AD Provisioning - 11gR2

I have the AD reconciliation working and it's importing users into OIM from AD. My AD connector is set as a trusted resource.
I am trying to now provision users from OIM to AD, including updating users that were imported from AD. I create a user in OIM and select the Auto Generated Application Instance for Resource: AD User and IT Resource: Active Directory from the Catalog. The AD User provisioning process attempts to run and shows as Provisioning with an Unknown account type. Investigating the resource history, I have a Task Name of System Validation Pending and it's assigned to the xelsysadm user.
I'm not sure what to do with this now to get the account to provision to AD.

make sure you populate all the mandatory field on process form. have you populated OU??.
just goto account tab->open form-> verify the form attribute and populate all required info in cart- and submit the request.
the assignment and all is fine, system validation pending due to mandatory field is not being populated(uid, password,first name, last name etc)
--nayan

Similar Messages

OIM 11gR2 user not provisioning to Active Directory (11.1.1.5 connector)

Hello all,
I'm trying to set up an OIM 11gR2 instance to work with Active Directory with the Active Directory 11.1.1.5.0 connector. I've full installed both OIM and AD on separate servers, and I've installed the AD 11.1.1.5 connector on OIM. I have configured Active Directory properly (connector on OIM and the connector server on the AD server-side), and have set up the two IT Resources on OIM. I can run, for example, the Active Directory Organization Lookup Recon job and have it return results in the Lookup window.
My problem is that I cannot get it to provision to a user. I've created an Application Instance and Form for Active Directory, attached the Form, associated them with the appropriate resources (AD User), and added them to the Catalog, and then gone through the process of adding an account to the user, selecting the Application Instance, adding it to the cart, checking out, filling out the fields (Password, User ID, UPN, First Name, Last Name, Common Name, and Organization Name), and then submitting the request. This is all done as the xelsysadm admin user, but it still results with the account stuck on "Provisioning" because the "Create User" task failed due to a Connector Error (the reason stated is just a repeat of "Create Object" failed).
Anyone know what I'm missing here?
Thank you!
Edited by: 939908 on Nov 12, 2012 6:36 AM

Hey 833249, thanks for your reply
The organization field attribute is filled in correctly, in that the OU I selected exists in AD.
These are the errors listed in the connector server log:
+11/9/2012 9:07:07 PM <ERROR>: Class-> ActiveDirectoryUtils Method -> GetDirectoryEntry, Message -> Exception occured during the creation of directory entry.+
+11/9/2012 9:07:07 PM <ERROR>: Class-> ActiveDirectoryUtils Method -> GetDirectoryEntry, Message -> Exception Message : Logon failure: unknown user name or bad password.+
+11/9/2012 9:07:08 PM <ERROR>: Class-> ActiveDirectoryUtils Method -> GetDirectoryEntry, Message -> Exception Stack Trace : at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)+
at System.DirectoryServices.DirectoryEntry.Bind()
at System.DirectoryServices.DirectoryEntry.get_NativeObject()
at Org.IdentityConnectors.ActiveDirectory.ActiveDirectoryUtils.GetDirectoryEntry(String path, ActiveDirectoryConfiguration configuration) in c:\ADE\aime_oimcp\idc\bundles\dotnet\ActiveDirectory\ActiveDirectoryConnector\ActiveDirectoryUtils.cs:line 1423
+11/9/2012 9:07:08 PM <ERROR>: Class-> ActiveDirectoryConnector Method -> Create, Message -> Encountered Excetion: Unable to get the Directory Entry+
+11/9/2012 9:07:08 PM <ERROR>: Class-> ActiveDirectoryConnector Method -> Create, Message -> Stack Trace: at Org.IdentityConnectors.ActiveDirectory.ActiveDirectoryUtils.GetDirectoryEntry(String path, ActiveDirectoryConfiguration configuration) in c:\ADE\aime_oimcp\idc\bundles\dotnet\ActiveDirectory\ActiveDirectoryConnector\ActiveDirectoryUtils.cs:line 1456+
at Org.IdentityConnectors.ActiveDirectory.ActiveDirectoryUtils.DirectoryEntryExists(String path) in c:\ADE\aime_oimcp\idc\bundles\dotnet\ActiveDirectory\ActiveDirectoryConnector\ActiveDirectoryUtils.cs:line 1512
at Org.IdentityConnectors.ActiveDirectory.ActiveDirectoryConnector.Create(ObjectClass oclass, ICollection`1 attributes, OperationOptions options) in c:\ADE\aime_oimcp\idc\bundles\dotnet\ActiveDirectory\ActiveDirectoryConnector\ActiveDirectoryConnector.cs:line 219
ConnectorServer.exe Error: 0 : Org.IdentityConnectors.Framework.Common.Exceptions.ConnectorException: Unable to get the Directory Entry
at Org.IdentityConnectors.ActiveDirectory.ActiveDirectoryConnector.Create(ObjectClass oclass, ICollection`1 attributes, OperationOptions options) in c:\ADE\aime_oimcp\idc\bundles\dotnet\ActiveDirectory\ActiveDirectoryConnector\ActiveDirectoryConnector.cs:line 368
at Org.IdentityConnectors.Framework.Impl.Api.Local.Operations.CreateImpl.Create(ObjectClass oclass, ICollection`1 attributes, OperationOptions options) in c:\ADE\aime_icf\icf\framework\dotnet\FrameworkInternal\ApiLocalOperations.cs:line 388
at Org.IdentityConnectors.Framework.Impl.Api.Local.Operations.ConnectorAPIOperationRunnerProxy.Invoke(Object proxy, MethodInfo method, Object[] args) in c:\ADE\aime_icf\icf\framework\dotnet\FrameworkInternal\ApiLocalOperations.cs:line 244
at ___proxy1.Create(ObjectClass , ICollection`1 , OperationOptions )
at Org.IdentityConnectors.Framework.Impl.Server.ConnectionProcessor.ProcessOperationRequest(OperationRequest request) in c:\ADE\aime_icf\icf\framework\dotnet\FrameworkInternal\Server.cs:line 609
I'm not sure why the username/password error could be occurring, as those fields in the AD IT Resource are correct (I've run AD recon jobs that have connected properly). Is there something I'm missing?

