Enabling update for provisioned user in OIM11g

Hi...
To update a field(email id) of a provisioned user have got to know the following steps.
1. Change the OIM Profile email id and save the User form
2. OIM then checks against the Lookup.USR_PROCESS_TRIGGERS lookup for a task name that is mapped to the Email field - typically "Change Email"
3. Add a task in target system provisioning process name as "Change Email".
4. Now Write a code using OIM API which will update the Email field of target system provisioning process form with new Email id.
5. Attach this adapter in Change Email" task.
6. Then when the process form is updated that triggers a process task to update the Email for that given resource - "Update Email"
Can i know which APIs are to be used for step 4 so that updation can take place from OIM to target system process form.
Thanks.

Amruta Agarwal wrote:
Hi...
To update a field(email id) of a provisioned user have got to know the following steps.
1. Change the OIM Profile email id and save the User form
2. OIM then checks against the Lookup.USR_PROCESS_TRIGGERS lookup for a task name that is mapped to the Email field - typically "Change Email"
3. Add a task in target system provisioning process name as "Change Email".
4. Now Write a code using OIM API which will update the Email field of target system provisioning process form with new Email id.
5. Attach this adapter in Change Email" task.
6. Then when the process form is updated that triggers a process task to update the Email for that given resource - "Update Email"
Can i know which APIs are to be used for step 4 so that updation can take place from OIM to target system process form.
Thanks.Just a copy adapter which reads the data from user profile and copies it to process form field.
Steps from from Oracle:
1) Suppose one created a UDF: UDF USR_UDF_BUS_PHONE for phone number called 'Business Phone Number' on the Users User Defined Field Form in Design Console
2) Then double click on "Lookup Definition" under the Administration tree of Design Console and query for this "Lookup.USR_PROCESS_TRIGGERS" code.
3) Add "Lookup Code Information" like this.
i) Enter the UDF column created in step 1 for Code Key as USR_UDF_BUS_PHONE
ii) Enter the word 'Change' without the quotes followed by the field name of the UDF column created in Decode column. So in this case the Decode is 'Change Business Phone Number' without the quotes
iii) Language: en
iv) Country: US
4) Then create one adapter of type process task
i) Move to Variable List tab and create a variable "var1" Resolve at run time.
ii) Add logic task -> SET VARIABLE and click on continue
iii) In Add Set Variable Task Parameter dialog, select Adapter return value in variable name drop down, Operand Type as Variable, Operand Qualifier ->"var1" created in 4i).
5) Add one process task under the Resource Object's Process Definition in Design Console named 'Change Business Phone Number' without the quotes. Note: The task name should be
exactly same as Decode value in lookup definitions and then make it conditional and also check "Allow Multiple Instances".
6) In "Integration" tab of task add adapter you have created in 4) and then map the adapter variables.
i) Map Adapter Return Variable to Process Data and then select the process form field (Example: UD_ADUSER_PHONE) which you want to update with the user's Business Telephone USR_UDF_BUS_PHONE field.
ii) Then map the other adapter variable to User Definition -> map with user's Business Telephone USR_UDF_BUS_PHONE field.
Result: Now when user's Business Telephone is update, the Change Business Telephone will get triggered in and inserted for this resource and copy the change from user profile to the process form. If the connector already has the 'Business Telephone Updated' Process Task in the Process definition which has an adapter to update the target then because of the update to the Business Telephone in the process form, the 'Business Telephone Updated' task will be triggered and target will also get updated with the new change.
HTH,
BB
Edited by: bbagaria on Sep 5, 2011 10:44 AM

Similar Messages

  • Enable save for all users in rich client document defaultly for all users

    Hi,
    Is there a option to enable save for all users in a rich client document defaultly for all users across the company. As the users who are creating reports are forgetting to check the box before sending the rich client document to others. Kindly let me know if you have any suggestions on this.
    Thanks,
    Karthik

    I'd suggest that is is where your BO folder structure comes in. You can export from Rich Client to any folder that you have permissions to access - some sort of collaboration folder system would potentially be better and more secure than sending unsecured reports via email. If your IT security team found out that you were removing document security, I doubt they'd be impressed!
    You can't do the default save for all users, simple as that (it's bad practice anyway, which is probably why you can't). While it's not the answer that you want to hear, it is the correct one.

