Importing User attributes from OIM 9101 to 11g

hi all,
I need to import/create all the User attributes(UDFs) present in the OIM 9101 version to OIM 11g. Is there any way this can be achieved using deployment manager? Looking to avoid creating all of them manually again,as that would be a time consuming/error prone task.
Looking forward to your replies.
Thanks,
Anuj.

Hi,
I think, you better create it manually in OIM11g and higher environments. The UDF import in 11g is unstable..some times it works..and some times it disappears..and when you try to create UDF after import, It will make your life hell.
I really had very bad experience with OIM 11g UDF export/import.
Regards,
J

Similar Messages

Provision a multivalued attribute from OIM to OID

Hi,
I have a requirement to provision a new multivalued attribute from OIM to OID.
Steps followed:
Created a child form
Attached child form to the OID Parent form
Created a process task adapter.
Created a task in process definition and the attached the adapter
Adapter code.
public String addChildData(tcDataProvider ioDatabase, long procInstKey, long childDefKey){
          try{
               tcFormInstanceOperationsIntf formInstOper = (tcFormInstanceOperationsIntf)tcUtilityFactory.getUtility(ioDatabase, "Thor.API.Operations.tcFormInstanceOperationsIntf");
               HashMap testval = new HashMap();
               testval.put("UD_TESTCHIL_TESTGROUP","abcd2134");
               System.out.println("testval..."+testval);
               long formreturn = formInstOper.addProcessFormChildData(childDefKey,procInstKey,testval);
               System.out.println("formreturn" +formreturn);
          catch(Exception e){
               System.out.println("exce" +e);
          return "Success";
After attaching while provisioning I am seeing both parent and child forms. I have provided the values and its successfully provisioning.
But how I can provision the new OID multivalued attribute. We have to do any setting in the lookup?
Regards,
KK

Just create your new adapter for add and delete from this new child table just like the other triggered tasks. If it's a multi value on the user profile, use the adapter for Add Multi Value Attribute that comes with the connector. In the property name, put in your multi value attribute name, and map the value from the child table.
-Kevin

Custom user attribute from ABAP to Portal UME

Hi All,
We have choose the ABAP as the data source for portal UME. We have a custom user attribute in the abap. Now i want to bring that custom user attribute from abap to custom user attribute in the UME.
Any help will be rewarded.
Thanks
Sarang.

Any resolution to this issue?

Copy user attribute from different user to user currently being edited

Dear all,
I'm somehow stuck with a requirement I've to implement.
I've to copy some user attributes from one user to another. I learned that I should be able to use "getResourceObject" for
this and I tried to implement this in my user form:
<Field name='otherUser_actvtGrps'>
<Display class='Text'>
<Property name='title' value='otherUser_actvtGrps'/>
</Display>
<Default>
<set name='otheruser'>
<invoke name='getResourceObject' class='com.waveset.ui.FormUtil'>
<select>
<ref>context</ref>
<ref>:display.session</ref>
</select>
<s>SAP_System_A</s> 
<s>User</s>
<s>TemplateUser</s> 
<null/>
</invoke>
<ref>otheruser.user.attributes.activityGroups</ref> 
</set>
</Default>
</Field>
But this does not return anything..
Any ideas what I did wrong ?
Many many thanks for any help/ideas !
Best regards
Joerg

