Does OAM IdentityXML API supports deleting users in LDAP?

We have evaluated OAM IdentityXML WebServices for creating and managing user and group records in LDAP. One of our requirement is to be able to delete any user record and reuse the username for creating another user record.
Hence, we are looking for an IdentityXML function for deleting a user record from the identity store. We have seen the "canIDeleteUser" webservice, and hence assume that there should be an API to delete the user as well.
Also, we can not use the "workflowDeactivateUserSave" as our testcase is to delete and reuse the username.

Yes. You can do this. Proceed on the path with the workflowDeactivateUserSave approach - just build the workflow to perform a 'delete' rather than a 'disable' step (usually the second step to achieve what you describe).
Do you have the workflow working that performs the delete?
As with all IDXML - get things working in the UI style0 first - then move to your IDXML development.
Hope that helps,
Mark

Similar Messages

Does Adobe Edge Inspect support a user agent switcher or mobile emulator?

Hey there,
Does Adobe Edge Inspect support a user agent switcher or mobile emulator?
is there any kind of particular user agent switcher/emulator that is supported? if so, which?
does Adobe have a reliable user agent switcher that supports a tilt option?
thanks for any help on this

Please ask your question in the Edge Inspect forum here http://forums.adobe.com/community/edge_inspect. They will be able to help you.

Teststand api Creating/deleting Users

Hi,
I am using Teststand API with Labwindows and i have a problem with creating/deleting Users.
In fact, to explain easily my problem when you use the full-featured Teststand with the "CreateDeleteUsers.seq" sequence and create a user, then close the full-featured Teststand, you loose your new users in the previous opening.
Whereas, with the Teststand 4.0, with the same "CreateDeleteUsers.seq", when you close, it propose to save the changed file "UserManagement" (Users.ini) and everything's fine...
And as i am using a Labwindows project to login/logout to teststand, i am using TS_... functions i can't find a way to save or to have this save popup to keep my users.
I hope that i am clear, and that someone will be able to help me !

Hello,
As you could see in the following KB: How Can I Edit and Save Changes for the Current User? you have to get the users file as a PropertyObjectFile as it's done in the CreateDeleteUsers sequence, and then use two methods, IncChangeCount() wich is also already done in the example sequence, and the SaveFileIfModified().
See attached file below for the example sequence changed with the file saving.
Regards,
Olivier L. | Certified LabVIEW Developer
Attachments:
CreateDeleteUsersAndSave.seq ‏11 KB

Deleting user from LDAP

How to delete the user permanently from LDAP. I want to delete the user's mail and calendar services also.

Hi,
It is generally not a best practice to touch your directory server directly. If you're just playing around for learning purposes its ok. Otherwise, from an implementation perspective, do not try accessing DS directly.
I will try giving u a solution if u use legacy mode of AM. I'm still learning about realm mode, but i guess such scenarios are mostly common between the two.
You can use the amadmin command found in /opt/SUNWam/bin or in windows c:\program files\sun\javaes5\identity\bin. You have sample XML file pcDeleteRequests. You could use this to delete just one or few users.
The sample is
<Requests>
<PeopleContainerRequests DN="ou=People1,dc=example,dc=com">
     <DeleteUsers>
     <DN>uid=dpUser,ou=People1,dc=example,dc=com</DN>
     </DeleteUsers>
</PeopleContainerRequests>
</Requests>
Make an XML, run this command : amadmin -u "uid=amadmin,ou=people,dc=example,dc=com" -w <password> -t <your_file>

Error while deleting user in LDAP

com.waveset.util.WavesetException: An error occurred adding user 'uid=tony,ou=people,dc=abc,dc=com' to resource 'ABC LDAP'. javax.naming.LimitExceededException: Referral limit

Farhan,
Based on the error message presented,
In order to perform this operation a successful bind must be completed on the connection
Make sure that you're using the correct information to do the AD Bind. User name should be something like cn=administrator,cn=users,dc=xxx,dc=xxx and the proper password.
Matt

PowerShell Active Directory: Get last logon date of a deleted user

So, my first post in this noble community. I've been lurking here and I've been getting some good information. Hopefully, you guys can help me in this concern which may be simple to some but I couldn't seem to get around it.
Is it possible to get the last logon date of a DELETED user in Active Directory?
I can get the available properties of deleted users using the following:
Get-ADObject -Filter {samaccountname -eq <account_name> -and ObjectClass -eq "user"} -IncludeDeletedObjects -Properties *
But the last logon date is not one of the properties available from Get-ADObject. Get-ADUser has the last logon property, but it does not have data on deleted users. Is there anyway this can be achieved? Perhaps convert an ADObject to an ADUser?
Any information would be much appreciated. Thank you.

