ESSO: OIM 11g R2 PG Integration: Passlogix Add Credential Task Failed

We are getting the below error in the logs :
Sending command Instruction to Web Service.(current retrycount==0) From maximum set as Retry=0
com.passlogix.vgo.pm.exceptions.PMCLIException: None of known servers is up. Failed to send an operation!
Running GETADPROCESSFORMDATA
Running GETADITRESOURCEKEY
Running MAPCRITERIAFORADITRESOURCE
Target Class = com.thortech.xl.util.adapters.tcUtilHashTableOperations
Running GETADITRESOURCEINSTANCES
Running GETADITRESOURCENAME
Running ADDCREDENTIALSONE
Target Class = com.passlogix.integration.provision.OIM.OIMInterface
Processing addPasslogixCredential request
The configuration file name provided as input argument is C:\\config\\PMClientConfiguration.properties
s
Closing property file C:\config\classloader.properties
The value of MW_HOME is E:\Oracle\MIDDLE~1
URL List[file:/E:/Oracle/MIDDLE~1/Oracle_IDM1/server/ThirdParty/jaxrpc.jar, file:/E:/Oracle/MIDDLE~1/Oracle_IDM1/server/ThirdParty/axis-1.2.1.jar, file:/E:/Oracle/MIDDLE~1/Oracle_IDM1/server/ThirdParty/commons-discovery-0.2.jar, file:/E:/Oracle/MIDDLE~1/Oracle_IDM1/server/ThirdParty/xmlsec-1.3.0.jar, file:/E:/Oracle/MIDDLE~1/Oracle_IDM1/server/ThirdParty/wss4j.jar, file:/E:/Oracle/MIDDLE~1/Oracle_IDM1/server/ThirdParty/PMCLI.jar, file:/E:/Oracle/MIDDLE~1/Oracle_IDM1/server/ThirdParty/PasslogixConnector.jar, file:/E:/Oracle/MIDDLE~1/Oracle_IDM1/server/ThirdParty/commons-logging-1.0.4.jar, file:/E:/Oracle/MIDDLE~1/Oracle_IDM1/server/ThirdParty/log4j-1.2.9.jar, file:/E:/Oracle/MIDDLE~1/Oracle_IDM1/server/ThirdParty/mail.jar, file:/E:/Oracle/MIDDLE~1/Oracle_IDM1/server/ThirdParty/wsdl4j-1.5.1.jar, file:/E:/Oracle/MIDDLE~1/Oracle_IDM1/server/ThirdParty/opensaml-1.0.1.jar, file:/E:/Oracle/MIDDLE~1/Oracle_IDM1/server/ThirdParty/bcprov-jdk13-128.jar]
System Class loader sun.misc.Launcher$AppClassLoader@bf3be8
Context Class loader is weblogic.utils.classloaders.GenericClassLoader@25b062b finder: weblogic.utils.classloaders.CodeGenClassFinder@897681 annotation: oim#11.1.2.0.0@
javax.xml.namespace.QName = parent,child
root = child,parent
oracle.xml.jaxp.JXSAXTransformerFactory = com.sun.org.apache.xalan.internal.xsltc.trax.TransformerFactoryImpl
oracle.xml.jaxp.JXSAXParserFactory = com.sun.org.apache.xerces.internal.jaxp.SAXParserFactoryImpl
oracle.xml.jaxp.JXDocumentBuilderFactory = com.sun.org.apache.xerces.internal.jaxp.DocumentBuilderFactoryImpl
the url is http://172.16.200.41/v-GO PM Service/UP.asmx
Initializing APICommandInvoker with params service URL : http://172.16.200.41/v-GO PM Service/UP.asmx,service User Name : PMSERVICE,service user password : <*****>,service client name : <Provisioning Agent>,<null>
The URL delimiter is : ;
The Service URL is : [Ljava.lang.String;@5663ff4
Unable to load class org.apache.axis.i18n.resource
