Custom attributes store in IDM

Hi,
I wamt to add attributes to idm to store in idm repository. Currently it is storing only accountId, firstname,lastname,password, manager,email. How can i add custom attribute and to store in IDM and how many can i add ?
Thanks in advance

In IDM 7.1 and previous you can add custom attributes (IDM calls these user extended attributes) in the "User Extended Attributes" object. IDM 8.0 completely revamped the user extended attributes so you'll have to look at the documentation for that. I haven't upgraded to that yet.
Technically speaking there is no limit the number of extended attributes but it will slow things down as you add more and more. Each attribute adds to the total size of the user object so any operation on a user object will take longer and longer.

Similar Messages

IDM Custom Attributes

My user (MX_PERSON) has some standard attributes as MX_LASTNAME. MX_FIRSTNAME, MSKEYVALUE, DISPLAYNAME.
So I added some 3 custom attributes (Z_NATIO, Z_FAMST, Z_GENDER):
After populating some users data in IDM,
MSKEYVALUE     MX_LASTNAME     MX_FIRSTNAME     DISPLAYNAME     Z_NATIO     Z_FAMST          Z_GENDER
user1                   LN1                       FN1                         LN1 FN1              US              M                      1
user2                   LN2                       FN2                         LN2 FN2              UK              F                       2
user3                   LN3                       FN3                         LN3 FN3              IT                F                       3
Here is my request to get all the users' information including the 3 added custom attributes:
select MSKEYVALUE, MX_LASTNAME, MX_FIRSTNAME, DISPLAYNAME, ????? from idmv_link_ext where mcThisMSKEYVALUE in (user1,user2,user3)
Could you please help me to get also the 3 attributes values for all users ?
Many Thanks,
Michaela

This seems to be the exact same question as this idm sql help so check if any of the replies there is helpful. You should also mention what database you need the query for as there is differences between Oracle and SQL Server when using pivot or other flattening functions.
Br,
Chris

Decision to store attribute data in IDM

What's the deciding criteria to have attributes in IDM. If I have 40 attributes to be flown from one system to another system and then again to multiple systems. I have to use the same attributes flowing to various systems. In this case if I don't store this data in iDM then everytime I have to make connection to source and pull this data to flow to other systems. Won't this impact performance.
What is the deciding factor on whether to keep the specific attribute data in IDM or not ? Where will it impact performance? and what are the best practises to store IDM data?

the rule of thumb is to store as few as possible. The basic architecture of the product is to create a virtual directory of user information. Products like microsoft's MIIS store all data in a metaview, which essentially duplicates all data both on the native system as well as on the MIIS database.
With each attribute you add, you move more towards the meta view concept.
I agree with the comments above regarding deciding criteria on why you would want to keep a value on IDM. Other criteria to keep in mind are:
1) Are you getting this value from a resource on which you manage accounts, or is it simply used as a feed? If its simply a feed, does a spot exist for this value to be stored on a native system? If yes, who has accounts on that system. In other words, how important is the value to everyone?
2) do you need idm to search on it.
3) how often does IDM need to use this attribute. if you used it for tasks and other things quite often you most likely will not want to get a user view each time to retrieve the value. Thus, you are best off storing it locally.
4)Rule of thumb...if you think its best being stored in IDM....then i probably is. (I have at most stored 8-10 values in IDM in all of the 10 implmentations I've done of this product)
I hope this helps.
Dana Reed
AegisUSA
Denver, Co
[email protected]
AegisUSA

Help needed in Inbox search for Custom attribute

Hi,
We have a requirement where in we are having a custom attribute on Service request to store the ECC Order number.
We have enhanced the Inbox search to retreive all the service requests havig the ECC order number.
Here we are encountering a problem. i just created a new crm service request and entered order number 1234. and now when i search for the same in Inbox search giving the criteria order number as 1234. I get no results found. But when i extend the max list to 2000, then i see the service request appearing in the result list. not sure about the algorithm that is designed for inbox search.
Any pointers on how to resolve this issue would be of great help.
Thanks,
Udaya

