
    List<RequestBeneficiaryEntityAttribute> benAttrs = null;
    String ownerValue="";
    beneficiaries = requestData.getBeneficiaries();
    if (beneficiaries != null && !beneficiaries.isEmpty())
    for (oracle.iam.request.vo.Beneficiary beneficiary : beneficiaries)
    benEntities = beneficiary.getTargetEntities();
    if (benEntities != null && benEntities.size() > 0)
    for (oracle.iam.request.vo.RequestBeneficiaryEntity benEntity : benEntities)
    benAttrs = benEntity.getEntityData();
    if (benAttrs != null && benAttrs.size() > 0)
    for (oracle.iam.request.vo.RequestBeneficiaryEntityAttribute benAttr : benAttrs)
    if(benAttr.hasChild())
    java.util.List <oracle.iam.request.vo.RequestBeneficiaryEntityAttribute> list = benAttr.getChildAttributes();
    java.util.Iterator iterator = list.iterator();
    while(iterator.hasNext())
    oracle.iam.request.vo.RequestBeneficiaryEntityAttribute attribute =(oracle.iam.request.vo.RequestBeneficiaryEntityAttribute)iterator.next();
    String attrName=attribute.getName();
    if (attrName.equalsIgnoreCase("Owner"))
    String lookupName="Lookup.Owner.values";
    System.out.println("Getting decoded value for the given code key..");
    String attrValue=attribute.getValue().toString();
    HashMap searchcriteria = new HashMap();
    searchcriteria.put("Lookup Definition.Lookup Code Information.Decode", attrValue);
    Thor.API.Operations.tcLookupOperationsIntf lookupIntf=Platform.getService(Thor.API.Operations.tcLookupOperationsIntf.class);
    tcResultSet result = lookupIntf.getLookupValues(lookupName,searchcriteria);
    for(int i=0;i<result.getRowCount();i++)
    result.goToRow(i);
    ownerValue = result.getStringValue("Lookup Definition.Lookup Code Information.Code Key");
    System.out.println("Decoded Value::"+ownerValue);
    return (Serializable) ownerValue;
    }

  • Roles not visible in the Catalog while requesting roles in OIM 11gr2

    Hi Experts,
    We have recently installed the OIM 11g r2 for a POC purpose and created few roles. The issue is we are unable to see the roles created while requesting the roles in catalog.
    Already run the Catalog Synchronization Job and its scheduled to run in every 15 mins.
    Thanks in advance for your help.

    Also, which type of Role Category did you chose for the ones you created ? If you chose "OIM Roles" they won't appear in the catalog, any other Category (e.g. "Default") will be shown.
    Try creating a new role with the "Default" category to test it; changing an OIM Role to another category won't work, it will still be hidden.

  • Issue with request approval in OIM 11gR2

    HI,
    I have created an workflow so that when ever a user tries to provision an entitlement to a user then request should go the approver. Now whenever the request has been raised , workflow has been triggered and the approver approves the requet and the status of the request changes to approve. But even then the entitlement is not getting provisioned to the user. I am getting the below logs :
    <Mar 20, 2013 5:10:09 AM PDT> <Error> <oracle.soa.bpel.engine.delivery> <BEA-000000> <Error: Fault not handled.
    failure to handle a fault thrown from a scope, by any blocks in the scope chain.
    This exception occurred because the fault thrown in the BPEL flow was not handled by any fault handlers and reached the top-level scope.
    A top-level fault handler should be added to the flow to handle faults not caught from within the flow.
    happened for conv_id = urn:E6A7D570915611E2BFA2613558FA7D90 and message guid = urn:E6A7D570915611E2BFA2613558FA7D90 and subscriberId = default/ApprovalWorkflowProj!3.0*soa_d071bc60-5d33-4a6d-a2f3-0a004bc66666/ApprovalProcess/20002-BpRcv1-BpSeq2.6-3, transaction will be rolled back>
    <Mar 20, 2013 5:10:09 AM PDT> <Error> <oracle.soa.bpel.engine.dispatch> <BEA-000000> <failed to handle message
    com.oracle.bpel.client.BPELFault: faultName: {{http://schemas.oracle.com/bpel/extension}remoteFault}
    messageType: {{http://schemas.oracle.com/bpel/extension}RuntimeFaultMessage}
    parts: {{
    summary=<summary>oracle.fabric.common.FabricInvocationException: Unable to access the following endpoint(s): https://stgsso.a.b.c.com:443/workflowservice/CallbackService</summary>
    ,detail=<detail>Unable to access the following endpoint(s): https://stgsso.a.b.c.com:443/workflowservice/CallbackService</detail>
    ,code=<code>null</code>}
    Please help me in resolving this issue.
    Thanks,