Unable to load class org.apache.axis.i18n.resource_en
Unable to load class org.apache.axis.i18n.resource_en_US
Unable to load class org.apache.axis.resource
Unable to load class org.apache.axis.resource_en
Unable to load class org.apache.axis.resource_en_US
Unable to load class org.apache.axis.utils.resource
Unable to load class org.apache.axis.utils.resource_en
Unable to load class org.apache.axis.utils.resource_en_US
Unable to load class org.apache.axis.types.NotationBeanInfo
Unable to load class org.apache.axis.types.NotationBeanInfo
Unable to load class java.lang.ObjectBeanInfo
Unable to load class org.apache.axis.types.SchemaBeanInfo
Unable to load class org.apache.axis.types.SchemaBeanInfo
Initialized APICommandInvoker
Setting up com.passlogix.integration.provision.client.apicommand.APICommandInvoker
Starting the com.passlogix.integration.provision.client.apicommand.APICommandInvoker
Completed the setup of com.passlogix.integration.provision.client.apicommand.APICommandInvoker
Command Invoker located as com.passlogix.integration.provision.client.apicommand.APICommandInvoker
Read the component for 7 as null
The initialization of the Provisioning Manager Client was successful.
Invoking the command add_credential with parameters {sso_userid=TPG14.G14, sso_app_userid=TPG14.G14, sso_application=AD_Auth_Apps, sso_password=********}
Invoking APICommandInvoker.
Invoking command add_credential
Populating arguments for command add_credential
Returning 'operation' for command add_credential
No Execution time provided.
Default Execution Time set to 'NOW'.
Sending command Instruction to Web Service with Retrycount=0
Unable to load class org/apache/xml/security/resource/xmlsecurity
Unable to load class org/apache/xml/security/resource/xmlsecurity_en
Unable to load class org/apache/xml/security/resource/xmlsecurity_en_US
Unable to load class javax.xml.namespace.QNameBeanInfo
Unable to load class java.lang.StringBeanInfo
Sending command Instruction to Web Service.(current retrycount==0) From maximum set as Retry=0
com.passlogix.vgo.pm.exceptions.PMCLIException: None of known servers is up. Failed to send an operation!
The add_credential execution failed. Error: Error in Sending instruction from the provisioning manager in API Command None of known servers is up. Failed to send an operation!.
com.passlogix.integration.provision.client.CommandInvocationException: Error in Sending instruction from the provisioning manager in API Command None of known servers is up. Failed to send an operation!
Caused by: com.passlogix.vgo.pm.exceptions.PMCLIException: None of known servers is up. Failed to send an operation!
     at com.passlogix.vgo.pm.cli.ProvisioningConnection.sendInstruction(ProvisioningConnection.java:351)
     at com.passlogix.integration.provision.client.apicommand.APICommand.invoke(APICommand.java:187)
     ... 112 more
Thanks
Darshan