Hi,
I do not have the time to research this completely, but I had a short look into the class you posted.
In the GET_DYNAMIC_QUERY_RESULT there is a call to CL_CRM_QCOD_HELPER->PREPROCESS( )
A little bit lower there are blocks marked by comments for the single searches that are handled by this class. I had a look into the campaign_serach() method. There if you scroll a little bit down (around line 123) they set all search parameters to SIGN = 'I' OPTION = 'EQ'. This is done several times below as well.
Set a breakpoint in the proprocess() method and check which of the blocks is called and how they handle your search criteria.
Hope it helps.
cheers Carsten

How to add a custom attribute to an entry?

I need to store a person's social security number in the directory.
I haven't found any appropriate standard attribute for such purpose (is there any?), so I decided to create a new one.
I've written a method:
public void setAttribute(String entryDN, String attrName, String attrValue)
throws LDAPException, UnsupportedEncodingException
LDAPConnection lc = new LDAPConnection();
lc.connect(ldapHost, ldapPort);
lc.bind(ldapVersion, loginDN, password.getBytes("UTF8"));
LDAPAttribute attribute = new LDAPAttribute(attrName, attrValue);
LDAPModification modification
= new LDAPModification(LDAPModification.ADD, attribute);
lc.modify(entryDN, modification);
lc.disconnect();
When the method is called
ldapManager.setAttribute("cn=TheUserName,cn=Users,dc=server,dc=domain,dc=com", "_custom", "TEST");
the following exception is thrown:
LDAPException: Undefined Attribute Type (17) Undefined Attribute Type
LDAPException: Server Message: Attribute _custom is not supported in schema.
LDAPException: Matched DN:
     at com.novell.ldap.LDAPResponse.getResultException(Unknown Source)
     at com.novell.ldap.LDAPResponse.chkResultCode(Unknown Source)
     at com.novell.ldap.LDAPConnection.chkResultCode(Unknown Source)
     at com.novell.ldap.LDAPConnection.modify(Unknown Source)
     at com.novell.ldap.LDAPConnection.modify(Unknown Source)
     at com.novell.ldap.LDAPConnection.modify(Unknown Source)
     at lv.alise.eliepaja.ldap.LdapManager.setAttribute(LdapManager.java:156)
     at lv.alise.eliepaja.ldap.LdapManager.main(LdapManager.java:178)
Exception in thread "main" Process exited with exit code 1.
How could I solve the issue?

Hi,
You need to check for a few things in your OID :
1. Your custom attribute should be present in the Schema.
2. The attribute should be grouped in an ObjectClass.
3. The ObjectClass should be put in the Entry you wish to modify.
4. You can then store a value ( or values ) against the attribute.
You can do steps 1, 2 & 3 either programatically or manually.
I hope this helps.
Regards,
Sandeep

Define custom attributes

Dear all,
I want/need to work with openSSO and therefor want to define some custom attributes which I want to use in my applications. These attributes are already existing within my LDAP server that I use as data store for openSSO.
Here's what I did until now:
- web config path:
-> "access control"
-> "Top Realm"
-> "DataStore"
-> "Sun DS with AM schema"
Attribute Name Mapping:
added:
myOpenSSOAttribute1=myLDAPAttribute1
myOpenSSOAttribute2=myLDAPAttribute2
myOpenSSOAttribute3=myLDAPAttribute3
LDAP User Object Class:
added:
myLDAPObjectClass
LDAP User Attributes
added:
myLDAPAttribute1
myLDAPAttribute2
myLDAPAttribute3
But when I got to http://mySSOHost:8080/opensso/identity/attributes I do not get these
attributes listed.
Did I miss anything ?
I could not find any docs regarding extending openSSO attributes, so I played and tried with
openSSO.
Many thanks in advance
Kind regards
Joerg

There are three approaches I can see
1 - the manual runtime approach. Check the attributes in the doStartTag() method, and throw an exception if it is being used incorrectly.
2 - Implement a TagExtraInfo class, and override the isValid(TagData) method. You can then check the attributes provided to a tag at compile time.
3 - Implement a TagLibraryValidator class, which validates the JSP page as a whole, with regards to a tag library. (compile time)
I think option 2 is the closest to what you want. Option 3 is just overkill, in this case.
Cheers,
evnafets