  • Enabling calendaring for a user or group not working

    Am having an issue getting ical server/sharing and webcalandars working. Think it is all related.
    First a description of my server environs. One xserve acting as OD master, fileserver, vpn, DNS and DHCP server as well. Second xserve acting as DNS, mail, web and ical server. Second server is OD replica.
    DNS is working. All OD functions including kerberos are working. Mail and webmail are working as well.
    The hostname in iCal Server Admin settings is the FQDN of my second xserve. icalxserve.domain.com. I can start iCal. Then I get this error in the logs:
    twistedcaldav.directory.appleopendirectory.OpenDirectoryInitError: Open Directory has no /Computers records with a virtual hostname: icalxserve.domain.com
    Remember this server is a OD replica. It is listed in the Computers pane under Workgroup Manager and its name is server.domain.com$. All the computers have $ at the end so I assume this is normal. All services are set for access from all users in Server Admin -> server -> Access. In Server Admin Web -> Sites -> (default site highlighted) Web Services webmail, wiki and blog and web calendaring are all checked as well. I have also tried to enable wiki and blog and web calendar for groups in Workgroup Manager. The only choices in the pop up are none and wiki host for domain.com. Strange.
    I cannot enable calendaring for any user. I check the Enable calendaring box under Advanced in the Accounts pane in Workgroup Manager and no server is listed in the pop up menu. It only reads No calendar host selected without any other choices. It should show me icalxserve.domain.com.
    When I goto http://icalxserve.domain.com site I get the default homepage and webmail works. If I click on the Groups button I see the 2 groups I have enabled services for. But when I click on the groupname I get the following error page:
    Not Found
    404: No group with that name (thomas) hosted on this server
    Not sure what to do next. OD doesn't seem to be working like I would expect. Any advice would be greatly appreciated.
    Thanks in advance.
    Please note I am posting this late on Sunday night and have jury duty tomorrow. I will obviously try to check back as soon as I can but maybe not until Monday night. Thanks again.

    Hi
    +"I don't see this option. Am I doing doing something wrong?"+
    Your Rider seems to indicate 10.6? If you're not seeing this option in WorkGroup Manager I'm guessing you're using 10.6 Server? In which case you've posted in the wrong forum with a question that's not applicable anymore. Apple removed those options in 10.6. Another possibility is you're trying to manage a 10.5 Server using 10.6 Server Admin Tools and it's giving unpredictable results? The Server Administration Applications cab behave oddly if you're trying use a newer version on an older server. You should use the version of the Tools that came with the Server.
    The 10.6 iCal Server Admin Manual is here:
    http://manuals.info.apple.com/enUS/iCalServerv10.6.pdf
    Tony

  • ASA enable authentication for AD user by ACS TACACS fails

    In order to authorize command on ASA8.x for different users, I have to put 'aaa authentication enable console TACACS' into ASA configuration, and in ACS - user setup - TACACS+ enable password - Use separate password, I set an enable password.
    It works fine for ACS local users, they are able to get into priv EXEC mode by entering 'enable' command and use my pre-set password, however, the password doesn't work for AD user.
    So, how to setup enable authorization for AD user?
    Or is there a way to drop a user directly into level 15 on ASA just like it on router?
    below is the debug info.(I'm sure the password is the one I set in ACS)
    LABASA1(config)# AAA API: In aaa_open
    AAA session opened: handle = 884
    AAA API: In aaa_process_async
    aaa_process_async: sending AAA_MSG_PROCESS
    AAA task: aaa_process_msg(d45bd5c8) received message type 0
    AAA FSM: In AAA_StartAAATransaction
    AAA FSM: In AAA_InitTransaction
    Initiating authentication to primary server (Svr Grp: TACACS)
    AAA FSM: In AAA_BindServer
    AAA_BindServer: Using server: 192.168.1.221
    AAA FSM: In AAA_SendMsg
    User: fostco\user1
    Resp:
    callback_aaa_task: status = -1, msg =
    AAA FSM: In aaa_backend_callback
    aaa_backend_callback: Handle = 884, pAcb = d5b193e0
    aaa_backend_callback: Error:
    Incorrect password.
    AAA task: aaa_process_msg(d45bd5c8) received message type 1
    AAA FSM: In AAA_ProcSvrResp
    Back End response:
    Authentication Status: -1 (REJECT)
    AAA FSM: In AAA_NextFunction
    AAA_NextFunction: i_fsm_state = IFSM_PRIM_AUTHENTICATE, auth_status = REJECT
    AAA_NextFunction: authen svr = TACACS, author svr = <none>, user pol = , tunn pol =
    AAA_NextFunction: New i_fsm_state = IFSM_DONE,
    AAA FSM: In AAA_ProcessFinal
    AAA FSM: In AAA_Callback
    user attributes:
    None
    user policy attributes:
    None
    tunnel policy attributes:
    None
    Auth Status = REJECT
    aaai_internal_cb: handle is 884, pAcb is d5b193e0, pAcb->tq.tqh_first is d441d1d8
    AAA API: In aaa_close
    AAA task: aaa_process_msg(d45bd5c8) received message type 3
    In aaai_close_session (884)

