Database User Management Connector ,

Hi,
Want some help in understanding the database user management connector to achieve the Requirement -
" Need to do user provisioning to a database according to roles/entitlements assigned to a user and also wants that access to that database is managed according to roles assigned to that users "
My environment is OIM 11g R2 which is integradted with OIA 11.1.1.5.0
Googled and found that Database User mangement Connector is required for his purpose.Please confirm is this understanding correct or is there any better approach.
Also want to know is it mandatory to install bundle on ICF for this connector?
Thanks,
Puneet
Edited by: Puneet Lobana on May 23, 2013 11:55 PM

Hi one more silly doubt.....can i connect to oracle database without using a connector but creating an IT Resource Type, IT Resource, RO,PD - adapters using stored procedure task to call a stored procedure on the target database?
Pls help
Regards,
sk
Edited by: sk on 19/08/2010 22:15

Similar Messages

OIM 9.1.0 with Database User Management: Connector Exception upon Connect

Hi,
I've been struggling with the Database User Management connector (9.0.4) with Sybase, following the steps word-for-word as per the documentation (Oracle® Identity Manager Connector Guide for Database User Manage Release 9.0.4; E10425-0; July 2009).
When defining the IT Resource through the Install Connector wizard, I get the following when it does a connection test:
14:51:52,795 ERROR [WEBAPP] Class/Method: CreateITResourceAction/testConnectivityForDataBase/ClassNotFoundException encounter some problems: No ClassLoaders found for: com.sybase.jdbc2.jdbc.SybDriver
java.lang.ClassNotFoundException: No ClassLoaders found for: com.sybase.jdbc2.jdbc.SybDriver
even though I've ensured jconn2.jar is in the ThirdParty directory, reflushed the cache, and restarted OIM; the connector still can't seem to load the driver.
I've tried the database testing script with similar results.
Any thoughts?
Cheers
Simon
PS: I believe v5.5 of JConnect (as required by the OIM Connector) has been EOL'd and Sybase. They recommend you use v6.0 (v6 is jconn3.jar)), which from what I can see should work as com.sybase.jdbc3.jdbc.SybDriver; I tried that as well but had the same ClassNotFoundException.

I've fixed it; needed to copy jconn2.jar into the $JBOSS_HOME/lib directory and restart the server.

MS SQL DB User Management Connector Unable to Select Multiple Server

Hi,
We are trying to connect to multiple server using MS SQL DB user management connector but receive the error below when selecting server.
<Sep 3, 2012 4:28:59 PM MYT> <Error> <XELLERATE.APIS> <BEA-000000> <Class/Method: tcLookupOperationsBean/getLookupValuesForColumnFilteredData encounter some problems: Lookup.PDBUM.MSSQL.DBNamesis not a valid form field>
Running InitUtil
Running ExecuteStoredProcForAuthTypeUser
Running SetProcessFormData
<Sep 3, 2012 4:30:13 PM MYT> <Error> <XELLERATE.ADAPTERS> <BEA-000000> <Class/Method: tcAdpEvent/verifyServer encounter some problems: IT Resource Type mismatch found for Adapter variable MSSQL_ITRVerify that IT Resource selected on Process Form matches IT Resource type selected for variable>
Running InitUtil
Running ExecuteStoredProcForAuthTypeUser
Running SetProcessFormData
Running COMBINENAMEWITHSUFFIXPA
Target Class = com.thortech.xl.util.adapters.tcUtilStringOperations
Running COMBINENAMEWITHSUFFIXPA
Target Class = com.thortech.xl.util.adapters.tcUtilStringOperations
Running InitUtil
Running ExecuteStoredProcForAuthTypeUser
Running SetProcessFormData
<Sep 3, 2012 4:33:13 PM MYT> <Error> <XELLERATE.ADAPTERS> <BEA-000000> <Class/Method: tcAdpEvent/verifyServer encounter some problems: Could not determine IT Resource Key for variable MSSQL_ITR>
delete mds name:/db/MSSQL DB User Privilege Login Requestrecon.profile
Unable to delete profile with mds name:/db/MSSQL DB User Privilege Login Requestrecon.profile
<Sep 3, 2012 4:33:43 PM MYT> <Warning> <Socket> <BEA-000450> <Socket 8 internal data record unavailable (probable closure due idle timeout), event received 17>
<Sep 3, 2012 4:33:48 PM MYT> <Warning> <Socket> <BEA-000450> <Socket 4 internal data record unavailable (probable closure due idle timeout), event received 17>
MS SQL DB connector version is 9.1.0.4
Any ideas on this error above?
Thank you.
Edited by: 950985 on Aug 17, 2012 12:21 AM

