Account stuck in Provisioning state in OIM 11gR2

Hello,
In OIM 11gR2, when provisioning fails, the application still shows in the accounts tab of the user, but it is stuck in the "Provisioning" state. I don't know if it's standard behavior, but it always does this for me. When this problem occurs, the only way I have found to remove the entry from the applications list is to completely delete the application instance and re-create it. Is there a cleaner way of removing the stuck account ? The "Remove Account" button does nothing for me.
Thanks,
--jtellier

Rajiv Dewan wrote:
BDW, if something goes wrong while doing provisioning then you can retry the rejected task (after fixing the issue) instead of initiating provisioning again with new instance. It will mark your existing incomplete instance as PROVISIONED.Oh, thanks, I had not realized that...
--jtellier

Similar Messages

OIM 11gR2 user not provisioning to Active Directory (11.1.1.5 connector)

Hello all,
I'm trying to set up an OIM 11gR2 instance to work with Active Directory with the Active Directory 11.1.1.5.0 connector. I've full installed both OIM and AD on separate servers, and I've installed the AD 11.1.1.5 connector on OIM. I have configured Active Directory properly (connector on OIM and the connector server on the AD server-side), and have set up the two IT Resources on OIM. I can run, for example, the Active Directory Organization Lookup Recon job and have it return results in the Lookup window.
My problem is that I cannot get it to provision to a user. I've created an Application Instance and Form for Active Directory, attached the Form, associated them with the appropriate resources (AD User), and added them to the Catalog, and then gone through the process of adding an account to the user, selecting the Application Instance, adding it to the cart, checking out, filling out the fields (Password, User ID, UPN, First Name, Last Name, Common Name, and Organization Name), and then submitting the request. This is all done as the xelsysadm admin user, but it still results with the account stuck on "Provisioning" because the "Create User" task failed due to a Connector Error (the reason stated is just a repeat of "Create Object" failed).
Anyone know what I'm missing here?
Thank you!
Edited by: 939908 on Nov 12, 2012 6:36 AM

