How to configure Reconciliation only for a particular resource

Hi All,
I have a requirement to configure target reconciliation from AD only for a client. For that i have installed the conector as per documentation (both prov and recon). Now how can i make sure that:-
1. When i disable/enable the user in OIM, corresponding target resource will not be disabled/enabled.
2. If i make any changes on resource form corresponding change should not flow back to AD.
Does removing the prov related jar able to ensure these things or i need to remove the corresponding prov lookup or any changes required in configuration lookup? Please suggest...TIA

Change the drop down option to "Disable Process..."
Attach tcComplete event handler there.
In Task to Object Status Mapping, select Disabled in front of completed.
Now suppose user is PROVISIONED to a resource say Test. So whenever user gets DISABLED in OIM, it will disabled the target resource Test. But in actual the target resource will not be disabled for that user. He/She can access that resource after getting disabled as you haven't put the logic to disable the target resource (as you have used tcComplete here).
As you are saying that it should show disabled only if Disabled is coming from Trusted Resource. Then it's fine till now.
If you don't want to show status as Disabled then in Task to Object Status Mapping, do not select Disabled in front of completed. In this case, it will show status as PROVISIONED only. This is wrong.
I'll try to understand what you have written here ->
BUT NOW THE ISSUE. IT DISABLED MY ASSOCIATED RESOURCE (not in target resource actually but on oim side under resources tab). THIS IS ACTUALLY NOT DESIRABLE.
- > It will do as you are using tcComplete. If you put your java code which disables the target resource in integration tab (in form of process task adapter instead of tcComplete) then it will disables the actual target resource for user.
REAL REQUIREMENT IS THAT FOR NOW (*till provisioning is not configured*) OIM DISABLE SHOULD NOT INVOKE THE DISABLE OF ASSOCIATED TARGET RESOURCE NOR IT CHANGED THE STATUS UNDER RESOURCES TAB FOR PARTICULAR RESOURCE. THE STATUS UNDER RESOURCES TAB SHOULD ONLY BE CHANGED WHILE RECONCILIATION.
-> As you have written, "Till provisioning is not configured", So if provisioning is not configured then it will not show disabled under Resource tab for that particular resource.
You can see disabled only after resource is provisioned to that user.
If this doesn't answer your question, it would be better if you explain your requirement clearly. It's not clear.

Similar Messages

  • PO from PR only for a particular document type

    Dear Gurus
    I want purchase orders should be raised with reference to purchase requisitions only. System should allow to make purchase orders with reference to purchase requisitions only for a particular document type only.
    I have configured in OMET and assigend this in SU3, now the system is not allowing to create PO for all document types, but I want to restrict this for a particular document type only
    Is there any configu change required?
    Regards
    Muthukumar

    Hi
    You can make it in MM - purchasing -> purchase orders -> define document types -> check the document type -> click on link purchase requisitions.
    And in define screen layout at document level - make PR mandatory for your purchase order document type (field reference).
    Thanks
    Edited by: Praveen Raghavendra on Jan 12, 2009 2:07 PM

  • How to configure release procedure for rate contracts release

    Dear all,
    How to configure release procedure for rate  contract following are the requirements
    they are two release codes c1 & c2 <=100000,>=100000
                    if  c1 is not there c2 has to be approved
         Change in the value of the rate contract contract
         Change in the validity of the rate contract
         Addition of deletion of line items
    While using a non u2013 released rate contract in the PO an error message should shoot out.
    Also the logic should be changed while using the rate contract in the PO.
    The usage of the rate contract should be till the validity of the rate contract. i.e. the measurement should be end date of the rate contract and the PO creation date and not the delivery date of the PO. &
    It should be possible to refer existing valid rate contracts in purchase orders.
    Regards,
    bhaskar

