How to map orphan accounts in OIM 11g automatically ?

Hello experts,
Is there a way or any scheduled job meant for mapping the orphan accounts automatically to user resource profile ?
Consider the following scenario
1. Ran a full target recon to get all users says 100 no.s from Siebel
2. Consider some 50 corresponding users present in OIM for which Siebel accounts are mapped
3. Remaining 50 accounts are orphan and is there a way if a corresponding users are created in OIM can map these accounts automatically to them ? or do we need to run another full target recon again ?. Please suggest.
Thanks
DK

There are two ways:
Either you rerun schedule task after the users are created.
Or click reapply event in reconciliation manager for each user which will be tedious and time consuming.
regards,
GP

Similar Messages

How to create Authorization policy using OIM 11g API

Hi,
Could you please let me know how to create Authorization policy using OIM 11g API.
Thanks

Constructing A Policy Programmatically
http://docs.oracle.com/cd/E27559_01/dev.1112/e27154/cons_policy_prog.htm#CHDHACBF
api ref for PolicyStore
http://docs.oracle.com/cd/E21764_01/apirefs.1111/e22649/oracle/security/jps/service/policystore/PolicyStore.html#createApplicationPolicy_java_lang_String_
something like below code to start with
try {
JpsContextFactory ctxFact;
ctxFact = JpsContextFactory.getContextFactory();
JpsContext ctx;
ctx = ctxFact.getContext();
PolicyStore ps = ctx.getServiceInstance(PolicyStore.class);
if (ps == null) {
// if no policy store instance configured in jps-config.xml
System.out.println("no policy store instance configured");
return;
ApplicationPolicy ap = ps.createApplicationPolicy("Trading", "Trading
Application","Trading Application.");
} catch (JpsException e) {
}

How to check connector connectivity in OIM 11g

Hi All,
How to check connector connectivity in OIM 11g. In erlier version we have XIMDD from where we can test connectivity. But I dont see anything in 11g.
Thanks.

Noway ! !
Go to:
*<Oracle-Weblogic-Middleware-Home>\Oracle_IDM\server\features\Xellerate.zip* & you can find the XIMDD.war

