Copy user attribute from different user to user currently being edited

Dear all,
I'm somehow stuck with a requirement I've to implement.
I've to copy some user attributes from one user to another. I learned that I should be able to use "getResourceObject" for
this and I tried to implement this in my user form:
<Field name='otherUser_actvtGrps'>
<Display class='Text'>
<Property name='title' value='otherUser_actvtGrps'/>
</Display>
<Default>
<set name='otheruser'>
<invoke name='getResourceObject' class='com.waveset.ui.FormUtil'>
<select>
<ref>context</ref>
<ref>:display.session</ref>
</select>
<s>SAP_System_A</s> <!-- the resource ID -->
<s>User</s>
<s>TemplateUser</s> <!-- this is the AccountID that i need as source -->
<null/>
</invoke>
<ref>otheruser.user.attributes.activityGroups</ref> <!-- this is the attribute from the source user I want to copy/read -->
</set>
</Default>
</Field>
But this does not return anything..
Any ideas what I did wrong ?
Many many thanks for any help/ideas !
Best regards
Joerg

Do you know where to get some docs about the topics you mentioned ?
1. Your adapter might not to support Resource Objects of type User.ResourceReference manual, the "Resource Object Management" section in each adapter chapter. Also the resource description in XML has the ObjectTypes section, for example, for Active Directory adapters:
  <ObjectTypes>
    <ObjectType name="Group" nameKey="UI_RESOURCE_OBJECT_TYPE_GROUP" icon="group">
      <ObjectClasses operator="AND">
        <ObjectClass name="Group"/>
      </ObjectClasses>
      <ObjectFeatures>
        <ObjectFeature name="create"/>
        <ObjectFeature name="update"/>
        <ObjectFeature name="delete"/>
      </ObjectFeatures>
      <ObjectAttributes idAttr="distinguishedName" displayNameAttr="samAccountName" descriptionAttr="description" objectClassAttr="objectclass">
        <ObjectAttribute name="cn" type="string"/>
        <ObjectAttribute name="sAMAccountName" type="string"/>
2. You can fetch the complete user view with all resource account information.You will find many examples in IdM XPRESS samples.
Get user view using LighthouseContext and user accountId
<invoke name='getView'>
  <invoke name='getLighthouseContext'>
    <ref>WF_CONTEXT</ref>
  </invoke>
  <concat>
    <s>UserViewer:</s>
    <ref>accountId</ref>
  </concat>
  <Map>
  </Map>
</invoke>Or with WorkflowServices (see BusinessAdministration manual):
<Action id='0' application='com.waveset.session.WorkflowServices'>
  <Argument name='op' value='getView'/>
  <Argument name='viewId'>
    <concat>
      <s>User:</s>
      <ref>accountId</ref>
    </concat>
  </Argument>
  <Return from='view' to='user'/>
</Action>
3. You can fetch resource account info directly using ResourceAdapter API (not too well documented way).Example in Java:
    LighthouseContext ctx = <get context here>;
    // Get resource object
    Resource res = (Resource) ctx.getObject(Type.RESOURCE, <resource name>);
    // Pack resource and user accountId into a ResourceInfo object
    WSUser user = new WSUser();
    ResourceInfo info = new ResourceInfo();
    info.setAccountId(accountId);
    info.setResource(res);
    info.setAttributes(null);
    user.setResourceInfo(new ResourceInfo[] {info});
    // Rertrieve ResourceAdapter object
    ResourceAdapter ra = ResourceOp.findAdapter(res, res.getCache());
    // Get account info into the 'user' object
    WSUser result = ra.getUser(user);
    // Now you can get account status from ResourceInfo ...
    info = result.getResourceInfo(res);
    // ... and account attributes from WSAttributes
    WSAttributes attributes = result.getWSAttributes();
    ...

