Is it possible to set identity template dynamically?

Hi,
I want to create accounts on LDAP through activesync.
I set identity template :[uid=$accountId$,ou=$category$,dc=....].
But I don't want to set category attribute in schema map of resource.
Is it possible to set $category$ attribute dynamically
depends on the value of other attribute without defining schema map??
thanks in advance.

Hi,
Absolutely possible, you could either create a field called global.category in your activeSync form or the way I'd do it which is to set the .identity field. In your activeSync form when you assign the LDAP resource to the user view you can a have a field called 'accounts[LDAP].identity' and then use an expansion event within this field to build your DN of the user account on LDAP.
HTH,
Paul

Similar Messages

Department and Division in Identity Template not updated

Hi all,
I was recently trying to populate the attributes Department and Division dynamically for Active Directory like AccountId by doing the following in Identity Template
cn=$accountId$,ou=$Department$,ou=$Division$,dc=com
But this doesn't seem to work . IDM doesn't seem to recognize this.
I will be glad if somebody can help me with this.
Thanks in advance!!
regards,
Zebra8

You're not alone, I have similar problem. Unfortunately, none of the forum posts that touch on this specific problem and/or say they found a solution, provide a specific (connect the dots) solution:
Assign users to virtual organisations? -- http://forum.java.sun.com/thread.jspa?forumID=764&threadID=5244414
missing attribute container required by the identity template for resource -- http://forum.java.sun.com/thread.jspa?forumID=764&threadID=5220580
missing attribute firstinitial required by identity template for resource -- http://forum.java.sun.com/thread.jspa?forumID=764&threadID=5164606
'i' in employeeId -- http://forum.java.sun.com/thread.jspa?forumID=764&threadID=5136857
Is it possible to set identity template dynamically? -- http://forum.java.sun.com/thread.jspa?forumID=764&threadID=5133235
Identity Template issue|http://forum.java.sun.com/thread.jspa?forumID=764&threadID=5110444
ActiveSync assigning and linking Active Directory accounts -- http://forum.java.sun.com/thread.jspa?forumID=764&threadID=5110302
Error during saving a user data -- http://forum.java.sun.com/thread.jspa?forumID=764&threadID=5100184
How to use a rule to generate ID for a resource? -- http://forum.java.sun.com/thread.jspa?forumID=764&threadID=5093491
Error While recon -- http://forum.java.sun.com/thread.jspa?forumID=764&threadID=5102663
LDAP Resource Account Creation -- http://forum.java.sun.com/thread.jspa?forumID=764&threadID=5117857
Multiple accounts on AD -- http://forum.java.sun.com/thread.jspa?forumID=764&threadID=5128583
multiple accounts for active directory -- http://forum.java.sun.com/thread.jspa?forumID=764&threadID=5163175
Flat File Active Sync Error -- http://forum.java.sun.com/thread.jspa?forumID=764&threadID=5054272
Problem changing user projects -- http://forum.java.sun.com/thread.jspa?forumID=764&threadID=5064478
Problem during provisioning -- http://forum.java.sun.com/thread.jspa?forumID=764&threadID=5219921
unable to get firstinitial in AD template -- http://forum.java.sun.com/thread.jspa?forumID=764&threadID=5165816
Place IDM USer in specific Active directory Container based on Department -- http://forum.java.sun.com/thread.jspa?forumID=764&threadID=5175931
Active Directory Error -- http://forum.java.sun.com/thread.jspa?forumID=764&threadID=5058048
Summary instructions (collected from these posts and IDM docs):
* the template is only used when an account is created
* any $attributes$ referenced in the template must be either IDM extended user attributes (i.e. always present) or in the associated resource schema map
* can also dynamically override the identity template using the attribute �accounts[<resource>].identity�
* if the attribute is only used for the template, set the schema mapping to IGNORE_ATTR to that IDM doesn�t try to provisioning the attribute
Some fuzzy/non-specific suggestions:
* may utilize workflows; i.e. modify the default create user workflow
* may involve the resource activeSync form
* suggestion that any referenced attributes need to be �global�; this either means set using �global.<attr>� syntax, they are marked as �required� in the schema map, and/or the the LDAP activeSync resource �populateGlobal� attribute is set to �true�
I'll post a solution when I figure it out.

