Lookup.USR_PROCESS_TRIGGERS

Hi All,
I experienced a strange behavior of OIM. When I try to change OIM user profile fields (even the default one) these changes are not propagated to an AD resource form. I don't see any suspicious in logs so really stuck c/z don't know what to check.
Do you have any ideas of what I could change/check to get an explanation/reason of this behavior?
Thank you!

Lookup.USR_PROCESS_TRIGGERS contains a series of OIM USER attributes and process task name mappings.
For Example,
USR_UDF_LOCATION - Change User Location
So we have an user defined field "Location" for OIM profile.
We should add a conditional process task "Change User Location" in AD User Process.
OIM will trigger this particular task when user profile modifies.
This should have an adapter mapped to it such that the adapter would take care of fetching the location details from OIM and putting it in AD.
The same procedure can be followed for all the attributes whose updation should be propogated to target system.
Hope it helps.
Thanks,
Shashi

Similar Messages

Lookup.USR_PROCESS_TRIGGERS not working

Whenever a user's OIM attribute is modified, I want that value to be pushed to the user's AD resource. I am not able to get this to work.
Here are the steps I took:
In the Lookup.USR_PROCESS_TRIGGERS, I added the code key (attribute column name in usr table) and decode (Name of the process task).
In the AD User Process Definition, I added the task (same name as the decode) attached with an out of the box adapter called "adpADIDCRETURNTEXTVALUE". Also, I created an Updated task for that attribute.
I've validated these process tasks by manually going into a user's AD resource history and calling the process tasks. This works fine.
My issue here is whenever I change the user's OIM attribute, my process task for that attribute does not get called. I do not see this task in the AD resource history.
I am only able to get the "Change User Password" task to work (gets triggered whenever reset password happens). My custom ones and the other out of the box tasks doesn't work.
What is the reason for this? Do I need to set a system property for this? Is it possible my event handlers (User) are interfering?

Hi,
Try creating a custom adapter and attach the adapter to the process task which you have created. This adapter should read the user profile value and populate in the AD provisioning form. Then test the flow for one attribute. As I am suspecting that there would be an issue with OOTB adapter.
Regards
Sai

Lookup.usr_process_triggers not firing

Hello All
I have setup an attribute in the USR table to be sent to ad. When I do the provisioning for new users, everything works. When I go to the process form for ad and update an attribute, the <attribute> update process tasks is completing just fine. But, when adding the field to the lookup.usr_process_triggers lookup, nothing is happening. in all my other environments, you would see the process task fire when making the change in the USR form in the admin console, but for some reason, I am not seeing it fire on my current system. I have verified that the code / decode values are exactly the same, but I cannot get it to trigger when making the change to the field. Any help you can give would be helpful.
Nick

You don't have to restart the instance, it should get picked automatically. Anyway here is what I meant form the last post:
- You don't have to modify the existing entries in the look-up definition as OIM would not allow that
- Instead let's say if Change XYZ is your custom task which is not getting fired then I hope the entry in the lookup would be something like
Code Key=USR_UDF_XYZ & Decode = Change XYZ
If this is not getting fired then try modifying the code key to say USR_FIRST_NAME and then try edit the First Name of the user. Now this task should get inserted along with Change First Name

Task in Lookup.USR_PROCESS_TRIGGERS not getting called

Hi,
We have created a process task adapter and copied this in Lookup.USR_PROCESS_TRIGGERS. This adapter works only when some change happens in User Form in a particular field (say First name).This adapter is not getting called for the users who are created through Bulk Upload. Although it is getting called when I am creating a user manually.
Regards,
Shubhra

This the issue with 11.1.1.5 version of OIM. It doesn't trigger on trusted recon. install BP02 for resolving this issue. We had resolved this by installing this patch
--nayan

Lookup.USR_PROCESS_TRIGGERS - Basic Information

I am a newbie. Can anybody please explain me the purpose of using "Lookup.USR_PROCESS_TRIGGERS"?
What is this related to and how can we use it at the time of provisioning or reconciliation with/from a resource?
Where can I find it in Design Console ?
Thanks for your time!

hi,
GO in design console, go to administration tab and click on lookup defn and type in code : Lookup.USR* and you
will see it .It is use to trigger, like if user changes his password,first name ,last name then it gets triggers it and changes it in target.As you can see there in the table, suppose you have field ,"USR_FIRST_NAME" so when user chages his first name. it will trigger and change it in target and process defn form , but you need to add a process task in that process form like see meatalink ID :804903.1 for an example
Thanks
IDM