Similar Messages

  • Custom user attribute from ABAP to Portal UME

    Hi All,
    We have choose the ABAP as the data source for portal UME. We have a custom user attribute in the abap. Now i want to bring that custom user attribute from abap to custom user attribute in the UME.
    Any help will be rewarded.
    Thanks
    Sarang.

    Any resolution to this issue?

  • Copying a query from different user group

    masters,
    is it possible to copy a query from different user group?
    if so please tell me how
    thnks!

    The query made from SQVI is only intended for individual use. It cannot be transported and there is no concept of Global/Standard area. To be able to transport or share the query to other users is by converting it to SAP Query wherein the source of data will also be converted to an Infoset. Remember that is done in the Standard query area. To do this, go to SQVI-> click SAP Query then go to menu Query -> Convert Quickviews... Select your Quickview queries and provide and infoset name.

  • Mapping users coming from different domain in AD

    HI,
    We have configured vintela SSO which is working.Now we are trying  to add another domain but it has been unsuccessful.
    We have imported the users coming from other domain in CMC->AD, and UseFDQNDirectoryForServers parameter in registry.
    The issue is our complex krb5.ini errors as "cannot find kdc for realm" for the user account coming from the other domain.The existing domain kinit is successful.
    Please help in resolving this issue!!! We need to have users coming from different domain to use vintela SSO.
    Thank you.

    well you're mixing things up a bit.
    The usefqdnfordirectoryservers is used to map in groups. If the groups show up as well as the users that piece should be complete.
    the krb5.ini is for logging in users manually, it must conatin the KDC for every domain that may contain users that need to log into BO. It also must have a KDC or capath entry to define all the parent domains as well (even if they do not have members that need to login. This is how the krb5 is used to verify transitive trusts. Then all users that are not in the default domain must logon as username@ DNSDOMAIN.COM where the DNS domain is entered in all caps aqnd represents the FQDN of theidomain the users bewlong to. Now if not logging in manually this should be a big problem.
    So for SSO (vintela anyway) this process is automatic, although you may want to configure vintela with site information so it doesn't randomly use all your DC's Site can be set following the steps at the end of business objects note 1261835 (complete and vintela only editions).
    In order for vintela to work properly the value entered in CMC > Authentication > Windows AD > service principal name must = an SPN thet was created on the account that is running the SIA/CMS
    Regards,
    Tim

  • Configuration scenario currently being edited by user" & locked

    HI all,
    Appreciate your help on this object locks;
    I was changing some configuration scenarios in integration Directory - suddanly lost the internet connection;
    Now when i try to change it says "configuration scenario currently being edited by user" & locked
    I appreciate if you help me to remove these lock objects
    Thanks
    Iver

    Hi,
    Go to administration -
    Select appropriate option out of these - > repository/ Directory
    now select LOCK OVERVIEW.
    now you will get all the locked objects by any user.
    Now focus on locked object which you want to realese
    now press Button Release Lock .
    Hurray !!! locks are released.
    Hope this helps .....
    regards
    prabhat Sharma.

  • Accessing user attributes from a pipeline component

    Hello,
    I'm using WLCS & WLPS 3.1. I use webflow and I have implemented the page
    transition myself to work with the portal. Everything is working fine.
    I'm planning to implement a complex step of a business process as a pipeline
    component. For various reasons, this PC will be implemented as an EJB. To
    perform its job, this PC needs to get information about the user that is
    currently logged in. More specifically, it needs to lookup custom attributes
    from the user profile (i.e. user property set).
    So my question is : is this possible directly from the PC, or do I have to
    populate the pipeline session with required information in the input
    processor?
    Thank you for your advice
    Nicolas

