I don't find User Extended attributes in IDM 8

Hi all,
I have installed idm8 and I need to extend the user attributes, but I can't find the User Extended Attributes object (or Extended User Attributes). Can anyone help me?

From the release notes :
Identity Manager 8.0 consolidates the locations where an administrator specifies extended,
queryable, and summary attributes for user objects into the new
IDM Schema Configuration object. (ID-17784) In prior versions of Identity Manager, an administrator
edited the User Extended Attributes configuration object to add extended attributes for
user objects and the UserUIConfig configuration object to specify additional queryable or
summary attributes for user objects. An administrator now edits the IDM Schema Configuration
object for these purposes.

Similar Messages

  • User Extended Attributes in IDM 7

    Has the set up changed? I imported all my objects from 6.0 and the user extended attributes aren't there. I imported the UserUIConfig object, so I would think they would be present. I noticed that the attributes tab moved in the new version, have the methods of defining them changed much?

    User Extended Attributes are typically defined in the object Configuration:User Extended Attributes. UserUIConfig is used e.g. to define if the attribute should be "Queryable" -but yes its a correct observation that the UserUIConfig is changing shapes...

  • Resource Attributes not saving in Queriable User Extended Attributes

    Howdy,
    I added a few queriable user extended attributes to IDM. I originally added them in through the configure user attributes interface. I then edited the UserUIConfig to specify that they were queryable. I then edited the User Search Defaults form's getSearchableAttrs function to include these attributes. My added attributes now show up in the search user form, etc., just like I expected them to. Next I configured a new resource adapter for a database table that contained some values I wanted to use to populate these queriable attributes. I wrote a correlation rule, and ran reconciliation on the new resource. It matched up the account entries and automatically matched and linked the account information. So far so good. However, the user extended attributes I defined are not getting populated with the data from the new resource. The mapped resource attributes are treated as part of the user view, but only under the given resource, not as a queriable attribute. I really want to be able to use the find user interface with these datafields. Does anyone know why my data is ot making it into the queriable fields? Do I need to write another rule or workflow? Any advice would be most helpful.
    Thanks!
    Jim

    Queryable attributes refer to attributes stored in the IDM user object, and so need to be referenced as such.
    If you want attribute 'foo' in resource 'bar' to be stored as a Queryable attribute, you need to define it like so in your User Form :
    <Field name='accounts[Lighthouse].foo'>
        <Expansion>
              <ref>accounts[bar].foo</ref>
        </Expansion>
    </Field>This should pull the value from the resource attribute and put it in the IDM attribute. If you refer to it as a global.foo everywhere, that might work (but I find globals to be problematic).
    Let me know if it works...
    Jason

  • IdM v7 and User Extended Attributes

    I did a demo install of IdM version 7.1 and when I looked under debug and then list 'Configuration' objects,
    I did not see 'User Extended Attributes' ?
    I thought this comes as part of IdM in a very basic simple format ?
    I've worked with IdM a fair amount, and don't every remember creating this file.
    Can someone confirm this ( one way or the other ) ?
    TIA

    The "IDM Schema Configuration" object is an IDM 8+ object only. The extended attributes have been completely changed between IDM 7 and IDM 8.
    In IDM 7.1 the extended attributes are stored in the Configuration object called "User Extended Attributes". The initial import and set up of your repository should have created it. By default there's a few extended attributes (like idmManager, etc) that are set up. On a fresh install you won't find the file in the sample directory. It's only in the repository. You should be able to see it from the debug page or by extracting the XML object from the repository directly using the lh command line tool. If not then something might have screwed up in the installation.
    However, the fact that you've got attributes called "IDMAttributeConfiguration" and "IDMObjectClassConfigurations" leads me to believe you've actually got an IDM 8 install, not an IDM 7 install. In which case, as Paul pointed out, your attributes are stored in the "IDM Schema Configuration" object. (Again, not found in the sample dir, only in the repository and is created on initial import.)

  • Fetch the User Extended Attribute" Group" Value in Java

    Hi All,
    I have been able to add a User Extended attribute in SIM and wish to fetch its value for a particular user in my java code.
    kindly help.
    Thanks
    Sunny

    Hi All,
    I am able to fetch the value of extended attribute "Group" of type "Select" I added in the Default User Form using user.getAttribute("Group") in my java code of Custom Resource Adapter.
    This extended attribute has groups name populated in it. What I am doing now is that I am fetching the Group name value and assing the user this group. This is working fine for me. However, In case user select a different group next time, I need to remove the user from old group and assign him the new group. For this, I need to have the old group value and new group value. I don't know how to retrieve the old group value?
    Any pointer on this will be helpful.
    Note: I have done the mapping of extended attribute "Group" in my Custom Resource Adapter.
    Regards,
    Sunny

  • Couldn't find user by attribute krb5principalname=host/.....