Lookup.USR_PROCESS_TRIGGERS not working with trusted reconciliation oim 11g

Hi,
I am facing one issue while running the trusted incremental reconciliation in OIM 11g.
In the bulkEvent of the event handler I am checking if the operation is MODIFY then I am comparing some attributes and based of that result I am performing some action.
Now the issue is that if the first name or last name of the users gets changed in OIM due to trusted reconciliation then the Change First Name or Change Last Name Process task should get execute on the resources provisioned to the user. This is not happening in my case.
I tried modifying the first name of the user via UI and then the Change First Name Process task got executed.
Please let me know if I need to do some thing extra to get this working.
Thanks

Hi,
Try creating a custom adapter and attach the adapter to the process task which you have created. This adapter should read the user profile value and populate in the AD provisioning form. Then test the flow for one attribute. As I am suspecting that there would be an issue with OOTB adapter.
Regards
Sai

USR_PROCESS_TRIGGERS or Response Tasks in OIM 9.1.0.2 seem inconsistent

We have a scenario where an existing user is updated through trusted recon. The particular update needs to fire several unrelated adapters. For example, when a user is terminated in good standing in HR, they are given a grace period during which their resources will be disabled and at the end of the grace period their OIM account is disabled.
So - USR_UDF_USR_HR_STATUS needs to fire:
-Adapter to set deprovision date to 30 days
-Adapter to block the user from their desktop (Active Directory resource)
-Adapter to update OID attributes
When we went live with OIM 9.1.0.2 BP 04, we put multiple rows in the Lookup.USR_PROCESS_TRIGGERS like:
USR_UDF_USR_HR_STATUS -> Update HR Deprov Desktop
USR_UDF_USR_HR_STATUS -> Update HR Set Deprov Date
USR_UDF_USR_HR_STATUS -> Update HR Remove OID Attr
Each adapter was appropriately configured in Process Tasks. This seemed to work fine. We have been up for 18 months and are now on BP 11. Now we see that occassionally one of the adapters does not seem to fire at all. When we go through debug logs in production, there is no mention of the adapter that did not fire.
We found something in support.oracle.com that said that we should only have one adapter listed in Lookup.USR_PROCESS_TRIGGERS and the rest of the adapters should be Response Tasks (in the Process Task Definition). We have tried this but it still behaves inconsistently. So on the Process Task Integration, we now have adpHRDeprovDesktop and on Responses C - Two Tasks to Assign - Update HR Set Deprov Date and Update HR Remove OID Attr.
But we still are not seeing correct results. In one recent case the adapter that did not fire was the one on Integration which makes no sense as to how the Tasks to Assign even ran.
Have you seen this? What suggestions might you have?
Thanks so much.

You should not change the password through any means other than the APIs provided by the product. Doing any other way will only cause you a huge problem in the future if you do something wrong, or if you seek support on an issue around it.
If you are not able to login, you can use the privateKey authentication while on the server and running the APIs. This will let you authenticate without supplying the password and perform any functions necessary.
-Kevin

Creating custom lookup triggers - Is it possible?

Hi,
Can we create our own custom Lookup trigger something similar to " Lookup.USR_PROCESS_TRIGGERS" ? I wanted to create a lookup for a Form (UD_*) . Or can it be done for any other proceess or table ?
Is it possible ? Any guidance would be really helpful.
Thanks
Abhishek
Edited by: AT2410 on Oct 9, 2008 2:29 AM

Do don't need a lookup for your custom form.
just create a process task with [field name] updated and assign an adapter with your desired functionality.
Take a look at the standart processes they allways have tasks like password updated / username updated....

OIM-OID Provisioning - OID Group PrePopulate Approach :

Hi,
I am working on OID Connector 9.0.1.14 with OIM 11.1.1.5.
I have reconciled all the Roles and Groups from OID to OIM and can successfully provision users to the OID along with membership to these specific Roles and Groups.
I want to prepopulate the OID Group based on certain attribute from the OIM User form. My Approach so far is :
1) Created an Entity Adapter with a variable : say Org and GroupName.
2) Set the Logic as if Org = XYZ (+XYZ does exist on OIM+) set GroupName as = "OID Group 1" else set GroupName as = "OID Group 2"
3) Attached this adapter to the "OID User Group" form on the "Data Object Manager" at the pre-insert stage.
4) Mapped the Adapter variable as :
a) Org Maps to "Organization Definition" with the qualifier "Organization Name"
b) GroupName maps to the "Entity Field" with the qualifier "UD_OID_GRP_GROUP_NAME"
However nothing seems to happen when I create/modify a user with Orgization Name as XYZ and manually Provision the OID Resource. I can see the form but nothing is populated in the Group Field. Upon completing the request, I get the user provisioned to OID but without any Group information..
Is my approach right ? Am I missing something ?