    Hi,
    In SAP rate contract is known as value contract denoted with wk. The release procedure for rate contract is same as that of other contracts and scheduling agreements. The tables  for contracts will vary with SA (Scheduling agreement) .You may try and maintain condition records based on the customer combination and maintian the validity date of condition records as per your requirement.For contract and PO will have the same header/item table as EKKO/EKPO, and the release
    class in standard is the same FRG_EKKO, you can use the same for contract.
    To distinguish if it's a contract or PO, EKKO-BSART can be used.
    For contract EKKO-BSART will be MK or WK, while PO will have NB/UB etc..
    You can restrict the document type to set up the release strategy for only contract.
    Of cause, you can also create your own release class Z* for contract copying standard
    one FRG_EKKO via CL01/Class type 032, and then assign the class Z* to customizing:
    OLME:
    -> contract
    ->Release Procedure for Contracts
    ->Define Release Procedure for Contracts
    ->Release Groups
    If you have already created the PO release class.
    Assign a new chracteristic of Document Category -BSTYP
    Please check below link for detailed release procedure. I hope this wil help you out .Thanking you.
    http://wiki.sdn.sap.com/wiki/display/ERPSCM/RELEASE+PROCEDURE#RELEASEPROCEDURE-TABLESUSEDFORRELEASEPROCEDURES

  • How to trigger a badi for a particular screen of a transaction alone?

    friends
    am trying to issue an error msg. in the PAI of the screen SAPMQEVA (0102), which belongs to QA11/Usage decision..In the method PUT_DATA of implementation QEVA_SUBSCREEN_1101, am able to capture all the screen fields..but the problem is there are two tabstrips (Defects, Inspection Lot stock), i want to trigger the msg only in the PAI of SAPMQEVA (0102), i.e the last tabstrip (Inspection Lot stock)..but this badi triggers in every pai of QA11 and issues the error msg..but the values of the screen fields of the last tabstrip are getting filled only in the PAI of the same, but how to trigger it for the PAI of the last tabstrip alone..no parameters in the method seem to have screen no. or okcode...hav tried with badi INSPECTIONLOT_UPDATE, which doesn't solve the purpose...pl suggest
    regards
    Sathish. R

    hi
      tx for answering...i have tried in all the user exits, including the one that you mentioned, but in none of them the UD data or storage loc. data sits in..only in the badi that i've mentioned i get all the data of the screen fields...how to make it trigger for that particular screen alone, is that doable?
    regards
    Sathish. R

  • Configuring reconciliation rule for AD

    Hello everyone,
    I have to configure Reconciliation rule for AD where i have to match user login at OIM side to Manager value at AD side. As manager is dn on AD side, how can i compare both the values. Is there any way to spilit the dn to find out the cn value before reconciliation rule will run? How does the tranform feature provided under rule element will work? If anybody came across this scenerio and got any resolution please share.
    TIA

    I have a doubt here..please clear if i am able to sucessfully explain...in reconcilliation action we wrote that "No Match Found" --> "create User". it is working fine (for me it is Sun LDAP on other side)..but issue is that when it create a user in OIM...under resource profile no resource is coming as attached...then how can one knows that this user already had a profile in LDAP and need not created a new one and also we cannot provision the same user to LDAP as it is already there...means we cannot link these two user profiles (OIM and LDAP one)....but for feasible scenerion it should be...can anyone tell me where i am wrong and what other configuration needs to be done if it is a feasible scenerion..

  • How to configure Broadcast messaging for IC Webclient profile

    Dear all,
    How to configure Broadcast messaging for IC Webclient profile. what are the prerequisites for it?
    We are not using EP interface for IC Webclient, then where can I find broadcast messaging URL in SAP CRM system.
    I have checked for the relevant BSP application, but could not find.
    Please help me to configure the scenario successfully, your help will be highly appreciated.
    Best regards,
    Raghu ram

    Hi raghu
    In CRM Broad cast messaging application is CRM _BM,
    Go to easy access u2013 go to favourites u2013 select add other objects - select BSP Applications- then select CRM_BM Application.
    Select that BSP application and test it u2026
    `
    Regards,
    Narsimha

  • How to find condition  type for a particular material document no.

    hiiiiii
    How to find condition type for a particular material document no.

    Hi
    Condition types are maintained at PO level
    Take the EKKO-KNUMV and pass to
    KONV-KNUMV field and take the different condition types values from KONV
    Take the Material Document No (MBLNR) and pass to MSEG table and take the EBELN field and from EKKO table take EKKO-KNUMV field and pass to KONV
    see the table T685 for different condition types.
    <b>Reward points for useful Answers</b>
    Regards
    Anji

  • How to find Missing Parts for a particular Process Order?

    Hi,
    How to find Missing Parts  for a particular Process Order ?
    Is there any function module or Table ??
    Thnx in Advance.

