How to lock the AD Account through OIM

Hi.
I am provisioning AD through OIM 11g using the AD Connector. I have done the create user, modified user provisioning through OIM in AD successfully without any issue.
I would like to lock the OIM account and also lock the respective target accounts when OIM account is locked.
I have done the following task to lock the account in OIM and also in AD through OIM. They are
Process Definition Task
I have created the Change Account Status task in process definition.
This task will populate the OIM Account lock status value to the AD Account is Locked out field in the ADUSER form using the OIM API. The same API is working for all First Name, Last Name etc modification without any issue.
Lookup Definition
I have added the following entry in the Lookup.USR_PROCESS_TRIGGERS Lookup Definition
Code Key : USR_LOCKED and Decode : Change Account Status
OIM Admin Console
I have logged into the OIM admin Console as a Administrator and I have search the user and click the Lock Account button. The OIM Account is locked , but target resource account was not locked and also Change Account Status task was not triggered by OIM.
Do i need to do any special configuration for account lock for the target resource.
Help is greatly appreciated.

In your System Configuration variables, find the value for "XLUserResource.ProvisionMode". Make sure this is set to Java and not DB.
>
This property determines whether provisioning of the Xellerate User resource to the user's organization occurs in the database layer through stored procedure, or in the Java layer via Event Handlers.
Note: See Oracle Fusion Middleware Developer's Guide for Oracle Identity Manager for information about Event Handlers.
This property has the following allowed values:
DB: Provisioning of the Xellerate User resource to the user's organization occurs in the database layer through stored procedure. This in turn does not trigger any further process. Therefore, custom tasks associated with the Xellerate User provisioning process that is associated with the Xellerate User resource does take place.
Java: Provisioning of the Xellerate User resource to the user's organization occurs in the database layer via Event Handlers. Custom tasks associated with the Xellerate User provisioning process that is associated with the Xellerate User resource takes place. This is applicable to the upgrade scenario, where you have your own tasks associated with provisioning processes in earlier releases of Oracle Identity Manager, and you want them to run even after 11g upgrade. In such scenario, set the value of this property value to JAVA.
>
-Kevin

Similar Messages

  • Re: How to lock the AD Account through OIM

    Hi Rajiv,
    Can you post inter face name which we have to implement for provisioning event handler.If you could post some sample code then i will be great!!!!
    Or simply creating a class will do.?
    Thanks,

    Hi,
    I am facing the same problem. as per the guide, adding usr_locked in the look up will not work.
    12.3.3.1.2 Triggering Process Tasks for Events Defined in Lookup.USR_PROCESS_TRIGGERS Fields
    When a user attribute is defined in Lookup.USR_PROCESS_TRIGGERS, for each modification of the attribute, the corresponding process task is triggered for each provisioned resource. This is same for the First Name, Last Name, Display Name (USR_DISPLAY_NAME) user attributes and custom user attributes. However, for the Lookup.USR_PROCESS_TRIGGERS fields USR_STATUS, USR_LOCKED, USR_LOCKED_ON, and USR_MANUALLY_LOCKED, the attached process task is not triggered.
    Per guide we need to write event handler, with option
    entity-type="User" operation="LOCK"
    or
    entity-type="User" operation="UNLOCK"
    ut there also I am facing issue. EventResult execute methotod is not getting called insteed of Execute BulkEventResult Execute is getting called and the bulkorchestration does not contain the user id. So i am not able to unlock or lock a particular user.
    Please help.

  • How to Lock the master data. R/3 Conflict ESS

    Dear Gurus,
    Please guide me how to lock the master data for a nos of days(say 7 days).
    Recently we had encountered an issue, related to ESS. While Uploading the Time data through t-code: PT60, our core team encountered a problem, that such and such employee number is locked.
    While checking, they identified it, system shown error against those employees, who are accessing their ESS. We check and came to know they are accessing the master data by changing their personal record i.e. address.
    Do we have any other provision to lock the master data without setting the control record to release for payroll.
    Please help .

    Create a custom transaction involving a custom views of table T7XSSSERSRV  with the following field for each service
    "V_T7XSSSERSRV-ISDISABLED"
    when HR wants to lock it, the will enter this table and check this field.
    this will disable the servcies in the front end.
    Once the 7 days are over, HR will uncheck this field. this will re-enable the services in the froint end.
    Hope this helps.

