Development of SPML Web Services in OIM

Hello All,
I need to write some custom SPML based web services, which are not available in OIM 9.1.0 release.
Is there any framework available that can be used for the same?
Thanks in Advance,
Shyam

The 9.1 GTC Webservices provisioning connector does SPML only. It cannot consume a generic non SPML WSDL and generate stubs (no matter how much the documentation makes it sound like it can).
That said, I'm not sure I totally understand your question. An SMPL web service provider is going to have a WSDL and it can be run by a servlet or any other server technology (like .net) capable of exposing functionality as a web service.

Similar Messages

Error while calling SPML web service call in OIM 11g

Hi,
While testing the SPML web service call, I am getting the "failure in security check" errors.
And I have attached the request and responce .
Request:
<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
<soap:Header xmlns:ns1="urn:names:spml:ws:header">
<ns1:ServiceHeader>
<ns1:serviceId/>
</ns1:ServiceHeader>
<wsse:Security soap:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<wsse:UsernameToken>
<wsse:Username>xelsysadm</wsse:Username>
<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">XXXXXXXX</wsse:Password>
</wsse:UsernameToken>
</wsse:Security>
</soap:Header>
<soap:Body xmlns:ns2="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username">
<ns2:validateUsernameRequest xmlns:ns3="urn:oasis:names:tc:SPML:2:0" requestID="12345" executionMode="synchronous" locale="en" policyURI="http://www.sample.com/string/string">
<ns2:capabilityData mustUnderstand="true" capabilityURI="urn:oasis:names:tc:SPML:2:0:reference"/>
<ns2:username>TCS1000</ns2:username>
</ns2:validateUsernameRequest>
</soap:Body>
</soap:Envelope
Response:
<env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">
<env:Header/>
<env:Body>
<env:Fault xmlns:ns0="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<faultcode>ns0:FailedCheck</faultcode>
<faultstring>FailedCheck : failure in security check</faultstring>
<faultactor/>
</env:Fault>
</env:Body>
</env:Envelope>
I have attached the log file from OIM
####<Apr 26, 2012 10:27:13 AM EDT> <Error> <oracle.wsm.resources.enforcement> <corwloimhd01> <dev-oim_oim_server01> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <214014dca901f288:-460ab67b:136eeab0662:-7ffd-0000000000000838> <1335450433058> <WSM-07501> <Failure in Oracle WSM Agent processRequest, category=security, function=agent.function.service, application=spml-xsd, composite=null, modelObj=SPMLService, policy=oracle/wss11_saml_or_username_token_with_message_protection_service_policy, policyVersion=1, assertionName={http://schemas.oracle.com/ws/2006/01/securitypolicy}wss11-username-with-certificates.>
####<Apr 26, 2012 10:27:13 AM EDT> <Notice> <Stdout> <corwloimhd01> <dev-oim_oim_server01> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <214014dca901f288:-460ab67b:136eeab0662:-7ffd-000000000000083d> <1335450433058> <BEA-000000> <<Apr 26, 2012 10:27:13 AM EDT> <Error> <oracle.wsm.resources.enforcement> <WSM-07501> <Failure in Oracle WSM Agent processRequest, category=security, function=agent.function.service, application=spml-xsd, composite=null, modelObj=SPMLService, policy=oracle/wss11_saml_or_username_token_with_message_protection_service_policy, policyVersion=1, assertionName={http://schemas.oracle.com/ws/2006/01/securitypolicy}wss11-username-with-certificates.>>
Please help me how to solve this issue.
Thanks in advance
Siva

Your business logic has to be implemented by using OIM APIS. oimclient.jar..
you can then expose these business functions accordingly using a webservice or rest ...
for business logic refer:-
http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/apis.htm#OMDEV734
You will basicsally have to deal with UserManager class for managing users.
java API:
http://docs.oracle.com/cd/E27559_01/apirefs.1112/e28159/toc.htm

Can "SPML Web Service Complex Data Type field" take multiple values ?