How to Deploy the Scheduler Task OIM 11g

Hi.
I have deployed the scheduler task in OIM 11g and also I have configured the Scheduler task in OIM Admin Console. The Java Scheduler class was not invoked when I run the Scheduler task.
I have done the following configuration to develop and deploy the scheduler task in OIM.
1) Developing the Java Class File.
package edu.sfsu.oim11g.scheduler;
import java.util.HashMap;
import oracle.iam.scheduler.vo.TaskSupport;
import edu.sfsu.oim11g.logger.SfsuLogger;
public class SfsuTrustedSourceReconciliation extends TaskSupport {
     //private Logger logger= Logger.getLogger(SfsuTrustedSourceReconciliation.class);
     private SfsuLogger logger= new SfsuLogger("SFSU-LOGGER");
     private String className=this.getClass().getCanonicalName();
     private String methodName="";
     public SfsuTrustedSourceReconciliation() {
          methodName="SfsuTrustedSourceReconciliation";
          debug("SfsuTrustedSourceReconciliation() Called");
     @Override
     public void execute(HashMap arg0) throws Exception {
          // TODO Auto-generated method stub
          methodName="execute";
          debug("SfsuTrustedSourceReconciliation Arguments "+arg0);
     @Override
     public HashMap getAttributes() {
          // TODO Auto-generated method stub
          return null;
     @Override
     public void setAttributes() {
          // TODO Auto-generated method stub
     private void debug(Object message)
          logger.info(className+" : "+methodName+" : "+message);
2) Custom Scheduler XML File
This file is located in
/home/oracle/confg_files/schedulers/db/SfsuTrustedSourceReconciliation.xml
<scheduledTasks xmlns="http://xmlns.oracle.com/oim/scheduler">
     <task>
     <name>SfsuTrustedSourceReconciliation</name>
          <class>edu.sfsu.oim11g.scheduler.SfsuTrustedSourceReconciliation</class>
          <description>Reconciliation IDSync Data</description>
          <retry>5</retry>
          <parameters>
               <string-param required="true" encrypted="false" helpText="Source Data Source">Source Resource Data Source Name</string-param>
               <string-param required="true" encrypted="false" helpText="Config Data Source">Config Resource Data Source Name</string-param>
               <string-param required="true" encrypted="false" helpText="Reconciliation Type is Full Or Cincremental. Default is Incremental">Reconciliation Type</string-param>
               <number-param required="true" encrypted="false" helpText="Max Records" >Max Records</number-param>
          </parameters>
     </task>
</scheduledTasks>
3) Plugin File Configuration.
<?xml version="1.0" encoding="UTF-8"?>
<oimplugins>
<plugins pluginpoint="oracle.iam.platform.kernel.spi.EventHandler">
<plugin pluginclass="edu.sfsu.oim11g.eventhandlers.SfsuPostProcessEventHandler" version="1.0" name="SfsuPostprocessExtension"/>
</plugins>
<plugins pluginpoint="oracle.iam.scheduler.vo.TaskSupport">
<plugin pluginclass="edu.sfsu.oim11g.scheduler.SfsuTrustedSourceReconciliation" version="1.0" name="SfsuTrustedSourceReconciliation"/>
</plugins>
</oimplugins>
The event handler is successfully deployed and working fine without any issue.
4) making the scheduler jar file.
5) Making the scheduler zip with the following directory format.
plugin.xml
lib/scheduler.jar
6) Registering the Schedule task and event handler as a Plugin.
ant -f pluginregistration.xml register
7) Importing the SfsuTrustedSourceReconciliation.xml file into the MDS.
7.1) weblogic.properties
wls_servername=oim_server1
application_name=oim
metadata_from_loc=/home/oracle/configfiles/schedulers
7.2) Running the weblogicImportMetadata.sh file
It imported the SfsuTrustedSourceReconciliation.xml file into the MDS Schema and it is available in the MDS_PATH table in MDS schema
Path_Name : SfsuTrustedSourceReconciliation.xml
PATH_FULL : /db/SfsuTrustedSourceReconciliation.xml
8) Imported the EventHandlers.xml file into the MDS Schema.
9) Run the PurgeCache.sh file
10) Restarted the OIM Server.
11) Loggin into the OIM Admin Console and Created the Scheduler job based on the SfsuTrustedSourceReconciliation listed in the scheduler.
12) Run the Scheduler job and log file entries are not logged into the log file. My Log File Configuration
<log_handler name='sfsu-handler' level='FINEST' class='oracle.core.ojdl.logging.ODLHandlerFactory'>
<property name='logreader:' value='off'/>
<property name='path' value='/u01/app/wl-10.3.5.0/Oracle/Middleware/user_projects/domains/oim_domain/servers/oim_server1/logs/sfsu-connector.log'/>
<property name='format' value='ODL-Text'/>
<property name='useThreadName' value='true'/>
<property name='locale' value='en'/>
<property name='maxFileSize' value='5242880'/>
<property name='maxLogSize' value='52428800'/>
<property name='encoding' value='UTF-8'/>
</log_handler>
<logger name="SFSU-LOGGER" level="FINEST" useParentHandlers="false">
<handler name="sfsu-handler"/>
<handler name="console-handler"/>
</logger>
Is there any special configuration Do i need to do invoke my Scheduler Java Class File.
Help is Greatly Appreciated.

Seems like you did it all right but just piece which if you can modify and test. The plugin.xml has two artifacts eventhandler and the schduler. Can you try creating separate plugin.xml with one for the scheduler zipped up with /lib/scheduleClass.jar and test it?
Just deregister everything before trying it and let us know how it goes.
Also the logger as I see is a custom logger, so it is extending the OOTB Logger? Just put some sysouts in the code and check for those in the server out file to be sure.
Edited by: bbagaria on Jul 22, 2011 5:15 PM

How to delete Justification field in OIM 11g screen

Hi,
I have one requirement to remove the Justification field in last screen while submitting the request for a resource in OIM 11g
any idea how to do it?
Thanks for your help.