    Hi prince roy
    you can use the T-code = <b>CO24 - Missing Parts Info System</b>
    if helpful PLEASE REWARD YOUR POINTS
    thanks
    chakri

  • How to delete the Infoobjects for a particular dimension?

    Hi,
    How to delete the Infoobjects for a particular dimension?
    ( when i was trying to delete dimensions it is saying that the dimension contains infoobjects , u can not delete the dimension, what 2 do?)
    Thanx in advance,
    Ravi.

    Ravi,
    If you want to remove the Infoobject from Dimension then you need to delete the data from the cube and then remove the infoobject from that particular Dimension. I mean delete the assignment for that Infoobject.
    Assign Points if it helps..
    Incase if you need more help.. Please call me..
    Gattu

  • How to configure Email notification for User login's in Exchange Infrastructure?

    How to configure Email notification for User login's in Client Machines?

    Hi ,
    Based on the description , you need to assign logon scripts to the end users via group policy and also use your exchange server as the smtp server in that logon script to relay emails to the internal recipients.
    Thanks & Regards S.Nithyanandham

  • How to configure SMTP server for osb 10.3.1

    Hi All,
    Can anyone share information on how to configure SMTP server for osb 10.3.1
    and then how to send an email from osb 10.3.1
    Thanks in Advance!!

    Thanks a lot!!
    I configured the same way. When I am sending email to an account on the same domain as my SMTP server is the sending of email is successful. But its giving error when I am trying to send an emain to an account which is on different domain. It giving error as "Operation has been cancelled"
    Please suggest something.

  • How do I find/search for a particular app or genre of them

    How do I find/search for a particular app or genre of them in Maverick app store...thx for any help...byeGeorge

    Just go to App store and type in what you want in the search box.   Say, apps for word processors, Anti virus apps, Games apps and so on.   You could also go via Google with a similar approach and lastly, the system divides up particular subjects in any event ...  under the term Categories.
    Having said that, the system isn't a mind reader.   It's up to you to refine what you've  been presented with.

  • How do we fetch the top-level users and groups for a particular resource

    Hi Experts,
    I need to fetch the top level users and groups (permissions) for a particular resource, Currently i am able to fetch the effective users list.
    Thanks.

    To elaborate...
    Here we need the users and groups who have direct access to the resource. We dont want to resolve groups.
    Please help us with the apis to use in our java code to fetch the users and groups.

  • How to configure ATP check for "create standard order in SD (OR type)"

    first, I had check my stock, I only have ten PC
    , but when I enter 100 PC in a OR order, and issue ATP check, it is carries out, why? I had set availavility check into 02 in MRP3 view

