Help required related with OIM 11g Email Notification

Experts,
I have a requirement where I have to pass the User's Password through autogenerated email.
But I have a scenario where I dont have to provision any target resource for users..so i dont have access to Notification Tab for such kind of users.
I thought of writing a custom Event Handler to send email using custom code.
But IN OIM 11g , I found that Inside, Advanced->Notification Template-> Create User Self Service Notification … is getting triggered with UserID: $userLoginId<br> and its woking fine.
But once I added Password: $password<br> In the same template, its not providing me the password.
So I think the Parameters associated with this Event "Self register user" does not have $password.
Is there any way to check which all parameters can be accessed in these Events?
Also, what is the best way to send password to users who does not any target resources associated?
Thanks,
Regards,
J

Hi I am trying to get the Create User Self Service Notification template working but for some reason I get an error in the log saying unexpected error occured while sending notification. and I am not recieving any mails..I have done the following steps
created an IT resource with the name same as the value of Email Server property
have made the value of RequestNotification property 1
is there anything else I need to do..
Can you also give some details as to how you have created the IT Resource...is the authentication true/false if true does any username and password do..
Thank you

Similar Messages

OIM 11g - Email Notification with direct link to Approval Task Details

Hi,
We wanted to send email notifications to approver with direct link to the approval task details screen from which the user can either approve or reject the request. In OIM 11g OOTB Notification templates such as Request Creation contains the direct link to Request Detail screen which is something like
http://localhost:14000/oim/faces/pages/Self.jspx?OP_TYPE=LOOKUP;E_TYPE=MY_REQUEST&T_ID=65
Wondering if there is something similar for Approval Task Details screen as well.
Any kind of help or suggestion is greatly appreciated.
Thanks,
Deepa

If at all you cannot get the direct link for approve/reject then try the actionable email from SOA. Once you have that configured the emails gets approver/reject links so that approvers can directly approve/reject the task from email. If that works for you then you can look at the format of those links in the email and deduce what you need the url as.
HTH,
BB

Queries Related with OIM 11g

Hi Experts,
I have few basic queries related with OIM 11.1.1.3
1) Can we use GTC connector to export data of users (Newly created users on daily basis) to CSV file?
I think No, But just wanted to confirm with you guys.
2) The LdapConfig utils in OIM11.1.1.3 provides facility to replicate the users in OID. Like whenever I am creating a user in OIM..Its creating it in OID as well.
My question here is:
a) Since we dont have any process form here so how can i add a new attribute in the data which is getting created in OID through OIM? Like I want to provision a custome attribute along with existing attributes..how will i achieve this?
b) In OIM11.1.1.3, In what scenario we can use OID connector and LdapConfig settings? Like..when to use connector..for provisoning data in OID.
Rajiv,Kevin,Sunny...waiting for ur valuable inputs :)
Regards,
J
Edited by: J_IDM on May 18, 2011 2:56 AM

Thanks Rajiv,
We have process form. We don't have Object Form but we have Request Dataset for that.
But since my OID is configured using LdapConfig and I am not using OID connector. So I dont see any process form associated with my OID.
How can i add new attribute here (Suppose carLicense I need to provision to OID)?
You'll use OID connector when you'll have OID as a target system.
Even I am not using any connector but my users are succesfully created in OID..using OIM 11g.
So I just wanted to know..under what circumstances we should go for LdapConfig(Auto OID user creation) and OID connector in OIM 11g
Thanks very much!!
J

OIM 11g - email notification

Dear All,
I need to create quick POC that will involve provisioning to multiple resources during OIM profile creation. One consolidated e-mail notification should be sent as a result.
1. I never used simulated/fake/manual resource. If you used it in the past maybe you can guide me through as for how to create it?
2. How to make sure that centralized e-mail is sent at the end (all resources are provisioned)?
I was planning to create default role or use ALL USERS role that will be attached to access policies for different resources. When HR record comes, OIM user profile is created and default role (ALL USERS, for example) is assigned.
This role will trigger execution of access policies that will create accounts on the target platforms.
My challenges are:
1) ONE consolidated email notification upon SUCCESSFUL completion (default event that somehow should be triggered maybe by job?, custom task that sets the flag in custom table upon successful completion? or maybe I overengineering .....)
2) send user to manual queue if creation of the user account on any of the target resources fail.
If you can provide any guidance as for how this could be done I would appreciate it very much
Thank you for your time