Set Database path dynamically

Post Author: santoshk
CA Forum: Data Connectivity and SQL
Hi All,
I am using asp dot net 2.0 With craystalreport and C#.
While crating report i am giving server,databsename and all the credentials as per my computer. My crystal reports work fine.
But problem occurs when i try to run the crystalreport other than my machine. It always ask for databse password,server name.
Is it possible to set database path dynamically for sql server.
Please help me.
If anybody give me the detail procedure in c# ,it will be appriciated.
Waiting for reply.
thanks in advance

Post Author: DLO34
CA Forum: Data Connectivity and SQL
I recently came across this issue. I was able to get a
Crystal Report to work dynamically under limited conditions. If you create a
direct connect report for an Oracle database then, it will only connect to
other Oracle databases. The same is true for MSSQL and Sybase. When using the
CRPE or RDC API you must set the logon credentials for the report as a whole
and for each object within the report. Below is a snippet of my code C++ using
the RDC API. This should help get you going.
IReportPtr pReport;
IDatabaseTablesPtr pTables
IDatabaseTablePtr pTable
Int num_tables, i;
// set for whole report
pReport->Database->LogOnServer(DB_DLL, DB_Server_Name, DB_Name,
DB_User_Name, DB_Password);
pTables    = pReport->Database->GetTables();
num_tables = pReport->Database->Tables->Count;
for (i = 1; i <= num_tables; i++)
    pTable = pTables->GetItem(i);
    pTable->SetLogOnInfo(DB_DLL, DB_Server_Name, DB_Name,
DB_User_Name, DB_Password);   // set for each object

How to override AD identity template for resource contained in role?

This is yet another variation on the "I need to compute the container for my AD user, so how do I override the identity template?"
I have a relatively elegant hack (detailed below)...but it is a hack and I am worried about unintended consequences.
Details:
I am running an active sync on a database table representing our HR info. Based on info in the table, I am assigning business roles, such as faculty, staff. Those particular business roles contain an IT role which has an AD resource assigned to it. There are different depths in the tree for students (from the student information system, not HR) vs. employees, so I can't hack it by using AD Department and Division attributes in the identity template.
Unlike many of the other posts, I am not assigning the AD resource directly. That may not matter, but it feels like that gives it even more opportunity to lose track of the information I might compute on my active sync form.
I have tried a several things. These were the most promising so far:
1. Setting accounts[AD].identity in the active sync form. Looking with the IDE debugger, it's there and correct when I leave the active sync form. But by the time the Create User process is invoked, accounts[AD] is nowhere to be found in the user. I see it after I step over the provision task, so I'm looking for it in the right place. (Other attributes, like Description, get set in the active sync form, and are also ignored by the time the user is created.)
2. Something I thought for sure was going to work: I've mapped distinguishedName in the schema, and set it via a rule in the "Set attribute values" under the resources tab of the role. Then I set the identity template to $distinguishedName$. But that failed because it complained that distinguishedName didn't exist.
Here's the hack: If I use Description instead of distinguishedName in #2 above, it works: the user is created in the correct AD ou. But Description is abused, and that feels like it's going to be trouble someday. Also, setting the identity template to $Description$ is freaky.
What's the real way to do this? Do I use the hack except with a custom AD attribute so that Description isn't abused? Do I customize a Create User for my active sync form that sets accounts[AD].identity just prior to the provision task?
Thanks in advance. -Les

Steve and Paul: good ideas, and good insight. Thanks!
For the moment, I am going to pursue the path Steve suggested once I verify that I will be able to assign folks to groups outside of the root container assigned to the different adapter instances. (Employees can enroll in classes, and access to course-related objects is by group, therefore there will a group to assign that's outside of someone's root container...) I don't think this is a problem, though.
Also, I sort of expected that folks wanted something human-friendly in Division and Department attributes ("Business Office" vs. "buso"). I need to use the department code (not name) in the OU because the name is more likely to change over time, and I don't know how to tell the gateway to move a user between AD containers. I've seen references in the forum of doing that by turning an update into a rename operation, but I don't yet know enough about the product to do anything actionable with that piece of knowledge.
Thanks again! -Les