Hello Darshan,
We are strugeling with ESSO-PG integration too, but we don't get any traces yet. So we are not as far as you are, however, as a work around, we had a look at the API to ESSO-PG, to make our own integration. We found out the following:
- in the ESSO-PG media, there is a PMCLI.bat file that can be used to test the API against ESSO-PG webservice.
- using PMCLI.bat, we got the same error message as you, if we use the PMCLI*.jar* file provided in the OIM Connector
- PMCLI.bat works perfectly if we use the PMCLI.jar provided in the ESSO-PG media.
It might be worse for you to try to replace PMCLI.jar with the version coming with ESSO-PG, and see if it works.
It did not work for us (from OIM), but I think we still have some errors in the Connector installation / config files. We have an SR on going. If you have any tips, please let me know.
By the way, which version of the connector are you using? We have 11.1.1.5.
Cheers,
Didier.
Edited by: user4754967 on May 2, 2013 2:30 PM

Similar Messages

ESSO PG Connector Issue in OIM 11G

I setup ESSO Provision Gateway Connector in OIM 11G.
But during "add credential task" I get error:
"*The add_credential execution failed. Error: Error in sending instruction from provisioning manager in Api Command (400) Bad Request. Add Credential Command failed to get invoked*".
In Event Log of the Windows Server 2008 with the Provision Gateway I saw:
"*Unexpected end tag. Line 6, position 1015*", "*server cannot clear headers after http headers have been sent*".
It means a syntax error in xml request of connector to web-service of Provision Gateway.
Wireshark shows me sent xml-request:
"<?xml version="1.0" encoding="UTF-8"?>
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<soapenv:Header>
<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" soapenv:mustUnderstand="1">
<wsse:UsernameToken><wsse:Username>cn=adm,o=petro</wsse:Username><wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">12345678</wsse:Password><wsse:Nonce>QFJ903k1GFWnAoqZ/Npijg==</wsse:Nonce><wsu:Created xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">2010-12-07T11:47:02.502Z</wsu:Created></wsse:UsernameToken></wsse:Security></soapenv:Header><soapenv:Body><AddCredential xmlns="http://passlogix.com/UP/"><strRequest><?xml version = '1.0' encoding = 'UTF-8'?>
<addRequest><attributes><attr name="objectclass"><value>urn.oasis.names.tc:SPML:1:0#GenericString</value></attr><attr name="provisioningAgent"><value>Provisioning Agent</value></attr><attr name="ssoUserId"><value>SGP63234</value></attr><attr name="creationTime"><value>2010-12-07 11:47:02.491Z</value></attr><attr name="executionTime"><value>2010-12-07 11:47:02.490Z</value></attr><attr name="applicationId"><value>SAP</value></attr><attr name="userId"><value>EBELOV</value></attr><attr name="description"><value>SAP</value></attr><attr name="password"><value>Q123</value></attr><attr name="thirdField"><value>888</value></attr></attributes></addRequest></strRequest></AddCredential></soapenv:Body></soapenv:Envelope>*</#document>*"
I saved it to xml-file and opened in Internet Explorer and there was error.
Then I decided to watch the view of this request in OIM 9.1.0.2 to compare with request in OIM 11G.
I found out next one:
the main difference was in last tag "*</#document>*".
I take this tag off from xml-file, taken from request of OIM 11G and saved the file.
Edited xml-file was correct.
Is it error in connector or in OIM 11G?How to solve it?Can anyone help me?

Hi!
I get the same error during Add Credential task with the ESSO PG connector in OIM 11g.....
The add_credential execution failed. Error: Error in Sending instruction from the provisioning manager in API Command (400)Bad Request.
com.passlogix.integration.provision.client.CommandInvocationException: Error in Sending instruction from the provisioning manager in API Command (400)Bad Request
Where I can check the xml file?
You could solve the problem?
Thanks in advance!!!

FlatFile Recon in oim 11g

Hi All,
We have upgraded oim 9.1 to oim 11.1.1.5 then, we are testing one of the reconciliation, which takes the user information from .csv file and creates user in oim repository. Now its giving error due to null value for field USR_EMP_TYPE. As part of oim 11g upgradation, NOT NULL constraint add to that field. So OIm is not able to create user in oim repo.
How can I add this USR_EMP_TYPE to recon field and provide default value as "full-time". I tried to add recon field but could not figure out for mapping (there is no corresponding filed to map) Please suggest me.
Thanks.

Do you mean that you don't want to provide this value from CSV file ?
If yes then
You can remove that field from CSV file.
Open that GTC and add one field say ROLE in "source" by click + button there and give literal value "Full-Time" and map it with OIM Role Field.
You are done !!!

Not able to add groups to the user ODSEE via OIM 11g R2

Hi,
I have created some groups in ODSEE and ran the recon job to sync these groups in OIM 11g R2.
Groups are populated in OIM 11g R2 and while raising the request for ODSEE Application Instance I can see these groups.
Now following are the issues I am facing :
1. ODSEE groups are not getting displayed in Catalog ( I have ran the Entittlement-List job also)
2. When I request for a group while creating the request, the group is not getting assigned to the user in ODSEE, wherein user is getting created in ODSEE successfully.
Please help.
Thanks