  • How to change the reconciliation account in customer master record?

    hi friends,
    i created customer master with wrong reconsiliation account in XD01. i failed when i am trying to change that reconsiliation account in XD02. it was suppressed. how to change the reconcilition account in customer master data?

    Hi,
    Go to this path: Spro>Financial Accounting>Account Receivable & Account Payable>Customer Accounts>Master Data>Preparations for Creating Customer Master Data>Define Account Groups with Screen Layout (Customers)
    Double Click on Your Group, Then Click on Company code Data under Field Status, Then Double click on Account Management, That screen you will find the Reconcilation Account, Select Requred Entry.
    now it will coming Customer master.
    It's useful assigne points as a way to say Thanks
    Regards
    gvr

  • How to lock the Printer of LaserJet Pro 500 Color MFP m570dw

    how to lock the Printer of LaserJet Pro 500 Color MFP m570dw

    You can set a control panel lock security level and password for your HP LaserJet series printer. To lock your printer, follow below link:
    http://h20564.www2.hp.com/hpsc/doc/public/display?​docId=emr_na-bpl03612

  • How to make like Encarta encyclopedia and basic screen settings and how to lock the documents in the entire data.

    dear guys how can i make like a off line Encarta encyclopedia and basic screen settings and how to lock the documents in the entire data in visual studio.                 
       thank you. 
                                                              Million
    Getu

    Dave,
    I will +1 Pixelan's products. They are great, simple, and have about the best support that I know of. When you explore, say Pixelan's SpiceMaster, dig deeply. Things appear rather mundane, on the surface, but there is so very much power lurking, just below the surface. I could almost imagine a 1000 page manual to cover every possible aspect of that program... Every time that I use it, I learn something new, and wonderful.
    Good luck,
    Hunt

  • How to make the GL account discription possible in FAGLL03 line item display?

    Dear Experts,
        Could you tell me how to make the GL account discription possible in FAGLL03 line item display?
        I checked the layout, there is no account discription.
        How should I do?
    Thanks!
    Xinling Zhang

    Hi
    One you execute FAGLL03, go to Settings>Layout>Current Header Rows
    You can add some predefine characteristics here.
    I am not sure why the hyperlink is not working at your end. But you can search the SDN for special fields in FAGLL03 and you can get lot of posts for this document.
    Regards
    Sanil Bhandari

  • How to rectify the  payable account not definderror in down payment request

    how to rectify the  payable account not definderror in down payment request

    If you talking about Down Payment Account not defined message then you will need to go to the Business Partner Master > Accounting tab and define the downpayment G/L account

  • How to get the form printed through the transaction ME42

    hi,
    How to get the form printed through the transaction ME42.
    For example :
    In t.code vf03 . In the main menu there is an option billing document , when we click on that we get a drop down menu which shows issue output to. If a print program call has the code to get the value from the t.code , immdiately when we click issue output to it call the form.

    Here go to ME42 put in your RFC no, in the menu Header -- Messages, go there and see if a message has been inserted, else you can insert one.
    when you save this, it will call the form.
    Regards,
    Ravi

  • How to find the db accounts using default passwords in oracle 10g

    Hi, can someone pleas tell me , how to find the oracle accounts in the database which are using default passwords. DB verion is 10g and 9i.
    in 11g version we can query the view DBA_USERS_WITH_DEFPWD to view the users....
    any idea in 10g and 9i ?
    thanks in advance.

    951658 wrote:
    Hi, can someone pleas tell me , how to find the oracle accounts in the database which are using default passwords. DB verion is 10g and 9i.
    in 11g version we can query the view DBA_USERS_WITH_DEFPWD to view the users....
    any idea in 10g and 9i ?
    thanks in advance.the only way I've found is to search the web for lists of default users and their passwords, then attempt to log on with said credentials. I'd start with Pete Finnigan's site (google is your friend). He may already have some scripts ready to go, or at least the lists you'd need to get started.

  • VISA: How to get the CSV file through C/C++ code?

    How to get the CSV file through C/C++ code?
    I'm communicating with a USB oscilloscope using VISA.