    1. End user raising the request is able to view the process form, I need to restrict few attributes i.e. position and responsiblity should not be visible to end userEnd user will see Application Instance Form and you can customize the UI to hide attributes
    2. Position and Responsibility should be provided by approver (this is specified in request data set of provision resource)
    Make your Java Code/Beans/Expression to show/hide attributes conditionally.
    3. As per Oracle document there is no request data set for PROVISION and MODIFY resource. What is the replacement for this?Application Instance Form
    4. After Request is raised it has been assgined to xelsysadm, how do i control the approval ?Approval Policies

  • How to display Checkbox instead dropdown in OIM 11g using request dataset

    Hello,
    I am trying to display as check boxes instead of dropdown in requestor screen using request dataset.
    It still shows dropdown. Here is my request dataset.
    Is there anything wrong??
    <?xml version='1.0' encoding='UTF-8'?>
    <request-data-set xmlns="http://www.oracle.com/schema/oim/request" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" operation="PROVISION" entity="ACCOUNTING CONTROL" name="ProvisionResourceACCOUNTING CONTROL" xsi:schemaLocation="http://www.oracle.com/schema/oim/request">
    <AttributeReference available-in-bulk="true" length="20" widget="*checkbox*" type="*Boolean*" attr-ref="Instance" name="Instance" required="true">
    <lookupValues encoded-value="Dev" decoded-value="ACCOUNTING CONTROL (DEV)"/>
    <lookupValues encoded-value="QA" decoded-value="ACCOUNTING CONTROL (QA)"/>
    <lookupValues encoded-value="PRD" decoded-value="ACCOUNTING CONTROL (PRD)"/>
    </AttributeReference>
    </request-data-set>
    Thanks!!!

    What are you trying to achieve here? If you are using checkboxes than you can't have multiple options to it but would rather have to put static values.
    Something like:
    <AttributeReference name="Field1" attr-ref="Dev" available-in-bulk="false" type="Boolean" length="30" widget="checkbox" required="false"/>
    <AttributeReference name="Field2" attr-ref="QA" available-in-bulk="false" type="Boolean" length="30" widget="checkbox" required="false"/>
    <AttributeReference name="Field3" attr-ref="PRD" available-in-bulk="false" type="Boolean" length="30" widget="checkbox" required="false"/>
    AFAIK OIM does not allow for a multiselect box in dataset.
    -BB

  • OIM 11gR2- Approved Requests remain in Operation Initiated Status

    Hi,
    We are using OIM 11gR2 and we are seeing the following behaviour whenver we request for Application Instance
    1) End User logs in and requests for Application Instance.
    2) The request is created and assigned to the manager for approval.
    3) Manager logs in and approves the request.
    4) The Requested resource is assigned to the user and the status of the resource is Provisioned. All the tasks in the Resource History are in Completed status.
    5) If we see the status of the request, it remains in Operation Initiated status.
    We expect the status of the Request to be Request Completed and not remain in Operation Initiated. We are sending a mail notification to the manager once resource is provisioned.
    If we remove the notification part, the status of the Request is coming as Request Completed as expected. However with notification getting triggered we are getting problem.
    Please suggest a solution.
    Thanks and Regards,
    Mayuri
    Edited by: 943112 on Mar 11, 2013 7:09 AM

    Usually after the request is approved and if there is any pending task in provisioning it goes to 'Post Operation Processing Initiated' status. If 'Task to Object Status' mapping is not done properly the request stays in the same status even though all the tasks are completed.
    check this link for various request status
    http://docs.oracle.com/cd/E27559_01/user.1112/e27151/req_mangmnt_user.htm#BGBGIIDH
    In your case it is going to 'Operation Initiated' status when notification is attached. Can you tell where have you triggered notification? In SOA approval task or in Provisioning process? If it is in SOA check whether proper status is returned to the callback webservice after that. Else if it is in provisioning check for task object status mapping.

  • Pre-populate Organization to the self registration request in OIM 11gR2 PS1

    Hi All
    I want to know if there is a way to pre-populate Organization to the self registration request in OIM 11gR2 PS1.
    I am trying to configure auto approval and for that I need to add org to the request.
    Thanks

    Hi,
    you can look into the following post : https://forums.oracle.com/message/10830661
    Thanks

  • How to raise create role request in OIM 11gR2?

    How can I let a user to raise a create role request in OIM 11gR2?
    If I assigned the Role Viewer or Role Authorizer admin role to the user, the create button for role is disabled.
    If I assign the user as Role Administrator, the role will be directly created without raising any request.
    If I assign the user as SPML Admin, the create button is enabled, but after filling the form and clicking the "save" button, an exception will be thrown saying "IAM-3054100 : The logged-in user AA10127 does not have createRole permission on Role entity."

    Hi,
    i have changed identity page logo by using customize option, But in sysadmin page there no such option, is it possible to change image same as identity console.