    I have run into a similar situation. I just want to authenticate via TACACS to enable mode in an ssh session. After using the "aaa authentication enable console TACACS LOCAL" command on the ASA, the ACS server rejects the password.
    I have tried everything I can think of on the ACS as far as "TACACS+ enable password" using both a windows database or a separate password, and PIX/ASA command sets. I cannot go into enable mode unless I set the ASA to LOCAL authentication, which just uses the globally defined enable password.

  • Unix command to stop Software updates for all users except admins?

    I want to stop App Store and other software updates for all user accounts. Administrator accounts should still be able to do Software Updates.
    Is there a terminal command that can do that i can push out through ARD?
    Thanks

    Managed preferences are the best bet. You could use Profile Manager or use the mcx command from the command line. I'd strongly suggest browsing over this before delving into MCX though...
    http://macadmins.psu.edu/2011presentations/PSUMAC301-MCX-John_DeTroye.pdf
    (the Workgroup Manager application shown is deprecated, but it's essentially the same with Profiles and running MCX from the command line)

  • Can't enable calendaring for some users in WGM

    10.5.6 server
    OD set up and working fine
    I'm trying to get going with iCal server for the first time
    The 3 accounts that I initially enabled for calendaring seem to work fine, but now I can't add any more. If I enable calendaring for a user in WGM and save the record, if I go to another record and then back to the one I changed, I see that calendaring is disabled for that user.
    It continues to work for the initial 3 users.
    iCal server error log did have some messages about "Record disabled due to conflict: <OpenDirectoryRecord..........."
    I read on another post that this indicates a problem with duplicate UIDs/GIDs
    I found one each UID ad GID that were both duplicated in local and LDAP records, so I changed those in WGM. On top of that I found that groups "Open Director Users" and "Open Directory Administrators" had the same GIDs in both local and LDAP domains, but guessed that I had better leave these alone. There are no other duplicate UIDs or GIDs.
    Stop and start iCal server.
    Problem remains.
    Any ideas please?
    Many thanks......

    Dear All,
    I have the same problem, i can't active the 'web calendaring' for groups and for users, the checkbox 'enable calendaring' don't stay checked if i close and open the workgroup manager...
    Someone has a solution?

  • Adobe Brings Retina Display Support To Photoshop And Illustrator CS6  As A Free Update For All Users

    Adobe Brings Retina Display Support To Photoshop And Illustrator CS6
    As A Free Update For All Users..... if this is TRUE then how Do I get it. My CS is HORRIBLE visually. Does ANYONE know anything encouraging about this issue with Adobe CS and Retina Display???

    As pointed out by John T Smith, you should post the questions in the correct forums to get swift replies.  However, yes Adobe has made its promise good and the blog to that effect is here:
    <http://blogs.adobe.com/jkost/2013/01/retina-display-support-and-photoshop-cs6.html>
    Good luck.

  • OCS 2007 Enabling Federation for all users globally

    I've set up federation in OCS 2007 and it's working. The problem now is I need to make enable it en mass for my users.
    I've searched all properties and can't find where I enable it for all users. The setting I'm looking for is equivalent to going in the users properties > Other Settings [configure] > and checking Enable Federation and Enable Remote access.
    I'd hate to go through 300+ users to check this. Does anyone know where I can set this globally?
    Thanks.

