Modifying default tabbed user form

I want to prevent a particular attribute from showing up in the default tabbed user form. I still want the attribute to exist and I do not want it to be secret, I just don't want to see it show up at all. Any ideas on how to do this? I am using IDM 7.1.
Thanks!

Here is a sample code, which I have used in some of my codings
<Field name='Email'>
   <Display class='Text'/>
      <Property name='title' value='Email'/>
   </Display>
   <Disable>
      <not>
         <neq>
            <ref>accounts[Lighthouse].emp_type</ref>
            <s>Contract</s>
         </neq>
      </not>
   </Disable>
</Field> If the emp_type is other than Contract, then only the email shows up for that employee.
You can also try for multiple conditions in the Disable
null

Similar Messages

Tabbed User Form

Hi All,
I have added a select field under the identity tab of the 'Tabbed User Form'. Once a value is selected i want that value to be displayed under the 'attributes' tab.
I added the field (xxx) in 'Default user library' and referenced it in 'User Library' just after the accountId field.
I also referenced it in 'attributes' section of the tabbed user form.
The field is shwoing up in all the tas of the tabbed user form. I dont know how to get rid of this and just show a label for 'xxxx' in attributes tab.
Any help is appreciated
Thanks,

Hello sungirl,
Could you please tell me the exact details as to how can we modify Tabbed User Form??
I neeed to provide custom fields in Tabbed User Form apart from the existing.
I understand there is referencing happening in Default User Libraray Form and User Library Form. But as you have mentiond, you were able to implement without modiying these.
Could you please give me the exact forms and places where this can be done?
I need to get this working ASAP. Please Help.
Thanks
Divya

Tabbed User Form Fields

Hi,
I modified Tabbed User Form and Assigned it to an ADmin who is under Configurator, with limited capabilities. This admin has to be able to create an organization, so i assigned him Organization Admin capability. However, this assignment also shows up New Directory Junction in the drop down, which i do not need. I tried creating a new capability, but looks like nothing related to org is specified, where i can pick and choose.
Is there any other way i can make this field "New Directory Junction" disappear only for this adminsitrator.
Any help is appreciated.
Thanks,

Hi,
What I understand from what you write here is you're trying to develop a "custom LDAP" form rather than a fields iterator. A good starting point to look at will be to check the /sample/ directory located in your idm instance. There are several sample forms namely "Dynamic Tabbed User Form" and "Dynamic Reosurce Form". The latter has a genereic field iterator logic (if the resource is not among the predefined resources it siply iterates schema fields. You can add your own logic in there. Also there are custom forms. There's one "LDAP User Form". All there forms are in XML format you shoud read them in using the lh config. then save in the repository.
I hope it helps.
Cheers,
Kerem ERSOY

Change user's OU in Active Directory (AD) from Tabbed User Form

Hi all,
In Tabbed User Form, when I create a user or assign AD as a new resource for the user, I can choose the OU where to create the user in AD by modifying +accounts[AD].accountId+ in cn=Lastname Firstname,ou=xxx,ou=yyy,dc=zzz,dc=ttt
So creation is not an issue.
But I would like to be able to move the user to another OU in Tabbed User Form.
Does anybody know how to do it ?
Thanks in advance,
Ben

Hi,
You can follow the following approach
1) Save OU as extended attribute in IDM
2) Modify Update user workflow to check if the ou vale has changed from old to new.
3) If No, follow normal path.
4) If yes, follow move user sub process.
5) Move user sub process needs account ID and New Ou value for moving the user to new ou.
please send your email address so that i can send you sample workflow.
Regards,
Ajay.

