Enabling users and automatic provisioning

Hello,
I have a problem with automatic provisioning.
In our context, here is what we want to do :
- A user has a Start Date
- Once this user has reached this date, the scheduled task "Enable User After Start Date" enables him in OIM
- This activation gives a role to him
- Having this role starts the provisioning of AD and Exchange resources
And here is the problem we have :
- The user was supposed to start today
- The scheduled task ran at 2 AM and enabled him successfully
- He had the role
- But no resource provisioning started
Do you have any clue on why it happened and how to solve it ?
Thank you for your help !

Hi,
If the user having the role assigned.
Check currosponding rule is active or not. It should active
If it is active than,
Check are you able to do access policy based provisioning via UI or not?
Thanks,
Kuldeep

Similar Messages

Enable users and schedule a lync meeting via a webapplication

dear
my question is that i have a web service joined into my domain and then we have an exchange server and recently add lync server 2013(and edg server and sql)
i want register external users(browsing user) in lync server and
trying to schedule a lync conference . After creating the conference I send the ConferenceUri to the users and let them join the conference
first i add users into ldap and then enable exchange email for them (by my web ) and now i want enable them in lync and create schedule a lync meeting
the problem is that i dont know which way is usefull for me? lync sdk , ucma 4 , ucwa , powershell , ...
but all of this ways need an Installed lync server in developing machine .right?
my web service is none hosted lync installed. please help my(in other word i want try that:
http://stackoverflow.com/questions/21019286/schedule-a-lync-conference-with-ucma-3-0
. how do that?

Hi,
From your description, did you mean you have install Exchange Server and Lync Server 2013 (including Edge server) successfully?
If you have deploy Exchange Server and Lync Server 2013 in the same domain, you should use user’s email address as your Lync account. They will be integrated already. You can just create a schedule Lync meeting on Outlook and send to who you want to invite
to the meeting. If you also want external users to download meeting content for your meetings you also need to deploy a Reverse Proxy in DMZ zone. If the external users don’t have a Lync account, they can also join the meeting as a guest.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Bulk SIP-Enable User Mailboxes with Parameters

Currently, we have 400+ users on the network. Our requirement is to bulk sip enable in Lync 2013 and also add them to the policies (all staff have the same policies)..
Have a CSV output with Display Name / Alias (Exported all User Mailboxes) and need to SIP enable the accounts with the below policies:
Assign users to pool 'pr-pool'
Telephony 'PC-to-PC only'
Conferencing Policy 'Allow audio and video'
External Access Policy 'User'
I am testing my patience with powershell.. Need some help!!

Take a look at Kenneth Peet's Lync Bulk User Enablement Tool: http://gallery.technet.microsoft.com/office/Lync-Bulk-User-Enablement-b60d1990
or
http://gallery.technet.microsoft.com/office/Script-to-Enable-Users-and-f56306ed
Please mark posts as answers/helpful if it answers your question.
Blog
Lync Validator - Used to assist in the validation and documentation of Lync Server 2013.

Enable User is not working for Provisioning

Hi,
I am trying to provision enable user to target system. For that, in my process definition, I have a task "Enable User" added with Task Effect as "Enables Process Or Access To Application" with Conditional, Required for Completion, Allow Cancellation while Pending, and Allow Multiple Instances selected. But somehow it's not working. I have checked, system property XL.EnableDisabledResources is set to TRUE. Can you please help me with this.
As an alternative solution, I have also tried adding "USR_STATUS" or "USR_DISABLED" code under Lookup.USR_PROCESS_TRIGGERS and having a task and having a task added in my process definition with same name as meaning of this code. But those are also not working. This is exactly like Change First Name meaning under Lookup.USR_PROCESS_TRIGGERS. So, I hoped change in USR_STATUS or USR_DISABLED will trigger my task, but no luck :-(
Can anybody please help with this? I have also read some that Enable User has some issues in OIM 11g R2. If that is the case, what's my alternatives?
BTW, scheduled job "Evaluate User Policies" is also enabled and running successful every 10 minutes.
Thanks,
Ashish

Hi Have you get to know what was cause of this issue yet? If yes, can you share of what have you found?
Thanks

Automatically provision users in OCS 10g - where are the -p switches?

