Access OID Groups in Portal

I've setup item access privileges on a page. I have created a new OID group and attempted to give this group access to this item. I can choose the group, but when it's added, it does not show the group name, rather a number, i.e., (D8F909F2393035B7E0340003BA2183E9).
What can I do to make the group name show up?

Hi Pramod,
To access Peoplesoft applications from Portal you have two options :
1) By using Appintegrator iView : As all the applications in peoplesoft has their own urls like for attendance regularization, leave applicaion etc., you create appintegrator iview which points to ur peoplesoft application and by doing user-mapping, users can access these applications. Refer link for [How to use appintegrator iview|http://help.sap.com/bp_epv160/documentation/How-to_Guides/25_HowToUseAppIntegrator_en.pdf]
2) By developing application in VC: You can easily create nice looking applications in VC & host them on portal. VC can pull data from peoplesoft in 3 ways :
      - By using WebService : Expose peoplesoft applications as web services and u can easily create model in VC. (Recommended)
      - Directly accessing database using JDBC drivers : Though this approach is not recommended, u can directly connect to peoplesoft database tables and fetch the desired data.
      - iWay JDBC drivers : These are 3rd party drivers available to connect to peoplesoft database.
I hope this will help u.
Thanks & Regards,
Amol Ghodekar
(Reward points for helpful answers)

Similar Messages

Request OID group access in OIM

Hi All,
I have OIM (11.1.1.5.2) and the OID Connector (9.0.4.14) installed. Is it possible for a user to request access to a specific group in OID using the OIM Self Service Console?
Regards,
user10233157

Yes, This is possible. You need to create request dataset with Group details and import it to MDS.
Sample Dataset for AD Resource is
*<?xml version="1.0" encoding="UTF-8"?>*
*<request-data-set xmlns="http://www.oracle.com/schema/oim/request" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.oracle.com/schema/oim/request" name="ModifyResourceAD User" entity="AD User" operation="MODIFYRESOURCE">*
*<AttributeReference name="City" attr-ref="City" available-in-bulk="true" type="String" length="20" widget="text"/>*
*<AttributeReference name="Pager" attr-ref="Pager" available-in-bulk="true" type="String" length="20" widget="text"/>*
*<AttributeReference name="Group" attr-ref="UD_ADUSRC" available-in-bulk="true" type="String" length="500" widget="text">*
*<AttributeReference name="Group Name" attr-ref="Group Name" available-in-bulk="true" type="String" length="500" widget="lookup" lookup-code="Lookup.ADReconciliation.GroupLookup" entitlement="true">*
*</AttributeReference>*
*</AttributeReference>*
*</request-data-set>*
Then in OIM Self Service console select Self Modify Provisioned Resource request type and you will see the OID Groups in the list of available groups to request.

Error while provisioning to OID group

Hi,
we created 2 groups in OID. we ran OID group lookup Reconciliation task and now we are able to see the created Groups in Lookup.OID.Group.
we added the Groups in access policy. but when we are Provisioning Users into OID the Add User to Group task is getting rejected with *"Group Doesn't Exist Error message"*..pleasse help
Thank you

Can you check whether Groups still exists in OID ?
Just Enable the logs for OID connector only and paste the logs here.

Users not provisioned from OIM to OID groups

I've created an Access policy such that when i create a user with role as consultant he is automatically provisioned to OID resource and OID group( cn=group1,cn=groups,dc=ad,dc=company,dc=com ).
The user is provisioned to OID users(cn=users) but not to cn=group1,cn=group....
What could be wrong?
i have run the OID group lookup tasks to generate freshly added group lookups. Theses lookups are populated in process form when i create an access policy.
For ex the lookup generated is cn=group1,cn=group,dc=ad,dc=company,dc=com and the decode value is group1
The user profile and process form are not linked. That means changes in process form are not reflected to user profile. Can this be possible reason for the hassle defined above
please help me resolve this issue.
Edited by: Chhavi Saluja on Feb 15, 2010 1:30 AM