OIM 11gR2 provisioning with GTC

Hello,
We are curently implementing Oracle Identity Manager 11gR2, and we are having difficulties with the implementation of the provisioning from OIM to the Target Systems exposed through a webservice on Oracle Service Bus.
We are using the Generic Technology Connectors as a basis of working. And initially we have created a GTC with only reconciliation Transport & Format Providers:
Connector Name TargetSystem1
Transport Provider (Provisioning):
Format Provider (Provisioning):
Transport Provider (Reconciliation): Database Application Tables Reconciliation
Format Provider (Reconciliation): Database Application Tables Reconciliation
We have configured the Process Definition of TargetSystem1 with all the operations (Create User, Update User, Enable User, Disable User, Delete User, etc.) connected with custom Java implementations, that are working just fine is we trigger them form Eclipse. The “Create User” task has only “Required for Completion”, “Allow Cancelation while Pending” and “Allow multiple instances” check boxes set to CHECKED; it also has all the fields in Integration TAB mapped, Responses mapped, but when we create a User in OIM and provision it with an account on the TargetSystem1_GTC Application Instance, the provisioning process in not accessing the “Create User” task to make the provisioning in the target system. The user that we are trying to provision has the account Status set to “Provisioning” and the Account Type set to “Unknown”. We have also checked the logs of OSB, but there is no activity there, because no request from OIM is being received.
After we investigated more closely the Oracle documentation for the Generic Technology Connectors we discovered that if we do not select Transport & Format Providers during the GTC creation, then the corresponding steps are not performed and they are not initialized, thus the provisioning cannot be done. The documentation also states that if we need to create custom providers in order to make the Provisioning with the GTC, but unfortunately we have no knowledge or any examples on how to do such custom providers for the provisioning of Users from OIM on the target systems via the Oracle Service Bus.
We have installed a second GTC with both provisioning and reconciliation Transport & Format Providers:
Connector Name: TargetSystem2
Transport Provider (Provisioning): Web Services
Format Provider (Provisioning): SPML
Transport Provider (Reconciliation): Database Application Tables Reconciliation
Format Provider (Reconciliation): Database Application Tables Reconciliation
The Web Services and SPML options were the only options that we could select from the out of the box connectors that are installed, and we did not find any other connectors in the download section of Oracle for this product, that can accommodate such communication. So, we configured the provisioning accordingly, and modified the “Create User” task from the TargetSystem2_GTC Process Definition, in order to use our custom adaptor instead of the adpTargetSystem2_GTC adapter that was preset when the TargetSystem2_GTC is created. But this does not help us, because the provisioning is not done, and the “Create User” task is not used. The user that we are trying to provision has the account Status set to “Provisioning” and the Account Type set to “Unknown”.
Next we tried to see if the GTC can be used to communicate directly with the OSB, using the Web Services Transport Provider and SPML Format Provider, and we did not make any modifications to the after the normal installation of the TargetSystem2 GTC. In this case the we can see that the OSB is being accessed by OIM, but unfortunately this case does not help us also, because the operations implemented on the OSB webservice have a different structure then the one SPML expects as default:
Caused by: com.thortech.xl.gc.exception.XSDValidationException: The SOAP response does not contain a valid SPML response type. Should be one of these -->addResponse modifyResponse deleteResponse resumeResponse suspendResponse setPasswordResponse
Do you have any suggestion on how to make the provisioning process work?
Edited by: user1717356 on 22.10.2012 03:22