Please let me know what could be the reason of not adding the groups to the user in ODSEE.
I was able to add the groups successfully to user by assigning the groups while raising the request in OIM 11g R1.
But the same is not working in OIM 11g R2, if I check the OIM logs it is calling the function ADDUSERTOGROUP but the groups are not getting assigned to user.
Thanks

OIM 11g R2 - API to add organization to an Application Instance

Hi,
In OIM 11g R2,we have a requirement to create application instance using API (from a csv file) and assign some default organizations to these application instance.We could able to create Application Instance but couldnt find any API to add organizations.Is it possible to do thia?.Thanks

One of the ways to do it would be to decrypt the current password and then compare with the new password. Where are you doing this check? Depending upon where you want to do this, you can use different ways to decrypt the current password of the user.
There are various posts in the forum about decryting the password.
On a side note, if your policy does not allow same password, then new password validation against the policy should suffice your requirement.
-Bikash

OIM 11g: Add process tasks as a result of a Request?

Is it possible in OIM 11g to have the result of a Request be that 1 or more process tasks are added to an an account's process?
The out-of-the-box Request framework seems to be very attribute driven (Modify Provisioned Resource, Self Modify Provisioned Resource), and I suppose we could add an attribute to trigger process tasks to be added, however, without going into detail, we'd really just like to be able to add the process task with no process form updates.
Has anyone attempted anything like this?

Sure you can. Create a plugin on the request status:
<plugin pluginclass="com.custom.eventhandlers.request.RequestCompleted" version="1.0" name="RequestCompleted">
<metadata name="status">
<value>Request Completed</value>
</metadata>
</plugin>
In your code, using benEntity.getEntityKey() you can get the "Users-Object Instance For User.Key" value for the instance the request is for. Then search the user's existing instances of that resource object type (findObjects) and match it to the "Users-Object Instance For User.Key" value from the result set. Then get the process instance key. From there you can use this code to get the task details:
Map taskMap = new HashMap();
String taskName = map.get(resourceName);
taskMap.put("Process Definition.Tasks.Task Name",taskName);
tcResultSet rs = taskOper.getTaskDetail(processInstanceKey,taskMap);
long taskKey = rs.getLongValue("Process Definition.Tasks.Key");
And finally this code to insert the task:
provIntf.addProcessTaskInstance(taskKey, processInstanceKey);
And done!
-Kevin

OIM 11G, DSML integration failing with null pointer exception

Hi,
we are facing the similar probelm while sending a request from TIBCO BW to OIM 11G (Which is weblogic)
The below request from TIBCO is not working and thowing a NULL POINTER EXCEPTION
<?xml version="1.0" encoding="UTF-8"?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
<SOAP-ENV:Header>
<ns:OIMUser xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:ns="http://xmlns.oracle.com/OIM/provisioning" xmlns:ns0="http://schemas.xmlsoap.org/soap/envelope/">
<ns:OIMUserId>xelsysadm</ns:OIMUserId>
<ns:OIMUserPassword>Welcome123</ns:OIMUserPassword>
</ns:OIMUser>
</SOAP-ENV:Header>
<SOAP-ENV:Body>
<ns0:processRequest xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:ns0="http://xmlns.oracle.com/OIM/provisioning">
<sOAPElement xmlns="">
<ns:modifyRequest xmlns:ns="urn:oasis:names:tc:SPML:2:0" xmlns:ns0="http://schemas.xmlsoap.org/soap/envelope/" returnData="data">
<ns:psoID ID="Users:21"/>
<ns:modification name="Users.User ID" operation="add">
<ns:value>Richard1</ns:value>
</ns:modification>
</ns:modifyRequest>
</sOAPElement>
</ns0:processRequest>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>
But if we change the <sOAPElement xmlns=""> to <sOAPElement> (removing the empty namespace) we can able to fire this soap.
Could you please let me know are there any patch, workaround for this issue.
Thanks
Madhu

I don't think OIM 11g supports DSML profile and may be that's the reason you are getting NPE.
See: http://docs.oracle.com/cd/E14571_01/doc.1111/e14309/spmlapi.htm#CHDCBJAI
It states:
"SPML has two profiles: the XSD profile and the DSML profile. This release of Oracle Identity Manager makes use of the XSD profile."