Hi,
Today I have also done the same thing of auto provisioning of OID through access policy. Only difference is that for selecting "Container DN" and "User group" we have created two user defined fields(lookup)in the user form which will refer to the lookups "Lookup.OID.Organization" and "Lookup.OID.Group" for inputs.These lookups are already reconciled once from OID.
As far as "container DN" iam successful but while selecting "user group" iam able to select and when i click on "create user" user is getting provisioned to OID into Container DN i specified.But user is not going into that particular group i specified.Iam assuming the reason is that as User Group is a mutivalued attribute and if we observe the process form of group selection we will see the add button. But on user form we dont have the option of child form to ADD/REMOVE the groups.
Someone pls suggest how to proceed further on this.How do i push the user into particular group/groups from the create user form itself?

Migrating OID groups to OIM

We have been given the task of migrating our existing identity management systems to OIM (Oracle Identity Manager).
Part of our existing system uses OID (Oracle Internet Directory). All users have an entry in OID. Some of our systems use OID for authentication.
We also use OID to hold users' entitlements/privileges that control access to our applications. We use OID groups (represented by entries based on groupOfUniqueNames and orclGroup objects) to do this. For example we might have an application called 'Finance' with three levels of access represented by OID groups e.g. 'finance_enquiry', 'finance_updater', 'finance_superuser'. Those groups would all belong to a parent group called 'finance_application'. To access the application the user needs to be a member of 'finance_application' group or one of its child groups. Access to features of the application are controlled by membership of the 3 child groups. We have an application that maintains groups, group membership, and user entitlements in OID.
As part of the migration project we want to move maintenance of groups and group membership from our own application into OIM. The above scenario seems quite basic.
My main question is how would this be done in OIM? Do our current OID groups become OIM Groups? Do they become entries in some lookup table in OIM? Are there any case studies or other documentation that describes this kind of requirement?
I've looked at the OIM Connector for OID documentation but it doesn't describe typical scenarios. It assumes that you know what you are doing.
We also want to give users the ability to request entitlements, and to provide an approval process. So we could have a user who approves/rejects entitlement requests to access to the applications they control. But that's a another topic.
Cheers,
Eric

PeachEye wrote:
We have been given the task of migrating our existing identity management systems to OIM (Oracle Identity Manager).
As part of the migration project we want to move maintenance of groups and group membership from our own application into OIM. The above > scenario seems quite basic.You're about to find out otherwise.
>
My main question is how would this be done in OIM? Do our current OID groups become OIM Groups? Do they become entries in some lookup table > in OIM? Are there any case studies or other documentation that describes this kind of requirement?You'll need a custom connector and lots of OIM tweaks. Your groups will stay in OID, OIM will replace the current application you use to maintain them. That's one way of doing it, no impact to OID schema is the benefit of this way, there are other ways.

Accessing OID in a Linux Environment

Our admin username "portal" password expired, and we need to change the expiration date in our Oracle Directory Manager/Oracle Internet Directory (OID). We are familiar with accessing OID in a Windows environment, but not sure how to do so in a Linux environment.
Is OID accessible using a IE browser (i.e., is there a special port) or is it somehow accessed in the back end?
We are using Oracle-Application-Server-10g/10.1.2.0.2 on Linux. Let us know if you have any ideas.

1. Make sure you have a local X-server (e.g. cygwin or reflexion-X)
2. login to your linux server with x-forwarding
3. export your display to your local x-server.
4. start $ORACLE_HOME/bin/oidadmin
oidadmin is exactly the same as on windows.
An other option is just using your windows oidadmin tool and having it look at your linux server (in stead of you windows server)
Last option is pointing your brower to http://linuxserver/oiddas (assuming your webserver is running on port 80 and you just have to do some small maintenaince on a user)

Cannot access page groups via Navigator "portlet could not be contacted"