1. The process is outlined here: http://iamreflections.blogspot.com/2010/08/oim-howto-leverage-standard-connector.html
2. There are two parts to this question.
The first part is to figure out the triggering event. If you know what resource will be last provisioned you can simply put a task that is fired on completion of the final provisioning task that then checks the result of all other resources using the APIs. If you don't know which resource will be last you could let the final provisioning task in each resource have a follow up task that sets a variable on the user form, then have another folllow up task that checks if all values are set and if so do the appropriate thing (if not just exit)
Traditionally you would assign a task to the sysadmin using the API if you wanted a manual intervention (http://otndnld.oracle.co.jp/document/products/id_mgmt/idm_904/doc_cd/javadocs/operations/Thor/API/Operations/tcProvisioningOperationsIntf.html#reassignTasksToUser(long[], long)) but there is the new concept of queues that I actually haven't worked with (http://otndnld.oracle.co.jp/document/products/id_mgmt/idm_904/doc_cd/javadocs/operations/Thor/API/Operations/tcQueueOperationsIntf.html) that may be what you are looking for.
Email sending tends to be easier using Javamail than trying to leverage the email framework once you want something that isn't very basic.
Hope this helps
/Martin

OIM 11g - Email Notifications configured in human task is not working

Hi,
My requirement is to send email to the assignee whenever a request is assigned to the user. I created a custom bpel workflow and configured email notiifcation in the human task for the status 'assign'. I have configured Email driver with following properties:
Sender Addresses = <[email protected]>
Default Sender Address = <[email protected]>
Outgoing Mail Server = <Exchange server host>
Outgoing Mail Server Port = 25
Outgoing Mail Server Security = none
Outgoing Default From Addr = <[email protected]>
I have also set the Notification Mode to 'Email' in Workflow Notification Properties.
However when a request is assigned to the user, email notifications are not sent.
I do not see any errors in the logs. In Enterprise Manager console I navigated to SOA Infrastructure Home > Human Workflow Engine > Notification Management and I could see outgoing email notifications corresponding to the workflow instance with the status showing 'Sent'.
Also the Exchange server that is being used has already been tested for provisioning emails from OIM and it works fine for provisioning.
Any pointers/troubleshooting tip to resolve this issue is greatly appreciated.
Regards
Deepa

Hi,
My requirement is to send email to the assignee whenever a request is assigned to the user. I created a custom bpel workflow and configured email notiifcation in the human task for the status 'assign'. I have configured Email driver with following properties:
Sender Addresses = <[email protected]>
Default Sender Address = <[email protected]>
Outgoing Mail Server = <Exchange server host>
Outgoing Mail Server Port = 25
Outgoing Mail Server Security = none
Outgoing Default From Addr = <[email protected]>
I have also set the Notification Mode to 'Email' in Workflow Notification Properties.
However when a request is assigned to the user, email notifications are not sent.
I do not see any errors in the logs. In Enterprise Manager console I navigated to SOA Infrastructure Home > Human Workflow Engine > Notification Management and I could see outgoing email notifications corresponding to the workflow instance with the status showing 'Sent'.
Also the Exchange server that is being used has already been tested for provisioning emails from OIM and it works fine for provisioning.
Any pointers/troubleshooting tip to resolve this issue is greatly appreciated.
Regards
Deepa

OIM 11g email notification(request submitted, approved, reassigned, etc)

Dear All,
How to emplement e-mail notifications in 11g?
It looks like there some notification templates available. But how those could be tied to different stages of the request? (request submitted, approved, reassigned, etc). Is there any authomation available or everything should be created now manually in the workflow? SOA suite has notification service. I suspect this is what should be used now.
How notification templates are used in the workflow?
If you can provide steps and/or example this would be very helpful.
Maria

