Create user request from api OIM 11g r2

Hi,
I need to read a database and raise a request for creating uses. After approval the user needs to be created in OIM 11g R2.
I want to write a scheduled task which will read database columns and rasie a request to create users.
I dont want to use UnauthenticatedSelfService api.
Please suggest a way to achive that. any pointer / sample coede / suggestion is helpful.

Here are links to creating a request for a role and a resource. https://java.net/projects/openptk/sources/svn/show/branches/Oracle/OIM11g/examples/java/OIMClient/src/oim/client/request?rev=1402
I would suggest you start with these and modify the parameters to be for a user. You will have to try some trial and error to get it working, unless someone already has it available. And so far, no one who is posting does. Give it a shot. You can always create an SR with oracle and ask for assistance.
-Kevin

Similar Messages

Creating a request type in OIM 11g R2

Hi All,
I came to know that the request templates have been removed from OIM 11g R2 . I have the below scenario,
1)When an end user logs into Identity console and access his self profile through the 'My Information' link.
2)If he tries to modify some of his attributes(say First Name) the approval policy should not get triggered and should be auto approved and committed to the database
3)For some of the attributes(say Last Name) approval policy has to be triggered and request has to be created and wait for the approval .
4)Now that request templates are removed , Can I create a new request type like 'Modify Custom attributes' similar to 'Modify User Profile' for this scenario to be achieved ?
Please let me know how the above scenario is going to work in OIM 11g R2 ?
Regards,
Senthil.

Hi ,
Thanks for your reply .. I am able to understand the scenario what you are trying to explain .. I tried to do the same ...but in my scenario ,this is the problem that I am facing ..
1)When a user modifies only his First Name then it works fine and gets auto approved .
2)When a user modifies only his Last Name then it works fine and goes for approval and waits till it gets approved.
3)Now the problem is when a user modifies both his First Name and Last Name and submits as a single request , how to handle this ? In this case the First Name should get committed and the Last Name should not get committed .. But he has submitted only a single request .. so how to handle this scenario ?How to divide a single request into two to commit one attribute and not commit another one ?

How to create Approval Policies using API - OIM 11g R2

Hi,
Could you please let me know how to create the Approval Policies using java API code in OIM 11g R2.
Thanks

Hi Karthik,
Thanks for sharing the link. Could you please let me know how to specify the rule condition while creating the Approval Policy using the API given in this link.

How to polulate data from lookup using request dataset in OIM 11g

Hi,
Using Request dataset in OIM 11g, I need to display one dropdown with the roles those need to come from Lookup.
For Ex; I have 2 resources,i.e Resource A and Resource B. Resource A has 5 roles and Resource B has 3 Roles.
While creating a request, If I select Resource A, then I should be able to get 5 Roles and if I select Resource B then I should be able to see corresponding 3 roles.
Pls. note I have only one Look up definition , where I have roles for both Resource A and B.
I have done simillar thing in OIM 10g , however I am unable to do it using OIM 11g Request dataset.
Pls suggest.

Hi BB,
I am trying to follow up your response.
You are suggestng to use prepopulate adapter for to populate respource object name, that means We have to just use an sql query from obj tabke to get the resource object name. right ?? it could be like below, what should I have entity-type value here ??
<AttributeReference name="Field1" attr-ref="act_key"
available-in-bulk="false" type="Long" length="20" widget="ENTITY" required="true"
entity-type="????"/>
<PrePopulationAdapter name="prepopulateResurceObject"
classname="my.sample.package.prepopulateResurceObject" />
</AttributeReference>
<AttributeReference name="Field2" attr-ref="Field2" type="String" length="256" widget="lookup-query"
available-in-bulk="true" required="true">
<lookupQuery lookup-query="select lkv_encoded as Value,lkv_decoded as Description from lkv lkv,lku lku
where lkv.lku_key=lku.lku_key and lku_type_string_key='Lookup.xxx.BO.Field2'
and instr(lkv_encoded,concat('$Form data.Field1', '~'))>0" display-field="Description" save-field="Value" />
</AttributeReference>
Then I need think about the 'Lookup.xxx.BO.Field2' format.
Could you please let me know if my understanding is correct?? What is the entity-type value of the first attribute reference value?
Thanks for your all help.