On the Portal Navigator's Page Groups tab, the error "The portlet could not be contacted." appears where the list of Page Groups should be.
This is happening for 2 users. I see it the error in 1 browser, but not in another (logged on in both browser as same user).
There are no errors in the Apache error log. There are errors in the OC4J_Portal application log:
07/01/26 14:32:05 portal: id=673911615591,2 ContentFetcher Unexpected Exception Request Failed:oracle.webdb.dispatcher.DispatcherException: I/O Error dispatching request name=content-fetcher0 label=dbPortlet url=http://portal.domain.com:7823/pls/portal/!PORTAL.wwpro_app_provider.execute_portlet/771029724/15 time=949ms timeout=15000ms process=Redirecting
07/01/26 14:32:05 portal: [perf] 199.64.107.21 http://portal.domain.com:7823/pls/portal/!PORTAL.wwpro_app_provider.execute_portlet/771029724/15 id=673911615591,2 type=dbPortlet name=ORACLE+PORTAL,6_500169_6_3_23 status=(null) user=E032034 subscriberID=1 reqTime=949ms waitTime=0ms cache=(null) timeout=No redirects=0 bytes=0 authLevel=10 webCacheStatus=(null) webCacheExpires=(null) webCacheAge=(null) csConv=No readTime=No,0ms pageTimeout=No procTime=0ms
07/01/26 14:32:05 portal: [perf] 199.64.107.21 http://portal.domain.com:7823/pls/portal/!PORTAL.wwpob_page.show?_pageid=6,3,6_23 id=673911615591,2 type=pageMeta name=6,3,6_23 status=200 user=E032034 subscriberID=1 reqTime=90ms waitTime=0ms cache=MISS,NEW timeout=No redirects=0 bytes=19652 authLevel=10 webCacheStatus=MISS,STALE [G] webCacheExpires=86400 webCacheAge=0 csConv=No readTime=No,0ms pageTimeout=No procTime=90ms
07/01/26 14:32:05 portal: [perf] 199.64.107.21 http://portal.domain.com/portal/page?_pageid=6,3,6_23&_dad=portal&_schema=PORTAL id=673911615591,2 type=page name=6,3,6_23 status=200 user=E032034 subscriberID=1 reqTime=1039ms waitTime=0ms cache=(null) timeout=No redirects=0 bytes=16878 authLevel=10 webCacheStatus=(null) webCacheExpires=(null) webCacheAge=(null) csConv=No readTime=No,0ms pageTimeout=No procTime=0ms
I placed the log in debug mode and got the error below:
07/01/26 18:54:20 portal: DEBUG: active=26 id=8817185720131,2 Content Fetcher Caught Dispatcher Exception :
oracle.webdb.utils.PortalExceptionImpl: I/O Error dispatching request
     at oracle.portal.PortalException.<init>(Unknown Source)
     at oracle.webdb.dispatcher.DispatcherException.<init>(Unknown Source)
     at oracle.webdb.dispatcher.HTTPDispatcher.dispatch(Unknown Source)
     at oracle.webdb.dispatcher.CacheDispatcher.dispatch(Unknown Source)
     at oracle.webdb.page.ContentFetcher.run(Unknown Source)
Caused by: java.net.ConnectException: Connection refused: connect
     at java.net.PlainSocketImpl.socketConnect(Native Method)
     at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:305)
     at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:171)
     at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:158)
     at java.net.Socket.connect(Socket.java:452)
     at java.net.Socket.connect(Socket.java:402)
     at java.net.Socket.<init>(Socket.java:309)
     at java.net.Socket.<init>(Socket.java:153)
     at HTTPClient.HTTPConnection$EstablishConnection.run(HTTPConnection.java:3938)
caused by: java.net.ConnectException: Connection refused: connect
     at java.net.PlainSocketImpl.socketConnect(Native Method)
     at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:305)
     at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:171)
     at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:158)
     at java.net.Socket.connect(Socket.java:452)
     at java.net.Socket.connect(Socket.java:402)
     at java.net.Socket.<init>(Socket.java:309)
     at java.net.Socket.<init>(Socket.java:153)
     at HTTPClient.HTTPConnection$EstablishConnection.run(HTTPConnection.java:3938)
What is confusing is how 1 browser gets the error but another does not.
Any suggestions?
TIA

This issue seems to be related to the specific URL used to access the Navigator. I was using a specific URL to display a particular page region for editing, namely
/portal/page?_pageid=6,3,6_23&_dad=portal&_schema=PORTAL&p_otype=FOLDER&p_octx=FOLDER.334478_1453&p_domain=wwc&p_sub_domain=SITEEXP
Once the Navigator is accessed via this URL, all subsequent attempts to access Page Groups Navigator portlet fail.
I changed my process to not use the URL above.

