Bhold-flowing user's Manager attribute to BHOLD core

Hi,
I have a requirement to flow all user's manager value into bhold core.This is for setting up attribute based attestation.The problem with manager is "it is a reference type attribute in both AD and metaverse", so i need to create a reference attribute
in bhold core for the flows to happen from metaverse to bhold .
But there is no reference attribute type in bhold.Please can anybody suggest how to create a reference attribute in bhold.
Regards
Shakti
shakti

Hello Shakti,
Attestation in BHOLD is either "Application-based", "Role-based" (not Manager-based) or "File-based". If the Manager in your case is defined on OU-Level you can user Role-based Attestation.
As per BHOLD Definition for Role-based Attestation:
- the Steward's role must be available in the OU branch. that means in the specific OU or in one of the OUs above.
- there must be a Steward in the OU to be attested and must be linked to the Steward's role.
In case this does not meet your environment, you can run File-based Attestation. The Definition file includes the Steward's Name seperated by the user Name to be attested. This works in any case. The file you need can then be produced by FIM (CSV-File Export
MA).
Hope this helps.
Henry

Similar Messages

Fetching Manager Attribute For The User In PeoplePicker Control Using JavaScript/JQuery

Hi Everyone,
I need to fetch the Manager, Department and Title information for user listed in PeoplePicker control on SharePoint site and List them in textbox using JavaScript.
Please suggest the JavaScript code.
Regards~
Deepak Arora
If you Find the Answer | Article | Blog Helpful Please Vote As Helpful / Mark As Answer

Hi,
According to your post, my understanding is that you want to get the user’s manager, department and title.
We can use the GetUserProfileByName operation of the SPServices to achieve it, you can download it in the
CodePlex.
You can first retrieve the user of the People Picker control.
http://sympmarc.com/2012/04/22/working-with-sharepoint-people-pickers-with-jquery-a-new-function-called-findpeoplepicker/
http://sharepoint.stackexchange.com/questions/80839/unable-to-get-user-name-from-the-people-picker-control-using-jquery
Then we can retrieve the user’s information using the SPServices.
I have made a simple code demo to retrieve the user’s manager, department and title as below, you can have a look at it.
<script src="http://code.jquery.com/jquery-1.10.2.min.js" type="text/javascript"></script>
<script type="text/javascript" src="http://sp/Shared Documents/jquery.SPServices-2014.01.min.js"></script>
<script type="text/javascript">
// When the body is loaded, the onload event handler executes each function whose name is contained in this array.
$(function(){
var managerName;
var title;
var department;
$().SPServices({
operation: "GetUserProfileByName",
async: false,
AccountName: $().SPServices.SPGetCurrentUser(),
completefunc: function (xData, Status) {
console.log($(xData.responseXML).find("PropertyData").parent().html);
$(xData.responseXML).find("PropertyData > Name:contains('Manager')").each(function() {
managerName = $(this).parent().find("Values").text();
//alert("the manager is"+managerName);
$(xData.responseXML).find("PropertyData > Name:contains('Title'):eq(0)").each(function() {
title = $(this).parent().find("Values").text();
//alert("the Title is"+title);
$(xData.responseXML).find("PropertyData > Name:contains('Department')").each(function() {
department = $(this).parent().find("Values").text();
//alert("the Department is"+department);
var obj1=managerName+title+department;
$("#Test").text(obj1);
</script>
<span id="Test"></span>
More reference:
http://sympmarc.com/2012/04/22/working-with-sharepoint-people-pickers-with-jquery-a-new-function-called-findpeoplepicker/
Thanks & Regards,
Jason
Jason Guo
TechNet Community Support

Importing manager attribute in FIM

Experts,
I have two tables:-
users:-
employeeid:firstname:lastname:deptnumber
department
deptnumber:deptname:manager
A SQL view combines this two tables and I am importing data through SQL MA and inbound synch rule.
All attributes are coming except manager. I have choose manager as 'Reference' in SQL MA. I am sure employee exists.
All attributes are getting imported except manager.
Thanks,
Mann

Hello,
What is the format of 'manager' in the SQL table 'department'? It's the same that 'employeeid' in the SQl table 'users'?
'Manager' are imported in the CS of SQL and not in MV? Or it's not present in the CS?
And your flow 'manager' is for 'department' object, and not for 'user' object: With you current configuration, you cant' flow manager on user object through inbound synch rule.
Regards,
Sylvain

