Lookup Population in OIM

Hi,
i have created lookup definition say Lookup.Department
I want to populate this field with some values in custom table.( a table say Department, created in the database which was used during OIM installation)
what steps do i need to follow

hi i am taking this solution from nitesh post
The example I am taking here is to have a lookup from a custom table "access_table" containing three columns access_id, descritption and groupname (this is the column stating which group has access to which switch)
Steps to follow:
1. Mandatory properties to specify are :
a) Lookup Query e.g.
select distinct a.access_id, a.description from access_table a, usg b, ugp c, usr d where c.ugp_name = a.group_name and b.ugp_key = c.ugp_key and b.usr_key = d.usr_key and d.usr_status ='Active' and d.USR_LOGIN = '$Requester Information.User Login$'
b) Column captions e.g. Access ID, Description
This will ensure that in the lookup table displayed in UI will have two columns Access Id and description. Corresponding to these column captions two properties need to be put in "xlWebAdmin.properties" lookupfield.header.access_id and lookupfield.header.description. Point to be noted the captions have been converted to lower case and blank space has been repaced with "-". Put in section "LOOKUPFIELD column headers"
c)Columns names e.g. ACCESS_ID,DESCRIPTION, these are the columns specified in the select query.
d) Lookup column name e.g. ACCESS_ID, this is the column that is put in the textfield associated with lookup field.
e) Column widths e.g. 25,100 This is the column width in table.
Please find the link bellow
Re: Form Field Validation.
all your questions are generally answered in the forum try to use search with keyword and do rate them if slove your issues this is the motivation for giving answers
Hope this help you
Regards
VM

Similar Messages

OIM: Lookup/Search for OIM user to include in a process form.

running OIM 11.1.1.5
I have a form for a custom provisioning target. One of the form fields (UD_RESOURCE_RESPONSIBLEUSER) is to be defined as a lookup query and I need to have the lookup query search users to assign to this field.
Can anyone point me to a sample lookup query that can be used to populate a query box, similar to the "MANAGER" attribute is populated in OIM? What if I wanted to have a multi-valued attribute (i.e.: have more than one responsible user? )
Thanks in advance

Refer:
User list lookup
or
Lookup Query
And for multiple values, make UD_RESOURCE_RESPONSIBLEUSER a child table

Error running Organization Lookup Recon in OIM 11g R2 with Active Directory

Hi all,
I have an implementation of OIM 11g R2, with an Active Directory 11.1.1.5.0 connecting to an instance of Active Directory on Windows Server 2008. I am trying to run the "Active Directory Organization Lookup Reconciliation" scheduled task, but the job fails with this error:
oracle.iam.connectors.icfcommon.exceptions.IntegrationException: Connector ConnectorKey( bundleName=ActiveDirectory.Connector bundleVersion=1.1.0.6380 connectorName=Org.IdentityConnectors.ActiveDirectory.ActiveDirectoryConnector ) not found
This is the full stack trace from the oim_domain.log file:
oracle.iam.connectors.icfcommon.exceptions.IntegrationException: Connector ConnectorKey( bundleName=ActiveDirectory.Connector bundleVersion=1.1.0.6380 connectorName=Org.IdentityConnectors.ActiveDirectory.ActiveDirectoryConnector ) not found
at oracle.iam.connectors.icfcommon.ConnectorFactory.createConnectorFacade(ConnectorFactory.java:176)
at oracle.iam.connectors.icfcommon.recon.AbstractReconTask.init(AbstractReconTask.java:115)
at com.thortech.xl.scheduler.tasks.SchedulerBaseTask.execute(SchedulerBaseTask.java:382)
at oracle.iam.scheduler.vo.TaskSupport$1.processWithoutResult(TaskSupport.java:135)
at oracle.iam.platform.tx.OIMTransactionCallbackWithoutResult.process(OIMTransactionCallbackWithoutResult.java:9)
at oracle.iam.platform.tx.OIMTransactionCallback.doInTransaction(OIMTransactionCallback.java:13)
at oracle.iam.platform.tx.OIMTransactionCallback.doInTransaction(OIMTransactionCallback.java:6)
at org.springframework.transaction.support.TransactionTemplate.execute(TransactionTemplate.java:128)
at oracle.iam.platform.tx.OIMTransactionManager.execute(OIMTransactionManager.java:22)
at oracle.iam.scheduler.vo.TaskSupport.executeJob(TaskSupport.java:116)
at sun.reflect.GeneratedMethodAccessor739.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.iam.scheduler.impl.quartz.QuartzJob$TaskExecutionAction.run(QuartzJob.java:266)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
at weblogic.security.Security.runAs(Security.java:41)
at Thor.API.Security.LoginHandler.weblogicLoginSession.runAs(weblogicLoginSession.java:52)
at oracle.iam.scheduler.impl.quartz.QuartzJob.execute(QuartzJob.java:75)
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:529)
The Connector Server is installed on the AD instance, and the key has been set, and used appropriately in the Active Directory Connector Server IT Resource in OIM.
Any advice on how to resolve this error or on any possible causes would be much appreciated, thank you.