Hey 833249, thanks for your reply
The organization field attribute is filled in correctly, in that the OU I selected exists in AD.
These are the errors listed in the connector server log:
+11/9/2012 9:07:07 PM <ERROR>: Class-> ActiveDirectoryUtils Method -> GetDirectoryEntry, Message -> Exception occured during the creation of directory entry.+
+11/9/2012 9:07:07 PM <ERROR>: Class-> ActiveDirectoryUtils Method -> GetDirectoryEntry, Message -> Exception Message : Logon failure: unknown user name or bad password.+
+11/9/2012 9:07:08 PM <ERROR>: Class-> ActiveDirectoryUtils Method -> GetDirectoryEntry, Message -> Exception Stack Trace : at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)+
at System.DirectoryServices.DirectoryEntry.Bind()
at System.DirectoryServices.DirectoryEntry.get_NativeObject()
at Org.IdentityConnectors.ActiveDirectory.ActiveDirectoryUtils.GetDirectoryEntry(String path, ActiveDirectoryConfiguration configuration) in c:\ADE\aime_oimcp\idc\bundles\dotnet\ActiveDirectory\ActiveDirectoryConnector\ActiveDirectoryUtils.cs:line 1423
+11/9/2012 9:07:08 PM <ERROR>: Class-> ActiveDirectoryConnector Method -> Create, Message -> Encountered Excetion: Unable to get the Directory Entry+
+11/9/2012 9:07:08 PM <ERROR>: Class-> ActiveDirectoryConnector Method -> Create, Message -> Stack Trace: at Org.IdentityConnectors.ActiveDirectory.ActiveDirectoryUtils.GetDirectoryEntry(String path, ActiveDirectoryConfiguration configuration) in c:\ADE\aime_oimcp\idc\bundles\dotnet\ActiveDirectory\ActiveDirectoryConnector\ActiveDirectoryUtils.cs:line 1456+
at Org.IdentityConnectors.ActiveDirectory.ActiveDirectoryUtils.DirectoryEntryExists(String path) in c:\ADE\aime_oimcp\idc\bundles\dotnet\ActiveDirectory\ActiveDirectoryConnector\ActiveDirectoryUtils.cs:line 1512
at Org.IdentityConnectors.ActiveDirectory.ActiveDirectoryConnector.Create(ObjectClass oclass, ICollection`1 attributes, OperationOptions options) in c:\ADE\aime_oimcp\idc\bundles\dotnet\ActiveDirectory\ActiveDirectoryConnector\ActiveDirectoryConnector.cs:line 219
ConnectorServer.exe Error: 0 : Org.IdentityConnectors.Framework.Common.Exceptions.ConnectorException: Unable to get the Directory Entry
at Org.IdentityConnectors.ActiveDirectory.ActiveDirectoryConnector.Create(ObjectClass oclass, ICollection`1 attributes, OperationOptions options) in c:\ADE\aime_oimcp\idc\bundles\dotnet\ActiveDirectory\ActiveDirectoryConnector\ActiveDirectoryConnector.cs:line 368
at Org.IdentityConnectors.Framework.Impl.Api.Local.Operations.CreateImpl.Create(ObjectClass oclass, ICollection`1 attributes, OperationOptions options) in c:\ADE\aime_icf\icf\framework\dotnet\FrameworkInternal\ApiLocalOperations.cs:line 388
at Org.IdentityConnectors.Framework.Impl.Api.Local.Operations.ConnectorAPIOperationRunnerProxy.Invoke(Object proxy, MethodInfo method, Object[] args) in c:\ADE\aime_icf\icf\framework\dotnet\FrameworkInternal\ApiLocalOperations.cs:line 244
at ___proxy1.Create(ObjectClass , ICollection`1 , OperationOptions )
at Org.IdentityConnectors.Framework.Impl.Server.ConnectionProcessor.ProcessOperationRequest(OperationRequest request) in c:\ADE\aime_icf\icf\framework\dotnet\FrameworkInternal\Server.cs:line 609
I'm not sure why the username/password error could be occurring, as those fields in the AD IT Resource are correct (I've run AD recon jobs that have connected properly). Is there something I'm missing?

Cannot provision Exchange 2003 account in OIM 11gR2

Hello,
I'm trying to provision Exchange 2003 accounts from OIM 11gR2 but I keep getting errors. My AD connector works and is able to reconcile and provision account and my Exchange connector is linked to it. I've understood that the only mandatory fields in the Exchange 2003 provisioning form are "mail store name" and "alias", so I've tested by only filling those. However, the provisioning does not complete and the logs show this error :
[2013-01-25T11:46:19.292-05:00] [oim_server1] [ERROR] [] [XELLERATE.ADAPTERS] [tid: [ACTIVE].ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: b70c24a5215a6ee3:-625a909b:13c6d3ae4c5:-8000-0000000000002b50,0] [APP: oim#11.1.2.0.0] Class/Method: tcAdpEvent/getITAttrVal encounter some problems: Could not find attibute value for IT Resource Key = 0 and attribute = Server Address
[2013-01-25T11:46:19.293-05:00] [oim_server1] [ERROR] [] [XELLERATE.ADAPTERS] [tid: [ACTIVE].ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: b70c24a5215a6ee3:-625a909b:13c6d3ae4c5:-8000-0000000000002b50,0] [APP: oim#11.1.2.0.0] Class/Method: tcAdpEvent/getITAttrVal encounter some problems: Could not find IT asset value for Svr_key = 0 and attribute = Server Address
[2013-01-25T11:46:19.293-05:00] [oim_server1] [ERROR] [] [XELLERATE.ADAPTERS] [tid: [ACTIVE].ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: b70c24a5215a6ee3:-625a909b:13c6d3ae4c5:-8000-0000000000002b50,0] [APP: oim#11.1.2.0.0] Class/Method: tcAdpEvent/getITAttrVal encounter some problems: DATA_ERROR[[
com.thortech.xl.dataobj.util.tcAdapterTaskException: DATA_ERROR
at com.thortech.xl.adapterfactory.events.tcAdpEvent.getITAttrVal(tcAdpEvent.java:2023)
at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpMEXCCREATEMAILBOX.implementation(adpMEXCCREATEMAILBOX.java:90)
at com.thortech.xl.client.events.tcBaseEvent.run(tcBaseEvent.java:196)
That's the only error I see and I'm not really sure about what it means. Any ideas?
Thanks,
--jtellier