Manager attribute from AD and to AD

Hello Experts,
I am working with AD-IDM implementation.
I am facing two problems here:
1. Issue in getting Manager attribute of the users from HR system onto IDM via initial load and
2. Issue in assigning the Manager attribute to a user from IDM while creating a new user on AD
In case 1, I am simply trying to pass the manager in HR system to attribute MX_MANAGER as
in pass 'to identity store' -> MX_MANAGER = %manager%
For this, the IDM throws an error as "Entry reference value is not numeric when storing attribute MX_MANAGER=xyz"
In case 2, while creating a new identity assigning the AD privilege, I am trying to assign the manager to that new AD user. But it fails to create a user on AD as the manager attribute value comes with an error "CONSTRAINT_ATT_TYPE"
I know that the manager value on AD resides in DN format, but not sure how to resolve that to use the same for purposes.
Could you please suggest on the above issues.
FYKI - Version: IDM 7.2
Many thanks in advance!
Naveen

Hi Naveen,
In order to start writing scripts, you should know what are the tables/views to query for getting the required information.
I strongly recommend you to go through the the blog IDM SQL Basics #1: Queries against the Identity Store by Per Krabsetsve
Anyways I am writing down the sample scripts for your reference, which you can make use of.
Let me know for any further queries.
1. For getting the MSKEY of the user from MSKEYVALUE
// Main function: z_sap_getMskeyForMskeyvalue
function z_sap_getMskeyForMskeyvalue(Par)
var msKey = "";
msKey = "select distinct mcMSKEY from idmv_entry_simple where mcMSKEYVALUE='"+Par+"'";
msKey = uSelect(msKey);
return msKey;
2. For gettting the DN of the Manager with MSKey as the input to the script.
// Main function: z_sap_getManagerADDN
function z_sap_getManagerADDN(Par)
var msKey = Par;
var managerADDN = "";
managerADDN = "select avalue from idmv_value_basic where MSKEY="+Par+" and AttrName='ACCOUNTIDECAD'";
// in the above select query ACCOUNTIDECAD is my AD account attribute. In your case it is ACCOUNT<AD Rep Name>
managerADDN = uSelect(managerADDN);
return managerADDN;
All the best !!
~ Krishna.

Change form layout by User's Manager

Hi all,
1. I need change forms of provisioning e management for User's Manager/Administrator of Resource view only resources management by him.
Eg.
If Admin1 access User1 profile and go to resource profile, I need show only resources that he is Administrator.
2. Are the some way to filter the resource profile by User's Manager/Administrator of Resource?
Eg.
In the User1 profile, Admin1 view information A/B/C (roles of resource) on the attribute profile(combobox/lookup) and Admin2 view only information B/C/D.
Thanks in advance,
Carlos

Sorry, i have no idea. I would suggest you create an SR in metalink.oracle.com if you have purchased oracle support to find out what the variable is for.
-Kevin

WHATS THE FLOW OF MATERIAL MANAGMENT IF YOU MAKE A PURACHASE ORDER ?

WHATS THE FLOW OF MATERIAL MANAGMENT IF YOU MAKE A PURACHASE ORDER ? PLEASE EXPLAIN IN DETAIL.
BEST REGARDS,
RYAN

Hi Ryan,
The t procurement cycle for a material consists of the following stages:
1. Determination of Requirements
Materials requirements are identified either in the user departments or via materials planning and control.
(This can cover both MRP proper and the demand-based approach to inventory control. The regular checking of stock levels of materials defined by master records,
use of the order-point method, and forecasting on the basis of past usage are important aspects of the latter.)
You can enter purchase requisitions yourself, or they can be generated automatically by the materials planning and control system.
2. Source Determination
The Purchasing component helps you identify potential sources of supply based on past orders and existing longer-term purchase agreements.
This speeds the process of creating requests for quotation (RFQs), which can be sent to vendors electronically via SAP EDI, if desired.
3. Vendor Selection and Comparison of Quotations
The system is capable of simulating pricing scenarios, allowing you to compare a number of different quotations. Rejection letters can be sent automatically.
4. Purchase Order Processing
The Purchasing system adopts information from the requisition and the quotation to help you create a purchase order. As with purchase requisitions,
you can generate Pos yourself or have the system generate them automatically. Vendor scheduling agreements and contracts
(in the SAP System, types of longer-term purchase agreement) are also supported.
5. Purchase Order Follow-Up
The system checks the reminder periods you have specified and - if necessary - automatically prints reminders or expediters at the predefined intervals.
It also provides you with an up-to-date status of all purchase requisitions, quotations, and purchase orders.
Hope this is useful for u..
Reward points if useful..
Cheers!!!
Pankaj..