    Availability check
    1. Availability check is an integral part of the business process that determines if the required delivery quantity can be met on a required delivery date. For this purpose the system takes into account pre-delivery activities such as scheduling for picking or packing times and the time taken to produce or obtain the material. It also performs several background functions such as Backorder processing, rescheduling and ATP quantities.
    2. Backorder processing: processing of a sales order that has not been fully confirmed or not confirmed at a certain delivery date.
    3. Rescheduling: is a proposal of how u2013 confirmed quantities already assigned to a sales order can be reassigned to other sales orders that have a higher priority.
    4. Available to promise (ATP): is a process of checking the available quantities of a material. The ATP quantity consists of warehouse stock + planned receipts (incoming stock) u2013 planned issues (outgoing stock). to examine stock on hand (CO09) proceed to logistics u2013 sales & distribution u2013 sales u2013 environment u2013 availability overview.
    5. Replenishment lead time (RLT): is the time taken for the material to become available either internally (in house production) or externally (from a vendor). The most important things to consider during an external procurement are purchasing and MRP2 (procurement) views of MMR where the processing time for purchasing, planned delivery time and goods receipt processing time are taken into account. On the other hand internal procurement is based on in house production time (MRP 2 view) goods receipt processing time or alternatively RLT time, which is found on MRP 3 view.
    6. RLT (Replenishment Lead Time) is the time taken for the material to become available. RLT is only used when doing an ATP check (Available To Promise). The value of RLT for a material is specified on material master record.
    7. There are three types of availability checks u2013
    Check on basis of ATP quantities.
    Check against product allocation.
    Check against planning.
    Configuring Availability check through Checking Groups
    1. The checking group + checking rule determine how the availability check is to be performed.
    2. The checking group determines whether and how the system checks the stock availability and generates requirements for material planning. The checking group defines what type of requirements will be passed on i.e. summarized requirements (daily/weekly) or individual requirements for each sales order.
    3. The checking rule applies to how the availability check is to be carried out at the transaction level. Note that you must define checking rules for each individual application such as for production orders for example. In Sales and Distribution, the checking rule is specified internally within the system and cannot be changed.
    4. The checking rule, in conjunction with the checking group, determines the scope of the availability check for every business operation; that is, which stocks, receipts and issues are to be included in the availability check and whether the check is to be carried out with or without the replenishment lead time.
    5. Briefly explaining the above u2013 checking group determines which type of requirement to be passed on to MRP whether it be individual or summarized and checking rule which is at the transaction level and can be configured independently for each application module, determines which stocks, receipts and issues to be taken into account. For performing an availability check checking group has to work in conjunction with checking rule.
    6. Advantages of individual processing over summarized processing u2013
    Backorder processing is possible.
    You can access (MD04) order, line and schedule line individually which gives a greater control on available stock and requirements placed on stock.
    The system automatically uses individual requirements in case of special stock items.
    7. Required data for the Availability check to be carried out u2013
    The Availability check must be switched on at the requirement class level.
    The Availability check must be set at the schedule line level.
    A requirements type must exist by which the requirements class can be found.
    A plant must be defined in the sales order for each schedule line item (in other words plant must be defined for every material in MMR).
    A checking group must be defined in the material master record in the MRP3 screen in the availability check field.
    8. Configuring Availability check and defining Checking Groups u2013
    Checking groups are introduced into the sales order based on the setting in the material master record.
    SAP standard checking groups are 01 u2013 summarized requirements and 02 u2013 individual requirements or you can create your own by copying the standard ones.
    Total sales and total deliveries columns are there to configure a checking rule to sum up requirements to post to MRP either individually or by day or week.
    Block quantity required can be set if you want several users to be able to process the material simultaneously in different transactions without blocking each other.
    The no check indicator is CHECKED when you DO NOT want the system to carry out ATP check.
    9. Defining material block for other users u2013 the block check box is an indicator that enables you to block material master records of a particular material during the availability check and restrict other users from accessing same master record and reserve the material. If the block is not set, two users can confirm the same material at the same time for two different orders, not knowing if the stock is available or not. If you select this field, the material is blocked during the availability check and other users cannot: a) Make changes in the material master record. b) Create purchase orders for the material. C) Create orders for the material.
    10. Defining default values for checking groups - Checking groups are introduced into the sales order based on the setting in the material master record.
    However if there is no entry present in the material master record for the checking group, a default value can be set here, depending on material type and plant.
    This default value will be used by the system depending on the material type mentioned in MMR and plant in sales order.
    If an entry exists, this default value is over written by MMR.
    11. Controlling Availability Check u2013 in this section, you tell the system what stock on hand and what inward and outward movements of stock it must take into account when performing the availability check in addition to whether or not to consider the replenishment lead time.
    12. These settings are based on the checking group that is assigned to the material master record and the checking rule that is predefined and assigned to the sales and distribution transaction.
    13. These settings carry out control both for sales order and delivery as well. This is due to the fact that you may want to include specific stock or incoming stock for the sales order, yet at the time of the delivery only include physical stock on hand waiting to be shipped.
    14. It is possible to indicate to the system that you would like the availability check NOT TO CHECK the stock at the storage location level. This indicator is used to set the scope of the availability check.
    15. It is used to switch off the check at storage location level. You create a reservation for a particular storage location. However, the scope of the availability check is set in such a way as to exclude the storage location. In this case, the system carries out the check at plant level only and does not take the storage location into account that is specified in the reservation.
    16. Should you not want the system to automatically check RLT, you may indicate so here. RLT is the time taken for a material to become available. It is only used when doing an ATP check and is taken from MMR.
    17. defining the elements in the availability check entirely depends on the business needs, but a few tips are given under u2013
    When controlling the Availability check at the time of the sales order, a purchase requisition does not necessarily indicate by it is going to come into the plant.
    A shipping notification on the other hand - a confirmed purchase order u2013 is a good indicator of receiving stock on a specified date.
    It is always recommended not to select the shipping notifications for the delivery requirements type as you may not actually receive the stock into plant or warehouse for which you are creating a delivery.