Accessing OID API from Javascript

Hi,
is there a way to access OID API directly from the client side ? using javascript ? Thanks.
To help you understanding what I intend to do : I need to display a hyperlink but this hyperlink will be dynamic based on the "location" of the current user. This "location" can be found by querying OID.
Thanks.
Jeff

Hi
You don't need client side scripting, neither XMLHTTPRequest. Just write a small PL/SQL procedure on the serveur that will create the link you want based on the current user/location retrieved from OID, then call it for instance with a dynamic page
In a dynamic page, write
begin
portal.my_package..my_proc;
end;
and my_proc on the server would do something like :
declare
lc_url long;
begin
-- retrieve into lc_url the oid info you need for current user, may be using additionnal wwctx_api library
htp.p('<a href="http://my_serveur/' || lc_url || ">link</a>');
end;
Loko

Dynamic groups in Portal?

Hi,
Is it possible to use the OID dynamic groups in Portal?
It seems that the users of a dynamic group can't been seen in Portal: could someone tell me more about that?
When will the dynamic groups be implemented in Portal?
Thanks,
Magali

This functionality will not be available to 10.1.2 release 3 which won't be seen until mid 2006 according to a discussion we have had with Oracle.

OIM-OID! provisioning users to OID groups-QUICK HELP NEEDED

hi,
I've installed OIM connected to OID.
I've been assign some tasks:
1) Creating access policy such that when a user is created in OIM, he is provisioned to two groups in OID.... ie. in cn=users and cn=employees (where cn=employess is the group i create under cn=Groups,dc=ad,dc=company,dc=com)
2)Creating an access policy such that when a user is created in OIM, he is provisioned to two additional groups in OID, say I've created two custom groups in OIM and attached membership rules to them. Now when i create a user satisfying the two membership rule,he is assigned to those two OIM groups and provisioned to cn=users,dc=ad,dc=company,dc=com and cn=group1,cn=Groups,dc=ad,dc=company,dc=com and cn=group2,dc=ad,dc=company,dc=com.
Also i want to populate those OID groups into a child table and create their lookups in Process form
Please help me materialise and understand these concepts.
The OID Lookup Recon task for group is running fine, lookup.oid.group is populated with values.
how those groups can be populated in process form child table(OID user group table).
Edited by: Chhavi Saluja on Feb 12, 2010 12:51 AM

As mentioned in my other post you can put these groups in access policy form and all the users assigned by this policy will get these groups. Any issue revert back.

Java portlet customization depending user belongs an OID group

Hi
I have developped a Java portlet with a customization display, depending user belongs a specific OID group or not.
I used a preparedStatement to call the wwsec_api.is_user_in_group PL/SQL procedure.
My problem is that it seems that OID does not close connections as our portal falls after 2 or 3 days when I install this portlet in production.
Therefore I wonder if there is a bug in the API wwsec_api.is_user_in_group (if it close OID connection after returning the boolean result).
Is there a more efficient way in a Java portlet to check if a user belongs an OID group ?
Is there a bug in wwsec_api.is_user_in_group ?
Thanks for your help,
Best Regards,
Jean-Christophe

