Multiple Accounts on Multiple resources through ActiveSync

Hi,
I am trying to create multiple accounts on multiple resource through activesync. But i am able 2 create on a single resource... below is the code
<Field name='NDSFilter'>
<Disable>
<isFalse>
<contains>
<ref>accountInfo.assigned</ref>
<s>Dev-NDS</s>
</contains>
</isFalse>
</Disable>
<Field name='newAccountRequest'>
<Expansion>
<block trace='true'>
<s>Dev-NDS</s>
</block>
</Expansion>
</Field>
<Field name='global.NdsUname'>
<Expansion>
<block>
<s>NdsFour</s>
</block>
</Expansion>
</Field>
<Field name='global.NDSOU'>
<Expansion>
<block>
<s>ADK</s>
</block>
</Expansion>
</Field>
<Field name='accounts[Dev-NDS].waveset.generate'>
<Default>
<s>true</s>
</Default>
</Field>
</Field>
<Field name='DSFilter'>
<Disable>
<isFalse>
<contains>
<ref>accountInfo.assigned</ref>
<s>UOS-AssociatesLDAP</s>
</contains>
</isFalse>
</Disable>
<Field name='newAccountRequest'>
<Expansion>
<block trace='true'>
<s>UOS-AssociatesLDAP</s>
</block>
</Expansion>
</Field>
<Field name='accounts[UOS-AssociatesLDAP].accountId'>
<Expansion>
<block trace='true'>
<s>AccountTwo</s>
</block>
</Expansion>
</Field>
<Field name='global.OU'>
<Expansion>
<block trace='true'>
<s>UOS-MultiAccounts</s>
</block>
</Expansion>
</Field>
<Field name='accounts[UOS-AssociatesLDAP].waveset.generate'>
<Default>
<s>true</s>
</Default>
</Field>
</Field>
Can anyone pls suggest me the solution...
Thanks in advance
Kiran

Thanks for the reply... in my case this would be done by the active synch process so no GUI form is required. I will be getting a list of application ID for the user by LDAP AS. One i get it i will have to parse it and get the list of application user id. I am passing those ID;s to a workflow where I am forming the resource name as you mentioned
for example:
If i get user1#user2#user3 from AS i am separating them based on # using split and getting 3 different user id;s
now i am forming a string with the resource name and passing it to the sub process in which i am checking out the user object, setting the user attributes and checking in the new view.
user1#LDAP
user2#LDAP|1
user3#LDAP|2
Problem ; When i run this user1 is getting created in LDAP but user2 and user3 are not. There entry is getting created in IDM.
When I open the IDM object I get a yellow triangle (warning) and if I open the user object and hit save button IDM creates the user account on the LDAP.
any help for further solving this problem would be appreciated.
Regards,

Similar Messages

Allocating multiple accounts on a resource through multiple roles

Is there anyway for IdM to cater for the following scenario
Role 1 -> Allocates accounts on Resources A & B
Role 2-> Allocates accounts on Resources A & C
Such that when a User is given both Roles, their account list is
(1st) account on A, account on B, (2nd) account on A, account on C
rather than the aggregate of (1 only) Account on A,account on B, account on C.
And if, say, Role 1 is revoked for the account on Resource A as provisioned by Role 1 is the only account to be revoked on the resource allowing the 2nd account on Resource A (as provisioned through the still active Role 2) to still be managed
Thanks
--Calum

Yes, it should be possible, but messy.
The easiest way would be to create separate resources for the roles. So you'd have two configured resources for the same target, and the roles would assign the separate resources. You'd have to make sure that the target resources account names are different because usually they are required to be unique.

Question about multiple resource objects using the same OID target account

In Oracle Identity Manager 11g with OID connector as a target system.
Is it possible to create multiple resources that use the same OID IT Resource. Each resource is responsible for provisioning certain OID attributes of the same OID account. For example 'OID User' would provision the basic account and a separate resource called 'Department1 User' would provision attributes not provisioned by OID User.

Yes, definitely. Here is how it would work:
- You would have to make sure that the resource OID User always gets provisioned first, so that the account exist when these additional attributes are being set for the user via the other resource Department1 User. You can do this with Resource Dependency in OIM.
- Now for using the same IT Resource, just create the new form and in the IT Resource type form field, map the properties to the same IT Resource Definition, so when the Provisioning Process gets invoked it uses the same IT Resource instead.
Thanks
SRS

Assigning Multiple Resource Accounts to IdM User Account in IdM 7.0

Hi All -
Has anyone tried assigning multiple resource accounts to a IdM User with IdM 7.0 by creating a Account type using Identity Rules. I tested it on Simulated Resource and it works fine. But for Active Directory, which has personal accounts and Admin accounts on different OU on AD, when I am trying to do the Bulk Upload. The bulk upload is able to do link up the Admin account on AD to user account. But then it tries to create an additional account as well even though the user that executed the Bulk action has a Blank form assigned. Has anyone been able to figure this out yet ? If yes, can you please provide some inputs on this ?