Code(Adapter) for Checking User's Manager in AD

I am trying to make a code to be used as an adapter and use that adapter before create user task... The process should first check the presence of manager id in Microsoft AD(target system), if present then create the user....
Can anyone help me????????

Hi,
You can have code something like this. You need to choose a manager attribute for example: employee number to search for manager in any LDAP.
public static DirContext getConn(String Address, String dn, String root,
               String pwd, int port, boolean SSL) throws Exception {
          Hashtable<String, String> env = new Hashtable<String, String>();
          String url = "ldap://" + Address + ":" + port + "/" + root;
          env.put(Context.INITIAL_CONTEXT_FACTORY, com.sun.jndi.ldap.LdapCtxFactory);
          env.put(Context.PROVIDER_URL, url);
          env.put(Context.SECURITY_AUTHENTICATION,"simple");
          env.put(Context.SECURITY_PRINCIPAL,dn);
          env.put(Context.SECURITY_CREDENTIALS,pwd);
          if(SSL) {
               env.put(Context.SECURITY_PROTOCOL,"ssl");
          DirContext dirContext = new InitialDirContext(env);
          return dirContext;
public String ManagerExists (Long processInstanceKey, String managerAttribute) {
                    DirContext adContext = getConn(Address, uid, root, passwd, port, SSL);
                    String managerExists= "No";String searchBase="";
                    String filter = "managerAttribute="+managerAttribute;
                                        SearchControls searchControls = new SearchControls();
          searchControls.setSearchScope(SearchControls.SUBTREE_SCOPE);
          NamingEnumeration namingEnumeration = adminDirContext.search(searchBase, filter, searchControls);
          if (namingEnumeration == null) {
               managerExists="No";
          while (namingEnumeration.hasMoreElements()) {
               managerExists="Yes";
          return managerExists;
Hope this helps.
regards,
GP

Need to put 2 managers on Manager attributes field.

Hello,
Need to fill two manager name on users attribute (manager attribute) on windows server 2012 active directory.
Please help...
Thanks & Regards
Anil

you can't...
you would need to create another custom attribute in your AD if you wanted a user to have two managers.
Regards,
Denis Cooper
MCITP EA - MCT
Help keep the forums tidy, if this has helped please mark it as an answer
My Blog
LinkedIn:

Reconciliation of User's Manager Field using GTC

Hi,
Could anyone suggest how to manage the reconciliation of Manager field of users using GTC.
As for the first trusted reconciliation of users , the manager value coming from the source would not exist in OIM, so if we map the manager field of source with manager field in OIM, it would fail, as the manager user doesn't yet exist in OIM. How can we implement this.
Regards