In Generic Technology Connector's -SPML design parameters section, Can we give multiple values in SPML Web Service Complex Data Type field?
If not, how can i call methods directly instead of calling them through a values of the "name" attribute of the "complexType" element in SPML Web Service Complex Data Type?
I need 'SPML Web Service Complex Data Type' to hold multiple values.And based on the request it has to initiate appropriate method of action.
Presently i have three methods add,modify and delete which i am calling through a single value of the "name" attribute of the "complexType" element in SPML Web Service Complex Data Type.
I want to replace this single value with multiple menthods , so that a direct interaction between the method,OIM and target can be established.
Edited by: 821054 on 16/02/2011 04:23

Thanks Robert.
You'll need to create your own interface to the webapp database for those kind of data operations
by this, are you speaking of the internal BC database which stores web app schema data? That would be great if it were possible to update that programmatically because I need to use the List (Checkbox List) field type (for the search functionality), but I need to supply the checkbox options from a web app rather than by manually updating the list entered in the Fields view of the web app settings (shown below).
I'm curious if anyone else has tried this?
Again, my reason for needing to use the List (Checkbox List) field type is that the page which processes searches knows to expect a comma separated list for this field type and then appears to be parsing out the individual values for searching out web app items with 1 or more matching values. You're right that text fields (string and multiline) just check for 'string contains' matches, and this would be ok if I was only ever needing to search just one value at a time. Here's an example of what I might do:
Web App item field value (as recorded against the List (Checkbox List) field type:
8294877,8294878
Web App Search value (for this same field):
8294879,8294877,8294885
The search would return this web app item because the field contains 2 (1 or more) individual values even though they were entered into the search field in a different order. If this web app item were just a Text (string or multiline) field, the searched value is not a substring of the web app item's stored value, so it would not find a match. Hence the need to use Checkbox List field type.
The web app will have thousands if not 10s of thousands of records, so dumping them all into one big array or object and searching on the front-end won't be practical (though it works great on smaller datasets).

SPML Web Service in 11g (XSD): fail to get the psoID

Hello.
Has anybody successfully used the default XSD version of the SPML web service in 11g? I was able to successfully invoke the Add User operation but I'm not seeing the psoID (this is the unique ID generated by OIM for the user) for the newly added user... The Oracle docs for 11g do not show how that is returned... I would think that in would be in the response but I do not see it there... Someone suggested using Search User to get the psoID but I do not see a Search operation in the WSDL for 11g...
I'm starting to think that the XSD version of the SPML in 11g is maybe incomplete? When I get chance, I may deploy the DSML version of the web service, and then run the Sample HTTP Client to see if that works better. I understand that this DSML version is what was used in 10g, and may be more robust.
Thoughts anybody?

Sunny,
As you have pointed out, API will work.
But regarding your statement:
"Use SPML10g along with SPML11g (this is the cleanest OOTB solution wherein you can use the older set of SPML methods to fetch the userKey and then use newer SPML methods to perform asynchronous operations). I did the same"
SPML samples that came with 10g did not work with OIM 11g for me. Because from what I know, SPML in 10g made use of DSML profile and that is not supported in 11g.
http://docs.oracle.com/cd/E14571_01/doc.1111/e14309/spmlapi.htm#CHDCBJAI
"SPML has two profiles: the XSD profile and the DSML profile. This release of Oracle Identity Manager makes use of the XSD profile."
Did you tweak something to get it working?
Thanks.

SPML Web Service - custom Add Response

Hi,
Each time an Add Request is requested to OIM's SPML Web Services, there is a standard SPML Add Response received where in PSO ID is returned.
We in our project are looking to customise this format and return additional parameters (which OIM would generate based on some logic) to the requesting consumer.
Can I achieve this in OIM. Is this an Out-of-the-box feature OR some thing which I would need to do. If so, kindly eloborate and brief me the steps to proceed.
Edited by: bond8135 on 11-Apr-2010 18:37

Sunny,
As you have pointed out, API will work.
But regarding your statement:
"Use SPML10g along with SPML11g (this is the cleanest OOTB solution wherein you can use the older set of SPML methods to fetch the userKey and then use newer SPML methods to perform asynchronous operations). I did the same"
SPML samples that came with 10g did not work with OIM 11g for me. Because from what I know, SPML in 10g made use of DSML profile and that is not supported in 11g.
http://docs.oracle.com/cd/E14571_01/doc.1111/e14309/spmlapi.htm#CHDCBJAI
"SPML has two profiles: the XSD profile and the DSML profile. This release of Oracle Identity Manager makes use of the XSD profile."
Did you tweak something to get it working?
Thanks.

How to call an external web service from OIM?

Hi,
I have a question on how to call an external web service from OIM within e.g. creating user process? How should it be done; through adapter and task in the process?
Any recomendations?
Thanks in advance!

it is not clear to me if you are having problems with calling java code from OIM or if the problem is the web service API.
Lets do some divide and conquer:
Can you create a simple java class that just writes a couple of lines to the log? Please attach this code to the OIM task and make sure it runs.
Once this works we can start looking at the web service call.
Best regards
/Martin

Help on Sun Certified Developer for Java Web Services (CX-310-220) exam

Hi,
I am planing for Sun Certified Developer for Java Web Services (CX-310-220) certification. Can anyone provide me the links for resouces? can anyone provide me books/publications/author best preparation material to score good marks in exam? can anyone provide me the download resources available over internet?
thanks in advance..!!!
regards
gaveesha

yes, that's the only decent book covering most of the exam curiculum (but NOT all of it, check the exam specs versus the book content to know what you are missing).
I'm working on the same material, and boy is it a lot...
Dry, boring stuff most of it.