Hi,
in the past we used a bunch of scripts to automatically provision services to our nes OCS users. In OCS 9.0.4 (R2) we used the uniuser and unidsdiff commands for this.
As it seems that Oracle has left these switches behind in the new binaries in the OCS 10g, I wonder if anybody has found a possibility to provision OCS services to users without using either the provisioning console or having to enter a admin pw in the terminal?
This is more than bad, since I think that many customers of either the OCS 9.0.4.2 and stand alone calendars have been using this method for auto-provisioning and now Oracle has cut off this connectivity.
In case anybody knows a other way around I would be very interested it that.
Regards,
Stephan

Thanks Martin for replying.
What I understood is Attach a task which will check if resource X is provisioned or not, if not provisioned then initiate provisioning of ResX.
I think even in this case also , if we are trying to provision userA simultaneously Res1 & Res2 , after successful provisioning both resources, will trigger the task to check if ResX is provisioned or not , it will return false and both resource will trigger auto provisioning of ResX. Anyway I will try this option and update.
How can I use database lock to avoid race condition in OIM?Database it self will not allow creation of same user twice(violate unique constraint).

How to do automate provisioning and deprovisioning

Hi,
I am a student and doing the final year project in sunidm. can anyone tell me how to automate provisioning and deprovisioning in sunidm.
thanks

You need to identity all your possible actions that could occur for this object. Create, Enable, Disable, Revoke, What fields do you plan to update? Now write a connection code using an IT Resource for input paramters, and then code your actions. Create the process tasks for each, and attach your adapters, and map your variables.
-Kevin

Provisioned user in exchange from OIM created as Mail Enabled User

Hi,
I have provisioned a user from OIM to exchange and the user is created as MAIL ENABLED RECEPIENT in the exchange instead of MAIL BOX ENABLED RECEPIENT .The difference between both is like the MAIL BOX ENABLED user will be having a seperate button(MAILBOX RIGHTS) in the exchange advanced tab and also he has exchange features tab.
Is there any field in OIM which differentiates both MAIL ENABLED and MAIL BOX Enabled user.
When i see the tabs of the MAIL ENABLED USER in the exchange i'm able to see just alias fields in one of the tabs but the MAIL BOX ENABLED user is having even the mail store field.
When i googled for the difference between MAIL BOX enabled and MAIL Enabled i could see like the user created directly with exchange is getting MAIL BOX enabled and any third party user or different domain user wont get this MAIL BOX enabled instead he will be MAIL ENABLED
I want the user to be MAIL BOX enabled when he is provisioned from OIM.
Please update if any one has come across this type of issue.

hi Rajiv,
thanks...
i have run the AD Organisation lookup Recon and have given the following parameters
Lookup Search Filter:     (|(objectclass=OrganizationalUnit)(objectclass=container))
Search Base:     DC=<domain_name2>,DC=<domain_name1>,DC=com
Recon Type:     Update
IT Resource Name:     ADITResource
AttrName For Decode Value In Lookup:     distinguishedName
AttrName For Code Value In Lookup:     distinguishedName
Lookup Code Name:     Lookup.ADReconciliation.Organization
Configuration Lookup:     Lookup.AD.Configuration
But still theres no value for Organisation Lookup in process form for provisioning the user. what could be the cause for the same?
Also i was testing if the connector is installed properly by using the testing utility. i used the following command to run it : . runADtest.sh 2
But i got the following error.
Exception in thread "Main Thread" java.lang.NoClassDefFoundError: com/thortech/xl/integration/ActiveDirectory/test/ADTestClient
Caused by: java.lang.ClassNotFoundException: com.thortech.xl.integration.ActiveDirectory.test.ADTestClient
at java.net.URLClassLoader$1.run(URLClassLoader.java:202)
at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
Could not find the main class: com.thortech.xl.integration.ActiveDirectory.test.ADTestClient. Program will exit.
Please help me for this also.
Edited by: 827805 on Feb 9, 2011 4:11 AM