How to get the value of identity template

Hello,
i have a AD resource and i want to get the identity model value in a form. Is it possible to do it ?
Thanks

A Resource object has a method getIdentityTemplate but its result type won't be easy to use inside a form.
What kind of information are you exactly interested in?
For example if you need to know which resource attributes are part of the identity template, you can find this information directly in the user view, i.e. :
<ref>accountInfo.accounts[Active Directory].attributes[idTemplate=true].name</ref>

Adapter Modules: Set parameter values dynamic?

Hi everybody,
is it possible to set parameter values in adapter modules dynamic?
Thanks Regards
Mario

Hi all,
thanks for your replies.
My problem is not solved.
To make it clear,
I want to set an attachmentName in Mail receiver adapter WITHOUT using the MailPackage.
This is possible:
ModuleName:        localejbs/AF_Modules/MessageTransformBean
ModuleType:        LocalEnterpriseBean
ModuleKey:        CHAN
Parametername:        Transform.ContentDisposition
ParameterValue:        attachment; filename="NameOfAttachment.txt"
I want to set "NameOfAttachment.txt" dynamically. How can I achieve this? Thanks, regards
Mario

Set Notificaton Duration Dynamically in Guided Procedures

Hi,
Can anyone please let me know if it is possible to set the Duration of Notifcation dynamically in Guided Procedures?
For ex: I am triggering a e-mail when the action is not complete after 12 hours. I am setting this in the "Notification" tab of the Action. But looks like this is hardcoded and cannot be changed later. I want to give a option to the user to be able to configure this 12 hours instead of going through the change process when they want a different duration.
Please advice.
Regard,
Kumar.

Hi Kumar,
Using the following document for dynamic sending of Notification in GP, you will be able to figure out how to execute the code and configuration to action.
[Send Notification Dynamically|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/a0cfefa9-e700-2c10-5e81-deaef5094336;jsessionid=%28J2EE3414700%29ID1685135850DB00605893765975082321End]
Revert for any clarification.
Regards,
Tushar Sinha

WAD Templates - Dynamic Tabs !?

Hello BEx Experts,
I´m looking for a smart solution to switch the visability of several TAB´s in my WAD Template according to variable values.
Example:
we start our templates from an own developed monitor (bsp page) and call the WAD templates for several companies (0COMPANY). for every company we call the same template. that template includes ten TAB´s. and there starts our problem, because we would fading out some TAB´s for some companies. And we don´t want to create diffrent templates for all companies.
Any ideas?
BR david

hello,
thx for your reply, but both solutions doesn´t work.
1. It isn´t possible to set the TABPANEL visible / invisible, because there is no selectable object for the TAB. You could select the TABCONTAINER, but it isn´t possible to select a special TAB to set visible or invisible.
2. I don´t understand the solution with authorization customizing, because all users have the same authorization and the visibility of the TAB should depend on the companyselection.
However, we solved the issue with JavaScript. So it´s possible to set the TAB caption to invisible in reference to the selected company and so the tabpanal will be minimized.
BR
David

Setting "Segment Templates" on tables in physical model

Yesterday I set different "segment templates" to corresponding tables and indexes. It worked fine but, today, DDL generator does not apply them. Is it possible? Apparently, segment templates are easy to define and simple to set.
Thank you.
Bernat Fabregat

It is possible that "segment template" application were lost after closing and reopening.did you save your physical model? Usually it asks for that.
no sequences, no partitions, etcdo you see them in physical model? If not can you check design directories structure (for sequences) - are there files (*.xml) under directory "Sequence" - they are not directly in that directory - there are other directories with names like seg_0...
Philip

AutoScrolling of PanelLayout and setting Location of dynamically created controls

Hi, I have a question related to setting Location of dynamically created controls when my PanelLayout is scrolled down or up.
So basically I have wrote a code that lets me drag on control over other other and replace their's locations.
So I wanted to add possibility for user to dynamically add new controls (every new control is suppose to be 200px below previous) - everything is fine as long as I add them from upper section of my LayoutPanel (without scrolling) but when I try to add
them while I'm half dawn scrolled they are placed based on CURRENT left upper corner which is NOT a upper left corner of LayoutPanel therfore they are placed with wrong padding based on current scrolled position.
So my question is how can I avoid it and always add new controls based on LayoutPanel upper left corner? (I have already tried disabling AutoScroll while adding new control and enabling it back after adding - it works but I want to find PROPER way because
I'm sure there must be some kind of solution to it)
Thanks in advance.

