Link the existing AD account  before it tries to create

Hi guys,
In my project I need to AD re-links, Currently the solution is implemented in such a way that when the user is created in IDM ( Manually or through Trusted resource recon) the AD user creattion automatically gets triggered and AD user gets created and linked to the IDM account.
but when the user is already existing in AD it is throwing exception saying that the user already existting and it is failing to link that user account.
Hence we are planning to implement a solution that to check the user existance in AD first before it triggers AD User creation and link the AD account if it exists else create the AD account.
But I am not able to figure out where exactly the system is configured to trigger the AD user creation process.
If any one implmented AD connector and this kind of Automatic AD User Creation implementation please help me, I am little new to OIM.
Thanks,
Edited by: user11989196 on Feb 9, 2010 11:19 AM

1) Well for linking the existing user in AD to the OIM users, you would want to run the AD Target Resource Reconciliation and that is something you should do. Here is a reason for that: AD generates a run time value GUID and thats precisely a key field for AD connector for future reconciliations. If you are using this field then better run this scheduler and you are all set for future tasks as well.
2) Now there is another field which may be used for reconciliation rule- SAMAccountName and this is what is causing this error for you. You can anyway build a custom process task in the OOTB connector which checks the validity of the AD ID (SAMAccountName). For your case if ID is found to be existing then just call another dummy process task Link User which is mapped to an adapter that just returns Success and the Task to object status mapping should be set to Provisioned for response Completed and so your process form attributes are intact and resource status shows as Provisioned. Next update task for this user runs successfully.
But here is the deal, your AD and OIM are not in sync, so you have to run a scheduler AD Target Resource Reconciliation anyway.
So better is just suppress the logic for Access policy invocation for initial user reconciliation and have all these users created in OIM. Now run AD Target Resource Reconciliation scheduler, this links those accounts to OIM user. Now your target AD and OIM are in sync. Just re-set those access policies and you are all set.
Thanks
Sunny

Similar Messages

  • My daughter created an itunes apple id but gave the wrong email so now I can't go to the email and verify her itunes account. I tried to create a new email with the email she put in and I can't because its already taken..,..help

    My daughter created an itunes apple id but gave the wrong email so now I can't go to the email and verify her itunes account. I tried to create a new email with the email she put in and I can't because its already taken..,..help

    Hi JkeeneSoldano,
    Thank you for visiting Apple Support Communities.
    To regain access to your Apple ID, try to reset your password using one of these methods:
    Answer your security questions. Use these steps if you know the answers to your security questions.
    Use email authentication. We'll send you an email that you can use to change your password.
    Use two-step verification. If you set up two-step verification, you can use it to change your password. You just need your recovery key and a trusted device.
    From:
    If you forgot your Apple ID password - Apple Support
    If you need to use the email verification method but don't receive the reset email, see this link for more help:
    If you didn't receive your verification or reset email - Apple Support
    Best Regards,
    Jeremy

  • Can i use a 2nd iphone if i install itunes on another user account.when i tried to create a second library i messed up both phones, the second one now has all my contacts and when it sends txts it either says its my other phone or email address

    can i use a 2nd iphone if i install itunes on another user account.when i tried to create a second library i messed up both phones, the second one now has all my contacts and when it sends txts it either says its my other phone or email address. i can cope with the first phone and getting it back on itunes but dont want to syn the 2nd phone until i know it is independant of the other one. Does it matter that both phones use the same itunes store account?

    Deleting the account on your phone only removes if from your phone.  The account and it's data remain intact and doing so will not effect your daughter's phone.
    To do this, first go to Settings>iCloud on your phone and turn any synced data (contacts, calendars, etc.) to Off, and when prompted, choose to keep the data on the phone.  When finished, scroll to the bottom and tap Delete Account.  Then set up a new iCloud account with a different Apple ID and turn any data you want to sync with iCloud (contact, calendars, etc.) back to On.  This will upload your data to your new iCloud account.