Do you know where to get some docs about the topics you mentioned ?
1. Your adapter might not to support Resource Objects of type User.ResourceReference manual, the "Resource Object Management" section in each adapter chapter. Also the resource description in XML has the ObjectTypes section, for example, for Active Directory adapters:
<ObjectTypes>
    <ObjectType name="Group" nameKey="UI_RESOURCE_OBJECT_TYPE_GROUP" icon="group">
      <ObjectClasses operator="AND">
        <ObjectClass name="Group"/>
      </ObjectClasses>
      <ObjectFeatures>
        <ObjectFeature name="create"/>
        <ObjectFeature name="update"/>
        <ObjectFeature name="delete"/>
      </ObjectFeatures>
      <ObjectAttributes idAttr="distinguishedName" displayNameAttr="samAccountName" descriptionAttr="description" objectClassAttr="objectclass">
        <ObjectAttribute name="cn" type="string"/>
        <ObjectAttribute name="sAMAccountName" type="string"/>
2. You can fetch the complete user view with all resource account information.You will find many examples in IdM XPRESS samples.
Get user view using LighthouseContext and user accountId
<invoke name='getView'>
<invoke name='getLighthouseContext'>
    <ref>WF_CONTEXT</ref>
</invoke>
<concat>
    <s>UserViewer:</s>
    <ref>accountId</ref>
</concat>
<Map>
</Map>
</invoke>Or with WorkflowServices (see BusinessAdministration manual):
<Action id='0' application='com.waveset.session.WorkflowServices'>
<Argument name='op' value='getView'/>
<Argument name='viewId'>
    <concat>
      <s>User:</s>
      <ref>accountId</ref>
    </concat>
</Argument>
<Return from='view' to='user'/>
</Action>
3. You can fetch resource account info directly using ResourceAdapter API (not too well documented way).Example in Java:
    LighthouseContext ctx = <get context here>;
    // Get resource object
    Resource res = (Resource) ctx.getObject(Type.RESOURCE, <resource name>);
    // Pack resource and user accountId into a ResourceInfo object
    WSUser user = new WSUser();
    ResourceInfo info = new ResourceInfo();
    info.setAccountId(accountId);
    info.setResource(res);
    info.setAttributes(null);
    user.setResourceInfo(new ResourceInfo[] {info});
    // Rertrieve ResourceAdapter object
    ResourceAdapter ra = ResourceOp.findAdapter(res, res.getCache());
    // Get account info into the 'user' object
    WSUser result = ra.getUser(user);
    // Now you can get account status from ResourceInfo ...
    info = result.getResourceInfo(res);
    // ... and account attributes from WSAttributes
    WSAttributes attributes = result.getWSAttributes();
    ...

Importing User settings from one CC user into another

Hi There,
I want to import user settings from one account, then use those as a base to setup user setting for another. IE I want to use my settings from work [which I did not pay for] and use that as a starting point for my personal user account at my home office [which I did pay for].
I'm concerned about messing up my work settings + at home I'm on a laptop, not a 2 display tower.
Specificaly, its the custom keyboard, sequence and output, and loging colums/metadata display settings that I'd love not to have to setup from scratch, again.
Also, I have co workers who prefer my settings and I'd like to share these with them- but don't want them to be signed in as me, and messing me up accidentaly.
Many Thanks
David

OK so this does not work. I'm running CC, on OSX 10.8.3.
For those that don't know, in order to reveal the library folder in OSX 10.7+, you need to either enter this into terminal:
Permanent Reveal:
chflags nohidden ~/Library/
Permanent Hide:
chflags hidden ~/Library
Or hold down option key + finder/go, for temporary reveal.
So after doing this, and coying over the directories Jax mentioned [+ '7.0' folders, as I'm in CC], I'm still not getting the keyboard mappings, just the defaults.
I've just synced with my work account, and brought up another issue: My scratch disks and media paths are all different on my home office, and I don't want to have to reset those everytime I switch from one location to another.
If I could get what Jax sudgested to work, that would be an exelent work arround for this situation. Otherwise its a feature request for managing syncing between multiple accounts...
Thanks again Jax for tyring to help

Get user details from OIM User From based on Last modified time stamp

Hi Gurus,
I have a requirement that i want user details from OIM(11gr1) User form based on some time stamp.
suppose my time stamp is 201401011130.
And i changed one user in user form at 201401011200 (let sau user name is mahesh)
now when i run the java code based on the time stamp i want mahesh details. How can i do this.
Please let me know.
Regards
Mahesh

This is how you can run sql query.
String query="write sql query";
Connection con=Platform.getOperationalDS().getConnection();
Statement st=con.prepareStatement(query); // PreparedStatement is preferable instead of Statement
ResultSet rs=st.executeQuery();
while(rs.next())
String userlogin =rs.String("usr_login");