    What are the odds of that...answered my own question.
    I right clicked the users folder > configure users and it walked me through checking those options.
    Hope it saves someone some time :)

  • NNA (notification enabler) update for nokia x2-02

    sir please provide NNA (Notification enabler) update for nokia x2-02 so i can use apps like wechat, whatsapp, line etc. Thanks in advance

    Sorry to say folks, but X2-02 is a slightly older model already and it's highly unlike that it would receive an update like this.
    http://www.microsoft.com/en/mobile/nokia-x-updates/
    http://www.microsoft.com/en/mobile/nokia-x2-update/
    http://www.microsoft.com/en/mobile/asha-software-update/
    http://www.microsoft.com/en/mobile/support/software-update/wp8-software-update/
    http://www.developer.nokia.com/Community/Wiki/Nokia_firmware_change_logs
    https://twitter.com/LumiaSWUpdates

  • Cannot enable "Updates for other Microsoft products" on WSUS client

    i cannot enable the checkbox "Give me updates for other Microsoft products when I update Windows" ("Microsoft update" instead of "Windows update").  If I enable it and press ok, the GUI stalls a bit and the check is removed.
    Installing updates from the wsus server works. The client is a 2012 R2 install. 
    From Windows updatelogs, it is clear the client attempt to connect to <HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/6.3.9600.0/0?CH=521&L=en-US&P=&PT=0x7&WUA=7.9.9600.17404> when I try to enable
    Microsoft update
    This is not allowed by firewall/proxy, so this obviously fails.This server is located in a secured vlan and should not have access to internet in any way. I suppose client should fetch the .cab from wsus?
    2014-12-17 14:44:45:376 836 137c AU ########### AU: Setting new AU options ###########
    2014-12-17 14:44:45:376 836 137c AU # Policy changed, AU refresh required = No
    2014-12-17 14:44:45:376 836 137c AU # Policy Driven Provider: https://wsusserver.mydomain.tld
    2014-12-17 14:44:45:376 836 137c AU # Detection frequency: 4
    2014-12-17 14:44:45:376 836 137c AU # Approval type: Pre-install notify (Policy)
    2014-12-17 14:44:45:376 836 137c AU # Auto-install minor updates: No (Policy)
    2014-12-17 14:44:45:376 836 137c AU AU settings changed through User Preference.
    2014-12-17 14:44:45:376 836 137c AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2014-12-17 14:44:45:376 836 137c AU WARNING: Failed to get Network Cost info from NLM, assuming network is NOT metered, error = 0x80240037
    2014-12-17 14:44:45:392 836 137c SLS Retrieving SLS response from server...
    2014-12-17 14:44:45:392 836 137c SLS Making request with URL HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/6.3.9600.0/0?CH=521&L=en-US&P=&PT=0x7&WUA=7.9.9600.17404
    2014-12-17 14:45:07:267 836 137c Misc WARNING: Send failed with hr = 80072ee2.
    2014-12-17 14:45:07:267 836 137c Misc WARNING: Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes used : <None>
    2014-12-17 14:45:07:267 836 137c Misc WARNING: Send request failed, hr:0x80072ee2
    2014-12-17 14:45:07:267 836 137c Misc WARNING: WinHttp: SendRequestUsingProxy failed for <HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/6.3.9600.0/0?CH=521&L=en-US&P=&PT=0x7&WUA=7.9.9600.17404>. error 0x80072ee2
    2014-12-17 14:45:07:267 836 137c Misc WARNING: WinHttp: SendRequestToServerForFileInformation MakeRequest failed. error 0x80072ee2
    2014-12-17 14:45:07:267 836 137c Misc WARNING: WinHttp: SendRequestToServerForFileInformation failed with 0x80072ee2
    2014-12-17 14:45:07:267 836 137c Misc WARNING: WinHttp: ShouldFileBeDownloaded failed with 0x80072ee2
    2014-12-17 14:45:07:267 836 137c SLS FATAL: SLS:CSLSDownloader::GetUrlContent: DoFileDownload failed with 0x80072ee2
    I can set the cab path myself if I use
    vbscript to register the microsoft update service, but I don't know which cab url I should use for this. 
    I've used the same install image before, but I think all servers had access to internet (via proxy) when doing the first windowsupdate. this is no longer allowed. the image is an MDT installation image that attempt to enable the Microsoft update setting
    with vbs as described in link above.
    Please advice how to resolve this issue. 
    MCP/MCSA/MCTS/MCITP

    I was not aware if that, thanks! Is this documented somewhere?
    Well, no, not really. Presumably there is no need to do so. The two environments use completely different classification methodologies which have almost zero relationship to one another.
    The issue is this is checked for in the server security audit, all servers have this setting, but this one hasn't. I will need to be able to motivate/proof this point to our security department.
    I would say your security department maybe needs to do some of their own self-education on how Microsoft's patch management system has worked for the past twenty years, and more recently, how it has worked with SUS/WSUS for the past eleven years. This is not
    new stuff! :-)
    Also odd is that on this server I only have one service in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RequestedAppCategories.
    Don't really know much about what's in the ~\CurrentVersion\WindowsUpdate key either as it's also irrelevant to the WSUS environment.
    Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
    SolarWinds Head Geek
    Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
    My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
    http://www.solarwinds.com/gotmicrosoft
    The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