Problem in creating user request through ContentDB API

Hi
I am trying to create user request on the document. Workflow is configured on the document parent folder. I am trying to submit the document for workflow.
Here is the code i used to create user request
RequestManager reqM = session.getRequestManager();
long[] itemId = { item.getId() };
NamedValueSet[] docParameters = new NamedValueSet[]
new NamedValueSet(
new NamedValue[]
new NamedValue(Attributes.WORKFLOW_PARAMETER_NAME,"JUSTIFICATION"),
new NamedValue(Attributes.WORKFLOW_PARAMETER_DEFAULT_VALUE,
"Edited para 2"),
new NamedValueSet(
new NamedValue[]
new NamedValue(Attributes.WORKFLOW_PARAMETER_NAME,"IFS_ECM_VERBOSE_LOGGING"),
new NamedValue(Attributes.WORKFLOW_PARAMETER_DEFAULT_VALUE,
Boolean.FALSE),
NamedValue[] options2 = new NamedValue[] {
ClientUtils.newNamedValue(Attributes.WORKFLOW_CONFIGURATION_PARAMETERS,docParameters)};
reqM.createUserRequest(itemId, options2);
I got the following error:
AxisFault
faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server.userException
faultSubcode:
faultString: ORACLE.FDK.UnexpectedError:ORACLE.FDK.ServerError
faultActor:
faultNode:
faultDetail:
     {http://xmlns.oracle.com/content/ws}fault:<detailedErrorCode xsi:type="xsd:string">ORACLE.FDK.ServerError</detailedErrorCode><errorCode xsi:type="xsd:string">ORACLE.FDK.UnexpectedError</errorCode><exceptionEntries xsi:nil="true" xsi:type="ns1:ArrayOfFdkExceptionEntry"/><info xsi:nil="true" xsi:type="ns1:ArrayOfNamedValue"/><serverStackTraceId xsi:type="xsd:string">112-1191017621836</serverStackTraceId>
     {http://xml.apache.org/axis/}hostname:contentdb.sjrwmd.com
ORACLE.FDK.UnexpectedError:ORACLE.FDK.ServerError
     at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
     at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
     at java.lang.reflect.Constructor.newInstance(Constructor.java:494)
     at java.lang.Class.newInstance0(Class.java:350)
     at java.lang.Class.newInstance(Class.java:303)
However, If i create user request without passing any parameters it is working fine. I get error only when creating request with parameters.
Please help.

Hi
I could able to get the request invoked. Earlier I tried with wrong parameters.
Thanks

Customizing request datasets in OIM 11g

Hi Friends,
I have couple of questions/issues while customizing request datasets in OIM 11g. Can you please help me?
1) I gave read-only="true" in my request dataset for one of the attribute, but I was still able to edit that attribute value while raising requests.
2) I gave hidden="true" in my request dataset for one of the attribute, but I was still able to see that attribute while raising requests.
3) I have around 90 attributes in my request dataset. Is there any way to display category type and under that category display the attrbitues i.e. just like attributes in user profile.
4) As I have 90 attributes, I am expecting the format will be like first 45 will be shown in left panel(column) and remaining 45 in right panel (column). Instead of this , it is showing first 70 in left panel and the remaining 20 in right panel which is very ugly to see. Is there any way to show frist 45 on left side and remaining 45 on the right side? Please help me.

Regarding the first two points:
1) The read only property applies to the approver only, i.e. approver can read and not modify the attribute. It does not apply to the requester. I don't believe you can configure a read-only attribute in the data set.
2) If you want to hide an attribute, you can restrict it in your request template.