Hi darekg11,
>> I have a question related to setting Location of dynamically created controls when my PanelLayout is scrolled down or up
I am wondering what the PanelLayout was, was it a “flowLayoutPanel” or “tableLayoutPanel”?
>> basically I have wrote a code that lets me drag on control over other other and replace their's locations
Did you mean you drag the control at runtime or at design time?
>> how can I avoid it and always add new controls based on LayoutPanel upper left corner
I could not reproduce your issue, and could you share us some key code or a simple demo to reproduce your issue?
I made a research about “scrolling panel”, and I think the link below might be useful to you:
# Scrolling Panel
http://www.codeproject.com/Articles/226381/Scrolling-Panel
Best Regards,
Edward
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click HERE to participate the survey.

Form Element Name, is it possible to set in "Column Attibutes" ?

Is it possible to set the "Form Element Name" for a column e.g. in tabular form in the "Column Attributes" which can be found from:
Page --> Report region --> Report Attributes --> and select Column --> Column Attributes: for the selected column.
The idea is to avoid coding the form element names with e.g. like:
SELECT APEX_ITEM.SELECT_LIST_FROM_LOV(2,job,'JOB_FLOW_LOV')
FROM emp
Where the 2 is the Form Element Name for the column and a bit confusingly to F02, which can be seen e.g. with Firebug.
Another question is that is it possible then to override the Form Element Name if the query has hardcoded different P_IDX in the apex_item.xxx ?
Perhaps it would be very good to have a mapping too in the "Report Attributes"l for the columns order vs. collections order vs. Form Element Name order .
rgrds Paavo

I want to have control over certain 'dimension type of' columns in the classic report / tabular form with APEX_ITEM.* in the sql for the report while some of the columns are from Collection with their collection column names. C001, C002 etc..
...clips
SELECT
APEX_ITEM.SELECT_LIST_FROM_LOV(35
,C035,'LOV_ANIMALS'
,'style="width:50px"','YES',NULL,NULL
,'f35_' || LPAD (seq_id, 4, '0'),NULL) animals
,to_number(c001) c001
,to_number(c002) c002
FROM apex_collections WHERE collection_name = 'SLEEPY_ANIMAL'
...clips
When there are several columns in the report, it is easier to maintain C001...columns appearance in the Report Attributes-->Column Attributes.
Oh yes, I have adapted Denes dynamic cascading lov for tabular forms which is the reason for having the "APEX_ITEM..." in the query and from some blog I read that it is very good to toss those 'dimension' type of columns to high-end numbers in the collection, so there will be space for the entry columns.
E.g. firstrow in the tabular form
c035 -- animals --> f35 --> f35_0001 (select list with lov LOV_ANIMALS)
c001 -- "what ever I have said in Column attributes"--> f01 --> f01_0001 (text area, editable column)
c002 -- "what ever I have said in Column attributes"--> f02 --> f02_0001 (text area, editable column)
So the numbering is the same for the www-form and collection columns.
Everything is ok if the columns c001 and c002 are editable e.g. 'text area' type, but if I change c001 to 'Display..' type then the order for item_id's change.
c035 -- animals --> f35 --> f35_0001
c001 -- "what ever I have said in Column attributes" (display as text (escape special chars...))
c002 -- "what ever I have said in Column attributes"--> f01 --> f01_0001
So now the collection column c002 accidentally is mapped to forms f01-column while I might assume it is f02.
rgrds Paavo

How to set target Url dynamically in submit button

hi,
I am using livecycle process to render a pdf form. The form has a submit button. Is it possible to set URL of submit button dynamically in a form? If yes how can i pass the target URL from process, dynamically while rendering the form? Can someone help me in this.
Thanks,
kripa