From the installation media, copy and extract contents of the bundle/ActiveDirectory.Connector-1.1.0.6380.zip file to the CONNECTOR_SERVER_HOME directory
Refer http://docs.oracle.com/cd/E22999_01/doc.111/e20347/deploy.htm#CHDDJGIG

Problem in creating a Lookup query in OIM.

i have written LookupQuery.
My query is :select lkv_encoded,lkv_decoded from lkv lkv,lku lku where lkv.lku_key=lku.lku_key and lku_type_string_key='Lookup.BB.InstitutionRoles' and lkv_encoded not in '$Form data.UD_BLKBRD_PORTALROLE$'
i am getting the values getting the values according to query.
but the problem is i am not getting the Radio Buttons in Lookup.
for this do i need to add any entries in xlWebAdmin.properties file?
can anybody help me.
Edited by: Hanuman Thota on Jan 6, 2012 9:55 AM
Edited by: Hanuman Thota on Jan 6, 2012 9:57 AM
Edited by: Hanuman Thota on Jan 6, 2012 10:22 AM

Hi Dharmi
Here is a quote of Dafna's post in [another thread in this forum|Re: Copy VC controls]
CE7.1.1 will be released at September 2008 for ramp-up customers.
There are many improvements and new capabilities in the new release of Visual Composer for CE7.1.1. Among the new features you can find:
The missing features from Visual Composer 7.0 (Html view, portal Eventing support (EPCM), JDBC, Undo/Redo, and more..)
Many layout & modeling improvements
Additional ALV table functionality - export to Excel, switch to chart, configure ALV behavior at design time
Integration of Visual Composer in Eclipse - additional entry point to the Visual Composer models from the NWDS. This integration provides the option to add a WD component (in case of missing functionality in Visual Composer), as a black box component to the Visual Composer model. Right-clicking the component will open the Web Dynpro perspective for creating/modifying the component.
Regards,
Shai

Lookup query in OIM 11g R2

Hi,
I am written a lookup query in child form to filter the lookup in designconsole . but the lookup query is not getting executed, The old lookup name is shown when i am opeing the form in web ui (systemadmin) formdesigner.
Any suggestion why the lookup query is not working?

From the installation media, copy and extract contents of the bundle/ActiveDirectory.Connector-1.1.0.6380.zip file to the CONNECTOR_SERVER_HOME directory
Refer http://docs.oracle.com/cd/E22999_01/doc.111/e20347/deploy.htm#CHDDJGIG

LookUp Query in OIM

Hi All
I have to use the lookup query property for a lookup field type in my form.
this is my query
select lkv_decoded from lkv where lkv.lku_key=(select lku.lku_key from lku where lku_type_string_key='LookUp.Users.Brand') and lkv_encoded='ab'
i have to display vale of lkv_encoded in my field.
for that i have put values of 'lookup column name' and 'column names' properties in the property dialog box as lkv_encoded.
now although it is returning proper value in preview form.
but when i try to do this through console it is showing me "Contact System Administrator" error.
please guide me regarding this.
Thanks.