  • I tried to make a second library, but my first one was deleted so I did it again but now I have doubles of every song. How do I restore my itunes back to the way it was before I tried to make a 2nd library?

    Like I said I tryed to make another library, I did what Itunes told me to do but it only erased the library I had and made a new one. So I did it again but I now have duplicates of every song. How do I get my it back to the way it was, before I tried to make a second library?

    C:\Users\Cheye\Music\iTunes should be the original library. You should be able to connect to it as follows.
    Close iTunes, wait a few seconds, click the icon that starts iTunes and immediately press and hold down the shift key. Keep holding until asked to choose or create a library. Click choose and browse to the file C:\Users\Cheye\Music\iTunes\iTunes Library.itl.
    Depending upon exactly what you did this has either restored your library, or done absolutely nothing at all. That was the reason for asking you to check using the script.
    Assuming you still have a library full of dupes there are a number of ways to go. I've written a script called DeDuper which can help remove unwanted duplicates which I discuss in some detail in this  thread. While it should work it will be ideal if it discards the copies that are outside the media folder C:\Users\Cheye\Music\iTunes\iTunes\iTunes Media. I've a feeling it will do exactly that, but it depends in part on exactly you got into this mess. It would be worth doing a few sample runs of just a few sets of duplicate files first.
    tt2

  • Tables linking the invoice and accounting document

    Hi,
    Can anyone tell me tables linking the invoice and accounting details table BSEG?
    Regards,
    Shanu

    Following BSEG fields can be found in VBRK
    MANDT
    BUKRS
    BELNR
    GJAHR
    ZUONR
    VBUND
    VBELN
    ZTERM
    ZLSCH
    BVTYP
    MSCHL
    MANSP
    MABER
    STCEG
    XEGDR
    KKBER
    KIDNO
    BUPLA
    Similarly following fields can be found in VBRP
    MANDT
    VBELN
    thanks
    G. Lakshmipathi

  • HT3965 I have an ipod with itunes loaded on it.  I bought a new iphone 5C and want to set it up.  It wants me to create a new account.  Should I create a new account or use the existing ipod account?

    I have an ipod with itunes and apps loaded on it.  I bought a new iphone 5c and want to set it up.  It wants me to create a new account.  Should I create a new accountor use the existing ipod account?

    If you want you're apps and content on you're iPhone then use you're existing account. If not then create a new account.

  • How to delete the existing list values before binding

    Hi,
    I'm new for flex..
    i like to know how to delete(clear) the existing list data values before binding the new values..
    I'm using the list for binding data dynamically by using http services.if i send the another call mean's the exiting item should be flushed and  coming  data item's would be binded into the same list...
    Thank's in advance....
    Regard's
    mani

    Hello
    On your ResultEvent method you can add something like this:
    private function onResultEvent(event:ResultEvent) : void
         yourBindableList = null;
         yourBindableList = event.result as ArrayCollection();
    In this code i send to my BindableList a null value before i setter to list the result of my HTTPService, making a cast to ArrayCollection.
    Regards

  • New mac linked to existing xsereve account

    Our xserve was set up by someone who no longer works for the company. We had a break in the other night and 2 of our macs were stolen. When the replacements arrive how do  I set them up to log in to the existing xserve user accounts?

    Hello, markfromhuddersfield, and welcome to the AppleBoards,
    There's no easy way to answer that question without knowing a lot about your current set-up.
    Do user's home directories reside on the server?Then the new computers need to be bound to the server using Directory
    Are files simply being shared over AFP or other methods?Then new users simply need to connect to the server via Connect to Server
    Is your server handling DHCP and DNS?New machines will need to have the networking set correctly to function in your environment
    Is your server handling SSO/Kerb over OD, printing management or other services?
    You really need someone to examine the computers currently attached to the network and then replicate that to the new computers. It should be pretty straightforward for someone who knows what they're looking for to determine proper set-up from your remaining computers.
    Good luck,
    =Tod
    PS General OS X Server questions can go in that discussion group and you'll probably get more people reading it rather than in the Xserve/Server group which is often about the things particular to servers themselves.