Hi Rajiv,
I tried out the following code for getting the database reference which I got from some posts on net.
tcDataProvider db;
                    tcUtilityFactory tcu;
                    ConfigurationClient.ComplexSetting config = ConfigurationClient.getComplexSettingByPath("Discovery.CoreServer");
                    final Hashtable env2 = config.getAllSettings();
                    tcu = new tcUtilityFactory(env2, "xelsysadm","Password");
                    tcBaseUtility mBaseUtil = (tcBaseUtility) tcu.getUtility("Thor.API.Base.tcUtilityOperationsIntf");
                    DBReference=mBaseUtil.getDataBase();
But when I execute the code, I get an error :
Error while getting utility Thor.API.Base.tcUtilityOperationsIntf[Ljava.lang.StackTraceElement;@619eeaaThis must be at the getUtility method call.
Can you please guide me as to what I might be doing wrong here?
Thanks,
$id

User is locked in R/3 but still access the application through portal

We are currently on NW2004s SP10 .
We locked the User A in R/3 SRM backend system and from Enterprise Portal the same User A login and try to access the SRM application in backend . The system is allowing to access which we want to prevent .
The authentication ticket type is "SAP Logon Ticket" . The User A is trying to access ITS services through Portal.
Do we have specific SSO parameter which needs to set in backend SRM application .
Thanks
Chandrashekhar K

Hi
We have maintained the following profile parameter for SSO in our SRM system . From portal we are accessing the SRM system
login/accept_sso2_ticket          1
login/certificate_request_ca_url     https://tcs.mySAP.com/invoke/tc/usercert
login/certificate_request_subject     CN=&UNAME, OU=&WPOU, O=mySAP.com User, C=DE
login/create_sso2_ticket          0
login/disable_cpic               0
login/disable_multi_gui_login          0
login/disable_multi_rfc_login          0
login/disable_password_logon          0
login/failed_user_auto_unlock          0
login/fails_to_session_end          3
login/fails_to_user_lock          3
login/isolate_rfc_system_calls          0
login/min_password_diff               1
login/min_password_digits          0
login/min_password_letters          0
login/min_password_lng               6
login/min_password_specials          0
login/multi_login_users               HP
login/no_automatic_user_sapstar          1
login/password_change_for_SSO          0
login/password_charset               1
login/password_expiration_time          60
login/password_logon_usergroup
login/password_max_new_valid          0
login/password_max_reset_valid          0
login/system_client               400
login/ticket_expiration_time          60
login/ticket_only_by_https          0
login/ticket_only_to_host          0
login/ticketcache_entries_max          1000
login/ticketcache_off               0
login/update_logon_timestamp          m
Please suggest as to change any parameter value . We want to restrict the user to access SRM system from portal if he is locked int e SRM system.
Thanks