I suspect article ID 457836.1 is valid for 11g as well. (FYI)

BPEL 11g Email Notification - Multiple SMTPs

Hi All
We have a requirement to send emails through alternative SMTPs based on content via BPEL. In 10g BPEL, we could do that based FromAccount configuration in nl_emails.xml. What is the equivalent steps for creating different FromAccount configuration in 11g BPEL?
Thank you for your support.
Regards
Prasad Jayakumar

Hi All
There is something missing in 11g what was available in 10g
In 10g, we were able to refer the following entire configuration details through FromAccount of BPEL Email Activity
nl_emails.xml
<EmailAccount>
<Name>Default</Name>
<GeneralSettings>
<FromName>Oracle BPM</FromName>
<FromAddress>[email protected]</FromAddress>
</GeneralSettings>
<OutgoingServerSettings>
<SMTPHost>yourdomain.com</SMTPHost>
<SMTPPort>25</SMTPPort>
</OutgoingServerSettings>
Now In 11g, We are able to set only EmailFromAddress, EmailReplyToAddress & EmailRespondToAddress which is more about GeneralSettings and not different OutgoingServerSettings
My initial request "BPEL 11g Email Notification - Multiple SMTPs" is not yet resolved. Please provide any further inputs. Thank you.
Regards
Prasad Jayakumar

After new weblogic domain configuration with oim 11g, not able to login

After new weblogic domain configuration with oim 11g, not able to login for the frist time as xelsysadm.
it says invalid sign in. and in logs it says password is invalid.
Please help me in asap...

Thanks Pallavi for the effort. I tried commenting out, its still the same. It do not throw exception this time. However, It tells me that the recon event is completed and linked to user. When I go to user's profile, I dont see the resource provisioned.
Also,
The Account ID in recon manager of Web Console and the Account ID that is stored in the tables, doesn't match.
I wrote a custom code to fetch account and user details and here is the output,
User Key : 13 -- has Login Id : USER_CS
Account with account key : 49 is with user key : [USER_CS]
Getting Account Data......
{UD_TEST_1P_EMPLOYEENUMBER=1567, UD_TEST_1P_NAME=Kim1}
However the Account Id in recon manager is : 91
This seems fine.
Doesn't this mean, the account is reconciled successfully?
The problem is that, I am not able to see this resource in User's resource profile.
Edited by: Shashi kiran on Apr 18, 2013 3:56 PM