  • OIM 11g Request Dataset - Request Dataset lookupquery element prepopulation

    Hi,
    I am trying to use the PrePopulationAdapter to pre-populate the value of a lookupquery element. However I face some issue when I try to use this dataset. Provided below is a sample xml code snippet of my request dataset.
    <AttributeReference name="adminlogin" attr-ref="adminlogin" type="String" length="20" widget="lookup-query" available-in-bulk="true">
    <lookupQuery lookup-query="SELECT USR_KEY as UKEY, USR_LOGIN as ULOGIN FROM TEMP_USR where USR_TYPE='$Form Data.admintype'" display-field="ULOGIN" save-field="UKEY"/>
    <PrePopulationAdapter name="prepop" classname="oracle.iam.request.AdminPrepopulateAdapter"/>
    </AttributeReference>
    Is it possible to pre-populate a request dataset attribute of type lookup-query?
    Any kind of help or suggestion is greatly appreciated.
    Thanks
    Deepa

    Lookup query will not pre-populate the attribute but will just give you the list of possible values (even if it is just 1).
    What issue are you seeing when you are using the dataset which you mentioned? Make sure that TEMP_USR is available in the OIM schema. If you want to pre-populate data into the attribute then you need to use a pre-populate adapter.
    Prepopulation of an Attribute Value During Request Creation
    -Bikash

  • OIM 11gR2 Request Validator Plugin and Axis based Web Service Client

    Hi,
    I am trying call a web service client generated using axis2 from a request validator plugin in OIM 11gR2 and I have all the axis related jar files under the plugin lib folder but it fails due to the axis reference issues.
    I tried putting the jar files under different locations like thirdparty folder, server lib etc. But it is giving issues every where. Please let me know if you have some solution.
    Thanks in advance,

    Haven't worked on this, but have you tried by putting the axis libraries inside the plugin lib folder when you are building up the plugin? Also you need to check asix2 compatibility with weblogic version with R2.
    -Bikash

  • OIM: Hide provisioned roles/responsibilities in the modify provisioned resource request dataset

    Hi,
    We are provisioning Oracle E-Business Suite R12 through EBS UM connector. Is there a way where we can either hide the already provisioned EBS roles/responsibilities in the available list of roles/responsibilities or move these under Selected Responsibilities and make them non-editable ? I couldn't find a way to do that in the Modify Provisioned Resource E-Business Suite Request Dataset. Please advise
    Thanking in Advance
    Abir

    1. End user raising the request is able to view the process form, I need to restrict few attributes i.e. position and responsiblity should not be visible to end userEnd user will see Application Instance Form and you can customize the UI to hide attributes
    2. Position and Responsibility should be provided by approver (this is specified in request data set of provision resource)
    Make your Java Code/Beans/Expression to show/hide attributes conditionally.
    3. As per Oracle document there is no request data set for PROVISION and MODIFY resource. What is the replacement for this?Application Instance Form
    4. After Request is raised it has been assgined to xelsysadm, how do i control the approval ?Approval Policies

  • OIM - Request DataSet Validation - Fetch Unchanged Attributes

    Hi ,
    I have written a request Dataset Validatior . I am able to get the values of attribute that's updated by the user .
    For example , If the user Changes the Middle Name alone , i get middle name in the code , but I need some sample code which can give me all the attribute values in the template.
    any samples much appreciated.
    Cheers
    Eash

    public class GenericRequestValidator implements RequestDataValidator {
      public void validate(RequestData reqData) throws InvalidRequestDataException{
             List<Beneficiary> beneficiaries = null;    
      List<RequestBeneficiaryEntity> benEntities = null; 
             List<RequestBeneficiaryEntityAttribute> benAttrs = null;
            beneficiaries = reqData.getBeneficiaries();
      if (beneficiaries != null && !beneficiaries.isEmpty()){
                     for (Beneficiary beneficiary : beneficiaries){
                benEntities = beneficiary.getTargetEntities();
                        if (benEntities != null && benEntities.size() > 0){
      for (RequestBeneficiaryEntity benEntity : benEntities) {
      benAttrs = benEntity.getEntityData();
      if (benAttrs != null && benAttrs.size() > 0){
                           for (RequestBeneficiaryEntityAttribute benAttr : benAttrs){
       if(benAttr.hasChild()){
      List <RequestBeneficiaryEntityAttribute> list = benAttr.getChildAttributes();
                              Iterator iterator = list.iterator();
                                       while(iterator.hasNext()){
                              RequestBeneficiaryEntityAttribute attribute =(RequestBeneficiaryEntityAttribute)iterator.next();
         // all the vallues u can use here
                                System.out.println("GenericRequestValidator.validate() Name "+attribute.getName());
                                System.out.println("GenericRequestValidator.validate()) Value "+attribute.getValue());

Maybe you are looking for