Portal Runtime Error while accessing BW reports through portal

Hi,
We are facing portal runtime error(An exception occurred while processing your request. Please send the exception id to your portal administrator) while accessing BI reports through portal frequently.
We are unable to trace the error in the 'default trace' log file and although refreshing the cache solves this issue, it is difficult to explain this to every user individually.
After many such errors, We found one log entry, which we are now not yet sure if it is relevant. The error states:
1.
com.sapportals.portal.prt.runtime.PortalRuntimeException: Exception in SAP Application Integrator occured: Unable to parse template '<System.Access.WAS.protocol>://<System.Access.WAS.hostname><BWLauncherComponent[PORTAL_URL]>;jsessionid=<Request.JSessionID>?sap-ext-sid=<ID[url_ENCODE]>&Language=<Request.Language>&theme=<LAF.Theme[url_ENCODE]>&sap-lafversions=<LAF.AllVersions[url_ENCODE]>&<Authentication>&<Report>&<BusinessParameters>'; the problem occured at position 230. Cannot process expression <LAF.AllVersions>
at com.sapportals.portal.appintegrator.AbstractIntegratorComponent.doContentPass(AbstractIntegratorComponent.java:125)
at com.sapportals.portal.appintegrator.AbstractIntegratorComponent.doContent(AbstractIntegratorComponent.java:98)
at com.sapportals.portal.prt.component.AbstractPortalComponent.serviceDeprecated(AbstractPortalComponent.java:209)
at com.sapportals.portal.prt.component.AbstractPortalComponent.service(AbstractPortalComponent.java:114)
at com.sapportals.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:328)
at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:136)
at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:189)
at com.sapportals.portal.prt.component.PortalComponentResponse.include(PortalComponentResponse.java:215)
at com.sapportals.portal.prt.pom.PortalNode.service(PortalNode.java:645)
at com.sapportals.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:328)
at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:136)
at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:189)
at com.sapportals.portal.prt.core.PortalRequestManager.runRequestCycle(PortalRequestManager.java:753)
at com.sapportals.portal.prt.connection.ServletConnection.handleRequest(ServletConnection.java:240)
at com.sapportals.portal.prt.dispatcher.Dispatcher$doService.run(Dispatcher.java:540)
at java.security.AccessController.doPrivileged(Native Method)
at com.sapportals.portal.prt.dispatcher.Dispatcher.service(Dispatcher.java:423)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
at java.security.AccessController.doPrivileged(Native Method)
at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
Content pass of Application Integrator failed.
Component Name:       'com.sap.portal.appintegrator.sap.BWReport',
Context Name (iView): <iview name location>
Top Layer:            'BWReport/TopLayer',
Producer ID (FPN):    'null',
System Alias:         'Sap_bw',
2.
The cluster server element 111111 is not added in the EP cluster context,
   because prtbridge on 111111 is stopped or not yet started (maybe the server is starting or shuting down).
Please suggest us if the above logs are related to the issue or not
Kindly provide us any inputs or solutions.

Hi All,
We are also having similiar type of error in our portal.
com.sap.engine.services.prtbridge##com.sap.engine.services.prtbridge
#######SAPEngine_System_Thread[impl:5]_13##0#0#Error#1#/System/Server#Plain###
The cluster server element 125898350 is not added in the EP cluster context,
   because prtbridge on 125898350 is stopped or not yet started
(maybe the server is starting or shuting down).
We have implemented the FPN using RRA.
This error comes only for few users when they navigate in Portal. After clearing the cache, it works for all. Kindly help us to resolve this issue.
Regards,
Venkatesh

How to access BAPI in enterprise portal perspective?

hi,I am venkat new to the portal.can anyone plz tel me how to access BAPI in enterprise portal perspective?is done through JCo or any other database connection?I hav not seen in System Landscape about BAPI access.plz give guidance about BAPI interface in enterprise portal.Hope u will understand the question and answer the query.
thanx in advance.
Regards:
Venkataramana.