verify lookup : Lookup.DBUM.MSSQL.Configuration and provide the required information (eg: provide query property file)
--nayan

Error Installing OIM - Ebiz User Management connector

Hi all,
I am trying to install ebusiness suite user management connector 9.1.0.1.0.
But, while installation, I am getting an exception
Invalid Connector Installation Directory
Ensure that the connector installation files are in the specified directory.
From the server log, I have seen this error.
ERROR,01 Jun 2010 11:29:19,153,[XELLERATE.WEBAPP],Class/Method: ConnectorInstallProcessAction/CopyJarFilesForInstallation encounter some problems: IO exception while copying jar files
java.io.IOException: FileCopy: destination file is unwriteable: /g03/oim/xellerate/JavaTasks
at com.thortech.xl.webclient.actions.ConnectorInstallProcessAction.copy(Unknown Source)
at com.thortech.xl.webclient.actions.ConnectorInstallProcessAction.copyJarFilesForInstallation(Unknown Source)
at com.thortech.xl.webclient.actions.ConnectorInstallProcessAction.completeInstallation(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.apache.struts.actions.DispatchAction.dispatchMethod(DispatchAction.java:280)
at com.thortech.xl.webclient.actions.tcLookupDispatchAction.execute(Unknown Source)
at com.thortech.xl.webclient.actions.tcActionBase.execute(Unknown Source)
at com.thortech.xl.webclient.actions.tcAction.execute(Unknown Source)
at com.thortech.xl.webclient.actions.ConnectorInstallProcessAction.execute(Unknown Source)
at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:484)
at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:274)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1482)
at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:525)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:292)
at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42)
at com.thortech.xl.webclient.security.SecurityFilter.doFilter(Unknown Source)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:42)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3496)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(Unknown Source)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2180)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2086)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1406)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
But, before this, I have done the ebusiness suite employee reconciliation 9.1.0.1.0 in the same way.
Please let me know, if any one has faced this kind of error earlier.
Regards
Vicky

Figured out the error,
When I have installed Ebiz HRMS Employee recon connector, it has imported all the files with root privileges. (Dont know why importing was done with root privileges).
Becuase of EBSCommon.jar and Common.jar having root as the owner, EBIZ UM connector is unable to replace those files. After modifying the owner and group of these two files to oracle.
I am able to succesfully install the UM connector.
Regards
Vicky

OIM - SAP Employee Recon and SAP User Management Connectors vs. OC4J

In reading through the SAP connector documentation I've found that we cannot use OC4J to run OIM if the 9.0.3 SAP User Management Connector or SAP Employee Recon Connector is used. This is all related to a conflict in JDK versions supported between the SAP JCo (Java Connector) library and OC4J. A thought we've had is to use a Remote Manager for these connectors. Can anyone validate this approach? Is it possible to use a different JDK version with your remote manager? Is there another workaround that anyone is aware of?
Thanks

Hi,
The remote manager should work with different JDKs. We are going to be doing the same thing for one of our adapters.
As for SAP, I cannot think of another workaround -- we actually abandoned the SAP JCo approach and are doing web services with XI.
Thanks,
Deborah
http://www.linkedin.com/in/dvolk

OIM - EBusiness User Management Connector

Hello there,
Can anybody please tell me within the Ebusiness connector i.e. provided in 9.1 version connector pack, which one needs to be installed? there are 3 different categories within the same -
1.) For the User Management connector:
Oracle EBS User Management 9.1.0.0
2.) For the User Management with HR Foundation connector:
Oracle EBS HR Foundation User Management 9.1.0.0
3.) For the User Management with TCA Foundation connector:
Oracle EBS TCA Foundation User Management 9.1.0.
I don't know which one resembles to which operations that OIM can perform. Can anybody please throw some light and explain which connector does what?
thanks,
- oidm.