Hi,
Go to Tools > Embedded OC4J Server Preferences... > Global > Startup.
Look for the options in "Host Name or IP Address Used to Refer to Embedded OC4J".
William

Set Chart element dynamically

Hi,
Is it possible to reference an xml field in a chart element. For example I want to be able to set the axisMaxValue dynamically. I've tried several things including the following but to no avail.
<Y1Axis axisMaxAutoScaled="false" axisMaxValue="{(xdoxslt:group(.//ROW, 'GRAPH_MAX_VALUE'))}">
<ViewFormat scaleFactorUsed="true" scaleFactor="SCALEFACTOR_NONE"/>
</Y1Axis>
Thanks
Grant

Yes you can, I use this method to define a dynamic minimum value:
<Y1Axis lineWidth="1" lineColor="#DDDDDD" ascending="true"
axisLocation="AL_LEFT" visible="true"
axisMinAutoScaled="false" axisMaxAutoScaled="true">
<axisMinValue>
<xsl:value-of select="//ROW/GRAPH_MIN_VALUE"/>
</axisMinValue>
</Y1Axis>
Hope it helps!
DrPlexi

Identity Template

Is this template only used for the creation of users?
if my template for creating users on Active Directory is
cn=$upn$,ou=Siirto,dc=ad,dc=saku
$upn$ is the userprincipalname fetched from a field in FF Active Sync.
If a record in the FF has a changed upn then I would expect the AD entry to get a different DN but it dont seem to work that way.
Is it true that once the resource entry is created it is fixed - tied to the IdM account in the repository... even though its NAMING attribute alters?
This has big impact on LDAP resources where people can move departments and their DN changes e.g. from uid=EMP12345,ou=sales,o=acme to uid=EMP12345,ou=administration,o=acme