Are you using the version 9 or 11 of the connector? I've done more investigations with version 9 and realized that the DB is not correctly updated by the connector. I've reported the problem with Oracle and a bug has been open. Here are the details :
When reconciling or provisioning a mailbox, a new row is added in the OIU table. This row has "null" as its APP_INSTANCE_KEY. Manually setting the Exchange's app instance key as the value of this column solves the problem.
Hope this helps!
--jtellier

Any way to remove rows in "provisioning" state under accounts tab in OIM

Hi Experts,
Is there anyway to remove the rows under user's accounts tab which are in "provisioning" state. These will no longer be used and somehow these attempts to provision account failed in the past.

Aye, entries for Accounts are stored in OIU, but you'll leave some trash references in the ORC and others.
I use this script to do a quick clean of the accounts of a single resource. I'm not even sure if it's complete, probably not.
I use it only in development and test environments, didn't encounter any problems so far tho.
It has other utilities I find useful.
define OIMSCHEMA= 'OIM_OIM'
define RA_TABLE = 'RA_OIMDATAUSERDDDBAA4E'
--define RA_CHILD = 'RA_ADICUSRC'
--define RA_CHILD2 = 'RA_SSCOMMP'
define UD_TABLE = 'UD_OIMDATAU'
--define UD_CHILD = 'UD_ADICUSRC'
--define UD_CHILD2 = 'UD_SSCOMMP'
-- delete all from UD table.
define COND= 'select ORC_KEY from &&OIMSCHEMA..&&UD_TABLE'
-- check counts.
select count(*) as OIU from &&OIMSCHEMA..OIU where ORC_KEY in (&&COND);
select count(*) as OSI from &&OIMSCHEMA..OSI where ORC_KEY in (&&COND);
select count(*) as RECON_ACCOUNT_MATCH from &&OIMSCHEMA..RECON_ACCOUNT_MATCH RE where RE.RE_KEY in (
    select RE_KEY from &&OIMSCHEMA..RECON_EVENTS RE where RE.ORC_KEY in (
        select ORC_KEY from &&OIMSCHEMA..ORC where ORC_KEY in (&&COND)));
select count(*) as RECON_EXCEPTIONS from &&OIMSCHEMA..RECON_EXCEPTIONS RE where RE.RE_KEY in (
    select RE_KEY from &&OIMSCHEMA..RECON_EVENTS RE where RE.ORC_KEY in (
        select ORC_KEY from &&OIMSCHEMA..ORC where ORC_KEY in (&&COND)));
select count(*) as RECON_HISTORY from &&OIMSCHEMA..RECON_HISTORY RE where RE.RE_KEY in (
    select RE_KEY from &&OIMSCHEMA..RECON_EVENTS RE where RE.ORC_KEY in (
        select ORC_KEY from &&OIMSCHEMA..ORC where ORC_KEY in (&&COND)));
select count(*) as RECON_USER_MATCH from &&OIMSCHEMA..RECON_USER_MATCH RE where RE.RE_KEY in (
    select RE_KEY from &&OIMSCHEMA..RECON_EVENTS RE where RE.ORC_KEY in (
        select ORC_KEY from &&OIMSCHEMA..ORC where ORC_KEY in (&&COND)));
select count(*) as RECON_EVENTS from &&OIMSCHEMA..RECON_EVENTS RE where RE.ORC_KEY in (