Lookup codekey value in Request dataset in OIM 11g

Hi,
Below is my Attribute reference in Request dataset in OIM 11g.
Could you please suggest what could be the possible Lookup code key values in lookup 'Lookup.AccountingControl.Roles'
I tried giving CodeKey values as "ACCOUNTING CONTROL~" then Decode value as "Administrator" , However it does not give any value.
So I think what I am giving as Codekey value is wrong based on below lookup query.
What could be the correct value for CodeKey ? Thanks!!
<AttributeReference name = "Role Name" attr-ref = "Role Name" type = "String" length = "256" widget = "lookup-query"
available-in-bulk = "true"
required = "true"
primary = "true">
<lookupQuery
lookup-query = "select lkv_encoded as Value,lkv_decoded as
Description from lkv lkv,lku lku where lkv.lku_key=lku.lku_key and
lku_type_string_key='Lookup.AccountingControl.Roles' and instr(lkv_encoded,concat('ACCOUNTING CONTROL','~'))>0"
display-field = "Description"
save-field = "Value"/>
</AttributeReference>

Yes..You were right.
You resolved one of my issue. I have marked it as answered giving 10 pts ;-)
I think I have already raised another forum question where I needed to pass this Accounting Control as dynamic and this is one Resource Obkect selected from previous page.
You asked me to use Prepopulate adapter to get the Resource Object name.
I have still some questions to solve that issue.I will put that question there. It would be great yo answer it.

Generate User Login in "Create User" Request

Hi Guys,
I have more a problem. To create user, I am using a Request (Create User Template), I managed add the attributes that would necessary normally, but I use a Event Handler (Post-Process) to generate user login. So I marked the User Login in Attributes Restrictions, fixing an user login default for example: autogenerate.
Then I created a new request to create user, I filled out all the fields that I marked to appear. I approved this request, and the user is created with the User Login generate by my Event Handler normally. The issue is, when I create 2 create user requests, as I use a Default value in the User Login attribute, if the first request still isn't approved, the second request isn't created because the "autogenerate" user login already being used.
Exists some otherwise to I resolve this issue?
Thanks

Hi Bikash,
Use a prepopulate adapter an attribute with timestamp is nice idea, but I use the "Create User" template CreateUserDataSet.xml and not exists a form in Design Console to associate the prepopulate adapter.
I had thought in eventhundler because I use a method that check on Active Directory if the user login generated by other method, already is being used. And I use this eventhandler in HR GTC recon too.
About XL.LDAPReservationPluginImpl, I opened the oracle.iam.identity.usermgmt.impl.plugins.reservation.ReservationInOID but I not understood as use this option. If I needs add in this class my method of generate user login. If I needs implement an new class similar to this class, using my methods and associate the name of class in XL.LDAPReservationPluginImpl.
Thanks a lot

Creating Change Request from project structure

Hello.
Have somebody maked somthink like creating Change Request from Implementation project configuration structure? I want to initiate new change request directly from busines process step in transaction SOLAR02 for example.

Hi
Change request is created via action Create change document from support desk message
so in solar02 tcode...goto issues/messages tab and create a message then
crm_dno_monitor you can create a change request as i said and all the necessary data like ..system data,ibase etc is copied to ur change req from support message .
Regards
Prakhar

Error while creating user id from MDM JAVA API in 7.1 SP7

Hi,
We are trying to create user id in MDM 7.1 SP7 using JAVA API in SAP Portal. When trying to create user id, we are getting below error. If you have any solution please let us know.
com.sap.mdm.commands.CommandException: MDM repository data is out-of-date or is locked by another MDM Server. Refresh the data and try the operation again. If the error persists, contact the system administrator
Thanks,
Vinit Pugaliya

URGENT** How to change OIM user password from outside OIM

Can approver modify user's request form in OIM 11g?