Guys,
Herez how you call a BAPI:
     public void buildConnection(){
          try {
                    System.out.println("**** DI2 *****");
                 //      Add a connection pool to the specified system
                 //    The pool will be saved in the pool list to be used
                 //    from other threads by JCO.getClient(SID).
                 //    The pool must be explicitely removed by JCO.removeClientPool(SID)
                   com.sap.mw.jco.JCO.addClientPool( SID,         // Alias for this pool
                                         10,          // Max. number of connections
                                         "040",       // SAP client
                                         "USERNAME",   // userid
                                         "PASSWORD", // password
                                         "EN",        // language
                                         "IPADDRESS",// host name
                                         "40" );
                 //      Create a new repository
                 //    The repository caches the function and structure definitions
                 //    to be used for all calls to the system SID. The creation of
                 //    redundant instances cause performance and memory waste.
                   repository = com.sap.mw.jco.JCO.createRepository("MYRepository", SID);
                    JCO.Client client = null;
                    client = JCO.getClient(SID);
//                 Get a function template from the repository
                    //IFunctionTemplate ftemplate = repository.getFunctionTemplate("BAPI_CUSTOMER_GETDETAIL2");
                    IFunctionTemplate ftemplate = repository.getFunctionTemplate("YGGLB_BAPI_YGGLB9PRK_PRKDOCU");
//                 Create a function from the template
                    JCO.Function function = ftemplate.getFunction();
//                 Get import (of Function Module) "Parameter list"
                    JCO.ParameterList input = function.getImportParameterList();
//                 Set inputs for import parameters
                    //input.setValue("0000009000", "CUSTOMERNO");
                    //input.setValue("0248","COMPANYCODE");
//                 Get import (of Function Module) "Structure list".
                   //JCO.Structure importStructure = function.getImportParameterList().getStructure("CUSTOMERADDRESS");
                    JCO.Structure importStructure = function.getImportParameterList().getStructure("IM_DOCUMENTHEADER");
//                 Set values for import parameters (of Function Module) "Structure list"
                    importStructure.setValue( "SA", "DOC_TYPE" );
                    importStructure.setValue( "20080910", "PSTNG_DATE" );
                    importStructure.setValue( "20080910", "DOC_DATE");
                    importStructure.setValue( "BHARDWS", "USERNAME" );
                    importStructure.setValue( "2008", "FISC_YEAR" );
                    importStructure.setValue( "FRE1", "COMP_CODE" );
//                 Get import (of Function Module) "Table list - 1".
                    JCO.Table orderPartners = function.getTableParameterList().getTable("TBL_ACCOUNTGL");
//                 Set values for import parameters (of Function Module) "Table list - 1"
                    //Append Row -1
                    orderPartners.appendRow();
                   orderPartners.setValue("0000000001", "ITEMNO_ACC" );
                     orderPartners.setValue("0000400100", "GL_ACCOUNT" );
                    orderPartners.setValue("H", "DE_CRE_IND" );
                    orderPartners.setValue( "ANYTHING", "ITEM_TEXT" );
                    //orderPartners.setValue( "AG", "PROFIT_CTR" );
                    orderPartners.setValue( "AIG0000007", "COSTCENTER" );
                    //Append Row -2
                    orderPartners.appendRow();
                   orderPartners.setValue("0000000002", "ITEMNO_ACC" );
                    orderPartners.setValue("0000400100", "GL_ACCOUNT" );
                    orderPartners.setValue("S", "DE_CRE_IND" );
                    orderPartners.setValue( "NOTHING", "ITEM_TEXT" );
                    //orderPartners.setValue( "AG", "PROFIT_CTR" );
                    orderPartners.setValue( "AIG0000007", "COSTCENTER" );
//                 Get import (of Function Module) "Table list - 2".
                    JCO.Table orderItems = function.getTableParameterList().getTable("TBL_CURRENCYAMOUNT");
//                 Set values for import parameters (of Function Module) "Table list - 2"
                    //Append Row -1
                    orderItems.appendRow();
                   orderItems.setValue("0000000001", "ITEMNO_ACC" );
                    orderItems.setValue("USD", "CURRENCY" );
                    orderItems.setValue( "2000", "AMT_DOCCUR" );
                    //Append Row -2
                    orderItems.appendRow();
                   orderItems.setValue("0000000002", "ITEMNO_ACC" );
                    orderItems.setValue("USD", "CURRENCY" );
                    orderItems.setValue( "2000", "AMT_DOCCUR" );
//                 Execute client
                    client.execute(function);
//******************Start to work on fetching values now********************************
//                 Get export (of Function Module) "Structure list".
                    /*JCO.Structure returnStructure = function.getExportParameterList().getStructure("CUSTOMERADDRESS");
                    JCO.Structure returnStructure2 = function.getExportParameterList().getStructure("CUSTOMERGENERALDETAIL");
                    returnStructure.getString("NAME");
                    returnStructure2.getString("ENTERED_BY");*/
//                 Get export (of Function Module) "Table list"./// Create a new template if fetching table data from a different function module than above
                    //IFunctionTemplate ftemplateTable = repository.getFunctionTemplate("BAPI_CURRENCY_GETLIST");
                    //JCO.Function functionTable = ftemplateTable.getFunction();
                    //client.execute(functionTable);
                    JCO.Table table_return = function.getTableParameterList().getTable("RETURN");
                    Vector tbl = new Vector();
                    Vector row = new Vector();
                    Vector colNames = new Vector();
                    //Loop over all rows
                    do {
                    //Loop over all columns in the current row and add all those colums values to the current row
                    for (JCO.FieldIterator e = table_return.fields();
                         e.hasMoreElements();
                         JCO.Field field = e.nextField();
                         row.add(field.getString());
                         System.out.println(field.getName() + ":\t" + field.getString());
                         } // end for
                         //Add this newly built row to the table
                         tbl.add(row);
                         } while (table_return.nextRow());
                         table_return = null;
                         table_return = function.getTableParameterList().getTable("RETURN");
                         table_return.nextRow();
                         for (JCO.FieldIterator e = table_return.fields();
                         e.hasMoreElements();
                         JCO.Field field = e.nextField();
                         colNames.add(field.getName().toString());
                    //DefaultTableViewModel dtvModel = new DefaultTableViewModel(tbl, colNames);
                    //beanObj.setModel(dtvModel);
                         System.err.println("getting value for you from session in Get Data 1:-");
                         JCO.releaseClient(client);
                    //     return dtvModel;
               catch (JCO.Exception ex) {
                 System.out.println("Caught an exception: \n" + ex.getMessage());
               }catch (Exception e){
                    System.out.println("Final Message" + e.getMessage());