An FND_USER record represents an Oracle E-Business Suite account. This record is the main component of the account data whose management is enabled by the connector. *(Oracle EBS User Management 9.1.0.0)*
Depending on your configuration of the target system, there may be other user data components that must be managed by the connector:
Some applications in Oracle E-Business Suite require a user to have a person record in Oracle E-Business HRMS. *(Oracle EBS HR Foundation User Management 9.1.0.0)*
These users are either full-time employees of the organization or users (such as contract or part-time employees) who have been provided with access that is similar to the access provided to full-time employees. iExpense is an example of an application that requires users to have person (HRMS) records.
Some applications in the Oracle E-Business Suite require a user to have a record in Oracle E-Business TCA. *(Oracle EBS TCA Foundation User Management 9.1.0.)*
Typically, these users are representatives or employees of customers and vendors of your organization. iStore and iProcurement are examples of applications that require users to have TCA records.
For more info
http://download.oracle.com/docs/cd/E11223_01/doc.910/e11203/intro.htm#CHDJCHDC
Thanks
Suren

Open database user managed backup

Hi
during open database user managed backup does data is written in the datafile which is put in backup mode ?
Please suggest
Thanks
Huzaifa

huzaifa wrote:
Hi
during open database user managed backup does data is written in the datafile which is put in backup mode ?
Please suggest
Thanks
HuzaifaWhen an 'alter tablespace begin backup' command is issued the datafiles that belong to the tablespace are marked as hot-backup-in-progress. The dirty databuffers in the database buffer cache that belong to the database files are written out to the files and the datafiles are checkpointed. The datafile headers are updated to the SCN captured when the begin backup is issued. The datafile headers are not updated until the 'alter tablespace end backup' command is issued; however, the datablock within the database files can continue to be read and updated. When the datafile is restored from a hot backup, the recovery will begin from the SCN captured during the begin backup is issued. All changes applied during the hot backup time period will be
rolled forward from the redo logs.
Regards,
Teymur Hajiyev
Oracle 10g Certified Master
http://teymur-hajiyev.blogspot.com
http://dba.az

E-Business Suite User Management Connector

Hello. I ran the EBS UM connector v9.1.0, in OIM 11g2, and the OIM Event Management seems to show the recon operation pulled in the expected EBS account, along with the UMX Roles and Responsibilities. However when I search for the corresponding user in OIM, I now see the EBS account attached to his identity, but I do not see the Roles and Responsibilities (I looked under the Roles tab User Details page). Any idea why?
Edited by: user8663548 on Jun 2, 2013 7:43 PM

I did end seeing them them in the OIM user's Roles tab. Still do not understand why I didn't see them right after the recon job finished.

Error while creating database user with first.lastname pattern

I am trying to user the database user management connector to create oracle database user, but when i use first.lastname pattern as the database username i got an ora-01936
ERROR,07 Jul 2010 17:06:56,370,[OIMCP.DBUM],oracle.iam.connectors.dbum.common.db.util.DBUtil : executeQuery
ERROR,07 Jul 2010 17:06:56,370,[OIMCP.DBUM],Error occurred while trying to execute query.
ERROR,07 Jul 2010 17:06:56,370,[OIMCP.DBUM],Description : ORA-01936: cannot specify owner when creating users or roles
ERROR,07 Jul 2010 17:06:56,370,[OIMCP.DBUM],java.sql.SQLSyntaxErrorException: ORA-01936: cannot specify owner when creating users or roles
i figured out that when i use fist.lastname as database username i have to add double quotes, so i can create de user properly , but now the add role or grant task fails with ora-01741.
ERROR,07 Jul 2010 17:18:01,096,[OIMCP.DBUM],================= Start Stack Trace =======================
ERROR,07 Jul 2010 17:18:01,096,[OIMCP.DBUM],oracle.iam.connectors.dbum.common.db.util.DBUtil : executeQuery
ERROR,07 Jul 2010 17:18:01,096,[OIMCP.DBUM],Error occurred while trying to execute query.
ERROR,07 Jul 2010 17:18:01,096,[OIMCP.DBUM],Description : ORA-01741: illegal zero-length identifier
ERROR,07 Jul 2010 17:18:01,096,[OIMCP.DBUM],java.sql.SQLSyntaxErrorException: ORA-01741: illegal zero-length identifier