Sun Certified Developer for Java Web Services (CX-310-220)

Hello All,
I'm planning to study for Sun Certified Developer for Java Web Services (CX-310-220). I really appreciate any help in suggesting the books and the material requiered for the above certification.
Thanks,
Greeshma...

yes, that's the only decent book covering most of the exam curiculum (but NOT all of it, check the exam specs versus the book content to know what you are missing).
I'm working on the same material, and boy is it a lot...
Dry, boring stuff most of it.

I am planing for Sun Certified Developer for Java Web Services (CX-310-220)

Hi,
I am planing for Sun Certified Developer for Java Web Services (CX-310-220) certification. Can anyone please provide me the resources for preparation?
Can anyone suggest me which books/author/publications best helps me to get good results in exam? Any books/author/publications available over internet to download and prepare?
regards
gaveesha

yes, that's the only decent book covering most of the exam curiculum (but NOT all of it, check the exam specs versus the book content to know what you are missing).
I'm working on the same material, and boy is it a lot...
Dry, boring stuff most of it.

SPML web service provisioning from OIM 9.1.0.1 using the OOTB GTCframework

Hello there,
There is a .NET web service client which is successfully able to access the weblogic application server wsdl from oim 9101 and it can see the complete user profile as a response from the same.
1.) Now, there is a situation where oim needs to send some attribute values to that .NET web service client, after the data from their side comes to OIM and updates a single attribute values for e.g. PIN. How can we do that ?
2.) and I want to add some UDFs into the existing SPML provisioning user profile. How can I do that ?
3.) Also, how will OIM know that it was able to successfully send the attribute values to the web service client.
http://download.oracle.com/docs/cd/E10391_01/doc.910/e10360/creategtc.htm#Toc153968032
I have gone through this. I didnt found this in OIM 9101.
Any ideas/references/clues/hints appreciated in this concern.
Thanks in advance,
- oidm.

In the entire thread many experts have given nice queries in different formats...
The best approach would be to open up the SQL Developer, connect with the OIM Database and experiment with all sorts of SQL queries provided by all the experts..
Learn some SQL techniques, like Inner Join etc...
Then you yourself will be able to figure out what you need, in exactly which format, for which users and for whom you have to restrict
Then not only this question, you would be able to solve dozens of similar such issues yourself...
And trust me, nothing can match that...
Just in case, you are not familiar with SQL Developer,
http://www.oracle.com/technetwork/developer-tools/sql-developer/downloads/index.html
Oracle SQL Developer 3.2.1 (3.2.10.09.57)
September 24, 2012
The Disabled DATE will be the creation date of that entry in the UPA_FIELDS table when Users.Status changed to Disabled.
SELECT USR.USR_LOGIN, UPA_FIELDS.CREATE_DATE
FROM UPA_FIELDS
WHERE UPA_FIELDS.FIELD_NAME='Users.Status'
AND UPA_FIELDS.FIELD_NEW_VALUE='Disabled'
AND UPA_FIELDS.UPA_USR_KEY=USR.USR_KEY
AND USR.USR_LOGIN NOT IN ('XELSYSADM', 'XELOPERATOR', 'WEBLOGIC');

Questions about SPML Web Service ( OIM 9.1 )

I need to launch a provisioning process on a target by using a generic connector (Web Service).
Scenario:
==========
Host A is where the OIM server is installed. A generic connector is defined here.
Host B is the target where users must be created. A webservice (axis) is installed here.
Requirements:
===========
OIM server (Host A) sends a request to WebService (Host B). The Web service receives, process and sends a response with the result to the OIM server.
Version 9.0.3
==============
On Version 9.0.3 I got the expected results but a problem appeared: there wasn't feedback error control because the web service response could'nt be processed.
I followed the next steps:
1º deploy axis on application server
2º write SendWSResponse.jws including public method "doProvisioning". Copy this file to ..\server\default\deploy\axis.war\
3º compile SendWSResponse.jws (from a browser)
4º Create generic connector (for reconciliation and provisioning). Definition of parameters and mappings.
Note: In 9.0.3 version only three parameters were required for Web Service Definition:
Web Service URL=http://host:8080/axis/SendWSResponse.jws
Operation Name = doProvisioning
SPML-->Target ID=4201
Version 9.1
==============
On the new version, the connector definition is more complicated. Also they have added an ear-application or web service (OIMSpmlWS) related to this connector .
The first question is:
Is this ear-application addressed to process the reponses that are sent by the target?
The second question is:
Must I install the OIMSpmlWS on Host B? and if the answer is affirmative, how can I include the logic to my provisioning process.
And the most important?
How might the connector be configured and the webServices in this usual scenario?
Many thanks in advance