Programmatically create custom attributes in KM

Hi all,
We are implementing an application which uploads/downloads files to/from KM content of a portal user. The application will also display the list of files for the portal user. The file list displays the standard file attributes: filename, created_date, size.
Additionally to these attributes we want to store some custom attributes (e.g. last sent to, received from...) for files in the KM.
We need to create these custom attributes programmatically at runtime, if the file is stored/updated in the KM content.
How can we programmatically create these kind of custom attributes in KM and read/write these custom attributes at runtime?
Thanks,
Yasar

hi,
General example on how to code KM
http://wiki.sdn.sap.com/wiki/display/Snippets/UpdateKnowledgeManagementusingWebDynproJavaApplication
Coding custom attributes, look into Properties section
https://media.sdn.sap.com/html/submitted_docs/nw_kmc/howto/rf/client_api/rf_client_api.html
Coding custom renderer.
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/f7b176eb-0701-0010-2b84-8edb1f76771d?QuickLink=index&overridelayout=true
Srini

Help Pls: Create New User Form and display custom attributes +++

Hi All,
I am trying to create a user screen where a user would see all the organizations he is responsible for and clicking on the organization he would see the certain attribute of all the users that belong to the organization. (Kind of report)
Account attribute need to be defined with 2 custom attributes:
1. Organizations Responsible for
2. Belongs to which organization.
3. Status
The first 2 attributes are used to define the organization heirarchy (we can't use the org heirarchy as is in IDM).
I am just starting on the Sun IDM (very new to the product). Could you please let me know how this could be done? Which form I need to modify and any other changes I need to make.
Thanks a lot and have a pleasant day,
Ritesh
PS: I know this is a long question but i really don't know how to better explain the problem.

A workaround is to write a PL/SQL procedure to render the custom item (pass in each attribute as a paramter and then use htp.p to print it whatever format you want). You can then disable the default display of attributes (i.e. edit the style so none of the attributes are rendered).
Hope that helps,
Mark

Service accounts - custom attributes

Hi,
We want to manage service accounts for different platforms in OIM. I'm aware that OIM can flag accounts as Service accounts. We have some custom attributes that we want to store in OIM as a part of service accounts. These attributes come from different source other than the reosurce on which the service account exists. So the idea is to use use OIM to store that additional information and act as authorittaive source. This information should not be provisioned to the actual service account on the the target resource. It should reside just on OIM side. Is it possible to do this in OIM? Any information on how to achieve this is highly appreciated.
Thanks,
Gattoo

Hi Gattoo,
If you are using a custom connector, it is your decision which attributes are sent to target system, which are not.
Eventually, a service account is represented by a resource object and in the process definition you attach the adapters that creates or updates the target system account.
If I am not misunderstanding the question, you are able to store additional information in the process form and not to send them to target system.
Regards,
Ece

Issue with Sorting by Custom Attributes

In our custom SES query application, I am trying to implement sorting at the custom attribute level. I am having difficulty in understanding exactly how to set the options on doOracleOrganizedSearch() to achieve the desired result.
We have a table based content source and allow a user to search via custom search attribute. We are also going to allow them to sort by custom attribute.
For example, say we have a Project content source and one of the attributes is "Client Name". Users are going to be able to sort by client name (A-Z and Z-A). I have a prototype working but it only seems to work if I set topN to a very high number.
I want to bring back the first 10 documents sorted by Client Name A - Z and allowing paging to the next set of sorted results. My prototype works if I set topN to 1000 (more than the # of results) but does not work if I set it to 10 (# of results I want to display per page).
Below if my code. Note I am not setting the group attribute or the cluster list. Perhaps this is the issue?
Many thanks in advance!
OracleResultContainer results = service.doOracleOrganizedSearch
(this.m_query, // query
this.m_docsRequested, // topN
this.m_startIndex, // startIndex
new Integer(10), // docsRequested
this.m_dupRemoved, // dupRemoved
this.m_dupMarked, // dupMarked
this.m_searchDataGroup, // groups
this.m_queryLang, // queryLang
this.m_docLang, // docLang
this.m_returnCount, // returnCount
this.m_filterConnector, // filterConnector
filters, // filters
this.m_fetchAttributeNames, // fetchAttributeNames
null, // searchControls
null, // groupAttr
this.m_sortAttributes, // sortAttrList
null); // clusterList