    Hello Ture,
    Thanks for both posts.
    Nicolas
    "Ture Hoefner" <[email protected]> wrote in message
    news:[email protected]..
    ... To perform its job, this PC needs to get information about the userthat
    is
    currently logged in. More specifically, it needs to lookup customattributes
    from the user profile (i.e. user property set).
    So my question is : is this possible directly from the PC, or do I haveto
    populate the pipeline session with required information in the input
    processor?Hello Nicolas,
    I have not tried this myself. I think that the disconnect between the
    pipeline session and the portal session is probably the fact that theattributes
    in the portal session have their keys "fixed up" by prepending the portal
    request URI. This is made possible by the
    com.beasys.commerce.foundation.flow.jsp.DefaultDestinationDeterminer,which the
    PortalDestinationDeterminer extends. It puts a "TRAFFIC.URI" attributeinto the
    each request that goes through the FlowManagerServlet for the portal. Inthe
    Acme exampleportal, the "SERVICEMANAGER.USER" attribute is put into theportal
    HttpSession as "exampleportal.SERVICEMANAGER.USER".
    If you want to get to the cached profile from your portal from yourpipeline
    component (PC) then you would have to know that the name is "fixed up" tobe
    "exampleportal.CACHED_PROFILE". There are probably several different waysyou
    could get the "TRAFFIC.URI" information to your PC.
    Ture Hoefner
    BEA Systems, Inc.
    2590 Pearl St.
    Suite 110
    Boulder, CO 80302
    www.bea.com

  • Getting User Attributes from an Active Directory LDAP

    Hello all.
    I want to extract attributes assigned to a user in the Active Directory LDAP and make them available through the getPropertyValue property in Javascript. I know that a user's System Attributes can be accessed with getPropertyValue but I have not found a way to get specific attributes from the LDAP and make them available as specific attributes in xMII. System attributes like "EmailAddress1" seem to transfer from the LDAP but others don't. Anyone have any ideas?
    Thanks.
    ...Sparks

    Sparks,
    If you're using 11.5 or 12 actually they should all map into the system as session properties.  You can use the following URL to verify your session properties:
    http://<xMIIServer>/Lighthammer/PropertyAccessServlet?Mode=List
    If you are not seeing the attributes you expect then your Attribute Query for User or Role is incorrect for your LDAP system and you need to change the LDAP configuration queries.
    -Sam

  • Editing LDAP User attributes from UME interface

    Hi Gurus,
    We want to develop a solution with user management screens in WD. These screens will provide password reset and unlock functionality for users. Our users are stored in LDAP. Current connection to LDAP is in Read Only manner.
    I want to know
    1. How to enable the connection from UME to LDAP in read/write manner?
    2. What certificates need to be exchanged for write access? if any?
    3. What changes needs to be done in config file of UME?
    4. Which permissions should be granted for communication user to edit LDAP user attributes?
    Even after performing the change to read LDAP in read/write manner, will it be sure: If we lock user from UME, it will lock LDAP user? please comment.
    regards
    Kedar Kulkarni

    Hi,
    We are half way into our application between UME and LDAP. We have developed screens and tested in our internal server. In internal landscape, UME is connected to LDAP in read only fashion. So when we try to create User, it gets created in UME.
    But when we deploy same application into client landscape, we receive error as below:
    No data source feels responsible for principal. Please check the data source configuration
    Now we are not sure why this error is getting displayed.
    In client landscape there are 2 LDAPs connected to UME, with only one LDAP in read/ write access.
    Is there any way we can check which LDAP is being accessed by our code? Is there any concept of Default LDAP?
    Any code to access LDAP details will help us lot.
    regards
    Kedar Kulkarni

  • How to get user attributes from LDAP authenticator

    I am using an LDAP authenticator and identity asserter to get user / group information.
    I would like to access LDAP attributes for the user in my ADF Taskflow (Deployed into webcenter spaces).
    Is there an available api to get all the user attributes through the established weblogic authenticator provider or do i have to directly connect to the LDAP server again?
    Any help would be appreciated