SJSDS recon issue with oim 11g

I got the following logging message while reconciling SJSDS (sun directory server) with oim 11g. All the recon statuses were success (group, role, user, trusted user), but no data was from SJSDS.
Did anyone has any idea about it?
Thanks
John
[2011-06-19T10:01:47.352-05:00] [oim_server1] [NOTIFICATION] [IAM-0080013] [oracle.iam.platform.kernel.impl] [tid: [ACTIVE].ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 0000J2cQzfw5qYWFLzfP8A1DzNVx0000A0,0] [APP: oim#11.1.1.3.0] [arg: 194] [arg: 0] [arg: JobDetails] [arg: UPDATE] Kernel executing default validation with process id, event id, entity and operation 194.0.JobDetails.UPDATE
[2011-06-19T10:01:47.376-05:00] [oim_server1] [NOTIFICATION] [IAM-1020024] [oracle.iam.scheduler.impl.quartz] [tid: [ACTIVE].ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 0000J2cQzfw5qYWFLzfP8A1DzNVx0000A0,0] [APP: oim#11.1.1.3.0] [arg: 194.242.JobDetails.UPDATE.entityId=null] Execute default action handler with 194.242.JobDetails.UPDATE.entityId=null
[2011-06-19T10:01:47.447-05:00] [oim_server1] [NOTIFICATION] [] [oracle.iam.platform.kernel.dao] [tid: [ACTIVE].ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 0000J2cQzfw5qYWFLzfP8A1DzNVx0000A0,0] [APP: oim#11.1.1.3.0] Inserting records for orchestration cleanup
[2011-06-19T10:01:47.475-05:00] [oim_server1] [NOTIFICATION] [IAM-0080046] [oracle.iam.platform.kernel.impl] [tid: [ACTIVE].ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 0000J2cQzfw5qYWFLzfP8A1DzNVx0000A0,0] [APP: oim#11.1.1.3.0] [arg: Done] Completed orchestration with action result - Done
[2011-06-19T10:01:47.705-05:00] [oim_server1] [NOTIFICATION] [] [oracle.iam.platform.authz.impl] [tid: [ACTIVE].ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 0000J2cQzfw5qYWFLzfP8A1DzNVx0000A0,0] [APP: oim#11.1.1.3.0] [[
*---Stack Trace Begins[[This is not an exception. For debugging purposes]]---*
oracle.iam.platform.authz.impl.OESAuthzServiceImpl.doCheckAccess(OESAuthzServiceImpl.java:212) oracle.iam.platform.authz.impl.OESAuthzServiceImpl.hasAccess(OESAuthzServiceImpl.java:190)
oracle.iam.platform.authz.impl.OESAuthzServiceImpl.hasAccess(OESAuthzServiceImpl.java:182)
oracle.iam.platform.authz.impl.AuthorizationServiceImpl.hasAccess(AuthorizationServiceImpl.java:173)
oracle.iam.scheduler.impl.util.SchedulerAccessUtils.checkOperationAccess(SchedulerAccessUtils.java:22)
oracle.iam.features.scheduler.agentry.operations.LookupActor.prepare(LookupActor.java:1555)
oracle.iam.features.scheduler.agentry.operations.LookupActor.refresh(LookupActor.java:2969)
oracle.iam.features.scheduler.agentry.operations.LookupActor.receiveEvent(LookupActor.java:2807)
oracle.iam.consoles.faces.mvc.canonic.Model.handleIntent(Model.java:922)
oracle.iam.consoles.faces.mvc.canonic.Controller.doHandleIntent(Controller.java:528)
oracle.iam.consoles.faces.mvc.canonic.Controller.doSelectAction(Controller.java:203)
oracle.iam.consoles.faces.event.NavigationListener.processAction(NavigationListener.java:97)
... 34 lines skipped..
oracle.iam.platform.auth.web.PwdMgmtNavigationFilter.doFilter(PwdMgmtNavigationFilter.java:115)
... weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
oracle.iam.platform.auth.web.OIMAuthContextFilter.doFilter(OIMAuthContextFilter.java:100)
... 15 lines skipped..
weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
---Stack Tracefor this call Ends---
]]

As the log says thats not an exception. Anyway why dont you enable the connector logs and see what does the connector complaint about. Refer the Enable Logging section in the connector PDF
Thanks
SRS

Suppress OIM OOTB email notification

When a user is created through OIM admin console, an OOTB email notification is sent to the user's manager.
The email details are as follows:
"Subject: Congratulations - New Account has been created
Body: Congratulations!! Your account has been successfully created!! Your user login is - xxxxxxxx "
There is another mail going out as well to the user.
The email details are:
"Subject: New Account Information
Body: An account has been created for you with the following details. You will be required to change your password on next login.
UserID: xxxxx
Password: xxxxx
For any issues, please contact [admin email or phone] "
Is anyone aware if we can suppress these out of the box email notifications?
Edited by: 910571 on Jan 26, 2012 11:18 PM

Hi,
I believe you can suppress OOTB email notification with help of implementing oracle.iam.platform.kernel.spi.PostProcessHandler and oracle.iam.notification.impl.NotificationEventResolver. Also you need one email template created in OIM.
I had implemented for one of my client to send email notification having some attributes with same solution.
Thanks,
Pradeep.
Edited by: Pradeep Khopade on Jan 27, 2012 1:38 AM

OIM 11g - Mail Notification for multiple resources

User will be provisioned to 5 target system through access policies.So instead of sending 5 different mail notifications to the manager on the Create User task about the account creation, is it possible to send one consolidated mail about the provisioned resources in OIM 11g.