Hi Rajiv,
Thanks for your response.
We have configured our GTC with the manager attribute mapped as well, in the sense, there are race conditions, manager user might not exist while OIM is reconciling and trying to create a user.
So, the recon event comes as Data Validation Failed. But eventually the users will be created and this Retry Failed Recon Events ST, which is OOTB will slowly resolve all the users as and when the users are created in OIM.
What happening is :- when i am running this Retry Failed Recon Events ST (as there are lots of failed recon events), OIM is crashing after every half n hour.
What i could see in logs is below:- Is this somehow related to CPU usage and Memory???
at oracle.iam.reconciliation.scheduledtasks.ReconRetrySchedulerTask.process(ReconRetrySchedulerTask.java:43)
at oracle.iam.reconciliation.scheduledtasks.ReconRetrySchedulerTask.process(ReconRetrySchedulerTask.java:43)
at oracle.iam.reconciliation.scheduledtasks.ReconRetrySchedulerTask.process(ReconRetrySchedulerTask.java:43)
>
/u01/oracle/admin/OIMDomain/mserver/OIMDomain/bin/startWebLogic.sh: line 180: 19488 Segmentation fault (core dumped) ${JAVA_HOME}/bin/java ${JAVA_VM} ${MEM_ARGS} -Dweblogic.Name=${SERVER_NAME} -Djava.se
curity.policy=${WL_HOME}/server/lib/weblogic.policy ${JAVA_OPTIONS} ${PROXY_SETTINGS} ${SERVER_CLASS}
<FINEST> <NodeManager> <Waiting for the process to die: 19417>
<INFO> <NodeManager> <Server failed so attempting to restart (restart count = 1)>
<INFO> <NodeManager> <Starting WebLogic server with command line: /u01/oracle/admin/OIMDomain/mserver/OIMDomain/bin/startWebLogic.sh >
<FINEST> <NodeManager> <Environment: TERM=xterm>
<FINEST> <NodeManager> <Environment: JAVA_HOME=/u01/oracle/product/fmw/11.1.2/jdk1.6.0_30>
Any Suggestions???
Thanks

Get Manager attribute from AD 2003

Guys, Is there anyway to retrieve the value of "manager" attribute for a specific user defined on Active directory (windows 2003), any example will be higly appreciated as i am trapped. Thank u

If you know the user name you could simply just retrieve the "manager" attribute. For example:.....
String userName = "CN=Albert Einstein,OU=Research,DC=antipodes,DC=com";
// Create the initial directory context
LdapContext ctx = new InitialLdapContext(env,null);
// Retrieve all attributes of the requested object
Attributes attrs = ctx.getAttributes(userName);
// Print out some of the attributes
System.out.println("DN: " + attrs.get("distinguishedName").get());
System.out.println("Manager: " + attrs.get("manager").get());
.....Alternatively if you are performing a search, again just specify the manager attribute in the list of attributes to be returned. ....
//Specify the attributes to return
String returnedAtts[]={"sn","givenName","mail","manager"};
searchCtls.setReturningAttributes(returnedAtts);
//Specify the search scope
searchCtls.setSearchScope(SearchControls.SUBTREE_SCOPE);
//specify the LDAP search filter
String searchFilter = "(&(objectClass=user)(mail=*))";
//Specify the Base for the search
String searchBase = "DC=Antipodes,DC=Com";
....Note the corresponding backlink to the manager attribute is the directReports attribute.

Transaction flow (user manual) of CIN.

Hi
Would like to verify the results of Config. Appreciate if any one could send transaction flow (user manual) of CIN.
thanks
Sridevi

Hello Sridevi,
Here is the complete guide for CIN, click on Materials Management, you will find different scenarios with step by step details.
<a href="http://help.sap.com/saphelp_47x200/helpdata/en/09/ebf138cdd78a4be10000000a114084/frameset.htm">CIN</a>
Also, here is the baseline package for India - CIN
<a href="http://help.sap.com/bp_blv1470/BL_India/index.htm">Baseline Package - CIN</a>
Hope this helps.
Regards
Arif Mansuri

App-V 5 sp2, Citrix user profile manager and Event IDs 19104

Hi,
the environment:
Full Infrastructure, Appv 5 sp2 Client on server 2008r2, xenapp 6.5 and Citrix user profile manager.
We get the event error 19104 on published packages. But not on all users. %APPDATA%\Microsoft\AppV\Client\VFS and %LOCALAPPDATA%\Microsoft\AppV\Client\VFS are excluded per
http://blogs.technet.com/b/appv/archive/2013/10/01/support-tip-event-ids-19104-and-19105-are-logged-when-publishing-and-unpublishing-app-v-5-0-packages.aspx from my test GPO:
List of directories to exclude:
AppData\Local\Microsoft\AppV
AppData\Roaming\Microsoft\AppV\Client
Appdata\local
appdata\locallow
Still some users get app-v Applications, but some that are copies of the ones working does not get the Applications. I have tried to delete the profile. but still no closer to a solution. Anyone got this working?