    select ORC_KEY from &&OIMSCHEMA..ORC where ORC_KEY in (&&COND));
select count(*) as ORC from &&OIMSCHEMA..ORC where ORC_KEY in (&&COND);
-- ** DELETE OIU / RA / UD **
-- FK_OIU_ORC
delete from &&OIMSCHEMA..OIU where ORC_KEY in (&&COND);
-- FK_OSI_ORC
delete from &&OIMSCHEMA..OSI where ORC_KEY in (&&COND);
-- FK_OTI_ORC
delete from &&OIMSCHEMA..OTI where ORC_KEY in (&&COND);
-- FK_RECON_ACCOUNT_MATCH_RE
delete from &&OIMSCHEMA..RECON_ACCOUNT_MATCH RE where RE.RE_KEY in (
    select RE_KEY from &&OIMSCHEMA..RECON_EVENTS RE where RE.ORC_KEY in (
        select ORC_KEY from &&OIMSCHEMA..ORC where ORC_KEY in (&&COND)));
-- FK_RECON_EXCEPTIONS_RE
delete from &&OIMSCHEMA..RECON_EXCEPTIONS RE where RE.RE_KEY in (
    select RE_KEY from &&OIMSCHEMA..RECON_EVENTS RE where RE.ORC_KEY in (
        select ORC_KEY from &&OIMSCHEMA..ORC where ORC_KEY in (&&COND)));
-- FK_RECON_HISTORY_RE
delete from &&OIMSCHEMA..RECON_HISTORY RE where RE.RE_KEY in (
    select RE_KEY from &&OIMSCHEMA..RECON_EVENTS RE where RE.ORC_KEY in (
        select ORC_KEY from &&OIMSCHEMA..ORC where ORC_KEY in (&&COND)));
-- FK_RECON_USER_MATCH_RE
delete from &&OIMSCHEMA..RECON_USER_MATCH RE where RE.RE_KEY in (
    select RE_KEY from &&OIMSCHEMA..RECON_EVENTS RE where RE.ORC_KEY in (
        select ORC_KEY from &&OIMSCHEMA..ORC where ORC_KEY in (&&COND)));
-- FK_RECON_EVENTS_ORC
delete from &&OIMSCHEMA..RECON_EVENTS RE where RE.ORC_KEY in (
    select ORC_KEY from &&OIMSCHEMA..ORC where ORC_KEY in (&&COND));
delete from &&OIMSCHEMA..ORC where ORC_KEY in (&&COND);
--delete from &&OIMSCHEMA..ORC where ORC_KEY in (select ORC_KEY from &&OIMSCHEMA..&&UD_CHILD);
--delete from &&OIMSCHEMA..ORC where ORC_KEY in (select ORC_KEY from &&OIMSCHEMA..&&UD_CHILD2);
--delete from &&OIMSCHEMA..&&RA_CHILD;
--delete from &&OIMSCHEMA..&&RA_CHILD2;
delete from &&OIMSCHEMA..&&RA_TABLE;
--delete from &&OIMSCHEMA..&&UD_CHILD;
--delete from &&OIMSCHEMA..&&UD_CHILD2;
delete from &&OIMSCHEMA..&&UD_TABLE where ORC_KEY in (&&COND);
-- *** OIU Cleanup **
--get RESOURCE_KEY
column RESOURCE_KEY new_value RESOURCE_KEYV noprint
select RA_ITRESOURCENAME70C9F928 RESOURCE_KEY from &&OIMSCHEMA..&&RA_TABLE where ROWNUM <=1;
--get APP_INSTANCE_KEY
column APP_INSTANCE_KEY new_value APP_INSTANCE_KEYV noprint
select APP_INSTANCE_KEY APP_INSTANCE_KEY from &&OIMSCHEMA..APP_INSTANCE where ITRESOURCE_KEY = &&RESOURCE_KEYV;
--delete from OIU where APP_INSTANCE_KEY = &&APP_INSTANCE_KEYV and ORC_KEY not in (select ORC_KEY from &&UD_TABLE) ;
select * from &&OIMSCHEMA..OIU where OIU.APP_INSTANCE_KEY = &&APP_INSTANCE_KEYV and ORC_KEY not in (select ORC_KEY from &&OIMSCHEMA..&&UD_TABLE) ;