How to import user profiles from external sources(other than AD) into SharePoint

Hi,
I want to import user profiles from external sources other than AD.
Badri

You have to use BCS for importing the profiles,
Check the following link with explanations
http://msdn.microsoft.com/en-us/magazine/ee819133.aspx
Please Mark it as answer if this reply helps you in resolving the issue,It will help other users facing similar problem

Export User Attributes in OIM 11g

Hi,
Can anyone let me know how to export User defined attributes in OIM 11g (11.1.1.5)? I couldn't find option in export manager for user defined fields (as in 9.x version).

bbagaria wrote:
madhatter wrote:
BTW, the result of exporting the "User UDF" category contains the /file/User.xml too. So, you need not deal with metadata directly to get this file.Interesting, never worked for me.Use the code snippet in the Export section at http://idmclub.wikidot.com/import-export-deployment-artifacts
Use "User UDF" instead of "Resource". You will get something like the following:
<?xml version="1.0" encoding="UTF-8"?>
<xl-ddm-data version="2.0.0.0" user="XELSYSADM" database="jdbc:oracle:thin:@localhost:1521/orcl" exported-date="1312490747931" description="">
<Form repo-type="RDBMS" name="USR" subtype="User UDF">
<SDK_ORC>0</SDK_ORC>
<SDK_SCHEMA>DEV_OIM</SDK_SCHEMA>
<SDK_DATA_LEVEL>2</SDK_DATA_LEVEL>
<SDK_DESCRIPTION>Users - User Defined Fields</SDK_DESCRIPTION>
<SDK_UPDATE>1304799781000</SDK_UPDATE>
<SDK_ACTIVE_VERSION>0</SDK_ACTIVE_VERSION>
<SDK_LATEST_VERSION>0</SDK_LATEST_VERSION>
<SDK_TYPE>S</SDK_TYPE>
<FormField repo-type="RDBMS" name="USR_UDF_LS_CHG_CODE">
</FormField>
<FormAdministrator repo-type="RDBMS">
</FormAdministrator>
</Form>
<UserXml repo-type="MDS" name="User" mds-path="/file" mds-file="User.xml">
<completeXml>
<UserXml>
<entity-definition xmlns="http://www.oracle.com/schema/oim/entity">
</entity-definition>
</UserXml>
</completeXml>
</UserXml>
<DataObjectDef repo-type="RDBMS" name="com.thortech.xl.dataobj.tcUSR">
</DataObjectDef>
</xl-ddm-data>Enjoy the UserXml XML element!
Disclaimer: I use 11.1.1.3, not 11.1.1.5
Edited by: madhatter on Aug 5, 2011 1:10 AM

How to update attributes from OIM to AD in case of LDAPSync

Hi All,
In our scenario, we have LDAPSync configured for OIM AD Integration. OIM version is OIM 11gR2 PS1 (11.1.2.1.0.0)
It is working fine and On user creation in OIM ,RealTime user creation under specified container in AD is happening.It is SSL enabled,so password is also getting updated from OIM to AD.
But we have following conflicting scenario --
- As per our requirement we have to generate random password for User in OIM. For that we have PostProcess event handler implemented in OIM.
- We have tested LDAPSync by creating user manually through OIM console. While creating user manually, we have provided value for password attribute along with other attributes.
So, password attribute in AD will get updated for User along with all other attributes values mapped for AD from OIM.
- But, in our scenario random password is generated for User through OIM post process event handler and it will be updated again in user profile of user created manually in OIM. This password is sent to User through mail.
As this password event handler will get triggered after LDAPSnyc only, this password will not be update in AD for manually created user in OIM. So he can log into OIM with this new password but not to AD system.
He will be able to login to AD system with same User ID but with password which was set at time of manual User Creation in OIM and not with the password updated in OIM user profile by PostProcess event handler.
Is it possible to set password for user through PreProcess even handler implementation for Random Password generation. In this case also , the default OIM post process
password generator will override the PreProcess event handler.How to resolve this issue.
Also,when AD connector is in place in OIM environment we would be having change/update tasks for any attribute update to be send from OIM to AD.
How this update scenario will be implemented from OIM to AD in case of LDAPSync ?
Please provide any helpful pointer on this.
Thanks,
RPB

Password :
Increase order of calling for custom password event handler than OOTB handler.
Update:
you wanted to update custom fields?
Did you check default update tasks comes with connector?