Please try this:
OIM Advanced -> System Management -> System Configuration -> Search: *just*
"Indicator to skip the justification page" -> Value: true -> SAVE
Managed object: Deployment Manager/System Property/SkipRequestJustificationStep
NOTE: I'm checking on 11.1.1.5.5, but I wouldn't expect it to be different
Yash

How to obtain Role name in OIM 11g using API's

Hello,
I have a scenario in which I create Role/Group in OIM 11g & it gets provisioned in AD [=works fine] & other part is when i delete role in OIM 11g then it should
get deleted from AD.I have written postprocess event handler to achieve this.
In role creation part i get all parameters using "orchestration.getParameters();" , but when i delete role then "orchestration.getParameters();" is empty,so i am
not able to get role name.
Is there a way to get role name while deleting roles using API ?
Thanks,
Rahul Shah

Hi Raghav,
Following is my code :
tcRODetails = orgOpInterface.getObjects(organizationKey);
for(int i = 0;i < tcRODetails.getRowCount();i++){
tcRODetails.goToRow(i);
// resourceName=AD Group
if(resourceName.equalsIgnoreCase(tcRODetails.getStringValue("Objects.Name"))&&
tcRODetails.getStringValue("Objects.Object Status.Status").equalsIgnoreCase("Provisioned")||
tcRODetails.getStringValue("Objects.Object Status.Status").equalsIgnoreCase("Enabled")) {
System.out.println("<<<FOUND>>>");
processKey = tcRODetails.getLongValue("Process Instance.Key");
provisionObjectKey = tcRODetails.getLongValue("Objects.Key");
tcProcessSet = oimFormUtility.getProcessFormData(processKey);
for(int j=0;j<tcProcessSet.getRowCount();j++){
tcProcessSet.goToRow(j);
if(grpName.equalsIgnoreCase(tcProcessSet.getStringValue("UD_ADGRP_NAME"))){
System.out.println("MATCH FOUND!!!!!");
orgOpInterface.removeObjectAllowed(organizationKey,provisionObjectKey);
break;
& i get following error :
<Mar 22, 2012 1:54:43 PM IST> <Error> <XELLERATE.APIS> <BEA-000000> <Class/Method: tcOrganizationOperationsBean/removeObjectAllowed encounter some problems: Object with key=7 is not already set as an allowed object for Organization with key=1>
Thanks
Rahul Shah

How to Deploy the Event Handlers OIM 11g

Hi
I have developed the code for post process event handler using OIM 11 G API. The OIM not invoking the EventHandlers while updating the users attribute or creating the users attribute.
I have done the following task to develop and deploy the OIM 11g Event handlers. They are
1) Implementing the PostProcessHandler interface and provide the implementation of execute method.
Sample Class
public class SamplePostProcessEventHandler implements PostProcessHandler {
     private Logger logger=Logger.getLogger("TEST-LOGGER");
     public SfsuPostProcessEventHandler()
          logger.debug("Invoking Event Handler Plugin");
     @Override
     public boolean cancel(long arg0, long arg1,
               AbstractGenericOrchestration arg2) {
          // TODO Auto-generated method stub
          return false;
     @Override
     public void compensate(long arg0, long arg1,
               AbstractGenericOrchestration arg2) {
          // TODO Auto-generated method stub
     @Override
     public EventResult execute(long processid, long eventid, Orchestration orchestration) {
          // TODO Auto-generated method stub
          logger.debug("Operation "+orchestration.getOperation());
          logger.debug("Parameters "+orchestration.getInterEventData());
          logger.debug("Parameters "+orchestration.getParameters());
          EventResult result=new EventResult();
          return result;
     @Override
     public BulkEventResult execute(long arg0, long arg1, BulkOrchestration arg2) {
          // TODO Auto-generated method stub
          return null;
     @Override
     public void initialize(HashMap<String, String> arg0) {
          // TODO Auto-generated method stub
2) Create the Jar File SamplePostProcessEventHandler.jar
3) Create the Plugin.xml file
Sample File
<?xml version="1.0" encoding="UTF-8"?>
<oimplugins>
<plugins pluginpoint="oracle.iam.platform.kernel.spi.EventHandler">
<plugin pluginclass="test.eventhandlers.SamplePostProcessEventHandler" version="1.0" name="SamplePostProcessEventHandler">
</plugin>
</plugins>
</oimplugins>
4) Create the directory lib and copy the SamplePostProcessEventHandler.jar file into this directory
5) Creating the Zip file with the following directory structure.
plugin.xml
lib/SamplePostProcessEventHandler.jar
6) Register the plugin
ant -f pluginregistration.xml register
7) Creating the Custom Events xml file called EventHandlers.xml
<?xml version='1.0' encoding='UTF-8'?>
<eventhandlers>
<action-handler class="test.eventhandlers.SamplePostProcessEventHandler" entity-type="User" operation="CREATE" name="SamplePostProcessEventHandler" stage="postprocess" order="LAST" sync="TRUE"/>
<action-handler class="test.eventhandlers.SamplePostProcessEventHandler" entity-type="User" operation="MODIFY" name="SamplePostProcessEventHandler" stage="postprocess" order="LAST" sync="TRUE"/>
</eventhandlers>
8) Importing the Above XML into the MDS Schema Using the weblogicImportMetadata.sh file
Directory Structure of the Event Handler Schema File
/home/oracle/eventhandler/db/EventHandlers.xml
weblogic.properties file parameters
wls_servername=oim_server1
application_name=oim
metadata_from_loc=/home/oracle/eventhandler
9) Finnally Running the PurgeCache.sh All
10) Restarted the OIM Server.
11) Testing
I have logged into the OIM Admin Console >> Search the User > Update the First Name. The event handlers are not invoked any create or update operation. I am not able to see the log entries into the log file.
My Log Entry Configuration.
log File Configuration :
/u01/app/wl-10.3.5.0/Oracle/Middleware/user_projects/domains/oim_domain/config/fmwconfig/servers/oim_server1/logging.xml
<log_handler name='test-handler' level='FINEST' class='oracle.core.ojdl.logging.ODLHandlerFactory'>
<property name='logreader:' value='off'/>
<property name='path' value='/u01/app/wl-10.3.5.0/Oracle/Middleware/user_projects/domains/oim_domain/servers/oim_server1/logs/test-event.log'/>
<property name='format' value='ODL-Text'/>
<property name='useThreadName' value='true'/>
<property name='locale' value='en'/>
<property name='maxFileSize' value='5242880'/>
<property name='maxLogSize' value='52428800'/>
<property name='encoding' value='UTF-8'/>
<logger name="TEST-LOGGER" level="FINEST" useParentHandlers="false">
<handler name="test-handler"/>
<handler name="console-handler"/>
</logger>
Is there anything is missing while deploying the event handlers.
Help is Greatly appreciated.