Here is what I have done for a client. My requirement was for a given department, a user must have a list of groups provisioned to them. So here is what i've done:
1. Create a lookup that has Code Key = Department, Decode = CN of the groups in a delimited format.
2. Create a provisioning task that will look at the department code from the user form, reference the lookup and find the decode values. Split them based on a delimiter. Then using each value, lookup the code key value from the real lookup that contains the full distinguished name of the group in the OID Group lookup. I even appened the IT Resource Key and ~ so that my search would be Decode or Code = "IT Resource Name~CN=<CN VALUE>%". This would return only the single group code key value. And then i add it to the child table. Repeat this for all the values in the delimited field.
3. Create a provisioning task that removes the values from the child table based on the delimited value. You'll need to search through the existing child table values.
Once you have the 2 tasks, you'll want to add a value to the your Lookup.USR_PROCESS_TRIGGERS that is your group determining field. Create your task name in this lookup. On your provisioning workflow, for the Adding of the groups task, make this unconditional, and have a preceding task of the Create User. Give it the name from your Lookup.USR_PROCESS_TRIGGERS and append " - Add Groups" to the task name. Create another task called the same, but append " - Delete Groups" to the task name. On the Add Groups task, make the preceding task the Delete groups. When you map your inputs to the adapters, on the delete, select the old value check box from the User Form so that you get the old value. Now, when the value changes on the user form, it will first remove the old groups, then add the new ones. All this will be done using the child table APIs, so that the existing Insert and Delete task triggers for your child table will run.
-Kevin

AD - 'Change First Name' process task is rejected by default - OIM 11.1.2

Hi All,
I wanted modification to be auto provisioned to AD account when user attribute is changed.
For this created 'Change First Name' process task and made entry in "Lookup.USR_PROCESS_TRIGGERS" lookup def.
I followed the link Enabling update for provisioned user in OIM11g
When I changed first name of a user from identity console, 'Change First Name' process task is assigned to XELSYSADM. But the status of the process task is Rejected. Also, the changed 'First Name' value is not updated in the process form of the user. Hence the change is not reflected into AD.
Please tell me why the status is Rejected and changes are not reflecting.
Also, Please provide the solution to auto provision the modifications into AD.
Thanks in Advance.

Thanks much kevin,
One more query.....
In my case when 'city' attribute is changed its invoking 'Change city' which inturn invokes 'City updated' process. Now when city is updated I need to updated 'Organization Name' in AD process form and make it reflect in AD.
For this, I created 'Change Org Unit' process task which will populate 'Organization Name' field in process form, so inturn it will invoke 'Organization name updated' process task.
I made 'Change Org Unit' process task as dependent task for 'Change city', so once the 'Change City' process task status is 'C', it will invoke 'Change Org unit' process task.
But, 'Change Org unit' process task is not being invoked.
Could you pls provide me solution.
Thanks in advance...

Help needed in OIM

Hi..
In OIM the system administrator can change a users password if the user forgets the password as well as the security questions. But the system administrator will know the password of the user until the user changes his password. My requirement is to suppress this functionality , When the system adminstrator clicks on the change password for a particular user , OIM should generate a random password and send it as a notification (mail) to the user.
Can someone help me out how to achieve this functionality..
Thanks in advance..

You'll have to build your custom java code for it.
[Check this link|http://rajnishbhatia19.blogspot.com/2008/10/random-password-generator.html]
For custom java code.
Make a process task adapter with your custom java code and attach it to Xellerate Process Definition.
In the lookup Lookup.USR_PROCESS_TRIGGERS, make entry of your task here.
You can use java code to send email as follow, Take dataProvider as parameter to your java code
tcEmailNotificationUtil tcemailnotificationutil = new tcEmailNotificationUtil(dataProvider);
sendMail.setSubject("SUBJECT");
sendMail.setBody("BODY"); /*/ Write your password here*
sendMail.setFromAddress(from);
sendMail.sendEmail(email);

How to call Process Task in AD User proccess definition from Xellerate user

Hello,
I need a help from you guys.
I have one customized process task in "Xellerate User" Process definition. When my this task executes completely, I would like to call one of the customized process task in "AD User" process definition from xellearte user. Is there any way we can do that?
Thanks for your any help....

There are lots of ways to accomplish this. I haven't read through the other posts, but here are a few options.
Option 1 - Create a second task that also triggers at the same time, but set the task you already have as preceding. Then on your second task, write whatever code is needed to update a field, insert a new task, whatever the function is that's needed.
Option 2 - On the completion response of your original task, just use the response code to trigger the second task from running. Then again, write whatever code is needed.
Option 3 - Create a UDF on your user form. Add this field to the Lookup.USR_PROCESS_TRIGGERS. When your first task completes, use the APIs to update this field with a new value, perhaps the current date. On your AD Process Definition, create a task with the name you used in the lookup. This task will get triggered whenever the field is updated. Now if the user does not have an AD Instance, you don't have to worry about it ever running.
I'm sure you could create other event handlers as well to do this, it just depends on how creative you want to be.
-Kevin