There is no "sample" WSDL file, there is THE WSDL file. It is located in the OIMSpmlWS.ear EAR file, in spmlws.war WAR file in the directory WEB-INF/wsdl.

Cant Call Web service Through OIM adapter

Hi, I am trying to call A web service using A Axis2 client in Java , but i get a error saying "input message for a required feild is null".
However if i try to use a non Axis2 client then it works fine ..
Please suggest any solutions?

I will suggest you first test your OIM adapter code into your IDE or WL server:
If you try using your Eclipse or JDeveloper can you call WS? Into JDeveloper you can tes using: Right click into WS class and 'Creating a WS Client' or just running a 'Test WebSevices' option. Just simulate using JDeveloper+OIM codes and libs it should work.
Right now I am doing this above and I am able to test my OIM WS code fine.
Another way is deploy your WS OIM code into WebLogic. Using WebLogic 'development mode' you should see two links: A service called 'Test Client' that you can test it and second one with just WSDL link.
I hope this helps,
Thiago Leoncio

Deployin Web Service in OIM

I have developed a webservice which will take the following inputs from the user
* User ID
*resource name for which access is needed
and also some other details.
For this userid am logging in to OIM using signature method and raising a request for the given resource through webservice and returning the request key as web service response.
I tested my webservice in my local environment and it is working fine. I am able to raise the request for that specified resource and request key is generated which is sent as Soap Response.
Please help me to deploy the same webservice in OIM server.
Thanks in advance.
Edited by: Durgaprasad on Aug 28, 2011 7:59 AM

Hi vindla ,
I have developed a web service on web logic and tested it in my local environment. Please let me know the steps to deploy it on OIM Server.
My OIM Server version is 10g, deployed on weblogic server.
Thanks
Edited by: Durgaprasad on Aug 29, 2011 6:10 PM

Problem calling web service from OIM

Hello,
We have a requirement to get the department name from a web service call and populate the department name on the usr form based on the deptid.
We created the java web service client class (got the jar file and put it in the JavaTasks directory on OIM server). We unit tested this code successfully from our desktop.
Then we created the process task in the design console to call the client class method to get the deptname based on the deptid.
We got a value of "exception" returned from the web service call.
When we telnet from OIM to the web server, we got "connected to..." followed by "Connection closed by foreign host".
How can we verify that OIM can talk to the web server?
Please help.
Thanks
Khanh
Edited by: user12049102 on May 5, 2010 1:06 PM
Edited by: user12049102 on May 5, 2010 1:49 PM

We knew that we can make the web service call from the command line. So, we wrote a shell script that calls the web service jar file and it worked.
It's not elegant but we couldn't figure out why we cannot make the web service call directly from OIM.

Requirements for the development of ABAP web services...

Recently at TechEd in Vienna I saw a demo of the development of an ABAP service. It all looked fairly easy, so when I came back I decided to try it out for myself. However, this mission seems to be compromised by the development environment not playing along. I've tried to encapsulate a small RFC function module inside af service on an IDES ECC 6.0 system and that went fairly well until I wanted to test the service.
At some point it is understood that one should setup a reference to a J2EE system in the WSADMIN transaction and that caused me some troubles as it looks like the IDES system that I tried it on doesn't have a java stack. How could I check whether that is true? I then tried to test the service directly under maintain service within WSADMIN and it sends me a popup screen and asks me to logon. After logging on the browser claims an internal error has happened.
What do I do now? Where do I start to check if everything is setup the way it should be? Is there a note or a how to guide somewhere?
Best regards,
Anders

Hello,
For creating and hosting ABAP web Services, you do not need JAVA stack. However, for testing Web Services using Web Service Navigator (from SOAMANAGER), you need J2EE stack.
If you are invoking Web Service from SOAPUI, .NET or some other third party tool, you need to create End Point for the service using SOAMANAGER and provide the Porttype WSDL to the third party system.
Thanks,
Venu

Development of SPML Web Services in OIM

Similar Messages

Maybe you are looking for