Change as per the following :
1. Put the event hander in the /home/oracle/eventhandler /metadata/metadata directory and
2. Change the following in the weblogic properties
application_name=OIMMetadata
metadata_from_loc to =/home/oracle/eventhandler/metadata
This will work.

Mapping Adapter Variables form: OIM 11g

I have created a Rule Generator adaptor. Which Form should I attach this adapter to if I want it to process the Xellerate users?
I tried using the Users form, the Users.User Defined Tasks, Data Object Manager form and a few others. I don't see the option to Map the variables to values from the User Definition fields (i.e. User Login, User Key etc.) in any of these forms. The only options available are Literal or Entity Field.

I see a form called Event Handler Manager...is that the one? When I include my adapter in there for this form, I still see the same options (Literal or Entity Field).
My Rule Generator adapter is checking if a user being created or updated is a manager. (So if his USR_KEY exists as USR_MANAGER_KEY in the db). The Variable USR_KEY is set to Resolve as Runtime. I just need to map it in the right form.
In the older versions of OIM I could simply map this in the Users form. Don't see that option in 11g.
Any suggestions?

How to recreate deleted users in OIM 11g

Hi Team,
Unforchunately I deleted one user in OIM production .It OIM database the user status is "deleted" (USR table). so please advise me how to recreate the user or how to change the status in database
Thanks in advance.
Regards,
Ravi.

It's quite unfortunate...Because all the other Resources too might have been Revoked due to it....
Change the User Login in the Database itself... Let the next cycle of Trusted Source recon create this user and provision all resources....
Or better try another approach...
Change the status of USR_STATUS from Deleted to Active in Database... Execute the "Evaluate User Policy" to again re-Provision the Revoked accounts....
And communicate it to the client as well, if possible...

How to enable email notification in OIM 11g

Hello,
I am currently working in a stock 11.1.1.3.0 environment, and am trying to enable email notifications when a user requests to be provisioned to AD.
The default approver is Xelsysadm, and I have put my email address in this account's slot. However, I'm not receiving any emails during the request process.
How do I enable emails to be sent to the approvers?
Thanks!

try below
1. set the value of system property RequestNotificationLevel=1 (1=enable, 0=disable) bydefault it is 0
2. create An IT resource of name "Email Server" and type "Mail Server" must be configured for sending notifications
3. provide the server detail(IP address will be enough) in above it resource
there are the default request template "Request Creation" which will trigger in this scenario.
for configuring custom notification template and details follow below links
http://docs.oracle.com/cd/E28389_01/doc.1111/e14308/notification.htm
--nayan

How to update UDF in OID11g(OIM 11g configured with LDAP SYNC)