Did u try adding the roles via sqlplus by running a command ?
Whats the result
Thanks
Suren

Error installing OIM Connector for DB User Management

Hi!
I'm a newbie in OIM and trying to set up a lab environment for user provisioning and reconciliation.
I have installed: WebLogic 10.3.3; OIM 11.1.1.3; Oracle Database 11g 11.2.0.1.0
In order to configure the OIM connector for DB User Management, I am following the OIM Connector Guide for Database User Management (http://docs.oracle.com/cd/E22999_01/doc.111/e28315/deploy.htm#CHDHAJCA) for the installation steps:
In the Step 2: Connector Installation the Import of Connector XML Files is failing. The error displayed is:
DOBJ.XML_IMPORT_ERROR
Duplicate OUG
I found these error messages from the STDOUT of the OIM Server:
<Error> <XELLERATE.DATABASE> <BEA-000000> <Class/Method: tcDataBase/writeStatement encounter some problems: ORA-00001: unique constraint (DEV_OIM.PK_OUG) violated
<Error> <XELLERATE.DDM.IMPORT> <BEA-000000> <Insert failed.>
<Error> <XELLERATE.DDM.IMPORT> <BEA-000000> <Exception during import
com.thortech.xl.ddm.exception.DDMException: Duplicate OUG
Can you please help me in solving this issue?
Much thanks in advance.
Edited by: user769080 on Jun 27, 2012 12:35 AM

Try to research into these tables OUG(List to define the administrators for each Resource Resource) , obj and ugp.
Something like this:
select obj.obj_name, oug.oug_write,oug.oug_delete,oug.oug_data_level,ugp.ugp_name from obj,oug,ugp where obj.obj_key=oug.obj_key and oug.ugp_key=ugp.ugp_key
PK_OUG is a unique key that control (oug.obj_key and oug.ugp_key) together into OUG table. So, if you already have this information that it's trying to insert you will see this error. Probably because of a previous installation. Check CIH table if it already have some information about this connector, probably someone already tried to install this before.
I hope this helps,
Thiago Leoncio.

Problem connection in OIM 9.1 with SAP user managment

Hi!
When I want to provision a sap user management resource to an user, it appeared this problem.
2008-07-30 14:50:52,587 INFO [XL_INTG.SAPUSERMANAGEMENT] Create User Request
2008-07-30 14:50:52,587 INFO [XL_INTG.SAPUSERMANAGEMENT] userId :PRUEBA4803, userGroup:AUDITOR_ARG,lastName:prueba4803,firstName:prueba4803,userTitle:0003,langComm:S,department:,langLogIn:,timeZone:,telephone:,extension:,Fax:,email:,dateFormat:1,decimalNotation:Y,function:,roomNo:,floor:,building:,code:,commType:,alias:,startMenu:000,userType:A,sapUserId:,empId:PRUEBA4803,fromHRMS:
2008-07-30 14:50:52,587 INFO [XL_INTG.SAPUSERMANAGEMENT] SAP Create Connection Request
2008-07-30 14:50:52,587 INFO [XL_INTG.SAPUSERMANAGEMENT] Inside XLSAPUTILITIES
2008-07-30 14:50:52,587 INFO [XL_INTG.SAPUSERMANAGEMENT] SAP Create Connection Requesting****
2008-07-30 14:50:52,587 INFO [XL_INTG.SAPUSERMANAGEMENT] START SAP Connection creation.
It is strange because it was working all right since 3 months ago and in these 2 last weeks, it is frequently this problem. Sometimes it works sometimes it does not.
Of course, I tried the connection between OIM and SAP, with the SAP login, and the connection is all OK.
My oim vertion is 9.1 and the SAP User Management connector is 9.0.4.1.
Did anybody have this problem before?
Bye!