Thanks everyone for your response. It looks like jrv is leading me to the right path, but I'm still having issues. I'm trying to get the lastlogon time by querying all the DCs in our domain, but every query returns a null lastlogon time for all the deleted
users I tried:
$DomainControllers = ((Get-ADForest).Domains | %{ Get-ADDomainController -Filter * -Server $_ }).Name
foreach ($DC in $DomainControllers)
    $dn=(Get-ADObject -Filter {samaccountname -eq <user_account>} -includedeletedobjects -server $DC).DistinguishedName
    $user=[adsi]"LDAP://$dn"
    $user.LastLogon
It always returns null. Morever, simply executing [adsi]"LDAP://$dn" from each DC gives the following error:
format-default : The following exception occurred while retrieving member
"distinguishedName": "There is no such object on the server.
    + CategoryInfo          : NotSpecified: (:) [format-default], ExtendedType
   SystemException
    + FullyQualifiedErrorId : CatchFromBaseGetMember,Microsoft.PowerShell.Comm
   ands.FormatDefaultCommand
It's a bit surprising to me though, since $user=[adsi]"LDAP://$dn" does return a value for $user (instead of null whenever an error is encountered) of type System.DirectoryServices.DirectoryEntry but it has no members.
Anyone know what I'm missing?

Does Azure Python API create_virtual_machine_deployment allow passing user data/script to a Linux VM?

Does Azure Python API create_virtual_machine_deployment allow passing user data/script to a Linux VM?
AWS EC2 python API allows me to pass user proprietary data or script when I try to create a EC2 linux based VM, e.g.
ec2_conn.run_instances(image_id, key_name=vpc_name, instance_type=vpc_size, subnet_id=subnet_id, security_group_ids=[sec_group.id], private_ip_address=from_private_ip, disable_api_termination=True, user_data=my_user_data)
For Azure python API create_virtual_machine_deployment, does it have the similar thing?
I noticed that there is --custom-data in the CLI, but is there such an option using Python API?
If yes, could someone provide an example code?
Thanks in advance...

Hi,
In Azure, this feature is called
custom data. Currently, you can inject custom data into an Azure VM by using the
Windows Azure command-line tools (--custom-data).
I assume that it is not supported in Python API. You can use “custom_data=xxx”
within “create_virtual_machine_deployment” to check if it works.
If it is not yet available, please submit your requirement in Azure feedback below:
http://feedback.azure.com/forums/34192--general-feedback
Best regards,
Susie
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Does solaris dhcp server support user class

Does solaris dhcp server support user class(option 77). In my environment, solaris dhcp server seems just ignore this option set in the client dhcp discover.
Does anybody can help me.

The clients are all Windows 7 x64 (but I've replicated the problem on MacOS and Solaris clients). The server is Solaris 11 x86.
For the problem to be the ARP cache, wouldn't the client's MAC address have to change during the reboot (i.e. the change in the client's MAC address is what causes the ARP cache to get confused, and hence the client gets blocked because of the MAC mismatch)?
Edited by: user13534003 on May 9, 2012 1:43 AM
Edited by: user13534003 on May 9, 2012 1:46 AM

Simple OAM questions (I think): Possible to delete users and groups?

Hi,
I was wondering if, using the OAM admin, is it possible to delete a user?
Same question regarding a group?
For users, it seems like I can deactivate a user, but can't delete using the OAM admin?
Thanks,
Jim

Deleting User:
1. Create a "Deactivate User" work flow to deactivate the user account.
2. Locate the deactivated user account from "Deactivated User Identity" link in User Manager.
3. Select the user account you want to delete, click the Delete button to delete.
Deleting Group:
1. Create a "Delete Group" workflow in the workflow definition. Step1: Initial - Specifiy who can initialize the process; Step 2: Commit - commit the action.
2. In the group information panel, click the Delete button to delete the group.

Does iplanet 6.0 support W3c RDF API?

Hi,
Does iplanet 6.0 support W3c RDF API? We are trying to use iplanet 6.0
for development. Now we have a problem that our codes can't work
successfully when we use iplanet 6.0. Did you have any advice or
experience? Thanks,
Yan.