Can we delete an account which is in provisioning state

Hi All,
I am trainee in OIM .........I am trying to delete the user's account from identity console(as 'xelsysadm') which is in provisioning state. when i click on remove accounts it is showing operation successfully completed. But i am getting the account again in my console.........
Is there any specific process to delete user's accounts.........Please let me know .......
Regards,
Nani

Delete means soft delete and the account will be present with Revoked status.
till oim11gr1 we didn't have this feature to revoke a account having Provisioning status. But, yes R2 has this feature to revoke a account with Provisioning status.

OIM 11gr2 On-behalf removal of accounts/entitlements

Hi,
We have a requirement with our client where a user can request for removal of accounts/entitlements on behalf of other user.
We understand add request process onbehalf of some user but not sure about onbehalf removal process.
Please let me know if accounts/entitlement removal can be raised on behalf of other user. Is it supported out of box? If not is it possible doing some customization?
Thanks

But sir, the groups are listed under the Accounts tab. Is there any schedule job provided by OIM 11gR2 which results in the display of Groups assigned to the user as well under the Accounts tab ?
Edited by: IDM_newbie on Jan 25, 2013 1:51 AM

OIM 11gR2: API to modify accounts

Hi all,
I would like to develop an event handler for OIM 11gR2 to modify a user account (for example Active Directory account) if some conditions are satisfied.
I looked for proper API in Java API Reference for Oracle Identity Manager and I found the interface ProvisioningService.
I already developed an event handler for test purpose that gets and prints account details and it works.
My question is: can you provide me an example to use the API to modify an account correctly please?
Thanks in advance,
Daniele

Find the act_key for this new organization and then use the UserManager api to update the act_key for all the accounts.

Provisioning users to AD groups in OIM 11gR2

I could use some advice on how to resolve this issue I am having.
Using the Active Directory connector (11.1.1.5) in our OIM 11gR2 development environment I can successfully provision OIM users to our AD resource. I have successfully run the org and group lookup recons, and provisioned users do go into the correction ou in AD.
However when I select which groups a user should be a member of in the ADUSERC child form (via the lookup), the user is not provisioned with the correct group membership in AD.
A separate issue is how to map the objectClass in AD in the ProvAttrMap; could anyone point me in the direction of how to go about that?
Thanks

The ObjectClass should be configured in this lookup Lookup.Configuration.ActiveDirectory
Check below
http://docs.oracle.com/cd/E22999_01/doc.111/e20347/extnd_func.htm#sthref221
4.6 Configuring the Connector for User-Defined Object Classes