Process Trigger is not working in OIM 11gR2

Hi Experts,
The Lookup.USR_PROCESS_TRIGGERS is not working. Assigned some process task on user attribute changes but it is not working as of now. Earlier it was working fine. Even I am not able to update the existing lookup value in Lookup.USR_PROCESS_TRIGGERS as we are getting below errror:
The security level for this data item indicates that it cannot be updated.
We are not able to figure out what is the issue behind this. might be some sandbox issue or some database value problem.
Please provide me pointer to solve my problem.
Thanks,

Select LKV.LKV_DATA_LEVEL from LKU LKU, LKV LKV where LKU.LKU_KEY = LKV.LKU_KEY AND LKU.LKU_TYPE_STRING_KEY='Lookup.USR_PROCESS_TRIGGERS'
If it is 1, make it 0 and try again. No need to change it for OOTB tasks/rows.

How to catch rollback in Disable user process task in Xellerat User Process

hi ...
I want to send an email to manager group of the user, once the user is disabled from the OIM (when end date is reached). I created an adapter and attached it to the ‘Changed User Disabled’ process task in the ‘xellerate user provisioning’ process and add a new row in the “Lookup.USR_PROCESS_TRIGGERS” Lookup definition. (code key: USR_DISABLED and Decode: Change User Disabled ). This adapter executes only when the user status is equal to “disabled”.
This works correctly when the OIM user disabling process execute without any errors. But sometimes while disabling the user it gives an error (“resource is not configured properly”) and rolls back everything and make the user active. But at the same time my adapter runs and sends the mail informing user is disabled but yet user is active.
My problem is how can I find or catch rolls back transaction in the “Disable User” process task (which is in “Xellerate User” process”) ??? If I can get to know that a roll back is occurred then I can send a mail to OIM administrator, informing that user disable process is failed.
Can someone please help me to find this..
Thanks in advance :)
Regards,
i.k.

Hi Rajiv,
Error occurs while disabling the user due to resource configuration problems. ( error message is : DOBJ.RESOURCE_NOTCONFIGURED_PROPERLY -- One or more provisioned resource is not configured properly) In this case i know the problem and how to solve it. But what I want to know is in any case if disable process get fail and if things get roll back again, then how can I track that situation and send a mail to OIM Admin(informing the failure) instead of sending a mail to user managers saying that user account has been disabled.
I think now my problem is clear…. Can u please help me to find this.
Regards,
i.k.

Changes in sunone directory

A user is already provisioned to sun one directory .Now I am changing the first name of that user in the OIM user profile and needs get changes in sun one. How that will configure

Steps from from Oracle:
1) Suppose one created a UDF: UDF USR_UDF_BUS_PHONE for phone number called 'Business Phone Number' on the Users User Defined Field Form in Design Console
2) Then double click on "Lookup Definition" under the Administration tree of Design Console and query for this "Lookup.USR_PROCESS_TRIGGERS" code.
3) Add "Lookup Code Information" like this.
i) Enter the UDF column created in step 1 for Code Key as USR_UDF_BUS_PHONE
ii) Enter the word 'Change' without the quotes followed by the field name of the UDF column created in Decode column. So in this case the Decode is 'Change Business Phone Number' without the quotes
iii) Language: en
iv) Country: US
4) Then create one adapter of type process task
i) Move to Variable List tab and create a variable "var1" Resolve at run time.
ii) Add logic task -> SET VARIABLE and click on continue
iii) In Add Set Variable Task Parameter dialog, select Adapter return value in variable name drop down, Operand Type as Variable, Operand Qualifier ->"var1" created in 4i).
5) Add one process task under the Resource Object's Process Definition in Design Console named 'Change Business Phone Number' without the quotes. Note: The task name should be
exactly same as Decode value in lookup definitions and then make it conditional and also check "Allow Multiple Instances".
6) In "Integration" tab of task add adapter you have created in 4) and then map the adapter variables.
i) Map Adapter Return Variable to Process Data and then select the process form field (Example: UD_ADUSER_PHONE) which you want to update with the user's Business Telephone USR_UDF_BUS_PHONE field.
ii) Then map the other adapter variable to User Definition -> map with user's Business Telephone USR_UDF_BUS_PHONE field.
Result: Now when user's Business Telephone is update, the Change Business Telephone will get triggered in and inserted for this resource and copy the change from user profile to the process form. If the connector already has the 'Business Telephone Updated' Process Task in the Process definition which has an adapter to update the target then because of the update to the Business Telephone in the process form, the 'Business Telephone Updated' task will be triggered and target will also get updated with the new change.
-Bikash

Lookup.USR_PROCESS_TRIGGERS

Similar Messages

Maybe you are looking for