Hi,
I have already used lkv_decoded it was a typo mistake in previous post.
I even tried using it as "select lkv_decoded as usr_login from lkv where lkv.lku_key=(select lku.lku_key from lku where lku_type_string_key='LookUp.Users.Brand') and lkv_encoded='ab' " and for values of 'lookup column name' and 'column names' properties in the property dialog box as usr_login.
Is there any document regarding this that I can refer.
It is still not working for me.
Thanks in Advance.

Custom Attribute in OIM user Form is not populated.

Hi Friends,
I am new to this Identity Manager Technology. I really all ur support.
I am using oracle Identity Manager 9.1.0.2 version with JBoss server. The Target System is Sun One directory.
1. I added the custom field street in Resource Object--Object Reconciliation Tab for Xellerate User and also for Iplanet Users objects.
2. In Process definition, for iplanet user provisioning Process and Xellerate Users provisioning process, in Reconciliation Field Mappings. I mapped the street field to the UDF(street) and also for UD_iplanet_Street .
3. When I run the task schedular for Iplanet User Recon, the string associated with the field in Iplanet is reflecting in resource profile of the user view/Edit. However, it is not populated in OIM User Form Field.
Can you please help me in resolving the issue. I will provide any further needed information.
Thanks and Regards,
Manjula

Thank you for your prompt reply.
Yes. I tested it.. I can see the street field in the process form is populated with the string. However, I cannot see the same in the OIM User Profile Form. That Means, When I go to User folder in Admin and User Console, Manage Users and then select the user associated with the street field, the street field for the user is not populating and is empty without any string.
Please clarify me.
Thanks and Regards,
Manjula.

Approval process in OIM 11g

Hi All,
I am newbie to OIM. I have a requirement with 2 levels of approvals in OIM 11g.
*1st level:* In the first level the Approver will be selected by the user(self service) from the drop down present in the custom UI.
*2nd level:* For the 2nd level Approval the 1st level appover should have the ability to select the next approver from a drop down list. The 2nd level approvers belong to a particular group.
All the approvers should be stored in a lookup table in OIM. When a user raises a request the custom application should get the values from the lookup table and populate the drop down for 1st level approvers. 2nd level approvers sholud be populated in the drop down during the 1st level approval process.
can any one suggest me the steps to achieve this.
Thanks

Task assignment in SOA are done via human task assignment i.e. the .task component in BPEL. Now this task assignment can use various features to compute whom to assign the task to.
1. Static: This is when you specify the group name or the user name directly into the task.
2. Dynamic : This is when you assign the approver to be a variable and in your SOA workflow before task assignment you assign value to this variable.
3. External Routing: This is when you assign a java code inside the .task to do all the assignment and escalations. When using this you can have complex implementations done.
What I meant by looping is that you will need to call this .task two times, first time of the first approver and second time (if the first approves it) for the second approver. Thus when you are inside the loop you need to get the appropriate value from the payload (payload is sent from OIM to SOA when you submit/approve the request) and set it into the appropriate variable so that .task reads that variable and assigns the task to that person.
I would recommend going through the BPEL developers guide for better understanding. Start with a simple process and see how it behaves when it runs and then pile on top of it.
-Bikash

Creation of an adapter to populate the lookup filed

Hi,
The source of the data is OIM.I need to fetch the data to populate the groups in the lookup field.I would like to know how the data is being fetched from the OIM database.
Thanks in advance.