Pre populate adapter in OIM 11gr2 not triggered in database

Hello,
Folowing is the steps for creation of pre populated adapter in OIM
** we have created one form in OIM which is provisioned to Database**
Steps
· Installed GTC connector for Database Web App 9.*
· Created new user and Table in Database
· Created IT resource for Database
· Created Sandbox, App Instance and Form, published sandbox
· Started catalog synchronization job scheduler
· Created user and and request account to app instance.
* select application instance to catalog and checkout.
** we have created adapter as per the following link
http://idmrockstar.com/blog/2009/08/how-to-create-a-prepopulate-adapter-in-oim/
create a pre populated adapter that will populate the firstname of user in email using java class
source code:
public class AdapterClass{
public String email( String fname )
return fname;
Steps:
1) In the design console I have open the Adapter Factory and create a new adapter name :firstname
adapter type: pre-populate rule generator
click on save
2) select variable list tab:
variable name:Firstname
type:String
Map to : Resolve at runtime
click on save
3) select Adapter Task tab
* click add and select logical task
* select SET VARIABLE and click continue
* Operand Type:variable
* Operand Qualifier : FIrstname
click save and save the adapter
4) compile the java class into jar file and move the jar file into OIM_HOME\server\JavaTasks
5)Create a new Adapter with the following"
Adapter name:Email
Adapter type: Pre-populate rule Generator
click save
6) select variable list tab:
variable name: var1
Type:String
Map to:Resolve at runtime and click save
7) select Functional Task tab:"
select java click continue
select the following information:
Task name:email
Api source: JavataskJar:Adapterclass.jar( the jar file which you have create)
application api: adapteclass
click save
8) In the Application method parameters,select the first input: String
Cange Map to:Adapter variables
Set the name to:var1 and click save
9) select the output:STring
change map to:Adapter variables
set name to: return variable
10) click save and save the adapter and click on Build
Adapter is now build the next step isto join it to the form
** join the adapter to the form**
Steps:
1) click on form designer and search the related form which we have created
2) In the respective form click on create a new version and create a new version
3) and then click on Pre populate tab and click on ADD
4)select adapter field to firstname
Rule : default
Adapter : Firstname
and click on save
5) In the adapter variable field click on firstname and fill the following
map to: Process data
Qualifier : firstname
6) Repeat steps 3 to 5 to map the email adapter
7) click on save.
Now we have done with all the steps and now we have created one User submit the user
we have click on request acounts ---> search the catalog and select the application instance (select the app instance "database provisioning") ---> add to cart ---> and check out ---> fill the form leaving email field --> ready to submit ---> submit
now we have check this user in database but still pre populated fields are not reflected. since this not working so we have found the other three links
Re: OIM 11gR2 - Prepopulate Field Empty Problem
http://fusionsecurity.blogspot.in/2013/01/populating-request-attributes-in-oim.html
http://identityandaccessmanager.blogspot.in/2011/07/prepopulate-adapter-in-oim-11g.html
according to these links they mention to implements the prepopulationadapter interface into the java class and create the plugin.xml for the class which we have used in jar.
so we prepared a plugin.xml
<?xml version="1.0" encoding="UTF-8" ?>
<oimplugins xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<plugins pluginpoint="oracle.iam.request.plugins.PrePopulationAdapter">
<plugin pluginclass= "com.oracle.demo.iam.prepop.plugin.UserLoginPrePop" version="1.0" name="UserLoginPrePop">
<metadata name="PrePopulationAdapater">
<value> My_users::email</value>
</metadata>
</plugin>
</plugins>
</oimplugins>
and the java class which implements "PrePopulationAdapter".
they mention to put that jar into one directory named "lib"and paste the xml and lib folder into the OIM_HOME\server\plugin
BUt we stuck on how to configure the adapter or what is the next steps for the above process. or there is something that we have missed in the process
please do reply its urgent
Regards,
Tushar Palekar

hii i have followed all your steps regarding the pre populated adapter ,but no luck.
java code :
package com.oracle.demo.iam.prepop.plugin;
import java.io.Serializable;
import oracle.iam.request.plugins.PrePopulationAdapter;
import oracle.iam.request.vo.RequestData;
public class Userfname implements PrePopulationAdapter {
public Serializable prepopulate(RequestData requestData){
String fname = "xyz";
System.out.println("Returning fname ==== " + fname );
return fname ;
2)i have create a jar for this code and paste it into lib folder.
3) i have create a plugin.xml
<?xml version="1.0" encoding="UTF-8" ?>
<oimplugins xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<*plugins pluginpoint="oracle.iam.request.plugins.PrePopulationAdapter">*
*<plugin pluginclass= "com.oracle.demo.iam.prepop.plugin.Userfname" version="1.0" name="Userfname">*
*<metadata name="PrePopulationAdapater">*
*<value>register::LAST_NAME</value>*
*</metadata>*
*</plugin>*
*</plugins>*
*</oimplugins>*
4)i register the plugin using ant -f pluginregistration.xml register
5)i have restartthe oim server and then i create a user using the same app instatnce in which i have create the form(ie.register),and
request acount-->select app instance ---> add to cart
but the last name xyz as per the java code is not reflected in the dadbase table.
please help
tushar palekar