Hi,
I think you need to put this check only for few attributes?
If Yes, then lets suppose you want to have a check for Country Field in Database which once modified by target Admin, then OIM should know.
1) Create one dummy field CountryDummy (Hidden) in OIM TargetProcess form and dont map it to any target attributes. This dummy field will only store values populated from OIM user profile to -> DB Connector Process Form.
2) On success of "Reconcilation Update Recievced", Put a custom process task which does a comparison with "CountryDummy" & "Country" and inform Admin using email notifications that this mismatch has been found.
HTH,
~J

Account stuck in Provisioning state in OIM 11gR2

Hello,
In OIM 11gR2, when provisioning fails, the application still shows in the accounts tab of the user, but it is stuck in the "Provisioning" state. I don't know if it's standard behavior, but it always does this for me. When this problem occurs, the only way I have found to remove the entry from the applications list is to completely delete the application instance and re-create it. Is there a cleaner way of removing the stuck account ? The "Remove Account" button does nothing for me.
Thanks,
--jtellier

Rajiv Dewan wrote:
BDW, if something goes wrong while doing provisioning then you can retry the rejected task (after fixing the issue) instead of initiating provisioning again with new instance. It will mark your existing incomplete instance as PROVISIONED.Oh, thanks, I had not realized that...
--jtellier

Manual Provisioning implementation in 11gR2

I am new to 11gR2. I need to migrate an app from 10g to 11gR2.
It has a RO and an object form and process form, an approval workflow and once approval is done it should be manually provisioned by a user in a particular group based on the result from a task assignment adapter. How to translate the same to work in R2. Please let me know the steps in detail which would be of great help to me . Thanks in advance.

find the below link for multilevel workflow approach
Multi Level Approval Workflow
create workflow in oim11gr2(Oracle DOC)
http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/request.htm#CIHFBEFB
http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/request.htm#BABFFJID
once you done with above create an Approaval policy for both Request and Operational level .

Provisioning users to AD groups in OIM 11gR2

I could use some advice on how to resolve this issue I am having.
Using the Active Directory connector (11.1.1.5) in our OIM 11gR2 development environment I can successfully provision OIM users to our AD resource. I have successfully run the org and group lookup recons, and provisioned users do go into the correction ou in AD.
However when I select which groups a user should be a member of in the ADUSERC child form (via the lookup), the user is not provisioned with the correct group membership in AD.
A separate issue is how to map the objectClass in AD in the ProvAttrMap; could anyone point me in the direction of how to go about that?
Thanks

The ObjectClass should be configured in this lookup Lookup.Configuration.ActiveDirectory
Check below
http://docs.oracle.com/cd/E22999_01/doc.111/e20347/extnd_func.htm#sthref221
4.6 Configuring the Connector for User-Defined Object Classes