Importing users & groups from one OID to another

I was wondering what's the fastest and most efficient way of exporting all users, groups, classes & attributes from one OID server and importing them into another OID server. In another way i just need to synchronize both OID servers with the same data. what's the fastest and best way to achieve that please?

Just use the gray installer discs that came with one of the computers.
Note that you must then remove from the first computer as you have only a license for one computer.

Accessing user attributes from a pipeline component

Hello,
I'm using WLCS & WLPS 3.1. I use webflow and I have implemented the page
transition myself to work with the portal. Everything is working fine.
I'm planning to implement a complex step of a business process as a pipeline
component. For various reasons, this PC will be implemented as an EJB. To
perform its job, this PC needs to get information about the user that is
currently logged in. More specifically, it needs to lookup custom attributes
from the user profile (i.e. user property set).
So my question is : is this possible directly from the PC, or do I have to
populate the pipeline session with required information in the input
processor?
Thank you for your advice
Nicolas

Hello Ture,
Thanks for both posts.
Nicolas
"Ture Hoefner" <[email protected]> wrote in message
news:[email protected]..
... To perform its job, this PC needs to get information about the userthat
is
currently logged in. More specifically, it needs to lookup customattributes
from the user profile (i.e. user property set).
So my question is : is this possible directly from the PC, or do I haveto
populate the pipeline session with required information in the input
processor?Hello Nicolas,
I have not tried this myself. I think that the disconnect between the
pipeline session and the portal session is probably the fact that theattributes
in the portal session have their keys "fixed up" by prepending the portal
request URI. This is made possible by the
com.beasys.commerce.foundation.flow.jsp.DefaultDestinationDeterminer,which the
PortalDestinationDeterminer extends. It puts a "TRAFFIC.URI" attributeinto the
each request that goes through the FlowManagerServlet for the portal. Inthe
Acme exampleportal, the "SERVICEMANAGER.USER" attribute is put into theportal
HttpSession as "exampleportal.SERVICEMANAGER.USER".
If you want to get to the cached profile from your portal from yourpipeline
component (PC) then you would have to know that the name is "fixed up" tobe
"exampleportal.CACHED_PROFILE". There are probably several different waysyou
could get the "TRAFFIC.URI" information to your PC.
Ture Hoefner
BEA Systems, Inc.
2590 Pearl St.
Suite 110
Boulder, CO 80302
www.bea.com

Getting User Attributes from an Active Directory LDAP

Hello all.
I want to extract attributes assigned to a user in the Active Directory LDAP and make them available through the getPropertyValue property in Javascript. I know that a user's System Attributes can be accessed with getPropertyValue but I have not found a way to get specific attributes from the LDAP and make them available as specific attributes in xMII. System attributes like "EmailAddress1" seem to transfer from the LDAP but others don't. Anyone have any ideas?
Thanks.
...Sparks

Sparks,
If you're using 11.5 or 12 actually they should all map into the system as session properties. You can use the following URL to verify your session properties:
http://<xMIIServer>/Lighthammer/PropertyAccessServlet?Mode=List
If you are not seeing the attributes you expect then your Attribute Query for User or Role is incorrect for your LDAP system and you need to change the LDAP configuration queries.
-Sam

