Delete Reconciliation fails when a Composite Key is used

Question

Hi Guys ,
Problem Statement :-
I am facing problem in performing delete reconciliation when a composite key is used.It fails whenever we have more than one attribute as key
in reconciliation field mappings.
I am using prepareDeleteReconData() ..etc Api's to perform delete reconciliation. I am not using CreateDeleteReconciliationEvent() as i dont know which users are deleted.
UseCase
For eg . Consider Oracle DataBase UM connector , where you have composite key defined as (UserID and ITResource), it fails to generate a delete reconciliation event.
Have anybody faced this ?? Any workarounds ?
Thanks
Surendra Singh

Answer 1

Hey Surendra,
This is what you can do to get rid of this problem. I kow you cannot use the 'createDeleetReconciliationEvent' API, but just to let you know that this works absolutely fine. Now The approach which you might be using has the following flow-
- provideDeletionDetectionData()
- getMissingAccounts()
- deleteDetectedAccounts()
Now you must be aware that getMissingAccounts() returns a ResultSet for all the instances which needs to be revoked in OIM. If you see the contents of this ResultSet, here is what it contains (4 columns):
Objects.Key, Objects.Name, Structure Utility.Table Name, Process Instance.Key
Now what I suggest is do not use the deleteDetectedAccounts API as of now. And Revoke the object instance using API call. Follow the following steps:
1) Just iterate through the ResultSet *(deletedUsers)* obtained from 'getMissingAccounts()' to fetch the value 'Process Instance.Key' and store it in an Array.
2) You must be passing the Object Name as a Task Attribute. Use this attribute to fetch the 'Object Key'. Once you get this value, use the 'getAssociatedUsers' API of objectOperationsIntf to find all the users associated with this object. This API will return a ResultSet. Let's name it as *'AssoUsers'*.
3) Iterate the above ResultSet(AssoUsers) and fetch the *'Process Instance.Key'* column from its rows. Compare this value to the already created Array in step-1. If there is a match then you will know that this resource instance needs to be revoked.
4) Now fetch the following two values from the ResultSet(AssoUsers):
- Users.Key
- Object Instance.Key
5) Once you get the User Key, you will have to find its corresponding resources. Do it by using *'getObjects'* API of userOperationsIntf. This will again return a resultSet *(userObjects)*.
6) Iterate through all the rows and check the value of column *'Objects.Name'*. If this value equals to your resource, then fetch the value of column- Users-Object Instance For User.Key from this row.
7) This will give you the 'Object instnace for User key'.
8) Call the revokeObject API of userOperationsIntf interface.
Below is a sample code snippet for your reference.
          Array DeletedUsers = {Your Deleted User List Array};
          String ObjectName = "Your Object Name as it comes from Task Attribute";
          long ObjectKey = 1; // Fetch it from Object Name above using API
          HashMap dummy = new HashMap();
          tcResultSet AssoUsers = objectOperationsIntf.getAssociatedUsers(ObjectKey, dummy);
          for (int i=0 ; i<AssoUsers.getRowCount() ; i++) {
               AssoUsers.goToRow(i);               
               String piKey = AssoUsers.getStringValue("Process Instance.Key");
               if("Your Array DeletedUsers contains piKey"){
                    long userKey = AssoUsers.getLongValue("Users.Key");
                    long obiKey = AssoUsers.getLongValue("Object Instance.Key");
                    logger.debug("userKey extracted is : " + userKey);
                    logger.debug("obiKey extracted is : " + obiKey);                    
                    tcResultSet userObjects = userOperationsIntf.getObjects(userKey);
                    for(int j=0 ; j<userObjects.getRowCount() ; j++) {
                         userObjects.goToRow(j);
                         if(ObjectName.equalsIgnoreCase(userObjects.getStringValue("Objects.Name"))) {                              
                              long obiuKey = userObjects.getLongValue("Users-Object Instance For User.Key");
                              userOperationsIntf.revokeObject(userKey, obiuKey);
                              logger.debug("Resource has been revoked");
This should work. I know this looks quiet complex but have to do it. Give it a try.
Thanks
Sunny