User and Group Security Provisioning

Hi,
I have a question regarding Group security in Planning. I am using EPM system 11. My basic question is, if I create a new Planning user (interactive user with no default access to dimensions), and assign that user to a Planning group, does the user automatically inherit all the dimension access assigned to that Group? From my experience, it seems that I must explicitly assign each User access to the dimensions they should be able to Read or Write, and that simply adding them to a group that has been given Write access to the Expense Account (for example) does not give a newly added user to that Group Write access.
A quick note - when creating new Users, I first create and provision them in Shared Services. However, in order to be able to log in with them, I must recreate the user in EAS's User Directory. This seems redundant to make a user twice, but is the only way I am able to successful login with new users, otherwise the Planning login page says "failed to sync with user provisioning". I have not done this same procedure for the Groups I have created (i.e. I have made and provisioned the Groups in Shared Services, but not recreated them in EAS). Is it possible that this is why Users aren't inherittiing the access rights of the Group? I can provide more information if needed, any help or comments are appreciated. Thanks in advance.

user3x3 wrote:
1) EAS method is to open EAS, then open the Essbase Server Node, right-click on security, and click Externalize Users. When I do this there is no right-click option to externalize the users, and since it can only be done once and then not reversed I assume the previous administrator already did this. Since this is not availalbe, I must use the second method.
If you log in with an administrator account you should see the "Externalize Users" option even if you have already externalized.
I take it you did not configure your system, I take it was documented so you could have a look how it was configured.
If essbase is on a different server than shared services then maybe the essbase server was not registered with the shared services registry when it was configured, that might the reason why you are getting the shared services error when you try to convert to shared services security, basically it doesn't know where shared services is. If that is the case then it will need to be configured again.
Cheers
John
http://john-goodwin.blogspot.com/

Unable to enable security and create admin user after reset - px4-300d

Our px4-300d became inaccessible a few days ago. I couldn't get to any shares from any machine, and I couldn't get to the admin console. When I checked the unit, there was no indication that anything was wrong (ie - the panel didn't show any failure, I didn't get any emails indicating a failure, and there were no lights offering a clue to what was wrong). However the unit was completely frozen...the buttons on the front would not scroll through the different information on the panel.
I attempted to reset the device using the pinhole on the back, but the device wouldn't respond, so I had to power it down using the button on the front. When I tried to power it back up, it would come on for about one second, then immediately power off. I pulled all 4 drives out and powered it on again without any drives. This time it came up completely and I got a message on the panel that drives were missing. I started putting the drives in one at a time and the device recognized them all and I was able to login to the admin console. However, all the shares were missing and I received an email that the Storage Pool was degraded. I rebooted the device from the admin console and when it came back up, it started reconstruction. After a few hours, it completed, but I still had no shares and couldn't create any new shares. I also did not see any of my users, including the admin account I was logged in with. I tried to create a new user, and also tried creating a user I knew existed and neither one worked. The screen would just flash but nothing would show up. At this point, I decided to try to reset using the pinhole on the back of the device to reset the admin user so I could just create a new one. So, now I'm stuck at the 'Enable Security' screen. Every time I try to create an admin account, it just flashes and returns me to the same 'Enable Security' window.
Now what?
Solved!
Go to Solution.

If you are unable to get into it you will not be able to do the factory reset. You can try booting in buy removing one disk at a time. If you are still unable to then tech support should be able to supply you with the imager and try flashing it. I would keep it at 4.0.8 also,

Hi I do not want iTunes to open up automatically when I turn on my macbook pro. I tried going to System Preferences Users and Groups Login Items and then I took iTunes off the list but it still opens up automatically when I turn on my laptop.

Hi I do not want iTunes to open up automatically when I turn on my macbook pro. I tried going to System Preferences>Users and Groups>Login Items and then I took iTunes off the list but it still opens up automatically when I turn on my laptop. What should I do?

Hi r,
Make sure you close iTunes before shutdown. And you're quite welcome.