Hi,
I given dynamic lookup population solution many time in this forum.Please look at following post for more information.
Re: Form Field Validation.
or
Re: Conditional forms
Your group information will be stored in UGP so create your query accordingly.Let me know if you have any more questions.
Regards
Nitesh

Provisiong of users from OIM to Exchange Server 2007

Hi,
I am trying to Provisioning the users from OIM 9.1.0.1 to Exchange server 2007. For this i used Exchange Server Connector 9.1.1.1.0. By using AD_Base_connector 9.1.1.0.0 i can
provisioned the user details. But while provisioning to the Exchange server 2007 i am getting the following error
ERROR [XELLERATE.WEBAPP],Class/Method: tcLookupFieldAct ion/lookupByColumn encounter some problems: lookup Error in OIM
And i am unable to get the LookUp detais for the MailBox in Design Console as well as in the ScheduleTasks in OIM Admin Console..
Can anybody help me in solving this issue.
Thanks & Regards
SRI

Hi suren,
i am using the Remote Manager. I enabled logs in log.properties in both OIM server and Remote Manager.
I am observing the following message in Remote Manager command prompt.
DEBUG,30 Mar 2010 01:12:44,437,[XELLERATE.REMOTEMANAGER],Class/Method: RMISSLCli
entSocketFactory/createSocket left.
and i am getting the error in Weblogic server command prompt.
Running ISADAM
Target Class = java.lang.String
Running GETATTRIBUTEHASH
Target Class = com.thortech.xl.util.adapters.tcUtilHashTableOperations
Running Set User Attributes
ERROR,30 Mar 2010 01:13:39,484,[XELLERATE.WEBAPP],Class/Method: tcLookupFieldAct
ion/lookupByColumn encounter some problems: lookup Error
can u help me in resolving this issue.
Thanks in Advance,
SRI

Not able to add groups to the user ODSEE via OIM 11g R2

Hi,
I have created some groups in ODSEE and ran the recon job to sync these groups in OIM 11g R2.
Groups are populated in OIM 11g R2 and while raising the request for ODSEE Application Instance I can see these groups.
Now following are the issues I am facing :
1. ODSEE groups are not getting displayed in Catalog ( I have ran the Entittlement-List job also)
2. When I request for a group while creating the request, the group is not getting assigned to the user in ODSEE, wherein user is getting created in ODSEE successfully.
Please help.
Thanks

Please let me know what could be the reason of not adding the groups to the user in ODSEE.
I was able to add the groups successfully to user by assigning the groups while raising the request in OIM 11g R1.
But the same is not working in OIM 11g R2, if I check the OIM logs it is calling the function ADDUSERTOGROUP but the groups are not getting assigned to user.
Thanks

Migrating OID groups to OIM

We have been given the task of migrating our existing identity management systems to OIM (Oracle Identity Manager).
Part of our existing system uses OID (Oracle Internet Directory). All users have an entry in OID. Some of our systems use OID for authentication.
We also use OID to hold users' entitlements/privileges that control access to our applications. We use OID groups (represented by entries based on groupOfUniqueNames and orclGroup objects) to do this. For example we might have an application called 'Finance' with three levels of access represented by OID groups e.g. 'finance_enquiry', 'finance_updater', 'finance_superuser'. Those groups would all belong to a parent group called 'finance_application'. To access the application the user needs to be a member of 'finance_application' group or one of its child groups. Access to features of the application are controlled by membership of the 3 child groups. We have an application that maintains groups, group membership, and user entitlements in OID.
As part of the migration project we want to move maintenance of groups and group membership from our own application into OIM. The above scenario seems quite basic.
My main question is how would this be done in OIM? Do our current OID groups become OIM Groups? Do they become entries in some lookup table in OIM? Are there any case studies or other documentation that describes this kind of requirement?
I've looked at the OIM Connector for OID documentation but it doesn't describe typical scenarios. It assumes that you know what you are doing.
We also want to give users the ability to request entitlements, and to provide an approval process. So we could have a user who approves/rejects entitlement requests to access to the applications they control. But that's a another topic.
Cheers,
Eric

PeachEye wrote:
We have been given the task of migrating our existing identity management systems to OIM (Oracle Identity Manager).
As part of the migration project we want to move maintenance of groups and group membership from our own application into OIM. The above > scenario seems quite basic.You're about to find out otherwise.
>
My main question is how would this be done in OIM? Do our current OID groups become OIM Groups? Do they become entries in some lookup table > in OIM? Are there any case studies or other documentation that describes this kind of requirement?You'll need a custom connector and lots of OIM tweaks. Your groups will stay in OID, OIM will replace the current application you use to maintain them. That's one way of doing it, no impact to OID schema is the benefit of this way, there are other ways.