Hi Nikola,
in 9.0.1 even if you rewrite the web interface you can't sort files by custom attributes setting a SortSpecification to a Folder. You can only sort by base attributes with getItems(). To get item sorted on custom attributes you must perform a search (a lot more codelines).
Regards, Alessandro

Limitation on number of custom attributes visible

Hi,
I am using OIM 11g.
All the custom attributes are visible on the create user form. I am able to see only 8 custom attributes on the modify user form.
The visible property of all the attributes is set to true. I cannot modify the attribute once its created at the user creation.
Can someone please help me out?
Thanks...

I got it resolved.
Permissions in the access policies were not enabled for the remaining attributes.

Encrypt custom attribute

Tar: 7340338.994
OID Version: 10.1.2.0.2
We are trying to encrypt the custom attribute ( ssn, answer ). How do we encrypt the custom attribute ? This is security requirement.
I find nothing in the admin guide and I am not even sure we can do this. Does anyone know how to encrypt a custom attribute?
I am thinking at best this is an Enhancement Request.

Several ways:
1. Write a plugin: http://download.oracle.com/docs/cd/B14099_19/idmanage.1012/b14082/plugin_intr.htm#i120282
2. Put OVD in front of OID, point the application to OVD and write a plugin for OVD: http://download.oracle.com/docs/html/E12283_01/java_plug_ins.htm#CIHBDHHE
3. If you can find the attribute in ODS schema, try encryption at the database level with TDE or VPD. Actually I am not sure it will carry over to LDAP interface..probably not but it's worth a try
4. Have the application do it?

Problem with setting custom attribute and it being searchable

I'm having an issue with setting a custom attribute and having it be searchable using Portal 10.1.4. The situation that we have is that we initially added a bunch of files to Oracle Portal using webdrive. Later on, we decided that we needed another custom attribute called "Pinned Item" that will be used for searching (boolean value) and gave it a default value of false. The attribute was then added to the "File" item type in the "Shared Objects" group.
It appears that since this attribute wasn't initially available on the file object, we couldn't search on it so we decided to set it programatically. First, I tried using wwsbr.set_attribute but it errored out seemingly because the value wasn't set in the first place. If I set a value first by using the web front end, I could then use the set_attribute procedure.
So, I moved on to using wwsbr_api.modify_item and it appears to set it (although everything is being set to false until I changed it to "text" instead of "boolean" which is OK because that's what I wanted anyway... see metalink bug 390618.1). I'm using the method outlined in metalink doc 413079.1. When I do set it to a "1", and edit the item the check box is checked indicating that it is set correctly. And if I just click "OK" to save the attributes after I open it everything works like it should.
However, the advanced search (and custom search portlet) and the search APIs are not picking it up. I'm not sure if I'm hitting Metalink bug ID 5592472 or not as that's using the "set_attribute" procedure instead of the modify_item procedure. And their "workaround" of setting the attribute in the UI isn't really feasible for a couple thousand files.
So far I've tried the following things to get it working:
1. I am calling wwpro_api_invalidation.execute_cache_invalidation
2. I have executed wwv_context.sync
3. I cleared the page group cache
4. I invalidated all of the web cache
Does anyone else have any other suggestions?