Hi,
How abt for the following requirement for sending single mail for multiple resources provisioned.
We have 3 Access Policies which is defined as follows.
1) Policy 1 -> R1,R2,R3 Resources
2) Policy 2 -> R3,R5 Resources
3) Policy 3 -> R1,R4 Resources
In such a case we will not be able to put dependencies on Resources and adding a task for sending email.

SOAP API integration problem with OIM 11g R1

Hi,
We're facing a problem when we are attempting to provision for a third party Web Service application in OIM 11g R1.
During development and test running in an IDE environment, JDeveloper, the soap wsdl requests are triggered and a response is received successfully. However, when we shift the work and integrate it with OIM using design console, there seems to be an error indicating an invalid wsdl location. We have used the super class Exception, in try-catch block for handling of the exceptions. Please see the log message.
Xl Home Dir :/oracle/Middleware/Oracle_IDM1/server
Running CREATEUSERTASK
Target Class = org.identityconnectors.Provisioning.QuickShareUserProvisioning
URL : XXXXX
User ID : XXXX
Password : XXXX
ERROR: Invalid wsdl location robi/XXXX_saved_wsdl.wsdl
When we simply run the jar file from the command line, it gives us, java.lang.NoClassDefFoundError: javax/xml/rpc/Service
[oracle@idmlab JavaTasks]$ java -jar archive1.jar
URL : XXXXX
User ID : XXXX
Password : XXXX
Exception in thread "main" java.lang.NoClassDefFoundError: javax/xml/rpc/Service
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClassCond(ClassLoader.java:631)
at java.lang.ClassLoader.defineClass(ClassLoader.java:615)
at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:141)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:283)
at java.net.URLClassLoader.access$000(URLClassLoader.java:58)
at java.net.URLClassLoader$1.run(URLClassLoader.java:197)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
at java.lang.ClassLoader.loadClass(ClassLoader.java:306)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
at java.lang.ClassLoader.loadClass(ClassLoader.java:247)
at org.identityconnectors.Provisioning.QuickShareUserProvisioning.createUser(QuickShareUserProvisioning.java:41)
at org.identityconnectors.Provisioning.QuickShareUserProvisioning.main(QuickShareUserProvisioning.java:215)
Caused by: java.lang.ClassNotFoundException: javax.xml.rpc.Service
at java.net.URLClassLoader$1.run(URLClassLoader.java:202)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
at java.lang.ClassLoader.loadClass(ClassLoader.java:306)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
at java.lang.ClassLoader.loadClass(ClassLoader.java:247)
... 14 more
Any help or suggestion, appreciated!
Thanks
Tamim Khan

Hi Kevin,
Thanks a lot for the response. But, when i deployed the composite SAR in to the server from Jdeveloper, i checked the option to "Overwrite any existing composite with same revision ID". SO, i used the same revision ID (Say 1.0), will this also need to be disabled?
Thanks,
Srini

AD Password Sync connector 9.1.1 With OIM 11g R2 - ERROR OVER SSL

I have set up AD password sync with from AD to OIM 11G R2
The password syncs from AD to OIM 11G R2 on non ssl port 389.
But if fails on SSL Port 636.
Errors in OIMMain.Log:_
Debug [10/11/2012 10:49:34 AM] Inside ConnectToADSI
Debug [10/11/2012 10:49:34 AM]
ldap_connect failed with
Debug [10/11/2012 10:49:34 AM] Server Down
Debug [10/11/2012 10:49:34 AM]
Steps Carried Out thus far:_
AD is up and running.
Configured AD Password Sync Connector on 636 and selected ssl.
Created Certificate on OIM host, configured custom identity key store on weblogic. Restarted Weblogic.
Imported Certificate to AD. After this, restarted the AD
I can Telnet port 636 from OIM Box and also connect to AD through LDAP Browser on 636 and view OU and CN, so this seems fine.
Provisioning from OIM through Connector Server to AD works over SSL and this works fine.
Help would be appreciated.
Many Thanks