How to add custom text in template page - OIM 11g R1

Does anyone let me know how add custom text in one of the 'Request Templates' page - OIM 11G R1. My requirement is to add custom static text in 'Role' selection page.
- Kalyan.

Does anyone let me know how add custom text in one of the 'Request Templates' page - OIM 11G R1. My requirement is to add custom static text in 'Role' selection page.
- Kalyan.

OIM-OAM 11g BP 02 integration not working as expected

Hi Experts,
We have OIM 11g and OAM 11g both upgraded to BP02 installed on separate hosts. We are using OID 11g as the directory servers and OVD 11g fronting OID for integration. We followed the steps mentioned in Oracle Document Oracle® Fusion Middleware Integration Guide for Oracle Access Manager 11g Release 1 (11.1.1)Part Number E15740-04 for integration purpose.
After performing all the integration tasks mentioned in the document, while testing the ingtegration, the expected results are not been serverd.
If I access OIM admin console URL, am getting default OIM admin console URl instead of OAM SSO login page for authencation. and also I am unable to login using either xelsysadm\oimadmin\oamadmin but I can login using weblogic, so this is referin to the default embeded LDAP of weblogic for credential validation.
OIM and OAM are deployed on separate hosts, please find the deployment details below.
1. JDK: 1.6.0_29
2. WLS : 10.3.5
3. LDAP: Oracle Internet Directory: 11.1.1.5.0
Oracle Virtual Directory: 11.1.1.2.0
4. Webserver: Oracle HTTP Server fronting the OIM
The Integration videa on Support.oracle assumes that all components OIM\OAM/OID/OHS being on the same host.
I have my OIM and OAM both patched to the latest BP which is BP 02. There is a support article which specifically talks about few settings ton be made for BP 02.
the article ID is 1447494.1.
Even after doing all these, the integration is not working.
As per the support article, I need to use preferred host name for agent fronting OIM as IAMSuiteAgent and if I do that, the proxying of OIM server with the webserver host will not work at all and ends with 404 not found error when I access using http://OHShost:OHSport/oim.
but if i use the name of agent i.e webserver name in the preferred host field, the redirection would happen and i get OAM SSO login page for authentication, however with the credential validation at this page, the OIM login page (http://OIMhost:OIMport/oim) is provided prompting for login again.
also if i access OIM login page http://OIMhost:OIMport/oim directly, the OAM SSO page is not coming for authentication.
I am awaiting your advice\suggestions or workarounds if any one has come across this kind of issue, which i am sure is an obvious case.
Thanks,
Nagendra

Hi,
Any help in this regard please/
Thanks
Nagendra

OIM 11g integration AutoLogin error (first login or forgot password)

Hi,
We are currently integrating OAM+OIM 11g (R2). We have used a 10g webgate for this.
When the user logs in for the first time, and sets his password and answers the challenge questions, he should be "Auto logged in" when he is finished.
The same scenario should happen, if the user forgot his password, and resets it. He should be "Auto-logged in" when finished.
This is not happending for us.
The OIM logs tells us this:
ERROR: Autologin failed oracle.iam.ui.platform.sso.exception.AutoLoginException: Error occured while retrieving TAP partner key from Credential store
We have tried to verify everything recommended by this Oracle Support article:
How to Solve Autologin problems in OIM with OAM? [ID 1475297.1]
Any ideas what we are missing?
Thanks & Regards,
Henrik

Maybe this is a something?
Whate should the value of the property OAM_SERVER_VERSION be, when running idmConfigTool.sh and using a 10g webgate for the integration?
Chapter 7.6 in the integration documentation states this:
OAM_SERVER_VERSION: 11g (use 10g if Oracle Access Manager 10g is used)
http://docs.oracle.com/cd/E27559_01/integration.1112/e27123/oim.htm#CACFCJHI
Under chapter 2.4.5 in the idmConfigTool documentation it's described like this:
OAM_SERVER_VERSION: Required only when Access Manager server does not support 11g webgate in Oracle Identity Manager-Access Manager integration. In that case, value should be provided as '10g'.
http://docs.oracle.com/cd/E27559_01/integration.1112/e27123/idmcfgtool.htm#CIHCICHD
When we ran the script, we had the value set to "11g" (because that's our OAM version)... now I'm wondering if I need to set this value at all..
Regards,
Henrik