  • Can I save notes in the Notes App, using my existing iCloud account and not have to create a new email?

    Hello,
    I recently purchased an iPhone 5 and I'm having trouble with my Notes.
    After making some notes and saving them, I synced to my iTunes and the notes were not on the phone any more. When I go into the Settings menu, in the iCloud section, clicking on Notes asks me to create a new iCloud email. I have an iCloud account already and I don't want to have to manage multiple email addresses. Is there a way for me to get the Notes to save and sync without making another email account?

    I believe that the creation of an icloud email address is the method by which the notes are stored.  This would be transparent to you, as you do not have to give the email address out, or use the email account.  So, if you wish to sync notes with icloud (and have them available on the web interface as well as your other devices), you can create the email and turn it on. If you don't use it, you shouldn't need to check it.
    HTH

  • Replacing an old Mac Mini and getting the new Mac to reference the existing iTunes account stored on a NAS drive.

    I'm getting rid of an old Mac Mini which has it's iTunes library stored on a NAS drive. I want the replacement Mac to reference and use this existing NAS stored iTunes library rather than loading the entire contents onto the new Mac. What do I need to do?

    Open iTunes with the option key pressed. You should see a window asking you to choose a library, create a library and cancel. Select choose a library and navigate to the NAS drive.

  • Can i link the same aol account to two macbooks

    Hi,
    We have a MacBook and MacBook pro.  We share a family AOL email account and would like it to download to mail in both computers.  What will happen if we do this?  Will they become out of sync?  I'm mostly worried about getting all the input on both computers.  Wouldn't want us to miss incoming mail or have it be somehow deleted if it was read in one, but not the other.  Don't care if they become out of sync because we've deleted something in one but not the other.
    Thanks!

    Go to your OS community & post in the Mail section.

  • HT201304 Hi, i have the latest iPad and I am trying to create an iTunes account but I'm having problems doing so. I am in Jamaica and don't know if my location is affecting my access.  PLEASE HELP!!!!!

    Can somebody please help me to create an iTunes account. I have the new iPad and I livein Jamaica, I don't know if my location is interfering with my access. Can somebody help?

    idk what happened but now it's fine lol sorry

  • Can you help with the coding please? I am trying to create a moveable pin by clicking and dragging.

    import mx.transitions.Tween;
    import mx.transitions.easing.*;
    /* Mouse Click Event
    Clicking on the specified symbol instance executes a function in which you can add your own custom code.
    Instructions:
    1. Add your custom code on a new line after the line that says "// Start your custom code" below.
    The code will execute when the symbol instance is clicked.
    gage.addEventListener(MouseEvent.CLICK, fl_MouseClickHandler);
    function fl_MouseClickHandler(event:MouseEvent):void
    // Start your custom code
    // This example code displays the words "Mouse clicked" in the Output panel.
    trace("Mouse clicked");
    // End your custom code
    function rotation(350, 182) {
       return Math.atan2(dy, dx) * 180/Math.PI;
    gage.onRelease = function() {
       var newAngle:Number = rotation(_xmouse-this._x, _ymouse-this._y);
       var dist:Number = Math.abs(newAngle - this._rotation);
       this._rotation %= 360;
       if(dist > 180)     {
          if(newAngle > this._rotation) {
             newAngle -= 180;
          } else {
             newAngle += 180;
       new Tween(this, "_rotation", Strong.easeOut, this._rotation, newAngle, 1, true);

    You appear to have just collected a variety of code snippets and thrown them together, including a section of AS2 code ( gage.onRelease = function() {... )
    The suggestion I offered yesterday still stands.  You should find a tutorial regarding AS3 and the atan2 function.  Beyond that, what you show suggests this is a school assignment.  You should seek help from your fellow students and instructor if that is the case.