OIM 11gR2 : User groups not visible on UI

Hello Experts,
I have a requirement in which i need to assign the user provisioned to AD to some group(s) depending upon certain conditions like BU, Location etc. I created a Process Task adapter for the same and am able to successfully assign the users to the desired groups.
But i am able to check for this validity from the Backend only.
Ideally the groups assigned to the user must be visible after following these steps:
*1. Search for a user provisioned to AD.
2. Go the the Accounts tab.
3. Click on the AD account (to which the user has been provisioned)
4. A process form is displayed in the lower half of the webpage which also shows the information regarding the groups assigned to the User. But the groups are not getting displayed.*
Kindly Help.
Edited by: IDM_newbie on Jan 24, 2013 11:24 PM

But sir, the groups are listed under the Accounts tab. Is there any schedule job provided by OIM 11gR2 which results in the display of Groups assigned to the user as well under the Accounts tab ?
Edited by: IDM_newbie on Jan 25, 2013 1:51 AM

OIM 11gR2 - unable to suppress display of iPlanet process form

OIM 11gR2 or 11.1.2
SJSDS Connector 9.0.4
I have configured the SJSDS connector, it resource, etc and am able to manually/directly provision iPlanet User to an OIM user through the identity interface.
I have configured the process form to pre-populate all necessary fields.
I have checked the Auto Save Form checkbox within the iPlanet User Process Definition.
It is my expectation that when an administrator directly assigns the resource to a user they will not be presented with the process form. However, when we directly assign the resource, the process form is displayed causing the administrator to submit the form.
I have double checked the documentation regarding Auto Save Form within the Developer's Guide for Oracle Identity Manager 11g Release 2 (11.1.2) - E27150-03 and the Oracle® Identity Manager Connector Guide for Sun Java System Directory Release 9.0.4 - E10446-12 and I believe my expectations are correct.
1) Has anyone successfully suppressed the process form while direct or manually provisioning SJSDS through the identity interface?
2) Could the Auto Save Form be only related to request-based provisioning?
Thank you in advance.

These are also good questions but I'll give details :-)
1) Does that make the "Auto Save Form" checkbox useless? -
NO, If you don't do this then your Provisioning will stuck into System Validation.
2) Can you "Auto Save" the Application Instance form?
NO, as per Oracle either hide these attributes or delete these attributes but there's no clean way to delete such things.
Question For You:
If you don't want to Auto Save your Application Instance Form then why did you create that.
Workaround:
If you don't want Application Instance then create one more Application Instance without any form

Problem handling SMTP address with OIM 11gR2 Exchange connector

Hello,
I have a problem in regarding the primary SMTP address with the Exchange connector. The connector doesn't seem to be able to update it. Changing a user's primary SMTP address from its account details in OIM creates a new secondary address in Exchange. It does not change the current primary SMTP address. This does not look like a normal behavior... Any ideas on how to fix this?
I'm using OIM 11gR2 with BP10 with AD 11.1.1.5.0A and Exchange 11.1.1.5.0.
Thanks,
--jtellier

Yes, you can try out few things suggested in below thread
Re: Exchange Provisioning
The error looks like form exchange server side but still not sure about it.
Meantime open Service Request with oracle about the same as I can see other developers are also facing same issue.