Thanks Nicke, I should have tried harder to get you to come and work with me in Oslo earlier this year ;)
That thread does point on the Profile managment, and redirection of %appdata% and %localappdata% . Those to folders are not redirected. But when i run Procmon, i can see that a working user creates the c:\users\<username>\appdata\local\temp but non
working does not even try.Non working users also does not query the registry as much as working. Ofcourse this all work in my lab so the settings should be sound. but i cannot find the smoking environment variable or setting that causes it.

Error While creating users in managed system.

Dear All,
I am configuring SAP Solution Manager 7.1. I am in stage of Managed System Configuration (for JAVA).
In step 6 Create user: While creating (System) user SM_COLL_<SID> I am getting error :
An error occurred while processing the UME command READ_USER from agent <hostname> : Server returned: 401 Unauthorized. Please check SMD agent application logs.
And for ABAP System,
SMDAGENT_XXX Technical User (in Managed System <SID> Client 000)
while creating user SMDAGENT_<SID> and SAPSUPPORT
I am getting error:
No CENTRAL nor DIALOG instance known for system <SID>
But in SM51 I can see Server Status Active.
and Users are not present.(Checked it through SU01)
I am not getting why this is happening.
Please help me regarding the same.
Thanks & Regards
Ajitabh

Hi,
I am pasting the SMD agent application logs:
<!LOGHEADER[START]/>
<!HELP[Manual modification of the header may cause parsing problem!]/>
<!LOGGINGVERSION[1.5.3.7185 - 630]/>
<!NAME[SMDAgentAppLog]/>
<!PATTERN[SMDAgentApplication.log]/>
<!FORMATTER[com.sap.tc.logging.TraceFormatter(%d [%t] %10s %m)]/>
<!ENCODING[Cp1252]/>
<!FILESET[0, 10, 1000000]/>
<!PREVIOUSFILE[SMDAgentApplication.9.log]/>
<!NEXTFILE[SMDAgentApplication.1.log]/>
<!LOGHEADER[END]/>
Nov 29, 2011 2:02:09 PM [Thread[Connector,5,main]] Warning    com.sap.smd.wily.hostagent.mai.MaiAdapter - init: Introscope Host Adapter is not active, no Introscope metrics from MAI
Nov 29, 2011 2:21:01 PM [Thread[Thread-33,5,main]] Warning    com.sap.smd.wily.hostagent.mai.MaiAdapter - init: Introscope Host Adapter is not active, no Introscope metrics from MAI
Nov 29, 2011 2:38:31 PM [Thread[Thread-67,5,main]] Warning    com.sap.smd.wily.hostagent.mai.MaiAdapter - init: Introscope Host Adapter is not active, no Introscope metrics from MAI
Nov 30, 2011 1:26:19 PM [Thread[ExRun:OutsideDiscovery_1,5,OutsideDiscovery:ExecTG]] Path       Caught java.net.ConnectException: Connection refused: connect
     at java.net.PlainSocketImpl.socketConnect(Native Method)
     at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:333)
     at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:195)
     at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:182)
     at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:366)
     at java.net.Socket.connect(Socket.java:521)
     at com.sap.smd.agent.plugin.connectors.http.ConnectionExtendedImpl.openSocket(ConnectionExtendedImpl.java:2025)
     at com.sap.smd.agent.plugin.connectors.http.ConnectionExtendedImpl.open(ConnectionExtendedImpl.java:1398)
     at com.sap.smd.agent.plugin.connectors.http.ConnectionExtendedImpl.sendInternal(ConnectionExtendedImpl.java:1552)
     at com.sap.smd.agent.plugin.connectors.http.ConnectionExtendedImpl.send(ConnectionExtendedImpl.java:1483)
     at com.tssap.dtr.client.lib.protocol.requests.RequestBase.perform(RequestBase.java:570)
     at com.tssap.dtr.client.lib.protocol.requests.RequestBase.perform(RequestBase.java:693)
     at com.sap.smd.agent.plugin.connectors.http.HTTPConnectorService.performRequest(HTTPConnectorService.java:548)
     at com.sap.smd.agent.plugin.connectors.http.HTTPConnectorService.performRequest(HTTPConnectorService.java:673)
     at com.sap.smd.agent.plugin.connectors.http.HTTPConnectorService.performRequest(HTTPConnectorService.java:638)
     at com.sap.smd.agent.plugin.connectors.http.HTTPConnectorService.performRequest(HTTPConnectorService.java:624)
     at com.sap.smd.agent.plugin.connectors.webservice.SAPHostAgentTrustedConnectionConfigurator.setupTrustedConnection(SAPHostAgentTrustedConnectionConfigurator.java:81)
     at com.sap.smd.agent.plugin.connectors.webservice.WSConnectorFactory.configureLocalSAPHostAgentEndPoint(WSConnectorFactory.java:244)
     at com.sap.smd.agent.plugin.hostagent.check.HostAgentCheckService.getHostAgentVersion(HostAgentCheckService.java:105)
     at com.sap.smd.agent.plugins.dcc.util.WSProxyManager.checkSAPHostAgentVersion(WSProxyManager.java:287)
     at com.sap.smd.agent.plugins.dcc.util.WSProxyManager.initSAPHostControlWebServiceClient(WSProxyManager.java:112)
     at com.sap.smd.agent.plugins.dcc.util.WSProxyManager.getSAPHostControlProxy(WSProxyManager.java:75)
     at com.sap.smd.agent.plugins.dcc.job.PhysicalHostPushJob.run(PhysicalHostPushJob.java:195)
     at com.sap.smd.server.exec.TaskRunner.run(TaskRunner.java:46)
     at com.sap.smd.server.util.concurrent.PooledExecutor$Worker.run(PooledExecutor.java:781)
     at java.lang.Thread.run(Thread.java:679)
Nov 30, 2011 1:26:19 PM [Thread[ExRun:OutsideDiscovery_1,5,OutsideDiscovery:ExecTG]] Error      Pb:
[EXCEPTION]
java.rmi.RemoteException: Error to perform http request cause by java.io.IOException: Unable to open connection to host "FQDN:1128". The host is down or unavailable...; nested exception is:
     java.io.IOException: Unable to open connection to host "FQDN:1128". The host is down or unavailable.
Dec 2, 2011 4:56:53 PM [Thread[Thread-368,5,main]] Warning    [Setup]Step Id 1051 has no step description
Dec 2, 2011 4:56:53 PM [Thread[Thread-368,5,main]] Warning    [Setup]Step Id 1051 has no step description
Dec 2, 2011 5:02:05 PM [Thread[Thread-363,5,main]] Error      [Setup]Failed to get a soap response from http://FQDN:50000/spml/spmlservice
Dec 2, 2011 5:02:05 PM [Thread[Thread-363,5,main]] Error      [Setup]An error occured while processing the UME command READ_USER from agent HOSTNAME : Server returned: 401 Unauthorized
[EXCEPTION]
com.sap.sup.admin.xmlsoap.core.soap.NativeSOAPException: Server returned: 401 Unauthorized
Kindly help me out guys.
Thanks & Regards
Ajitabh