I'm having an issue with setting a custom attribute and having it be searchable using Portal 10.1.4. The situation that we have is that we initially added a bunch of files to Oracle Portal using webdrive. Later on, we decided that we needed another custom attribute called "Pinned Item" that will be used for searching (boolean value) and gave it a default value of false. The attribute was then added to the "File" item type in the "Shared Objects" group.
It appears that since this attribute wasn't initially available on the file object, we couldn't search on it so we decided to set it programatically. First, I tried using wwsbr.set_attribute but it errored out seemingly because the value wasn't set in the first place. If I set a value first by using the web front end, I could then use the set_attribute procedure.
So, I moved on to using wwsbr_api.modify_item and it appears to set it (although everything is being set to false until I changed it to "text" instead of "boolean" which is OK because that's what I wanted anyway... see metalink bug 390618.1). I'm using the method outlined in metalink doc 413079.1. When I do set it to a "1", and edit the item the check box is checked indicating that it is set correctly. And if I just click "OK" to save the attributes after I open it everything works like it should.
However, the advanced search (and custom search portlet) and the search APIs are not picking it up. I'm not sure if I'm hitting Metalink bug ID 5592472 or not as that's using the "set_attribute" procedure instead of the modify_item procedure. And their "workaround" of setting the attribute in the UI isn't really feasible for a couple thousand files.
So far I've tried the following things to get it working:
1. I am calling wwpro_api_invalidation.execute_cache_invalidation
2. I have executed wwv_context.sync
3. I cleared the page group cache
4. I invalidated all of the web cache
Does anyone else have any other suggestions?

Custom Attributes in Target Group Email Campaign Not Refreshed

We have a campaign sending emails to a target group of BPs. To fill our custom attributes with values we have implemented our code in badi CRM_IM_ADD_DATA_BADI method CRM_IM_BPSELE. We tested our code using the Test Send feature from the email form and all worked fine.
But when we ran the campaign in the background for a Target Group with multiple BPs it would not work correctly, our attribute values were incorrect.
We discovered while debugging the job, that the badi gets run once for each BP, but the attribute values from the previous BP do NOT get refreshed. In fact there are 2 entire sets of attribute records in the CT_ATT_VALUES table parameter. Each time through it multiplies by another set of our attributes.
I have put code in the badi as a workaround that deletes the previously filled attributes for the previous BP, but I'd like to figure out what is causing this problem.
Any help would be appreciated.
thanks,
Lee

Hi Lee,
Is this issue resolved for you now??
I am facing the similar problem.
Though the BADi is not used for these two mails (it is used in some other mail forms), it is actually called in 'CRM_ERMS_MAIL_COMPOSE' Function Module and the process is same as u said. There are 2 sets of values.
I am using a Mail Alert functionality where in a 'Mail Alert ON' is sent to field engineers (FE) and then upon FE accepting the work we will send a 'Mail Alert OFF' to FEs.
Problem is, we get one or two fields data incorrectly sometimes. I am not able to find out the root cause yet.
Please let me know if you have had any resolution to this!
Thanks in advance.
Chaitanya

How to Add custom Attribute in XML

How to add Custom attribute recusrivly. With sequence order.
//Before xml:-
var myxml:XML=
<root>
<leval0 >
<leval1 >
<leval2></leval2>
<leval2></leval2>
</leval1>
<leval1 >
<leval2></leval2>
<leval2></leval2>
</leval1>
</leval0>
</root>
////After xml:
var myxml:XML=
<root>
<leval0 levalid="0" >
<leval1 levalid="0_0" >
<leval2 levalid="0_0_0"></leval2>
<leval2 levalid="0_0_1"></leval2>
</leval1>
<leval1 levalid="0_1" >
<leval2 levalid="0_1_0"></leval2>
<leval2 levalid="0_1_1"></leval2>
</leval1>
</leval0>
</root>

//call this method
            trace(addAttribute(myxml));
//method
            private function addAttribute(node:XML, depth:String = ""):XML
                if (node.hasComplexContent())
                    var count:int = 0;
                    var prefix:String = 0 < depth.length ? depth + "_" : "";
                    var currentAtt:String;
                    for each (var nodeItem:XML in node.children())
                        currentAtt = prefix + count;
                        nodeItem.@levalid = currentAtt;
                        addAttribute(nodeItem,currentAtt);
                        count++;
                return node;

Custom attributes store in IDM

Similar Messages

Maybe you are looking for