    Hi Julián,
    in fact, I've never worked with BSP iViews and so I don't know if there is a direct way to achieve what you want. Maybe you should ask within BSP forum...
    A possibility would be to create a proxy iView around the BSP iView (in fact: before the BSP AppIntegrator component) which reads the user names and passes this as application params to the BSP component. But this is
    Beginner
    Medium
    Advanced
    Also see http://help.sap.com/saphelp_nw04/helpdata/en/16/1e0541a407f06fe10000000a1550b0/frameset.htm
    Hope it helps
    Detlev

  • Importing User attributes from OIM 9101 to 11g

    hi all,
    I need to import/create all the User attributes(UDFs) present in the OIM 9101 version to OIM 11g. Is there any way this can be achieved using deployment manager? Looking to avoid creating all of them manually again,as that would be a time consuming/error prone task.
    Looking forward to your replies.
    Thanks,
    Anuj.

    Hi,
    I think, you better create it manually in OIM11g and higher environments. The UDF import in 11g is unstable..some times it works..and some times it disappears..and when you try to create UDF after import, It will make your life hell.
    I really had very bad experience with OIM 11g UDF export/import.
    Regards,
    J

  • ISE and 802.1x - Retrieve User Cert from AD for Auth without it being in the Personal Store?

    Hello,
    We are implementing 802.1x EAP-TLS wired at the moment with Cisco ISE, and wireless is to come after that, along with our internal PKI.  I set up the PKI, and our network engineer is setting up the ISE.  We currently have it set to first authenticate the computers with a computer certificate (allowing access to AD, among some other things), and then further authenticate the users with user certificates.
    I don't have much knowledge of Cisco ISE, and plan to learn as we go, but I'm wondering:
    Is it possible to authenticate the computer via the computer certificate, getting access to AD, and then have the ISE check AD for the User certificate INSTEAD of the User certificate being in the local Personal store of the client computer?  We have autoenrollment going for user certificates, but it seems to be cumbersome (in thought) that once 802.1x is enabled, a new computer/employee coming on the network has to first go to an unauthenticated port to be able to download the User certificate in the Personal store, before then being able to use an 802.1x port?
    I guess that makes two questions:
    1) Can ISE pull the user cert from AD, without needing it in the local Personal store?
    2) What's the easiest way to handle new computers/users that don't already have the User cert in their local Personal store once 802.1x is enabled?

    1)No
    2)Use EAP-Chaining with EAP-TLS and PEAP
    For this scenario, i would go with Cisco AnyConnect NAM, and then use EAP-Chaining, with EAP-TLS for machine auth, and then PEAP for user authentication. This way you can make sure that both the machine and the user is authenticated, and more importantly, that a user can not get on the network with their user identity only and no machine identity. Using windows own supplicant for this, gives no garantee that the user has logged in from an authenticated machine. The feature that used to be used for this before EAP-Chaining was introduced, is called MAR, and has many problems, making it almost useless in a corporate environment. Security wise, the PEAP-MSCHAPV2 is tunneled in EAP-FAST and does not have the same security issues as regular PEAP.

  • Reference attributes from different CS

    Hi!
    I have the following situation: There are two Oracle MA, that imports data from HR-system. The first MA imports persons, the second one imports departments.  It isn't suitable for me to combine them. The department object has an atribute "chiefID",
    where is set an identifier of the person. So the question is: how can I flow chiefID as Reference atribute? AFAIK, to be able to flow reference attributes - both objects should be in one CS.
    Thanks for any help!

    Hello,
    There is another way if you have FIMPortal and service and  keep to independant Oracle MA. Use an Extended flow to transform "chiefid" in "csObjectID of chief" by using code and the FindMvEntries method (http://msdn.microsoft.com/en-us/library/microsoft.metadirectoryservices.utils.findmventries.aspx):
    From Oracle MA, Find user in MV and save his csObjectID into a string
    Define an export flow of this string attribute to a reference attribute in FIM MA (Works only with mono value)
    Define an import flow from FIM MA from the reference attribute to the MV
    Regards,
    Sylvain

  • How to use attributes from different context nodes in one view?