    Thank you for your reply.
    I am using Apache Commons File Upload. Here is the code where I got the "fi".
         DiskFileUpload fu = new DiskFileUpload();
              fu.setSizeMax(1000000000);
              List fileItems = fu.parseRequest(request);
             Iterator itr = fileItems.iterator();
              FileItem fi = (FileItem)itr.next();
              if(!fi.isFormField())
                File tempFileRef  = new File(fi.getName());
         System.out.println("Field = "+tempFileRef.getAbsolutePath());
         }

  • HT4085 how to lock the tauch screen with some password or dots like android to prevent misuse. And also screen lock to prevent interruption while watching movie reading books etc.

    how to lock the tauch screen with some password or dots like android to prevent misuse. And also screen lock to prevent interruption while watching movie reading books etc.

    You can set a passcode to be requied to unlock the iPad via Settings > General > Passcode Lock. In terms of locking the actual screen whilst using an app, then that isn't currently possible, but with iOS 6 in the Autumn there will be a new 'accessibility' feature (from here) which will allow you :
    ... to limit an iOS device to one app by disabling the Home button, as well as restrict touch input on certain areas of the screen

  • How to lock the Properties bar to a toolbar or in some other way, make it permanently open?

    How to lock the Properties bar to a toolbar or in some other way, make it permanently open?
    Or can that checkbox 'keep tool selected' be made a permanent toolbar item?
    I use the rubber stamp tool several times on multiple pages in certain pdfs and found that if I open the 'properties bar', I can select 'keep tool selected' and stamp away as much as I like without having to choose the stamp tool dropdown menu and select 'custom' each time I stamp. I appreciate the recent update that added a recently stamped stamps area and not having to click 'proceed' each time.

    You can't lock the Properties Bar, but you also don't need to in order to make the Stamp tool remain selected.
    Just right-click it in the Comment menu on the right and select "Keep Tool Selected".

  • How to make the GL accounts as CO-PA Relevant

    Dear Gurus,
    Please let me know how to make the GL accounts as CO-PA relevant, we need to book the sale provision
    Regards
    VSK

    Hi,
    Assignment of SD Condition Types to Value Fields: T Code KE4I
    1. To transfer condition types for sales revenues and sales deductions to COPA, you need to make sure that the condition types and linked to an account in FI that is also defined as a cost element of the category "11" (revenue element) or "12" (sales deduction) in CO. These condition types must be assigned to a CO-PA value field. Condition types linked to FI accounts that are defined as cost elements of another category are not transferred to CO-PA, even when the condition type has been assigned to a CO-PA value field.
    2. Condition types such as "VPRS" ("Cost") that are defined as statistical in SD are always transferred to CO-PA if they are assigned to a value field.
    3. All condition types that you want to transfer to CO-PA must be active in the SD pricing
    Thanks and Regards
    Binoj M D

  • How to revrse the documnt posted through the Depreciation run AFAB

    Hi,
    Please advise, how to revrse the documnt posted through the Depreciation posting using tcode AFAB.
    Thanks & Regards
    Jai

    Hi JayChandra
    Hope I gave my reply vide your earlier todays thread  Re: How to reverse the document posted through AFAB(Depreciation run)
    Please check  The answer is
    You can not reverse
    Make your correct changes in Asset Master/Depreciation data  and rerun AFAB
    System posts the difference

Maybe you are looking for

  • Column in apex_application_page_ir_rpt.report_columns not updated. Defect?

    Hi everyone, I discovered the following: I created an IR in my application. First I define the following query for the IR: SELECT * FROM apex_application_page_ir_rpt WHERE application_id = 22333 AND page_id = 2 That works fine. Then, I change my regi

  • Why?? 8.0.2 trouble

    Hi there, DW 8.0.2, PHP & mySQL. I have created a advanced search results page with the help of David Powers. He told me that there's a bug in this update regarding DW not coding correctly on the results page. For the results page, I had to hard code

  • Move music

    How do I move my music from one computer to another?  I used a USD drive to move most but not all will play.

  • Is correct this note???

    Hi SAP COMMUNITY In the transaction KEPM, on having executed the method of planning, with the strategy of planning of alisamiento exponential of the first order (constant model), the following mistake appears, PR402. I have searched in SAP NOTICE and

  • I Need Suggestions, Please...

    Hi ..I am having difficulty posting a new topic ..perhaps you can assist me. I have a G4 Quicksilver with 733 processor. when I bought this computer it did not have a combo drive (superdrive) installed. All I have in it is a CD R/W. I want to add a s