    Hi,
    Can anyone help ?
    I try to configure SPNEGO on our EP.
    but I am always get the following error:
    when I am using krb5principalname :
    Couldn't find user by attribute krb5principalname=host/.....
    when i change to kpnprefix :
    Couldn't find user by attribute kpnprefix = host/.....
    what is the cause of the error ?
    your help appreciated.
    Best regards,
    Dedi

    Hi all,
    The error has been solved after I am changing some configuration. But when I try to access the portal, it just hanging waiting for something.
    When I check on the defaultTrace.trc it prompt for password. (it is like asking password to access keytab file)
    password:
    Is anyone know, what is the problem ?
    Appreciate your help.
    Thanks in advanced,
    Dedi

  • Make user extended attribute available on the user report

    Hi,
    We have created a few user extended attributes for the client. The quyestion is how to make them available for select in a user report. Currently we configured a user report for approvers "approver report" and save the XML as TaskTemplate. How can I modify the xml to display user extended attributes? I tried the following but it did not work:
    In the task template xml, add the attribute (e.g., department) into
    <Attribute name='attrMapField'>
    <Map>
    <MapEntry key='attributes.department' value='Department'>
    </Map>
    </Attribute>
    <Attribute name='attrsToDisplay'>
    <List>
    <String>attributes.department</String>
    </List>
    </Attribute>
    Thank you.

    We will need to edit the TaskDefinition object named �User Report� with the id
    �#ID#TaskDefinition:UserSummary�.
    1) Insert the following xml directly above the field named �queryAttr.MemberObjectGroups.enabled�:
    <Field name='queryAttr.employeeId.enabled'>
    <Display class='Checkbox'/>
    </Field>
    <Field name='queryAttr.employeeId.operator'>
    <Display class='Select'>
    <Property name='title' value='Report only users whose employeeId '/>
    <Property name='noNewRow' value='true'/>
    <Property name='nullLabel' value='Please Select'/>
    <Property name='valueMap'>
    <ref>conditionsList</ref>
    </Property>
    </Display>
    <Expansion>
    <cond>
    <eq>
    <ref>queryAttr.employeeId.enabled</ref>
    <s>true</s>
    </eq>
    <ref>queryAttr.employeeId.operator</ref>
    <null/>
    </cond>
    </Expansion>
    </Field>
    <Field name='queryAttr.employeeId.value'>
    <Display class='Text'>
    <Property name='noNewRow' value='true'/>
    </Display>
    <Expansion>
    <cond>
    <eq>
    <ref>queryAttr.employeeId.enabled</ref>
    <s>true</s>
    </eq>
    <ref>queryAttr.employeeId.value</ref>
    <null/>
    </cond>
    </Expansion>
    </Field>
    2) Inside of the defvar named �attrMap� you will need to insert the following text:
    <MapEntry key='attributes.employeeId' value='Employee ID'/>
    3) Save the modifications.
    4) Check the "User Report" your attr will be available

  • Configuration of User Extended Attributes

    Hi ,
    I am very new to sun idm.
    Anyone please expain how to configure user extended attributes in sun idm 8.0
    Thanks in Advance,
    Ram.

    Hi,
    You now modify the "IDM Schema Configuration" object.
    See [http://docs.sun.com/source/820-2961/A_edit_configObjects.html#wp19336] for more information

  • Approval Limit of user - Extended Attributes

    Hello everyone,
           I would like to know the difference between standard values and local values for approval
    limit in extended attributes in PPOSA_BBP.  The standard value has 15000 AUD which is
    inherited by the organization unit under which the user is created.  Local value is 1000 AUD.
    What does this mean?  All users under the organization unit carry the same standard valu for
    approval limit but only head carries the local value which is 1000 AUD.
       Can anyone please answer to this.
    Thanks in Advance.

    Hi Priya,
    Even i checked in my system and i couldn't able to find much importance for standard value...system is considering only local values.....
    if you got the answer then please post it ...
    Thanks
    Ravi

  • User Extended Attribute maintenance through ActiveSync

    Following is happening in the activeSync process.
    There is an existing user in IDM with some defined attributes (as per the extended attrs pre-defined).
    If any of the user attributes does not have a value in the authoritative source and the user is processed via activeSync then whatever attrs does not hold a value in authoritative source that attr is completely deleted from the userObject xml in IDM
    It does not keep a trace in the userObject.
    Before the ActiveSync update process UserOBject has the following value.
    <Attribute name='Manager' type='string' value='Smith'/>
    If in the authoritative source for this user the manager becomes null then
    this entire attribute is removed from the xml.
    question here is :Is this a normal behaviour w.r.t ActiveSync Process?
    Should it not leave the attr trace in UserObject xml in the following way.
    <Attribute name='Manager' type='string' >
    </Attribute>
    If anyone can share their experience in this that would really help.