Cannot provision Exchange 2003 account in OIM 11gR2

Hello,
I'm trying to provision Exchange 2003 accounts from OIM 11gR2 but I keep getting errors. My AD connector works and is able to reconcile and provision account and my Exchange connector is linked to it. I've understood that the only mandatory fields in the Exchange 2003 provisioning form are "mail store name" and "alias", so I've tested by only filling those. However, the provisioning does not complete and the logs show this error :
[2013-01-25T11:46:19.292-05:00] [oim_server1] [ERROR] [] [XELLERATE.ADAPTERS] [tid: [ACTIVE].ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: b70c24a5215a6ee3:-625a909b:13c6d3ae4c5:-8000-0000000000002b50,0] [APP: oim#11.1.2.0.0] Class/Method: tcAdpEvent/getITAttrVal encounter some problems: Could not find attibute value for IT Resource Key = 0 and attribute = Server Address
[2013-01-25T11:46:19.293-05:00] [oim_server1] [ERROR] [] [XELLERATE.ADAPTERS] [tid: [ACTIVE].ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: b70c24a5215a6ee3:-625a909b:13c6d3ae4c5:-8000-0000000000002b50,0] [APP: oim#11.1.2.0.0] Class/Method: tcAdpEvent/getITAttrVal encounter some problems: Could not find IT asset value for Svr_key = 0 and attribute = Server Address
[2013-01-25T11:46:19.293-05:00] [oim_server1] [ERROR] [] [XELLERATE.ADAPTERS] [tid: [ACTIVE].ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: b70c24a5215a6ee3:-625a909b:13c6d3ae4c5:-8000-0000000000002b50,0] [APP: oim#11.1.2.0.0] Class/Method: tcAdpEvent/getITAttrVal encounter some problems: DATA_ERROR[[
com.thortech.xl.dataobj.util.tcAdapterTaskException: DATA_ERROR
at com.thortech.xl.adapterfactory.events.tcAdpEvent.getITAttrVal(tcAdpEvent.java:2023)
at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpMEXCCREATEMAILBOX.implementation(adpMEXCCREATEMAILBOX.java:90)
at com.thortech.xl.client.events.tcBaseEvent.run(tcBaseEvent.java:196)
That's the only error I see and I'm not really sure about what it means. Any ideas?
Thanks,
--jtellier

Are you using the version 9 or 11 of the connector? I've done more investigations with version 9 and realized that the DB is not correctly updated by the connector. I've reported the problem with Oracle and a bug has been open. Here are the details :
When reconciling or provisioning a mailbox, a new row is added in the OIU table. This row has "null" as its APP_INSTANCE_KEY. Manually setting the Exchange's app instance key as the value of this column solves the problem.
Hope this helps!
--jtellier

No email notification from manual provisioning task - 11gR2

I have a disconnected application instance and I am using the standard DisconnectedProvisioning flow for provisioning - modified to assign the provisioning task to a group, using a rule which determines the group via the app. instance name.
The flow itself works as expected and the Manual Task in the flow is assigned to the correct group - the task shows up in the Inbox of the member of the group in the Self Service console
I would like to send an email to the user when the task is assigned and I have therefore configured SMTP Notification according to this http://allidm.com/blog/2012/11/configuring-smtp-notifications-in-oracle-identity-manager-11gr2/
I have confirmed that the SMTP server works as expected - I am able to send and receive message using this server.
On the Notification Tab of my Manual Task I have configured:
General:
Status: Assign / Recipient: Assignees
Status: Complete / Recipient: Initiator
Status: Error / Recipient: Owner
Advanced:
Remind Once: 0 days, 0 hours, 1 minute "After Assignment"
Encoding: UTF-8
Make Notifications Secure: False
Show worklist/workspace URL in notification: True
Make notification actionable: True
Send Task attachment: False
Group Notification Configuration: "Send individual emails"
I have redeployed my DisconnectedProvisioning flow to my SOA server a couple of times - remembering not to change the version number and to force overwriting the existing flow.
My SOA and IDM servers have been restarted as well.
When requesting the disconnected application instance using the catalog, the manual provisioning task is assigned to the correct user - however - he does not receive any email nor do I send any errors or stack traces from my SOA or IDM servers.
There must be some check box somewhere that I forgot to tick!
Does anybody have an idea - did I forget to configure something?
Kind regards,
- Tom

Ok - so I did in fact forget to tick a check box!
After setting up UMS using this: http://docs.oracle.com/cd/E27559_01/admin.1112/e27149/notification.htm#CACCEDGF and enabling notifications via:
Enterprise Manager, SOA, soa-infra, SOA Infrastructure drop-down, SOA Administration, Workflow Config:
Notification Mode: Email
After restarting my SOA and OIM managed servers - I now receive emails as expected.
Case closed :-)
Kind regards,
- Tom