Oh I forget, when I restart the application server, in my case the jboss, the problem is fixed. Strange...

PeopleSoft User Management not reconciling properly

Hello,
This is a follow up to a problem that is solved here : Re: Reconciliation Rule based on arbitrary field
We are reconciling employees form PeopleSoft with the Employee Reconciliation connector. By default, the connector maps EMPLID to the OIM User ID. That is not what we want, so we have mapped the EMPLID to the OIM Employee Number field. As a result, the User ID is automatically generated by OIM. That is fine since we want to retrieve the User ID from PeopleSoft with the User Management connector.
Now, we have modified the User Management reconciliation rule so that "Employee Number Equals Employee ID" and we have created a new reconciliation profile. When we receive a USER_PROFILE message from PeopleSoft, the connector still seems to be trying to match the User ID from the message to the User ID in OIM. If we manually set the User ID of the subject in OIM to the one we expect to receive in the USER_PROFILE, a new user is created and associated with the existing OIM subject. If we do not manually change the User ID in OIM, we get an error saying that no user match was found.
Has anyone experimented with the reconciliation rule of the PeopleSoft User Management connector?
Thanks,
--jtellier

Yes, I'm using both Employee Reconciliation and User Management. When creating the reconciliation profile, I see no errors in the logs. I've also tried clicking the Create button multiple times. I've tried adding the Employee Number as one of the key fields but it did not help.
I've just tried modifying the Reconciliation Action Rule, but I've got a problem. For the "No Matches Found" Role Condition, I can only set the "None" Rule Action. I've deleted the condition and tried adding it again, but I can't even set the action that used to be there. It used to be "Assign to administrator with least load" but now, the only action in the drop-down is "None".
Thanks,
--jtellier
Edited by: jtellier on Dec 12, 2012 9:30 AM

OIM 11g: Error Installing Sybase DBUM User Management 9.1.0.4 connector

Hi All,
While installing Sybase DBUM User Management 9.1.0.4 connector from OIM console, I get the following:
While on Step 2 of the wizard (Connector Installation):
- Configuration of connector libraries: passes
- Import of connector XML Files (using deployment manager): FAILS
The following error message appears:
DOBJ.XML_IMPORT_ERROR
Unresolved dependency{WIN=Reconciliation Manager}
Operating System: Linux
Thanks in advance for any ideas!

which release of OIM are you using.
Did you try to retry the installation of connector?
If not then refrsh your OIM database and then install again.
Seems like some earlier installation has kept some data in OIM DB.

Configuration Manager Connector User account

Hello All,
Is there any problem if I create configuration Manager connector with one user that has sysadmin permitions in SCCM database?
Regards,

Hi,
The user account that you specify as the Run As account must be a member of the smsdbrole_extract and the db_datareader groups for the Configuration Manager site database. If user is sysadmin that's ok.
Remy BOVI

Sap UM connector 9.1.2 trouble with "SAP User Management User Recon" task

Hello All,
i have a problem with Sap UM Connector version 9.1.2.
OIM version 11.1.1.5
Windows 2008 R2
Problem is:
Then accounts in Sap are created through direct provisioning feature of connector everything works ok (subsequent update or delete an account).
But if a user account is created in Sap using Sap GUI, scheduled task "SAP User Management User Recon" of connector doesn't create reconciliation event to link user.
Sometimes it does though, but for one user account created using Sap GUI in OIM created two reconciliation events, so corrsponding user in oim have two records for resource SAP.
In this reconciliation events, one have full set of attributes (Login, First Name, Last Name, E Mail, etc), another one - just these 3 attributes: IT Resource, User ID, Lock.
"SAP User Management Delete Recon" scheduled task works ok then user account has been deleted using Sap Gui.
How one can troubleshoot such behavior?
Can anyone advise please?

resolved the issue by updating sap um connector to version 9.1.2.5

Database User Management Connector ,

Similar Messages

Maybe you are looking for