    Any one has noticed this issue in your system? Please help.
    Thanks,
    Arun

  • Custom report Extended Attribute

    Hi,
    On my user selection screen I just need a multiple selection box and user related data needs to be populated in it, can anybody guide me on this.
    Thanx

    Open BPE --
    click File - >
    --> OpenRepository Object
    ---> Forms
    --->EndUserMenu
    you can have a look at EndUserMenu
    if you want to display custom forms then you need
    login as configurator to administrator module
    Click configure Tab
    --->Forms and Process Mapping
    you can find EndUserMenu
    change the name of the EndUserMenu to your form name(should be uploaded to the IDM)
    for adding attributes to your User Object
    login to your http:\\localhost:8080\idm\debug pages then select
    ListObjects -->configuraton
    from the list of values select the User Extended Attributes for edit
    then you can add your Extended Attributes here. eg PassportNo
    <List>
    <String>firstname</String>
    <String>PassportNo</String>
    </List>
    </List>

  • Extended role attributes in IDM 8

    I managed to add extended attributes to standard role types(Role, ITRole). But when I'm trying to add extended attribute to my role type Role1, it doesn't work.
    Is it my problem or IDM 8 doesn't support extended attributes for custom role extensions?

    From the release notes :
    Identity Manager 8.0 consolidates the locations where an administrator specifies extended,
    queryable, and summary attributes for user objects into the new
    IDM Schema Configuration object. (ID-17784) In prior versions of Identity Manager, an administrator
    edited the User Extended Attributes configuration object to add extended attributes for
    user objects and the UserUIConfig configuration object to specify additional queryable or
    summary attributes for user objects. An administrator now edits the IDM Schema Configuration
    object for these purposes.

  • How to Update Extended Attributes For the Users in SRM Organization?

    Hi,
    I am using 'BBP_UPDATE_ATTRIBUTES' function module to load the Default Attributes for the users in a custom program. I am able to update many attributes like company code, Movement type, catalog id, material usage, shop on behalf of and address ship to. But I am having problem updating extended attributes Plants(Attribute ID 'WRK') and Storage Locations (Attribute ID 'LAG').
    Storage location and Plants has many values. Can anyone have experienced this problem before. I appreciate any help I get. I debugged enough and not able to find any other function module to do this.
    Thanks and Regards,
    Sreeni..

    Hi Sreeni,
    I'm stuck up in the same problem. Did you get any solution for this? If yes please provide the same.
    Regards,
    Gajendra
    Message was edited by: Gajendra Bhatt

  • How to find navigation's done by a user in a query SAP BI

    Hi All,
    I wanted to find out what kind of navigation's done by a user in a query? for example which free char is a user used in a query?
    How can i find that?
    Regards,
    Satish

    Hi,
    check following tables
    Table Name  Use of the table 
    RSZELTDIR
    Directory of the reporting component elements
    RSZELTTXT  Texts of reporting component elements 
    RSZELTXREF  Directory of query element references .
    To get a list of query elements built on that cube.filter by: OBJVERS = 'A', INFOCUBE= [stage:cubename] 
    RSRREPDIR
    Directory of all reports (Query GENUNIID) .
    To get all queries of a cube.filter by: OBJVERS = 'A', INFOCUBE= [stage:cubename] 
    RSZCOMPDIR  Directory of reporting components.
    To get query change status (version, last changed by, owner) of a cube. 
    RSZRANGE  Selection specification for an element 
    RSZSELECT
    Selection properties of an element
    RSZCOMPIC
    Assignment reuseable component <-> InfoCube 
    RSZELTPRIO  Priorities with element collisions
    RSZELTPROP  Element properties (settings)
    RSZELTATTR  Attribute selection per dimension element 
    RSZCALC  Definition of a formula element 
    RSZCEL   Query Designer: Directory of Cells 
    RSZGLOBV
    Global Variables in Reporting 
    RSZCHANGES  Change history of reporting components
    Thanks and regards
    Kiran

  • LDAP search cannot find entry by user "defined attribute"  or  "sounds like

    Hi, I have an JSP program that searches an LDAP Sun One Directory Server.
    All of my search filters ( by givenname,sn,mail and phone #) work fine with the search base set at the very top (root ) of my DIT tree.
    However with the same search base, searching by an "User Defined Attribute" fails to return anything (and note that my search filter includes the objectclass that goes with this user defined attribute)?
    Yet, if I change the search base so it points all the way down the DIT tree (maybe near RDN?), the "User Defined Attribute" search works fine ?
    Additionally, "sounds like" search filter (givenname~=) fails to find anything at
    the upper root search base of DIT. If I change the search base to point down in the DIT tree as I did above, the "sounds like" filter will work?
    I've tried everything I know?

    Hi Dora9,
    Thanks for your reply.
    I am glad that you have solved the problem and thanks for your share us the solution
    here, so it would be helpful for other members who get the same issue
    and we will close this case.
    In addition, I suggest you could try to get
    the issue confirmed and diagnose by product team. Would you please create connect report for it? You will get email notification for update from the product team experts:
    http://connect.microsoft.com/VisualStudio/feedback/CreateFeedback.aspx,
    if you submit it, you could share us the link here, so we could know the latest information from the Product team expert. And I will help you to vote it.
    Thanks for your understanding.
    Best Regards,
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

Maybe you are looking for