I am trying to stop programs from opening automatically when I turn my computer on. I tried system preferences users and groups login items...then I deleted them from the list but it did nothing.

I am trying to stop programs from opening automatically when I turn my computer on. I tried system preferences>users and groups>login items...then I deleted them itunes and emial from the list but it did nothing. They continue to open up every time I turn on my Macbook Pro.

Hi r,
It sounds like you're running Lion?
Have you tried running Verify and/or Repair Disk?
Have you tried running Repair Permissions?
Do you have at least 15% free space available on your HD?

How do I go about setting up my new wireless all-in-one Epson XP-215 printer to my MacBook Pro? The system is not automatically detecting the printer ad the furthest I get is "System" keychain user and pswd but I am a new user to Mac.

I am a new user to Mac and trying to set up an Epson XP-215 All-in-One printer without any success. The Mac Book Pro is not recogising the Printer automatically and when following the instructions to add the printer, it gets as far as a display box for teh user and password for "System" Keychain but I am not sure what info to add there...
The printer is meant to have a function calle dAir Print also that is meant to be used for Mac but I cannot figure out any of this! Why would the MacBook Pro not automatically pic up the printer? Please help...

If you have not already done so, you should read the user manual that came w/the printer and/or contact Epson tech support.
Check out the following KB Articles:
http://support.apple.com/kb/PH14141 OS X Mavericks: Reset the printing system
http://support.apple.com/kb/HT3669 Printer and scanner software available for download
Also check out What to do when you can't print

I upgraded to mountain lion a week ago and now on startup of my macbook pro, microsoft excel and word start up automatically and then crash? very strange can anyone please help? I have checked the login items under users and groups and there is nothing.

I upgraded to mountain lion a week ago and now on startup of my macbook pro, microsoft excel and word start up automatically and then crash? very strange can anyone please help? I have checked the login items under users and groups and there is nothing.

Are you using the Office for Mac 2011 version, as you need to do? The Office for Mac 2004 is Not at all compatible with Mountain Lion, and the 2008 version has been noted to have some problems running with ML.
Hope this helps

Upgrading to Acrobat Pro XI / Adobe Reader XI and enabling user rights

My company is a little behind on software updates and I'm going to ask for Adobe Reader XI to pushed out company wide since allows the user to save a filled-in PDF form.
Right now I'm using Acrobat Pro X, and suspect I will need to upgrade as well.
My questions are:
With the new-found ability of Reader to finally be able to save a filled in form, how does this effect the "enabling user rights" scenario?
Is it needed if the entire company is using Adobe Reader XI?
I did a test in Adobe Reader XI, and sure enough, I was able to save a filled-in form...BUT, I could not digitally sign the form.
Is this where the enabling user rights is still mandatory?
Or is this because the form was designed in Acrobat Pro X?
Does Acrobat Pro XI work around this?
I know I don't need to upgrade to Acrobat Pro XI to continue making forms, but should I?
Thanks for your feed back, and I look forward to reading your replies

Thank you, George, for the prompt reply!
I suspected as much, but couldn't find a clear cut answer in my searches.
The tab order update alone has convinced me its worth pushing for the new Acrobat Pro XI.
The update to Adobe Reader XI will make many of our forms easier to get into the digital workflow, and I'm looking forward to getting use further away from a paper-based system

Acrobat 8 Form - "This Operation Not Permitted" error when enable user rights and open Reader X

I have a form which is causing me fits. It was created from an existing PDF form to which I added data fields using LifeCyele Designer.
When I enable user rights to the document and try to open it in either Adobe Reader X or Acrobat 8 Pro I get the message "This operation is not permitted" twice. Once I get rid of the messages the form works fine.
Is there a way to upload the form to this forum for someone to look at it?
With my limited knowledge, I did try to investigate embeded font issues and hidden object issues. But after much work I've not gotten much closer to a resolution.
Best,
David

You cannot upload the file to the forum, but you can use Acrobat.com or Dropbox if you have an account. If you ha e no other options I'd be happy to take a look: acroscript at gmail dot com

Enabling users and automatic provisioning

Similar Messages

Maybe you are looking for