OAM-OIM 11g r2 integration is failing

Hi,
Following is my configuration,
1. I have OIM 11g r2 and OAM 11gr2 installed on different weblogic domains.
2. OIM synchronized with OUD LDAP
3. I followed the steps described in http://docs.oracle.com/cd/E27559_01/integration.1112/e27123/oim.htm
4. After the integration, I'm not able to login to the Oracle Access Manager console. Though my authentication is successful, I'm getting authorization error.
As per the doc, oamadmin user (member of oamadministrator group) should be able to login to the console. On weblogic console -> security realms screen, I can see oudauthenticator (authenticates against OUD LDAP) created by the idmconfig tool (tool used for the integration). On the same screen, if I open oamadmin user profile, I don't see any group membershiip information for this user. I also created Administrator group in my LDAP and assigned oamadmin as a member, but in vain. My guess is, since oam server is not recognizing user's role, it's giving an authorization error.
The documentation mainly talks about using OID as LDAP between OIM and OAM, though it claims other LDAPs are also supported. If anyone has successfully integrated, what do you see in oamadmin user profile, especially in the group membership attribute. Any other ideas/workarounds are greatly appreciated.
Thanks, Nishanth

I successfully did this into my VMWare and oamadmin user has there:
[oracle@thiagoleoncioVM ~]$ ldapsearch -D cn=orcladmin -w **** -b "dc=leoncio,dc=thiago" -L -s sub -v orclmtuid=*oaamadmin* memberOf
filter pattern: orclmtuid=*oaamadmin*
returning: memberOf
filter is: (orclmtuid=*oaamadmin*)
dn: cn=oaamadmin,cn=Users,dc=leoncio,dc=thiago
memberof: cn=oaamcsrgroup,cn=groups,dc=leoncio,dc=thiago
memberof: cn=oaamcsrmanagergroup,cn=groups,dc=leoncio,dc=thiago
memberof: cn=oaamenvadmingroup,cn=groups,dc=leoncio,dc=thiago
memberof: cn=oaaminvestigationmanagergroup,cn=groups,dc=leoncio,dc=thiago
memberof: cn=oaaminvestigatorgroup,cn=groups,dc=leoncio,dc=thiago
memberof: cn=oaamruleadministratorgroup,cn=groups,dc=leoncio,dc=thiago
memberof: cn=oaamsoapservicesgroup,cn=groups,dc=leoncio,dc=thiago
1 matches
I hope this information helps you with your issue then you should be able to see what is missing there,
Thiago Leoncio.