    I am VERY new to the concept of CRM and currently working on creating an alternate version of the BP_HEAD_SEARCH. With help from SAPPRESSs book 'SAP CRM Web Client' i was ble to create my own simple Z-component.
    However after going back and forth the book and the forum (including this [article|https://wiki.sdn.sap.com/wiki/display/CRM/Howtoaddanexistingfieldtoasearchpageofadifferent+component]) i was not able to find a solution to my problem. My current search uses BuilHeaderAdvancedSearch as context node for searching. But the search should also be able to use attributes from BuilActivity, which is directly related to BuilHeader. I can't seem to find a way to get attributes from BuilActivity into the search window of my component without having to change SAP-Standard.
    Is this really the only way? Please advise on possible code and insertion point.

    Any suggestions?

  • Grant permissions to user accounts from different domains

    Running a PowerShell script from hosts in Domain_A, I need to grant rights to user objects located in Domain_B with a one way trust in place.  Going through the process manually, I will get prompted for credentials that can query Domain_B. 
    How would I go about automating the authentication in PowerShell? The actual commands that run need to be executed by a privileged account in Domain_A; it's only the querying of objects in Domain_B that requires a valid Domain_B credential.

    Are you doing a domain migration? 
    Are you leveraging the Get-ACL / Set-ACL CMDlets?
    What I would do is create a script that uses get-acl and set-acl CMDlets...
    I would then launch that using:
    $secpasswd = ConvertTo-SecureString "PlainTextPassword" -AsPlainText -Force
    $mycreds = New-Object System.Management.Automation.PSCredential ("username", $secpasswd)
    start-process "powershell" -ArgumentList "-file c:\path_to_Script.ps1" -Credential $mycreds
    There are a ton of ways to do this, but I figure I'd give one of many ways to roll with it.
    Entrepreneur, Strategic Technical Advisor, and Sr. Consulting Engineer - Strategic Services and Solutions Check out my book - Powershell 3.0 - WMI: http://amzn.to/1BnjOmo | Mastering PowerShell Coming in April 2015!

  • Copying the Components from different applications

    Hi, 
                  I have a requirement where components should be copied from 1 application to another application. I cannot use export/import commands as it will overwrite the content in the second application. I want to achieve the similar functionality for which user copies pages/cartridges within application. Is there any way to do it?
    Regards,
    Aashish U S

    I think you can extract contents from both workbench by using emgr_update cmd and merged them locally (xml files) and import the desired content to workbench by using emgr_update cmd.   The challenging part would be merging the two content (XML) files,   depending on how complex your requirements, you might be just manually find/replace or you can write a program to merge them.
    Thanks,
    Meng

Maybe you are looking for

  • To obtain values from fields in a web page.

    Hi everyone, I am in the process of developing a web based application. I am able to successfully convert my windows to web page documents. I have sincerely followed the prescribed steps to be adopted in building methods for validations and processes

  • Phone Charge reduces even when connected to USB

    After lollipo update which is just awfull, when i connect my phone via USB its seems to lose charge rather than gain battery.  This is just absolutely rubbish. Sony do you even read the forums, plesae resovle this.  Are any other users also geting th

  • Using xmltable in forms 10g

    I am getting the error *'Error 103 at line 15, column 30 Encountered the symbol "(" when expecting one of the following: ... '*. My query that is causing this error is : SELECT * from XMLTable('for $e in /Applicants/Applicant return $e' PASSING v_res

  • Missing Account information when creating Planned Activity in Account

    Hi Expert, When creating planned activity in Account inwebUI, I am expecting that the Account information would be populated in the Account field of a planned activity but it is not. Could you please tell me if this is a SAP standard? Thanks

  • Check for Clause Updates ....

    Hello: In PO - Buyer Work Center (R12.0.6), When I do a check for clause updates, the system displays all the latest clauses from the library. On selecting a clause and applying it, I get the latest clauses. However, I want to revert it and get the o