Hi All,
I have configured OIM11g with LDAP SYNC and it is working fine. i have added some UDF on the user creation form and the same attributes has been created on OID as well. Now, when i create users on OIM with these custom attributes the values are not getting updated on OID resource, can anyone please let me know how to update these attributes on OID?
Thanks in advance,

to Update a UDF you must assign a copy value adpter in Lookup.USR_PROCESS_TRIGGERS（design console / lookup definition）
eg.
CODE --------------------------DECODE
USR_UDF_MYATTR1----- Change MYATTR1
USR_UDF_MYATTR2----- Change MYATTR2
Edited by: Lighting Cui on 2011-8-3 上午12:25

How to Map ERP account group on SAP Cloud for customer

I am puzzled that i do not find a way to configure ERP Account Groups to SAP Cloud for Customer solution. Am i missing something or some workaround is possible to do have that available in a ERP<-> HCI <-> C4C scenario.
Regards
Apoorva

Hello Apoorva
This is the Business Partner Role Code - it maps to customizing in ERP for:
Logistics - General -> Business Partner -> Customers -> Control -> Define Account Groups and Field Selection for Customers
-ginger

How to delete SOA composite from OIM 11g

Hello,
I modified an exisiting SOA composite and deployed it as a new version. Now I have 2 versions of the same composite available in OIM. I then went and undeployed the original (version 1) from the EM interface. I also deleted it from the deployed-composites and WLuser folder.
Even after restarting the OIM/SOA servers, I can see the old version available in OIM. (Even though it's not deployed in SOA)
How do I get rid of it completely? In Ch 21 of the OIM documentation, there are instruction to disable a composite. Is that the only option?
Thanks!

Probably. Does disabling=deleting in OIM?
I was expecting it not to show up if the composite is not deployed on my SOA server...but it still is available. So looks like there is no real-time check (or check at any time, even at restart) of deployed composites between OIM and SOA. I could potentially have many undeployed composites still show up in OIM, assign them to templates etc. even if they don't exist anymore in SOA.

How to get task status in OIM 11g

Hi
I would like to know how many times the task has been completed for a provisioning operation. I have a provisioning task which triggers multiple times on child table entries. I am looking for the way to get the no. of time the task has been completed during provisioning. Can you please share the code or query.
Thanks in advance

Each task instance is tracked in the OSI table.
select usr.usr_login, usr.usr_display_name, obj.obj_name, mil.mil_name, sch.sch_data, to_char(sch.sch_create, 'mm-dd-yyyy hh:mi:ss')
from osi, mil, sch, orc, pkg, obj, usr
where osi.mil_key=mil.mil_key
and osi.sch_key=sch.sch_key
and mil.mil_name=:mil_name
and osi.pkg_key=pkg.pkg_key
and pkg.obj_key=obj.obj_key
and obj.obj_name=:obj_name
and sch.sch_data status in ('C','UC','MC')
and osi.orc_key=orc.orc_key
and orc.usr_key=usr.usr_key
-Kevin

OIM 11g - automatically provision a user with AD

Hi everyone,
I'm a newbie with OIM and to begin, I would like to provision a user with my AD directly after we create him on OIM. So I created an Access Policy for the resource AD User with the correct Ad Server and the correct Organization and I affect it for All Users. When I create a new user and I give some additional informations like the address, phone number, email for example, this user is well provisioned on my AD but the only informations which are provisioned are his login, his first name, his last name and none of the others.
I don't understand why. Do I have to set up an adaptater for this ? I've also checked Auto Save and Auto Pre-populate in the Process Definition but I don't know if it's the right thing to do.
If you can help me with this. (I know this is a really "newbie" question but it'll help me a lot to understand OIM basics functionalities)
Thanks a lot !
Thibault

I don't think that Oracle has used any kind of Java Code for this. You can simply create Logical task to achieve the same.
Anyways AD Connector comes with two jar files and you can get thsoe JARs from Connector Pack itself or from Database.
Go through Design Console guide for details.
And also for your use case follow steps:
Go to Form Design
Search UD_ADUSER
Create New Version
Save
Go to Prepopulate Tab
Click Add
Select your attribute
Adapter as ADCS Populate First Name, Rule as Default, Order as integer value say 7
Save
Do mapping of variable with User Definition > Field Name

How to map orphan accounts in OIM 11g automatically ?

Similar Messages

Maybe you are looking for