  • App updates for multiple users on same Mac with maverick

    Background.  I have a single iMac that I have been using since ~2007. It's a family computer and there are three(3) accounts/users on it.  I am the administrator for them.  The operating system has been kept up with each OS upgrade since its purchase.  We are currently using Maverick.
    Problem - In the past with all the other operating systems (pre-Maverick), when a application needed to be upgraded I could log into my account (administrator rights) and perform the necessary upgrade and it would propgate to ALL the users on this computer.  However, since upgrading to Maverick I can no longer just upgrade on the administrators account (i.e. mine) and it propogate to the other users.  I now have to log into each individual account (i.e my wifes and sons) and perform the upgrades to their account.
    Question - Does anyone know if there is a way to allow the administrator to perform the single upgrade that propogates to others users in OS Maverick without having to log into each individual accounts and updating each account separately.  Also does anyone know why OS Maverick no longer supports the capability like ALL previous OS's have in the past? 
    Thanks

    Ok thanks.  The apps that I'm referring to are: Pages, keynote, numbers, iMovie, and iPhoto.  Each of these were originally purchased or came (iLife / iWork) with the machine when I purchased it.  All of those apps are located for each user under HD/Applications folder.  Each user does have a apple iD for itunes and itunes purchases for songs etc. but all applications are purchased by me the administrator and placed in the HD/Applications folder.  So I'm not sure why I now (since upgrading) to Maverick need to go into each account and perform the updates to these apps.  All previous OS updates never had this problem. 
    Does this now mean for each user that I perform the update my HD is getting multiple downloads and installs and increasing the amount of usage per application.  For example if "pages" takes 1 Gb and I install it for each user will it now take a total of 3Gb for the 3 users?
    Thanks for your help

  • We use a national system that requires Firefox 3.6.25, I am trying to find a way to silently install it with a "no update" for all users switch

    /s does not work for silent either, will try -ms

    [http://www.mozilla.org/en-US/firefox/all-older.html Firefox 3.6.28] was the last security update for the the ancient 3.6 not the older 3.6.25.
    You could try using [https://addons.mozilla.org/en-US/firefox/addon/user-agent-switcher/ useragent switcher] to change the UA to the old 3.6.* or even do a manual override by setting '''general.useragent.override''' in '''about:config''' as a '''string''' and say the old 3.6.25 UA to fool site while being up to date security wise and not be [http://www.mozilla.org/security/known-vulnerabilities vulnerable] as 3.6.28 even is rather behind.

  • Download same software update for each user account? is this right?

    i am sorry if this is the wrong place, i have looked all over these discussions for help and help is what i need. i downloaded the iphone 3.0 software update on one user account and installed it. then i logged into another user account on the same imac so i could apply that 3.0 update to another iphone and it made me re-download the entire update? is that normal for each individual user to have to download the exact same update separately? it seems like such a waste of time to download the same update two times.
    20" imac with tiger 10.4.11

    Hi,
    Not sure o the iPhone SW, but much Software has an option to install for all Users or just one... if running from an Admin account.

  • AT1S0 - ICS Update for Australian users - When?

    Hi, do we have any estimate for ICS update for Toshiba Thrive mini AT1S0 7"???
    USA users already got it, what is about Australia? Thanks in advance.

    What build number do you have installed?
    Also what PDAxxx-xxxxxx model number do you see in Service Station?
    I needed to install the small Honeycomb update to build number v3.2.1.33.5.0002 through Service Station, then the ICS update appeared afterwards after checking for Service Station updates again.
    Make sure you have a direct internet connection, I don't think service station works through a proxy.

  • Enable Notification for any users scheduling reports

    Hi all!
    How can I enable the "Notification" option for any user allowed to schedule a report within BOXI R 3.1 FP 1.7.
    As administrator, the option is available within the scheduling.
    As normal user I don't have any notification option visible. I can only send reports or messages as email.
    Thanks for any hints,
    ciao Hakan

    Hi all!
    How can I enable the "Notification" option for any user allowed to schedule a report within BOXI R 3.1 FP 1.7.
    As administrator, the option is available within the scheduling.
    As normal user I don't have any notification option visible. I can only send reports or messages as email.
    Thanks for any hints,
    ciao Hakan

Maybe you are looking for