Provisioning Office Communicator from OIM 11gR2

Hi Experts,
I want to provision office communicator 2013. I have AD already provisioning, Could you tell what are the mandatory fields required to be populated.
There are certain fields like msRTCSIP-UserRoutingGroupId for which the values are not known.
Please help!!
thanks

You are probably better off getting this information from Microsoft. Here is a starting point: http://blog.insideocs.com/2010/05/03/ad-attributes-required-to-enable-a-user-for-ocs/
Also, from doing quick searches, i believe this is now Microsoft Lync 2013 and no longer Office Communicator.
http://technet.microsoft.com/en-us/library/gg398379.aspx
-Kevin

Facing issue while provisioning to Exchange mail server in OIM 11gR2

Hi All,
I am getting following error while provisioning user in exchange.
[2013-12-19T16:04:02.634-08:00] [oim_server1] [ERROR] [] [XELLERATE.DATABASE] [tid: [ACTIVE].ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: edbbad62ee0b4f0e:5ae02d4e:14308416bb2:-8000-0000000000001313,0] [APP: oim#11.1.2.0.0] select orc_key, UD_EX_CH_VERSION from UD_EX_CH where orc_key=123[[
java.sql.SQLSyntaxErrorException: ORA-00904: "UD_EX_CH_VERSION": invalid identifier
    at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:462)
    at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:405)
    at oracle.jdbc.driver.T4C8Oall.processError(T4C8Oall.java:931)
    at oracle.jdbc.driver.T4CTTIfun.receive(T4CTTIfun.java:481)
    at oracle.jdbc.driver.T4CTTIfun.doRPC(T4CTTIfun.java:205)
    at oracle.jdbc.driver.T4C8Oall.doOALL(T4C8Oall.java:548)
    at oracle.jdbc.driver.T4CStatement.doOall8(T4CStatement.java:202)
    at oracle.jdbc.driver.T4CStatement.executeForDescribe(T4CStatement.java:942)
    at oracle.jdbc.driver.OracleStatement.executeMaybeDescribe(OracleStatement.java:1283)
    at oracle.jdbc.driver.OracleStatement.doExecuteWithTimeout(OracleStatement.java:1441)
    at oracle.jdbc.driver.OracleStatement.executeQuery(OracleStatement.java:1690)
    at oracle.jdbc.driver.OracleStatementWrapper.executeQuery(OracleStatementWrapper.java:446)
    at weblogic.jdbc.wrapper.Statement.executeQuery(Statement.java:506)
    at com.thortech.xl.util.JDBCUtils.executeQuery(JDBCUtils.java:159)
    at com.thortech.xl.dataaccess.tcDataBase.readPartialStatement(tcDataBase.java:760)
    at com.thortech.xl.dataobj.tcDataBase.readPartialStatement(tcDataBase.java:271)
    at com.thortech.xl.dataaccess.tcDataSet.executeQuery(tcDataSet.java:935)
    at com.thortech.xl.dataobj.tcDataSet.executeQuery(tcDataSet.java:1523)
    at com.thortech.xl.dataaccess.tcDataSet.executeQuery(tcDataSet.java:903)
    at com.thortech.xl.dataobj.tcDataSet.executeQuery(tcDataSet.java:1490)
    at com.thortech.xl.ejb.beansimpl.tcFormInstanceOperationsBean.getProcessFormChildDataData(tcFormInstanceOperationsBean.java:1271)
    at com.thortech.xl.ejb.beansimpl.tcFormInstanceOperationsBean.getProcessFormChildData(tcFormInstanceOperationsBean.java:1213)
    at Thor.API.Operations.tcFormInstanceOperationsIntfEJB.getProcessFormChildDatax(Unknown Source)
    at sun.reflect.GeneratedMethodAccessor904.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:606)
    at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflectio
Regards,
Nitin Natekar

Looks like some form version changes got corrupted.
You can do following things..
1) Make a new form version using Design condole
2) Make Recon Profile Active in Resource Object.
3) In Application Instance-> Form-> Create new Form.
If its not solved, you can uninstall and install your connector again.
~J

OIM 11gR2 - AD Organizational Unit provisioning

hi,
i can provision OIM organization to AD Organizational Unit. Its work fine with "Provision Resource to Organization" forms but i can't find any simple way (without six steps form) to add AD organizational unit to OIM organization.
Have you any suggestion or hint?
a.