Adding custom action to Tabbed User Form

I am trying to view and delete user tasks (such as deferred task) from a user view (tabbed user form). I am able to list the tasks in a separate tab, however, I would like to be able to delete the task using a manual action. I added a button, however, the clicking on the button refreshes the page, and does not get into the Update User workflow.
Wanted to check with the forum members if anyone has added any custom action via the TabbedUserForm where the button (or something) will submit the form for change of user view to the Update User workflow.
Or, if someone has a simpler way - manual action to cancel/delete a deferred task for a user.
Thanks in advance for any insight.
Indrajit
Edited by: indrajitg on Sep 14, 2007 12:43 PM

It seems I was initially too focused on the VCS API itself, as I was under the impression that the context menu would be exposed through a manager (similar to the Editor API). But it turns out that the view API provides very nice access to the relevant bits and I was able to achieve the desired result by simple listening to view activation and access the context menu from there. It's not ideal as I have to deal with view ids directly, but it works - good enough.

Adding/Deleting Deferred task thru Tabbed User Form

I am trying to find a way to add/deleted deferred tasks thru the Tabbed User Form. Does anyone have any ideas?

I am trying to find a way to add/deleted deferred tasks thru the Tabbed User Form. Does anyone have any ideas?

Tabbed User Form Problem

I am having a problem with the Tabbed User Form. I have Active Directory resource adapter with firstname and lastname mapped to the IDM attributes. I have a user that exists in AD and IDM and he has been linked through a reconcile. Whenever I open his account in the Admin interface I see in real-time what is on AD. If I change his firstname or lastname on AD it changes in the Admin interface. If i change the mapping from firstname to firstname2 it stops showing the real-time value. How could this be happening and is it supposed to be working this way?? I have another server that does not act like this. It doesn't pull real time data from AD unless it's for the the attributes tab.

Hi,
The Form should show the real time data what ever in AD.
I guess, after u have changed the mapping from firstname to firstname2, u might have forgot to update the 'First Name' field's name.
The 'First Name' fields name should be like 'accounts[AD].firstname2' instead of 'accounts[AD].firstname'.
I guess this would solve ur problem.

Displaying Session Owner Attributes on Tabbed User Form

How i can get an attribute from a session's owner inside the form?
For example, I want to display the email address of the admin who logged in and I want to display this on the Tabbed User Form.
I know, that :display.session is a session descriptor, but I can't work out how to display anything other than account ID.
Thanks in advance,
Darren.

Have a look at the javadocs for the com.waveset.ui.FormUtil class. There's some methods in there for getting user information from the repository based on the context you've got and the user ID you provide.
Something like this might work for you:
<invoke name="getObject" class="com.waveset.ui.FormUtil">
    <select>
      <ref>context</ref>
      <ref>:display.session</ref>
      <invoke name='getLighthouseContext'>
          <ref>WF_CONTEXT</ref>
      </invoke>
    </select>
    <s>User</s>
    <ref>your accountid</ref>
</invoke>That will get you back the user from the repository as a WSUser object. You should be able to extract the email attribute using the WSUser object's getAttribute method. If you need to construct a full view then there's more work to be done but that should get you the email address. (Assuming of course that you're saving it in the IDM repository.)

OIM 11GR2 - mechanism for restoring default adf user forms - create user

Hi All
Our developers has pubkished multiple OIM sandbox and create user form is broken
: the user creation form does not appear - only a html <div> tag .
The developer reverted the form using the em/console - then he ran the catalog sync job but all he can acheive is a blank form not the original user create forms
How do we restore the forms to thier original state.
Thanks

Not sure if this helps. But try these steps mentioned in the developer's guide. Once I did some UI customization in identity console and could not load my page after that. I followed these steps and was successfully able to restore it back. You can give a try and in step 6 try to select some known sandbox name which did not have any issues.
1. Login to Oracle Enterprise Manager.
2. In Application Deployments, select oracle.iam.ui.console.self-service.ear.
3. On the top-right of the page, select Application Deployment, and then select MDS Configuration from the list.
4. At the bottom of the screen, select Runtime MBean Browser under the Advanced Configuration section. The right side of the screen refreshes.
5. Click the Operations tab.
6. Scroll down and identify the listMetadataLabels MBean operation and invoke it. Select the MBean operation that does not take any parameters. Select the sandbox precreate that you want to restore, and copy it to the clipboard.
For example, the value you copy can be similar to: Creation_IdM_test_09:25:00.
7. Click Return to go back to the Operation tab.
8. Find the promoteMetadataLabel MBean operation.
9. Invoke the promoteMetadataLabel MBean operation, and enter the value that you copied in step 6.
10. Restart Oracle Identity Manager.