  • Internal error: The parameter is not valid When Trying to Create an Offline Cube

    Hello,
    Can someone Please help me Understand the error which am getting while Creating an offline cube?
    My script is somewhat like this
    CREATE global CUBE [ABCoffline]
    Storage 'C:\Test\Testing\abc.cub'
    FROM [abc]
    MEASURE  [abc].[A],
    MEASURE [abc].[B],
    MEASURE [abc].[C],
    MEASURE  [abc].[D],  
    DIMENSION [abc].[D1],
    DIMENSION [abc].[D2]
    If I remove the measure D am able to create cube.However if I include the measure am not able to and getting the error
    Adding More information. My relationship between the dimensions and fact goes like this
    can someone please advise!!

    Hi Chris,
    According to your description, the cube works fine, you can connect to it in client application. The only issue is that counter the error when create a local cube based on it, right?
    In your scenario, which version of SQL Server are you using? Only with the dimple error message, it's hard to analyze this issue. In order to narrow down the issue, please apply the latest services and cumulative updates based on your SQL Server version.
    You can troubleshoot this issue by using the Windows Event logs and msmdsrv.log.
    You can access Windows Event logs via "Administrative Tools" --> "Event Viewer".  SSAS error messages will appear in the application log.
    The msmdsrv.log file for the SSAS instance that can be found in \log folder of the instance. (C:\Program Files\Microsoft SQL Server\MSAS10.MSSQLSERVER\OLAP\Log)
    Here is a blog about data collection for troubleshooting Analysis Services issues, please see:
    Data collection for troubleshooting Analysis Services issues
    Regards,
    Charlie Liao
    TechNet Community Support

  • Following the most recent IOS IPhone update our Iphone calendars, contacts and messages have all merged. This problem has never happened before. We all use the same Itunes account as a family and one AppleID. Does anyone know the cause of this problem?

    We have 4 Iphones. As a family we have happily shared the same ITunes account and one AppleID. After the most recent iPhone IOS update all our contacts and calendars have merged and we randomly receive some messages that one of us has sent to another contact.
    This is causing chaos.
    Can anyone help me with:
    1. Has anyone experienced a similar problem recently?
    2. The records to the individual phones have not been saved been saved separately. After this merging of all the data into one composite record, is there anyway to reverse the change and restore the phones to just their individual records?
    3. I guess that the cause may be the common AppleID. I have tried to create my own AppleID but my personal email address is already linked to the existing AppleID so I am blocked from setting up a separate AppleID in my own name. Does anyone know how I can get around this block?
    4. Would it be better to create a separate Apple ICloud address for each of us as well? How do I do this?
    Many thanks in anticipation,
    Peter

    This is exactly what happens when sharing a single Apple ID for iCloud and iMessage.  Why would you expect any different?

Maybe you are looking for

  • Exchange 2010 can't send or receive email with attachments.

    Hello, We have an Exchange 2010 server, running under Windows 2008R2. Both the server and Exchange are current for Windows and Exchange updates. Exchange is on SP3 installed about a month ago with no errors reported in the event logs. The problem is

  • Requests per minute in idle conditions in EM

    Hello Gurus, We are having an issue where in our Financial Reporting server is going down after throwing an Out of memory error in the logs in Weblogic. We have been monitoring the Financial Reporting service in the Weblogic console and in the Enterp

  • Double-Clicking to play a song puts it in a different order

    Whenever I double-click on a song to play it, it moves that song down to the last song of that album. It does this in both my iTunes library and in the music on my iPod. So, it's reordering the songs in all of my music and I don't know how to change

  • Mystery HDD usage

    hello all, I haev an old Powermac G4/533 that i use as a file server, and it also does some light local stuff ( runs scanner etc.) Has 10.3.latest on it. Two internal HDDs - 40 GB main; 80 GB backup.  Plus an external FW 2 TB that is used as a NFS. H

  • Mass change recipient and unloading point on material

    Hello Experts, Is there a way to mass change recipient and unloading point on materials in PS? It is quite a task to go into every parts general data screen and enter it there rgds GAR