Dear All,
In OIM 10g, the approver of a request can modify user's request form, we just need to configure the permission in OIM. But, can we do it in OIM 11g?
If can, how can i configure it?
really need your help guys,, :D
Thank you,
--herry

Hi user12841694,
Thanks for the suggestion. But, the data (field) that can be modified by the approver is very limited. We cannot attach multi-valued attribute there (like Child Form).
Regards,
---herry

Creating a new user request from the user menu

I have a menu item that calls a process to create a request for a new account (contractor/applicationID). I have the request form and workflow working, however, IDM uses the requestors context to create the request. How do I open the new view in the form and clear the requestor's user context out of the way?
What I mean is when the form appears, if I select a resource, the attribute fields all appear with the requestors data filled in. The process I'm calling has a built-in form preceeding the workflow.
Any help would be greatly appreciated.

Hi,
try to add the the tag
<argument name='Subject' value='Configurator'/>inside your code to check in the view(i asume you use a userview to acomplish your task).
Does it work then?
Regards,
Patrick

Direct provisioning through API - OIM 11g

Hi,
OIM 11g here. I am trying to use the APIs to make direct provisioning. What i have done till now:
tcUserOperationsIntf userIntf = (tcUserOperationsIntf)ioUtilityFactory.getUtility("Thor.API.Operations.tcUserOperationsIntf");
ResourceData rd = userIntf.provisionResource(userkey, objectkey);
now, in the ResourceData object i have two ids, obiKey and ouiKey. Now i need to extract the process instance key with those numbers. How can i do this?
Using the userIntf getObjects method i can get the list of objects provisioned, iterate over it and retrieve the process instance key of the object which matches obiKey and ouiKey. Is there an easier method to do this?
Another question, which one is the process instance key, ORC_KEY or ORC_TOS_INSTANCE_KEY ?
Last, how do i trigger the task responsible for provisioning given the filled process form?
thx in advance

Ok, i guess the process instance key is ORC_KEY.
Now i am trying to provision through APIs a resource object (say AD User) to an OIM user. I have used the provisionResource(userkey, objectkey) method, but the Create User task is not put in the Resource History (there is only the System Validation Task), and i don't know how to look for it's task id to add it manually.

Creating approver only field in OIM 11g R2

Hi,
I need to create some fields in OIM 11g R2 request data set, so that those field will be visible only to approvers and they can only enter the data into it.
In 11g R1 I know how to create those field, but I don't know how to create the same type of field in OIM 11g R2.
Please help

Hi ,
Thanks for your reply .. I am able to understand the scenario what you are trying to explain .. I tried to do the same ...but in my scenario ,this is the problem that I am facing ..
1)When a user modifies only his First Name then it works fine and gets auto approved .
2)When a user modifies only his Last Name then it works fine and goes for approval and waits till it gets approved.
3)Now the problem is when a user modifies both his First Name and Last Name and submits as a single request , how to handle this ? In this case the First Name should get committed and the Last Name should not get committed .. But he has submitted only a single request .. so how to handle this scenario ?How to divide a single request into two to commit one attribute and not commit another one ?

Retrieving Last used User Login Name in OIM 11g R2

In my scenario, i want to retrieve the last used user login in OIM for user profile, to create next User Login based on last one retrieved ?
Is there any API method available in User Management to get this value or Any customized DB query that will help ?
Setup used is OIM 11g R2 PS1.

Thanks Rajiv for Input !
Still i have some doubts in my scenario. Actually i have to create new User Login in sequence based on last User Login of Last user created . This is no based on User ID. Also, whatever already existing users with user login are present , they will be uploaded in OIM for first time through trusted reconcilation.
After reconcilation is done, then hereafter while creating next user i have to update its user login attribute in sequence of latest user login used and check for its uniqueness.Suppose, in case while bulk data import in OIM for first time , the users are not in sequence of User Login attribute, then it will be difficult to get the latest user login. Is there any way to get last user created based on User Login and not on User Id ?
Hope i have given clear picture of my scenario.

Create user request from api OIM 11g r2

Similar Messages

Maybe you are looking for