You can get the current user's identity on a resource from the User view variable accountInfo.accounts[<resname>].accountId, so you should be able to use that to compare with what the account's new identity should be, given the updated attrs from the FF active sync adapter.
Here's an example subprocess that you can use to invoke the rename user view. This example assumes the the identity templates for the user's resources use newLogin, newDepartment, and newDivision, so you'll need to change that.
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE Configuration PUBLIC 'waveset.dtd' 'waveset.dtd'>
<Configuration name="Training - Rename User">
  <Extension>
    <WFProcess name="Rename User" title="User Update Workflow">
      <Variable name="accountId" external="true">
        <Comments>AccountId of user to be renamed</Comments>
      </Variable>
      <Variable name="user.newLogin" external="true">
        <Comments>New common name of the user to be updated</Comments>
      </Variable>
      <Variable name="user.newDepartment" external="true">
        <Comments>New department in which to place user to be updated</Comments>
      </Variable>
      <Variable name="user.newDivision" external="true">
        <Comments>New division in which to place user to be updated</Comments>
      </Variable>
      <Variable name="renameView"/>
      <Activity name="start">
        <Transition to="Check if Move / Rename Applicable">
          <or>
            <ref>user.newDepartment</ref>
            <ref>user.newDivision</ref>
            <ref>user.newLogin</ref>
          </or>
        </Transition>
        <Transition to="end"/>
      </Activity>
      <Activity id="7" name="Check if Move / Rename Applicable">
        <Variable name="object"/>
        <Action id="0" application="com.waveset.session.WorkflowServices">
          <Argument name="op" value="getObject"/>
          <Argument name="type" value="User"/>
          <Argument name="name" value="$(accountId)"/>
        </Action>
        <Transition to="Rename / Move User">
          <and>
            <isFalse><ref>WF_ACTION_ERROR</ref></isFalse>
            <ref>object</ref>
            <rule name='Training:Check if Ready for Rename/Move'>
              <argument name="wsUser" value="$(object)"/>
            </rule>
          </and>
        </Transition>
        <Transition to="end"/>
      </Activity>
      <Activity id="8" name="Rename / Move User">
        <Comments>
          Current case owner has a lock on the object, so do not need to release the lock in order to
          checkout the user view.
        </Comments>
        <Variable name="WF_ACTION_ERROR"/>
        <Variable name="view"/>
        <Action id="0" name="Checkout Rename View" application="com.waveset.session.WorkflowServices">
          <Argument name="op" value="checkoutView"/>
          <Argument name="type" value="RenameUserViewer"/>
          <Argument name="id" value="$(accountId)"/>
          <Argument name="subject" value="$(WF_CASE_OWNER)"/>
          <Return from="view" to="renameView"/>
        </Action>
        <Transition to="Set Naming Attributes">
          <isnull>
            <ref>WF_ACTION_ERROR</ref>
          </isnull>
        </Transition>
        <Transition to="end"/>
      </Activity>
      <Activity name="Set Naming Attributes">
        <Action name="Set Parameters for Identity Rename">
          <expression>
            <block>
              <dolist name="resource">
                <ref>renameView.accounts[*].name</ref>
                <set>
                  <concat>
                    <s>renameView.resourceAccounts.currentResourceAccounts[</s>
                    <ref>resource</ref>
                    <s>].selected</s>
                  </concat>
                  <s>true</s>
                </set>
                <cond>
                  <ref>user.newLogin</ref>
                  <block>
                    <set name="renameView.resourceAccounts.currentResourceAccounts[Lighthouse].selected">
                      <s>true</s>
                    </set>
                    <set name="renameView.newAccountId">
                      <ref>user.newLogin</ref>
                    </set>
                    <set>
                      <concat>
                        <s>renameView.accounts[</s>
                        <ref>resource</ref>
                        <s>].login</s>
                      </concat>
                      <ref>user.newLogin</ref>
                    </set>
                    <set>
                      <concat>
                        <s>renameView.accounts[</s>
                        <ref>resource</ref>
                        <s>].accountId</s>
                      </concat>
                      <ref>user.newLogin</ref>
                    </set>
                  </block>
                </cond>
                <cond>
                  <ref>user.newDepartment</ref>
                  <set>
                    <concat>
                      <s>renameView.accounts[</s>
                      <ref>resource</ref>
                      <s>].department</s>
                    </concat>
                    <ref>user.newDepartment</ref>
                  </set>
                </cond>
                <cond>
                  <ref>user.newDivision</ref>
                  <set>
                    <concat>
                      <s>renameView.accounts[</s>
                      <ref>resource</ref>
                      <s>].division</s>
                    </concat>
                    <ref>user.newDivision</ref>
                  </set>
                </cond>
              </dolist>
            </block>
          </expression>
        </Action>
        <Action id="2" name="Checkin Rename View" application="com.waveset.session.WorkflowServices">
          <Argument name="op" value="checkinView"/>
          <Argument name="view" value="$(renameView)"/>
        </Action>
        <Transition to="end"/>
      </Activity>
      <Activity id="9" name="end">
        <WorkflowEditor x="375" y="10"/>
      </Activity>
    </WFProcess>
  </Extension>
  <MemberObjectGroups>
    <ObjectRef type="ObjectGroup" id="#ID#All" name="All"/>
  </MemberObjectGroups>
</Configuration>
Again, hope that helps.
sbr

Possible to set xkbvariant in x11vnc?

Hi fellow Archers... just wondering if anyone might know if there's any possibility for setting an xkbvariant in x11vnc. I'm trying to use my Arch server from my Mac laptop but can't find how to use the "us: mac" variant, considering it's even possible. Thanks.

Thanks Atul,
I don't see any BBPUM01 internet service here... I think you meant internet service BBPAT05 and HTML template bbpat05/99/sapbbpat05_1100.html, right?
I also looked at bbpglobal/99/sapbbpglobal_300.html in order to deactivate the user settings possibility completely. In the template coding I see IF statement on SER_SETTINGS_INACTIVE != "X"
In BBPU_USER_SETTINGS_ACTIVE I see in the coding that it's enabled / disabled depending on transaction authority on BBPAT05. This way I can disable user settings without the need of a modification.
Thanks + best regards,
Renaud

Is it possible to set identity template dynamically?

Similar Messages

Maybe you are looking for