OIM 11gR2 provisioning with GTC

Hello,
We are curently implementing Oracle Identity Manager 11gR2, and we are having difficulties with the implementation of the provisioning from OIM to the Target Systems exposed through a webservice on Oracle Service Bus.
We are using the Generic Technology Connectors as a basis of working. And initially we have created a GTC with only reconciliation Transport & Format Providers:
Connector Name TargetSystem1
Transport Provider (Provisioning):
Format Provider (Provisioning):
Transport Provider (Reconciliation): Database Application Tables Reconciliation
Format Provider (Reconciliation): Database Application Tables Reconciliation
We have configured the Process Definition of TargetSystem1 with all the operations (Create User, Update User, Enable User, Disable User, Delete User, etc.) connected with custom Java implementations, that are working just fine is we trigger them form Eclipse. The “Create User” task has only “Required for Completion”, “Allow Cancelation while Pending” and “Allow multiple instances” check boxes set to CHECKED; it also has all the fields in Integration TAB mapped, Responses mapped, but when we create a User in OIM and provision it with an account on the TargetSystem1_GTC Application Instance, the provisioning process in not accessing the “Create User” task to make the provisioning in the target system. The user that we are trying to provision has the account Status set to “Provisioning” and the Account Type set to “Unknown”. We have also checked the logs of OSB, but there is no activity there, because no request from OIM is being received.
After we investigated more closely the Oracle documentation for the Generic Technology Connectors we discovered that if we do not select Transport & Format Providers during the GTC creation, then the corresponding steps are not performed and they are not initialized, thus the provisioning cannot be done. The documentation also states that if we need to create custom providers in order to make the Provisioning with the GTC, but unfortunately we have no knowledge or any examples on how to do such custom providers for the provisioning of Users from OIM on the target systems via the Oracle Service Bus.
We have installed a second GTC with both provisioning and reconciliation Transport & Format Providers:
Connector Name: TargetSystem2
Transport Provider (Provisioning): Web Services
Format Provider (Provisioning): SPML
Transport Provider (Reconciliation): Database Application Tables Reconciliation
Format Provider (Reconciliation): Database Application Tables Reconciliation
The Web Services and SPML options were the only options that we could select from the out of the box connectors that are installed, and we did not find any other connectors in the download section of Oracle for this product, that can accommodate such communication. So, we configured the provisioning accordingly, and modified the “Create User” task from the TargetSystem2_GTC Process Definition, in order to use our custom adaptor instead of the adpTargetSystem2_GTC adapter that was preset when the TargetSystem2_GTC is created. But this does not help us, because the provisioning is not done, and the “Create User” task is not used. The user that we are trying to provision has the account Status set to “Provisioning” and the Account Type set to “Unknown”.
Next we tried to see if the GTC can be used to communicate directly with the OSB, using the Web Services Transport Provider and SPML Format Provider, and we did not make any modifications to the after the normal installation of the TargetSystem2 GTC. In this case the we can see that the OSB is being accessed by OIM, but unfortunately this case does not help us also, because the operations implemented on the OSB webservice have a different structure then the one SPML expects as default:
Caused by: com.thortech.xl.gc.exception.XSDValidationException: The SOAP response does not contain a valid SPML response type. Should be one of these -->addResponse modifyResponse deleteResponse resumeResponse suspendResponse setPasswordResponse
Do you have any suggestion on how to make the provisioning process work?
Edited by: user1717356 on 22.10.2012 03:22