Using dnconvert() on manager attribute in a mapping file for AD-OID synch

I was just curious - has anyone tried using dnconvert() on the manager attribute for Active Directory - OID synchronization?
Example: manager: : :person:manager: :inetorgperson:dnconvert(manager)
Is that the way to bring over who an employee reports to (in our case, for use in Oracle Portal) or is there a better solution?

Surely, we're not the only ones trying to map employees' Managers from AD to OID? :-)

Access current user's manager name in the console application ( through Client object model)

Hi Guys,
Is there any way to retrieve current logged-in user's Manager name in the console application.
As I don't have access to the server where SharePoint 2010 is installed so I wanted to access through client object model.
arun singh

Unfortunately, you can't use CSOM to do this in SharePoint 2010 (you can in SharePoint 2013!), but you CAN use the User Profile Service .asmx web service to accomplish this. You need to call the
GetUserProfileByName method exposed
in the http://<yourServerName>/_vti_bin/UserProfileService.asmx web service. Pass in the user name for the current user and Manager will be one of the properties that is returned.
Here is a link to a blog post with example code.
Please mark my reply as helpful (the up arrow) if it was useful to you and please mark it an answer (the check box) if it answered your question! Thank you!
Danny Jessee | MCPD - SharePoint Developer 2010 | MCTS - SharePoint 2010, Configuring
Blog: http://dannyjessee.com/blog | Twitter: @dannyjessee

Bhold-flowing user's Manager attribute to BHOLD core

Similar Messages

Maybe you are looking for