Want to import Class Attributes from ERP to PI

Hi all,
I'm publishing Asset Information from SAP to PI to an external system.
The information includes EQUNR,SERNR, TIDNR and Partner information.
In PI I manually defined a DataType in PI of Asset and then created a service definition.
I then generated a proxy in ERP to publish the Asset.
I have generated a class in SE24 ZCL_EQUI and created a publish method which calls the client Proxy and it works fine.
Here is my question
Can you import the data definitions(attributes) of the class into PI (similar to how you can import RFC and idocs)?
The reason I ask is rather than manually definining the message Type in PI it would be much more convenient to import it from the class ZCL_EQUI.
This way the data would have the same types and I could update PI from SAP.
I know this may seem a little backwards but it would be useful in this case(think of it as similar to importing an idoc definition).
One approach I could take is to create a Service Definition for the constructor method (which takes in the Equipment Number and returns all the information). I could then publish that to ESR and import the WSDL into PI and then use the data definitions for the publishing of the equipment. ( a little longwinded but it should work).
However it looks like for creating the service defintion I'd have to create a function module (RFC enabled) which calls the class.
I can't see an easy way to create the service definition straight from the class.
So in summary I suppose I have a couple of questions
1) Is there a way in PI to import data structures from ERP?
2) Is there a way in PI to import attributes from classes?
3) Is there a way to create a service defintion straight from a class (or do you always have to wrap it in a function module)?
4) Is there a way to generate a WSDL from a class?
If you have any links or documentation I should read, please let me know.
Thanks in advance for any help.
Regards,
John

Hi John,
the answer to all your questions is: No.
The idea of PI ESR is having a development point for all interfaces. So if you need a data type in ERP, you should rather define the data type in ESR and generate a structure type in ERP with SPROXY.

Editing LDAP User attributes from UME interface

Hi Gurus,
We want to develop a solution with user management screens in WD. These screens will provide password reset and unlock functionality for users. Our users are stored in LDAP. Current connection to LDAP is in Read Only manner.
I want to know
1. How to enable the connection from UME to LDAP in read/write manner?
2. What certificates need to be exchanged for write access? if any?
3. What changes needs to be done in config file of UME?
4. Which permissions should be granted for communication user to edit LDAP user attributes?
Even after performing the change to read LDAP in read/write manner, will it be sure: If we lock user from UME, it will lock LDAP user? please comment.
regards
Kedar Kulkarni

Hi,
We are half way into our application between UME and LDAP. We have developed screens and tested in our internal server. In internal landscape, UME is connected to LDAP in read only fashion. So when we try to create User, it gets created in UME.
But when we deploy same application into client landscape, we receive error as below:
No data source feels responsible for principal. Please check the data source configuration
Now we are not sure why this error is getting displayed.
In client landscape there are 2 LDAPs connected to UME, with only one LDAP in read/ write access.
Is there any way we can check which LDAP is being accessed by our code? Is there any concept of Default LDAP?
Any code to access LDAP details will help us lot.
regards
Kedar Kulkarni

Imported User accounts from 10.6 Server not usable

Hello,
I have exported Users and Groups from 10.6 Server and import them using WGM to Lion Server. These users are not usable (for example if you try to login to Webmail or create an e-mail account to Apple Mail), in logs we get:
Mar 29 15:48:02 email dovecot[4311]: auth: Error: od(USERNAME,192.168.11.8): validate response: lookup failed for user: USERNAME
Any solution?
Best regards
Kostas

Hi
You've not said whether the Mail Service is running on your 10.7 Server but did you reset your users' passwords after importing and did you set the appropriate SACLs for those imported users using the Server.App?
WGM is not as effective in 10.7 as it was in 10.6. This is because Apple deprecated it in readiness for Profile Manager. They had to re-introduce it a short time later in a slightly modified form because of the outcry from the US education sector. What this means is you can't really use it confidenctly like before.
FWIW I've found using WGM in conjunction with Server.App and Server Admin works fairly reliably rather than using WGM alone. So what does that mean? Try clearing the users out of WGM and re-import them into the Server.App instead. Define access to services from there and hopefully things should start to work again?
HTH?
Tony

Importing User attributes from OIM 9101 to 11g

Similar Messages

Maybe you are looking for