SOAP API integration problem with OIM 11g R1

Hi,
We're facing a problem when we are attempting to provision for a third party Web Service application in OIM 11g R1.
During development and test running in an IDE environment, JDeveloper, the soap wsdl requests are triggered and a response is received successfully. However, when we shift the work and integrate it with OIM using design console, there seems to be an error indicating an invalid wsdl location. We have used the super class Exception, in try-catch block for handling of the exceptions. Please see the log message.
Xl Home Dir :/oracle/Middleware/Oracle_IDM1/server
Running CREATEUSERTASK
Target Class = org.identityconnectors.Provisioning.QuickShareUserProvisioning
URL : XXXXX
User ID : XXXX
Password : XXXX
ERROR: Invalid wsdl location robi/XXXX_saved_wsdl.wsdl
When we simply run the jar file from the command line, it gives us, java.lang.NoClassDefFoundError: javax/xml/rpc/Service
[oracle@idmlab JavaTasks]$ java -jar archive1.jar
URL : XXXXX
User ID : XXXX
Password : XXXX
Exception in thread "main" java.lang.NoClassDefFoundError: javax/xml/rpc/Service
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClassCond(ClassLoader.java:631)
at java.lang.ClassLoader.defineClass(ClassLoader.java:615)
at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:141)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:283)
at java.net.URLClassLoader.access$000(URLClassLoader.java:58)
at java.net.URLClassLoader$1.run(URLClassLoader.java:197)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
at java.lang.ClassLoader.loadClass(ClassLoader.java:306)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
at java.lang.ClassLoader.loadClass(ClassLoader.java:247)
at org.identityconnectors.Provisioning.QuickShareUserProvisioning.createUser(QuickShareUserProvisioning.java:41)
at org.identityconnectors.Provisioning.QuickShareUserProvisioning.main(QuickShareUserProvisioning.java:215)
Caused by: java.lang.ClassNotFoundException: javax.xml.rpc.Service
at java.net.URLClassLoader$1.run(URLClassLoader.java:202)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
at java.lang.ClassLoader.loadClass(ClassLoader.java:306)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
at java.lang.ClassLoader.loadClass(ClassLoader.java:247)
... 14 more
Any help or suggestion, appreciated!
Thanks
Tamim Khan

Hi Kevin,
Thanks a lot for the response. But, when i deployed the composite SAR in to the server from Jdeveloper, i checked the option to "Overwrite any existing composite with same revision ID". SO, i used the same revision ID (Say 1.0), will this also need to be disabled?
Thanks,
Srini

OIM 11g R1 - Add user to group after AD Reconciliation

Hi,
i want to add all reconcilated users from AD to OIM to a special role in oim, after a AD reconciliation.
By default, all users get the role ALL_USERS. I want to add a futher role, for example ALL_AD_USERS.
How to do this?
Edited by: 960944 on Jan 15, 2013 5:11 AM

I assume that here you are talking about AD TRUSTED RECONCILIATION and you don't have any other TRUSTED Reconciliation and this is the only way to bring users into OIM, then you can create a role and attach a membership rule say "Organization doesn't contain ZZZZ". It will satisfy all the users
CONS: Here you won't be able to distinguish between users which are creating through Admin Console or from AD Trusted or from some other Trusted Recon.
Now if you want only those users who are coming from AD then Add a task on Reconciliation Insert/Update Received and add user into Role using APIs.

How to generate Email in OIM 11g r1 during recocillation

I want to generate Email id of user based on his first name and last name while creation of user.
I am using OIM 11g R1 .
Can anyone plz help me on this.

1. Login to Design Console and open your GTC provisioning process definition , then Add a new task called "Notify Email".
2. Check Required for Completion, Allow Cancel and optionally Disable Manual Insert.
3. In the Integration tab, add tcCompleteTask
4. In the assignment tab, add an entry with the Default rule, target type of User, and for the User field pick an existing user with a valid email address in their User Profile.
5. In the Notification tab add an entry and check Assignee, (You can select User, Manager etc ) have the Status field set to C and for the Email field pick a Provisioning type of Notification Template that you have already created.
N.B: 7. Make sure the IT Resource and email configuration properly otherwise you will not get the mail.
Thanks
Tamim Khan

OIM 11g R2 Beta Customization

Hi
In OIM 11g R2.
I want to disable some Menu Option for Non-Admin users in Identity Console. I don't see any option to create Authorization Policy in R2 .
How can I achieve this.
Regards,
Abhi
Edited by: 918619 on Jul 26, 2012 3:18 AM

for implementing auth policy you have to use APM UI . Which is nothing but UI of OES. OES internally integrated with OIM R2.
For enabling this URL: During the installation of OIM you can use(select) APM as well for the installation(from the wizard)
do the below steps
You need search the user-management policies and then update the deniedAttributeObligation in those policies and add all the attributes that you don’t want to be displayed for the user(as per the oes-policy application role.).
However, I don't know how feasble for you to do this.
--nayan

ESSO: OIM 11g R2 PG Integration: Passlogix Add Credential Task Failed

Similar Messages

Maybe you are looking for