OIM-OID Provisioning - OID Group PrePopulate Approach :

Hi,
I am working on OID Connector 9.0.1.14 with OIM 11.1.1.5.
I have reconciled all the Roles and Groups from OID to OIM and can successfully provision users to the OID along with membership to these specific Roles and Groups.
I want to prepopulate the OID Group based on certain attribute from the OIM User form. My Approach so far is :
1) Created an Entity Adapter with a variable : say Org and GroupName.
2) Set the Logic as if Org = XYZ (+XYZ does exist on OIM+) set GroupName as = "OID Group 1" else set GroupName as = "OID Group 2"
3) Attached this adapter to the "OID User Group" form on the "Data Object Manager" at the pre-insert stage.
4) Mapped the Adapter variable as :
a) Org Maps to "Organization Definition" with the qualifier "Organization Name"
b) GroupName maps to the "Entity Field" with the qualifier "UD_OID_GRP_GROUP_NAME"
However nothing seems to happen when I create/modify a user with Orgization Name as XYZ and manually Provision the OID Resource. I can see the form but nothing is populated in the Group Field. Upon completing the request, I get the user provisioned to OID but without any Group information..
Is my approach right ? Am I missing something ?

Here is what I have done for a client. My requirement was for a given department, a user must have a list of groups provisioned to them. So here is what i've done:
1. Create a lookup that has Code Key = Department, Decode = CN of the groups in a delimited format.
2. Create a provisioning task that will look at the department code from the user form, reference the lookup and find the decode values. Split them based on a delimiter. Then using each value, lookup the code key value from the real lookup that contains the full distinguished name of the group in the OID Group lookup. I even appened the IT Resource Key and ~ so that my search would be Decode or Code = "IT Resource Name~CN=<CN VALUE>%". This would return only the single group code key value. And then i add it to the child table. Repeat this for all the values in the delimited field.
3. Create a provisioning task that removes the values from the child table based on the delimited value. You'll need to search through the existing child table values.
Once you have the 2 tasks, you'll want to add a value to the your Lookup.USR_PROCESS_TRIGGERS that is your group determining field. Create your task name in this lookup. On your provisioning workflow, for the Adding of the groups task, make this unconditional, and have a preceding task of the Create User. Give it the name from your Lookup.USR_PROCESS_TRIGGERS and append " - Add Groups" to the task name. Create another task called the same, but append " - Delete Groups" to the task name. On the Add Groups task, make the preceding task the Delete groups. When you map your inputs to the adapters, on the delete, select the old value check box from the User Form so that you get the old value. Now, when the value changes on the user form, it will first remove the old groups, then add the new ones. All this will be done using the child table APIs, so that the existing Insert and Delete task triggers for your child table will run.
-Kevin

Access OID Groups in Portal

Similar Messages

Maybe you are looking for