Hi,
I think you need to put this check only for few attributes?
If Yes, then lets suppose you want to have a check for Country Field in Database which once modified by target Admin, then OIM should know.
1) Create one dummy field CountryDummy (Hidden) in OIM TargetProcess form and dont map it to any target attributes. This dummy field will only store values populated from OIM user profile to -> DB Connector Process Form.
2) On success of "Reconcilation Update Recievced", Put a custom process task which does a comparison with "CountryDummy" & "Country" and inform Admin using email notifications that this mismatch has been found.
HTH,
~J

Using Digital Signature method to connect to OIM

Hi,
I am using the following :
ConfigurationClient.ComplexSetting config = ConfigurationClient.getComplexSettingByPath("Discovery.CoreServer");
final Hashtable env = config.getAllSettings();
tcSignatureMessage moSignature = tcCryptoUtil.sign("xelsysadm",
"PrivateKey");
tcUtilityFactory ioUtilityFactory = new tcUtilityFactory(env, moSignature);
and it is giving following exception:
com.thortech.xl.crypto.tcCryptoException: KeyStore File : .\config\xl.keystore missing.
Where do i need to do the environment setting of the keystore file??

above scenario can be dealt with....
I have another situation.... I am trying to connect to an Oracle database in the java code ...for retrieving some values say from OIA(SRM) database using jdbc code... and I am fetching the database connection parameters (userid, password etc) from a custom Lookup defn in OIM.... Setting the password as clear text in the Lookup defn is again a not best practice (not secure)
what can be done in this regard?

DBUM Trusted Resource reconciliation fails

I'm trying to set up a trusted resource reconciliation job.
I currently have it set up like this : http://i.imgur.com/uUh4X.jpg
Also, I set up the configuration lookup definition (using OIM Design Console). In my case its: u01/oracle/product/fmw/1111/wls1/iam/server/ConnectorDefaultDirectory/DBUser_9.1.0.4.0/config/DBUMReconQuery.properties
When I run the job however I get following error messages in OIM log: Message     java.io.FileNotFoundException: Enter a value (No such file or directory)
I assume I'm missing something. Any suggestions?
Fullstacktrace of exception:
Message Level     1
Relationship ID     0
Component     wls_oim1
Module     OIMCP.DBUM
Host     xxx.xxx.xxx
Host IP Address     xx.xx.xx.xx
User     oiminternal
Thread ID     OIMQuartzScheduler_Worker-8
ECID     18ad5d5d71213dc9:57db12c3:13662eb5848:-8000-0000000000000002
Message     java.io.FileNotFoundException: Enter a value (No such file or directory)
Supplemental Detail     at java.io.FileInputStream.open(Native Method)
at java.io.FileInputStream.<init>(FileInputStream.java:106)
at java.io.FileInputStream.<init>(FileInputStream.java:66)
at oracle.iam.connectors.dbum.common.db.util.QueryBuilder.loadQuery(Unknown Source)
at oracle.iam.connectors.dbum.common.db.util.QueryBuilder.getSqlQuery(Unknown Source)
at oracle.iam.connectors.dbum.tasks.DBUMReconTask.execute(Unknown Source)
at com.thortech.xl.scheduler.tasks.SchedulerBaseTask.execute(SchedulerBaseTask.java:384)
at oracle.iam.scheduler.vo.TaskSupport.executeJob(TaskSupport.java:145)
at sun.reflect.GeneratedMethodAccessor3868.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.iam.scheduler.impl.quartz.QuartzJob.execute(QuartzJob.java:196)
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:529)

Hi steven,
I am also facing same problem while doing trusted recon using DBUM connector. Can i know the procedure to resolve it, what changes need to do in apache config?
ASAP
Regards
SK
Edited by: user7609 on Jul 11, 2012 4:08 PM

Lookup Population in OIM

Similar Messages

Maybe you are looking for