OIM 11GR2 UNIX Connector Reconcile users from UNIX inquiry

Good Day!
I would like to ask whether there is a way in OIM that when I reconcile all new users from my UNIX server, OIM will also create the resource which this user is provisioned upon?
Here is my scenario:
1.) Freshly installed OIM 11GR2.
2.) Installed UNIX connector on OIM 11GR2.
3.) Configured UNIX TRUSTED Resource
4.) Reconciled all the UNIX users into OIM. (New users are created since my OIM doesn't have any user)
5.) The problem is when the new users are now created in OIM, they don't have entitlements or accounts linked to the UNIX server which they have been pulled upon.
I would like to ask whether I need to configure something to have the entitlements/accounts linking possible?
If not, what are the ways I can achieve this?
The only way I can think of is have the UNIX users be created in a flat file first then load via GTC then have reconciliation to have OIM to link these users to UNIX which I believe should be able to do the scenario I am asking upon.
Thanks in advance!
Regards,
Jeff

By the way, checking target resource recon by default will not create new users when OIM is not able to establish a link.
In my case, OIM doesn't have any users since this is a fresh install hence even running target resource at start will won't create the new users in OIM right?
based from this:
"You configure application (AD, OID, OVD, HR) etc in Target Resource Mode if that OIM is source of truth for user provisioning (All users are created in OIM and OIM then provision accounts in Application. Any changes in Application are reconciled back to OIM)."

OIM 11gR2: GTC logical cancellation

Hi all,
in our OIM environment (OIM 11gR2) we have installed and configured a GTC that provisions and reconciliates to and from an Oracle Database Application Table.
The GTC works fine and when we try to revoke an account, it deletes the account from target system.
What we would like to implement is the "logical cancellation" functionality. Upon account revocation, the GTC should sets the value "1" to one of the target system fields (named "IS_DELETED") instead deletes it from target system.
Is it possible to achieve this?
Thanks in advance,
Daniele

Is it possible to achieve this?You can modify the process definition at any point of time. Remove the existing adapter and attach your own adapter which will do the logical cancellation.
If you are looking for some configuration in GTC itself then I don't think it is possible.

Workflow stuck in starting state after applying SharePoint 2010 CU December 2012

I have custom visual studio workflow which are associated with Custom content type. workflow gets triggered automatically when a file is uploaded to SharePoint. Everything was working fine till when i apply the following CU
http://blogs.msdn.com/b/joerg_sinemus/archive/2012/12/27/sharepoint-2010-and-december-2012-cu.aspx
After applying this my workflow get stuck in "Starting" state.
No error were logged in 14 hive logs.
Thanks in Advance!

It took me a while but I came up with a work around. There is a PowerShell script below that can be used to trigger the workflow. Hopefully this will hold all of us over until the official fix arrives.
First remove the auto start on change or new from the affected workflow
Edit the script below to match your environment
Add the script to Windows task scheduler with the PowerShell.exe in the command line
This assumes PowerShell.exe is in the path
Then add the full path and script name in the add arguements text box
Script:
#The purpose of this script is to start the SPD workflow with the windows task scheduler for a trigger
#This should avoid the check in-out issue caused by the December 2012 SP CU patch
#This needs to be run on an account with membership in the farm administration group for SharePoint and Shell in SQL
#You can use a find and replace to replace the server and other names with your actual names
#There are no status messages being used since this will be a scheduled task in the Windows task scheduler
#Add SharePoint modules and create variable space
add-pssnapin microsoft.sharepoint.powershell
start-spassignment -global
#Open the web site, list and the workflow
$site=get-spsite %site url%"
$web=get-spweb %Web url%
#Open the %affected% library or list and workflow association
$%affected%=$web.getlist("%affected%")
$manager=$site.workflowmanager
$culture=[system.globalization.cultureinfo]::currentculture
$wfname="%affected workflow name"
$association=$%affected%.workflowassociations.getassociationbyname($wfname,$culture)
$data=$association.associationdata
$wfrunoption=[microsoft.sharepoint.workflow.spworkflowrunoptions]::synchronous
#Start workflow
foreach ($item in $%affected%.items) {
$site.workflowmanager.startworkflow($item,$association,$data,$wfrunoption)
stop-spassignment -global

Account stuck in Provisioning state in OIM 11gR2

Similar Messages

Maybe you are looking for