  • How to configure simultanous access for 11i application

    Hi All
    We have one existing 11i application instance on node grid1.In which we start the servicess from apps user.
    In our same we want another node for the same application in which we will start the servicess from another user(merge)
    For that we perfrom the following steps
    1.Copy the APPL_TOP,COMMON_TOP,ORA_TOP(8.0.6,iAS) from node "GRID1" to diffrent node "GRID2"
    2 configure the GRID2 node using adcfgclone.pl utility(we have configure new node for WEB and FORM Server)
    3 We perfrom the modification in the following files ON GRID2 .
    i Identify 'FNDNAM=apps' statement in $FND_TOP/secure/<context>.dbc
    and replace with 'FNDNAME=merge' to connect to MERGE schema instaed of APPS.
    ii. Go to the last line of $APACHE_TOP/jserv/etc/zone.properties file
    and identify 'schema=APPS' statement and change it to 'schema=MERGE'
    iii. Identify below lines in $APACHE_TOP/modplsql/cfg/wdbsvr.app file
    password = apps
         username = apps
         document_table = APPS.fnd_lobs_document
    and replace with modified below lines
    password = merge
         username = merge
         document_table = MERGE.fnd_lobs_document
    6. For redirecting user's request to new Application Server server, we
    changed the following 4 system profile options with proper URL and port
    at responsibility level only for the responsibilities,
    which we use for Merge views.
    Profile Options
         Application Framework Agent
         Applications JSP Agent
         Applications Web Agent
         Apps Servlet Agent
    When we are able to start the services on GRID2 node,but at the time of login we are getting invalid user name/ passwd error
    Please let us know is there any way to access application other than apps user
    Regards
    Sohail

    well thank you very much .I know how to define a DataSource inside Weblogic Server.
    But i am confused over one issue
    When We are going to use Container Managed EntityManager inside the SessionBean the persistence.xml file looks like this
    *<persistence>*
    *     <persistence-unit name="RamsEJBPU" transaction-type="JTA">*
    *          <jta-data-source>myJtaDataSource</jta-data-source>*
    *     </persistence-unit>*
    *</persistence>*
    But in some cases it looks like as shown below :     <persistence-unit name="RamsEJBPU" transaction-type="resource-local">
         <provider>org.hibernate.ejb.HibernatePersistence</provider>
                        <properties>
                   <property name = "hibernate.connection.driver_class" value = "oracle.jdbc.driver.OracleDriver"/>
                   <property name = "hibernate.connection.url" value = "jdbc:oracle:thin:@localhost:1521:orcl"/>
                   <property name = "hibernate.connection.username" value = "CHENNAISPAT"/>
                   <property name = "hibernate.connection.password" value = "CHENNAISPAT"/>
                </properties>
         </persistence-unit>
    </persistence>Can you please tell me why is it so ??

Maybe you are looking for

  • Could not find registry for CommunicationsApp_JBOServiceRegistry

    Hi, I have an SDO running at http://localhost:7101/CoreModelApp-CommunicationsSDO-context-root/CommsAppModuleService The application name in JDeveloper is CommunicationsApp though, so I believe that is the name i should be using? The web-application.

  • Desperate here- Please help!! Setting a max size on the Photo in a Gallery

    I have a client who has 1,000s of picturea there are MANY of their pictures which are HUGE. So the thumbnail is fine I can alter those ratios, but is there a way to alter the size the picture can be when clicked on and it enters the slideshow/gallery

  • [svn] 3166: integrate:

    Revision: 3166 Author: [email protected] Date: 2008-09-10 10:16:47 -0700 (Wed, 10 Sep 2008) Log Message: integrate: AIK 20080905ap player 10.0.0.601 Modified Paths: flex/sdk/branches/3.0.x/in/air/mac/AIR Integration Kit.tbz2 flex/sdk/branches/3.0.x/i

  • Best settings for bluray disc

    I am a total newbie and somewhat confused by the "Share"options. I have imported my files from my Sony HDR-XR550V camcorder - edited and made into a movie.  So now I am ready to burn to a bluray disc.  Would someone be so kind as to tell me what opti

  • Click Bios II is broken

    I just updated Click Bios II to version 1.0.123 and it does not work.  Is MSI aware that it is broken?