What are you trying to do? Serve RDF summaries? You should be able to do
that as long as you set the MIME types correctly.
David
Yan Zhao wrote:
Hi,
Does iplanet 6.0 support W3c RDF API? We are trying to use iplanet 6.0
for development. Now we have a problem that our codes can't work
successfully when we use iplanet 6.0. Did you have any advice or
experience? Thanks,
Yan.

Does Java Card 2 API support all the smart card?

Does Java Card 2 API support all the smart card? I guess all the java cards are smart card but all the smart card are not java card. so Java card 2 API supports only java card. It does not support all the smart card. Please somebody let me know wheather I am correct or not. Because I want to make an application which supports all the smart card. I am confuse wheather I have to use JavaCard API or OCF or any other framework/API. Please help me. Thanks

I am clear with java card.
But I want to make an application which can verify the PIN inside card and read logon certificate, which is saved inside card. Is there any framework which I can use to full fill my simple requiremnt. I dont want to deal with any applet inside card.

Does BPM API support XA transaction ? and how to control

A customer want to use ADF AM to update database and use BPM API to create todo task.
The BPM API is ToDoTask() on oracle.bpel.services.workflow.task.ITaskService.
If the BPM API support XA transaction:
1.can ADF taskflow support AM and BPM mixed transaction ?
2.can Java code control the XA transaction,not in taskflow ?

this can be achieved by using
<config-property name="TransactionIsolation" type="int">2</config-property>

Deleted users are not really "deleted" !

Hello all !
I'm writing an java application to create/read/update/delete users using the GRAPH API. All is going well except one particular use case : If I delete a user, and then later try to create again the same user, I get the following error : "A conflicting
object with one or more of the specified property values is present in the directory"
The detailled use case for one user is :
- Create user with (userPrincipalName, displayName, accountEnabled, mailNickname, password, forceChangePasswordNextLogin properties) : OK
- Query this user to read his properties: OK
- Delete this user : OK
- Query this user to read his properties : the user does not exist : OK
- Create the user with same properties than first step : Not OK ("A conflicting object with one or more of the specified property values is present in the directory")
It should be noted that this error is returned more and more as I repeat these steps.
What is the problem and what can I do ?
Thanks in advance.

I am able to successfully add and remove the same user using the Azure Portal and via code.
Are you sure the user is actually being deleted?
Have you verified if you are able to see the deleted user in the Azure Portal after you delete it?
I used the code within the Graph API Console Application ( AzureADSamples/ConsoleApp-GraphAPI-DotNet
- https://github.com/AzureADSamples/ConsoleApp-GraphAPI-DotNet- "create a new user" region and "Delete User" region). I was able to create the same user and
delete the user multiple times without any errors.
Here is another thing you could verify. Is you application a member of the "User Account Administrator" role? You can utilize the MSOL cmdlets ( Manage Azure AD using Windows PowerShell -https://msdn.microsoft.com/en-us/library/azure/jj151815.aspx )
to add your application to this role (add-msolrolemember -RoleName "User Account Administrator" -RoleMemberType ServicePrincipal -Rolememberobjectid <object GUID for application> )
If your application is under the correct "User Account Administrator" role, it should not have any problems doing this task. I would verify.
If you are still having a problem. You might need to open a support case via the Azure Portal. I hope this resolves your issue.
~ Michael

OIM PSFT UM delete user task

Hello,
We are using PSFT UM v. 9.0.4 and I can't see any delete user task. The conenctor documentation does not mention it int he supported functions. Does this mean that the connector cannot delete the user or this is a must have for any connector?
Thanks

Hi,
you have to apply undo task (delete task) on an unconditional task.
Also check Revoke if no longer applied in access policy, so whenever the the group membership rule failed delete task will trigger for revoke.
There should not be difference via API, your revoke task from OIM does same work .
Thanks,
Kuldeep
Edited by: Kuldeep on May 9, 2012 11:49 PM

Does anyone know how to delete an itunes account? I have two, one with the correct email address and then the other one i dont want to use.

Does anyone know how to delete an iTunes account?

Welcome to the Apple Support Communities
You must create a new user for your other Apple ID so you can use them on your PC

Does OAM IdentityXML API supports deleting users in LDAP?

Similar Messages

Maybe you are looking for