Why doesn't default CREATE USER form show a "Check" Page before submitting

Hi
Interesting question.
When I create a User (using my Customized Create User Form), and I press SAVE, the Form is submitted immediately. There is no "stop-and-check" page, which allows one to review the entries made BEFORE submitting the form itself.
For example : when EDITING or UPDATING a User, and you press "Save", the form is not submitted right away. Instead, a new page opens, where you can review the changes you made, to ensure that they are correct. In fact, at the bottom of this new page, there are 4 standard buttons : SAVE...........RETURN TO EDIT............CANCEL
This is a very good system, because it allows you to check your entries, and make sure they are correct, before pressing SAVE again to submit.
However, the "Create User" form does not have this same arrangement.
Is there any way to customize the Form, so that, when creating a User, and you press SAVE, a "check-page" first shows up (just like when updating/editing a user) ?
Thanks

Hi
Interesting question.
When I create a User (using my Customized Create User Form), and I press SAVE, the Form is submitted immediately. There is no "stop-and-check" page, which allows one to review the entries made BEFORE submitting the form itself.
For example : when EDITING or UPDATING a User, and you press "Save", the form is not submitted right away. Instead, a new page opens, where you can review the changes you made, to ensure that they are correct. In fact, at the bottom of this new page, there are 4 standard buttons : SAVE...........RETURN TO EDIT............CANCEL
This is a very good system, because it allows you to check your entries, and make sure they are correct, before pressing SAVE again to submit.
However, the "Create User" form does not have this same arrangement.
Is there any way to customize the Form, so that, when creating a User, and you press SAVE, a "check-page" first shows up (just like when updating/editing a user) ?
Thanks

Logical flow between User forms and workflows

Hi,
I want to know the logical flow among jsps,UserForms and workflows in IDM.
This may appear as a silly quest. But I want to know how exctly the workflows are getting excuted when we click the buttons on the forms....
For eg While creating the user after gving the user details in Tabbed User form when we click on save how it is calling Create User Workflow....
where is the link and how its happening.....
If any one know this please reply me....this a quest remaining in my mind since so many days....
Thanks in advance....

I dont think, there is any xml codes in any of the forms for calling workflow. One needs to render a form for any workflow. Whenever you hit new User , the create user workflow gets initiated and the form and the default form for create user is Tabbed User Form. activities and forms are mapped according to the authorisation level. If you create any Admin role, then we need to specify a form for the admin's capabilities. I guess for configurator , to create a a new user, the form has to be Tabbed User Form by default. For a custom Lanch user process, one needs to include a form along with the workflow. We can do that. Thats what I know till date.
Thanks,
Manila

Help Pls: how to assign a user form to a non active sync resource adapter

I need to implement a non active sync resource adapter, such as oracle database or RACF. When a user is assigned a resource by IdM, an account is created on that resource. I want to transform some attributes during the creation, such as pre-padding the accountId with a letter and zeros. My questions are:
1) I think attribute transformation should be accomplished by user form. is it correct? How do I assign the user form to the non active sync resource?
2) What workflow/userform should I change to accomplish that?
Thanks a lot.

A cleaner option would be to
1. Create a custom form, which could be derived from the Tabbed User Form.
2. Create a delegated admin, with account administrator capabilities at the minimum, and required controlled organization, and assign the above form to this delegated admin -- this is on the same page.
3. Use this form to create IDs on the specific resource.
Now in this custom form you could have the logic on how to create the ID in the specific resource. In fact you could have different logic for different resource. Check the tech deployment guide for the exact syntax, but the field might be:
account[Res_Name].identity
Note that this setting would override the 'Identity Template' setting as defined in the RA configuration.
And BTW, it would really help if you readup the 'Forms' section in the guide.
Regards,
Suveer Chainani

How to add a new tab on modify user form

Hi,
In OIM11g, we can assign roles to a user using a tab named Roles in the modify user form. I want to add a new custom tab alongside all the already present tabs.
The new custom attribute functions the same as 'Roles' in OIM.
Does OIM11g provide any functionlity to do so?
Thanks..