Hi IDM Newbie,
Please find the link of Developer Guide:-
http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/toc.htm
And following link is for Application Instances:-
http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/resmgt.htm#CBBFAIEC

Provisioning Error in 11gR2

Hi All I am trying to provision a user to active directory but I am getting error like below....Help me ASAP
IAM-2053001 : User testuser1 does not have access to ApplicationInstance ActiveDirectory.
Thanks in Advance

make sure the Organization is published for the user's organization.
Go to Appinstance -> open detail page -> go to organization tab-> add this user's organization here.
run once agin "catalog sync" job

Problem with provisioning using Exchange 11.1.1.5 Connector in OIM 11gR2

Hi,
I getting following error while provisioning user to exchange server.
org.identityconnectors.framework.common.exceptions.ConnectorException: Problem while PowerShell execution Org.IdentityConnectors.Framework.Common.Exceptions.ConnectorException: No provisioning handler is installed.
Thanks,

Yes, you can try out few things suggested in below thread
Re: Exchange Provisioning
The error looks like form exchange server side but still not sure about it.
Meantime open Service Request with oracle about the same as I can see other developers are also facing same issue.

How to provision an account on OUD LDAP using LDAP generic connector?

I'm almost a newbie regarding OIM (R2 11.1.2.0.0) and I'm trying to learn it, so I think this is definitely a newbie question (please forgive me).
At present I'm trying to provision an user from OIM to an Application Instance of Oracle Unified Directory 11gR2 (11.1.2.0.0).
I've carefully followed the path to install generic LDAP connector (ODSEE/OUD/LDAPV3 Connector 11.1.1.5.0), to create IT Resource and Application Instance and to run Lookup reconciliation jobs.
No error messages here.
Then, using OIM Self Service GUI, I've created an user and asked for "Request Accounts".
After Add to Cart and Checkout, on Cart Details in Catalog I tried to define "Container DN" as pointing to "ou=people,dc=example,dc=com" (using ODSM interface I've previously created ou "people" under the base container "dc=example,dc=com").
I've seen an Oracle example suggesting to search for "MYOUD~people", where MYOUD is the Application Instance name, but in my case the search doesn't return anything.
Same thing if I try to write "ou=people,dc=example,dc=com" into "Container DN" field.
So I've left that field blank and started provisioning anyway but on the Account tab the Status for that operation is since then stuck to "Provisioning" (that doesn't surprises me ...).
Any hints?
Which mistakes I've made? Had I forgot something?
How could I check if OUD server is correctly integrated with OIM?
I tried to check it using Design Console, too, but I'm not skilled enough with the tool.
Thanks.

After reconciliations, Lookup.LDAP.Organization displays the correct value (Code="25~ou=people,dc=example,dc=com") but for Lookup.LDAP.Group the expected value ("cn=grouptest1,dc=example,dc=com") is missing (empty list, that one is the only group I've created so far in my test environment).
By the way, after having created OU and group I didn't restarted neither OUD server nor OIM server but I don't think it's mandatory to do that and, anyway, at least the OU value is shown.
Edited by: Torun on Feb 12, 2013 8:14 PM

OIM 11G R2 Provisioning User to Oracle DB

Hello Experts,
I'm working on OIM 11gr2 and I installed DBAT 9.1.0.5.0
User-->Accounts-->RequestAccounts--> catalog-->add to cart --> checkout ...
When i was executed Checkout in catalog why no content for details ？ User can't Provisioning to DB.
Have you any ideas?
Thanks!

I appreciate your feedback very much.
My operation steps are as follows：
1) install DBAT 9.1.05
2)create connector "Database Application Tables Provisioning"
3)The system automatically created IT resources and Application Instances
4)Create Sandbox and activate it
5)edit Application Instances, create Form
6) Publish Sandbox
7)Run "Catalog Synchronization Job"
8)login /identity
9)create user
10)request acttouts
11) catalog-->add to cart --> checkout !

AD Provisioning - 11gR2

Similar Messages

Maybe you are looking for