This question is now been fixed.
Instead of explicitly stating 636 for SSL,
Use the same port 389 for ssl and also configured oim port to be 140001 which is the ssl port for oim in the configuration of OIM Password Sync.
Export Certificates from AD to java security keystore and to weblogic keystore
Export .pem certificate created on OIM host machine to AD.
Restart weblogic, oim and AD
Everything would work fine.
For all the other information, refer to doc.
Thanks

OIM 11g ootb notification

Hi All,
I'm new to OIM 11g.I'm trying to create user using web interface and user is successfully created but no OOTB email notification are triggering..
I have configured Mail Server It Resource.
IT Resource Name           Email Server
IT Resource Type           Mail Server
Authentication                No
I'm using Toolheap software to test notifications.
Regards.
Krish.

find the steps here
Enabling The Logging in OIM 11g
Any Custom Schedule Task and Event Handlers to debug in the OIM 11g Server to enable the logging. The following way to enable the logging in Oracle Identity Manager 11g.
Pre-Requisite
Java Code Configuration
Add the following line into your java code.
Import Statement
import com.thortech.util.logging.Logger;
private Logger logger=Logger.getLogger("Logger-Name");
Configuration Of Logging
Go to the $DOMAIN_HOME/config/fmwconfig/servers/oim_server1 directory and edit the logging.xml file.
Configure The Log Handler
<log_handler name='logger Handel Name' level='FINEST' class='oracle.core.ojdl.logging.ODLHandlerFactory'>
<property name='logreader:' value='off'/>
<property name='path' value='Log File Location'/>
<property name='format' value='ODL-Text'/>
<property name='useThreadName' value='true'/>
<property name='locale' value='en'/>
<property name='maxFileSize' value='5242880'/>
<property name='maxLogSize' value='52428800'/>
<property name='encoding' value='UTF-8'/>
Include The Logger Handler Logger Configuration
<logger name="Logger-Name" level="Log Level" useParentHandlers="false">
<handler name="logger-Handel-Name"/>
<handler name="console-handler"/>
</logger>
Oracle Identity Manager 11G Log Levels
Log Level ODL Message Type:Level
SEVERE.intValue()+100 INCIDENT_ERROR:1
SEVERE ERROR:1
WARNING WARNING:1
INFO NOTIFICATION:1
CONFIG NOTIFICATION:16
FINE TRACE:1
FINER TRACE:16
FINEST TRACE:32
The FINEST log level will give the more debug info. If you want to debug your schedule task or event handlers, please use FINEST Log level.
--nayan

OIM 11g Sending Notification on OIM User creation

Hi Gurus!
I have the following requirement: Whenever a user is created in OIM (through the Administration Console, through Request or through trusted reconciliation) an email notification is to be sent to the user's manager, informing him/her that his/hers collaborator has a given user login (autogenerated) and a password (also autogenerated) and which has to be changed the first time the recently created user logs into OIM.
I saw that in OIM we have Email Definitions (in the Design Console) and Notification Templates (in the Administration Console).
I tried to use the Email Definitions but I am not able to select the usr_password field in the variables section so I could not use this solution which seemed to be very easy to use since one can directly use the email definition in the Notification tab in the process tasks.
Afterwards I analysed the Notification Templates solution. I defined the xml of the Event Type and in the Notification Template (in the Administration Console) I was able to select usr_password as a variable of the notification. However, when I tried to develop the Java code (class implementing NotificationEventResolver), although I was able to extract most of the fields of the OIM user profile, I could not extract the usr_password field... It seems the usr_password field (which is encrypted) cannot be obtained from the UserManager service.
How can I get the user password and inject it into the email notification?
Many Thanks!

Check this: Re: Xellerate User Password decrypt and look at the code posted there by me. Since you are using the notification resolver, you can use the PasswordManager to get the password for the user in your code.
-Bikash

Help required related with OIM 11g Email Notification

Similar Messages

Maybe you are looking for