Have you seen the 11g tutorial thing about adding a Custom ADF tabs in OIM Self Service Console at
http://apex.oracle.com/pls/apex/f?p=9830:37:3242381082783477::NO:RIR:IR_PRODUCT,IR_PRODUCT_SUITE,IR_PRODUCT_COMPONENT,IR_RELEASE,IR_TYPE,IRC_ROWFILTER,IR_FUNCTIONAL_CATEGORY:,,,OIM_11g,,,
Is that any help?
Also, more general advice on customising OIM 11g is available at:
http://download.oracle.com/docs/cd/E14571_01/doc.1111/e14309/uicust.htm
Try metalink too because there may be examples of how to do stuff with OIM 11g there.
Good luck

Reverting USER FORMS back to "Empty" or "Default Page"

Hi all,
I could really use some help with my situation here.
I have designed my User Form in such a way that it handles *"Employee Recruitment"* Process in an easy and straightforward way.
My User Form has two main Tabs : *"Employee Joining the Company"* and *"Employee Leaving the Company"*.
In other words : IN and OUT process.
The first tab is used to Create the Employee "file", and also update his current Status (if any thing changes while he is employed by the company).
The second tab deals with his Leaving the company (if he either resigns, or is kicked out).
So far, so good.
However, sometimes, an employee is hired only on a "Temporary" basis. Meaning, a "fixed-term" contract. So, when his contract is up, he leaves the company.
But, what if he decides to COME BACK (or, if he is again re-hired by the company)?
To make it easier, we do not delete any employee's records from our IDM system (even after he has left the company). So, if he ever returns to work, his "*username"* is still in the IDM system, and can be revived.
But.............therein lies the problem. If an employee returns, we need to initiate an entirely new CREATE process for him.
Also, if he leaves the company again (for the second time), this requires a new OUT process.
(a) Is it possible to initiate a new CREATE-process for a user, whose "username" already exists in IDM? In other words, he has already been "created";
How could I "erase" the previous "Employee IN" User Form, and re-input everything with a fresh, empty form?
(b) similarly, how can I "erase" everything from the OUT-form?
In a nutshell : is there anyway to revert BACK to an empty User Form (default field values (zero)) ?
Any help will be greatly appreciated.
Thanks.

Hi chapo.
thanks for your reply.
*> I assume that when a person leaves the company that their rights in various application will be either disabled or disabled then deleted after a period of time. When this occurs this should remove most of the applications that a user is assigned to and resolve a potential security issue of a returning contractor having access to applications from a previous engagement*
Yes, this is true. Our IDM system is linked to other Resources (particularly Active Directory and LDAP). Naturally, when a user's account is DISABLED in IDM, this will also disable all accounts and access-rights in other systems.
*> In regard to the other information that may be stored. You could create an extended attribute that flags the user when they leave the company. When the person rejoins the company the form then resets attributes based on the existance or otherwise of the flag.*
This is the part that interests me the most. Because : I need the User Form to be "RESET".............in other words, all attributes set back to Default (a fresh, empty form), so the CREATE and UPDATE processes can begin afresh.
Please, could you specify how I could do this?

Modifying custom end user menu - tabs

Hi
I have created a custom form within IdM 8.0. which I want to display instead of default end usermenu form. I have made necessary mapping for form type - "endUserMenu" under form and process mapping. I see my changes under HOME tab of default end user menu and in addition i see the other default tabs.
How do i eliminate/ remove the other tabs - workitems, requests, delegations and profiles from end user menu form. Where do i need to change or set the config values.
Thanks

Hi,
Thanks priya, it was helpful..
but i dont see any fields under each "menuItem" in the End User Navigation, i am wondering how the tables and other HTML components got generated.
Thanks

Modifying default tabbed user form

Similar Messages

Maybe you are looking for