Hi All -
Has anyone tried assigning multiple resource accounts to a IdM User with IdM 7.0 by creating a Account type using Identity Rules. I tested it on Simulated Resource and it works fine. But for Active Directory, which has personal accounts and Admin accounts on different OU on AD, when I am trying to do the Bulk Upload. The bulk upload is able to do link up the Admin account on AD to user account. But then it tries to create an additional account as well even though the user that executed the Bulk action has a Blank form assigned. Has anyone been able to figure this out yet ? If yes, can you please provide some inputs on this ?

Linking Multiple Resource Accounts via Active Sync

Ok guys/gals the scenario is... We have one idm account linked to accounts on one resource, and we want to be able to link them up via Active Sync...We don't care about the attributes, just want to make sure that if a another account for a user is created outside of IDM we can grab it and link it. So far, I've seen that the active sync process will see the new account, correlate it to a user, but it will not link the user...And outside of doing a custom Process Rule workflow, I'm not seeing any other way to get the accounts to link via active sync. Is what we are trying to do a reconciliation thing only? Have I missed something?

Yes. You can add a field to your ActiveSync form to do this: Here is an example with AD:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE Configuration PUBLIC 'waveset.dtd' 'waveset.dtd'>
<Configuration name="Sample ActiveDirectory ActiveSync Form" wstype="UserForm">
     <Extension>
          <Form name="Sample ActiveDirectory ActiveSync Form">
               <Field name="processType">
                    <Default>
                         <s>NONE</s>
                    </Default>
               </Field>
               <Field name="dispatcher">
                    <Expansion>
                         <cond>
                              <eq>
                                   <upcase>
                                        <ref>feedOp</ref>
                                   </upcase>
                                   <s>UPDATE</s>
                              </eq>
                              <block>
                                   <set name="update.selectAll">
                                        <s>false</s>
                                   </set>
                                   <dolist name="resObj">
                                        <ref>waveset.accounts</ref>
                                        <block>
                                             <set name="resName">
                                                  <get>
                                                       <split>
                                                            <ref>resObj</ref>
                                                            <s>:</s>
                                                       </split>
                                                       <i>1</i>
                                                  </get>
                                             </set>
                                             <set>
                                                  <concat>
                                                       <s>update.accounts[</s>
                                                       <ref>resName</ref>
                                                       <s>].selected</s>
                                                  </concat>
                                                  <s>false</s>
                                             </set>
                                             <cond>
                                                  <match>
                                                       <ref>resName</ref>
                                                       <ref>activeSync.resourceName</ref>
                                                  </match>
                                                  <cond>
                                                       <eq>
                                                            <ref>
                                                                 <concat>
                                                                      <s>waveset.accounts[</s>
                                                                      <ref>resName</ref>
                                                                      <s>].accountGUID</s>
                                                                 </concat>
                                                            </ref>
                                                            <ref>activeSync.objectGUID</ref>
                                                       </eq>
                                                       <set name="resourceName">
                                                            <ref>resName</ref>
                                                       </set>
                                                  </cond>
                                             </cond>
                                        </block>
                                   </dolist>
                                   <cond>
                                        <isnull>
                                             <ref>resourceName</ref>
                                        </isnull>
                                        <set name="processType">
                                             <s>LINK</s>
                                        </set>
                                        <set name="processType">
                                             <s>UPDATE</s>
                                        </set>
                                   </cond>
                              </block>
                         </cond>
                    </Expansion>
               </Field>
               <Field name="IAPI.cancel">
                    <Expansion>
                         <s>true</s>
                    </Expansion>
                    <Disable>
                         <eq>
                              <ref>processType</ref>
                              <s>LINK</s>
                         </eq>
                    </Disable>
               </Field>
               <Field name="doLinking">
                    <Expansion>
                         <block>
                              <append name="waveset.resources">
                                   <ref>activeSync.resourceName</ref>
                              </append>
                              <set>
                                   <concat>
                                        <s>waveset.accounts[</s>
                                        <ref>activeSync.resourceName</ref>
                                        <s>].accountId</s>
                                   </concat>
                                   <ref>activeSync.identity</ref>
                              </set>
                              <set>
                                   <concat>
                                        <s>waveset.accounts[</s>
                                        <ref>activeSync.resourceName</ref>
                                        <s>].sAMAccountName</s>
                                   </concat>
                                   <ref>
                                        <s>activeSync.sAMAccountName</s>
                                   </ref>
                              </set>
                              <set>
                                   <concat>
                                        <s>waveset.accounts[</s>
                                        <ref>activeSync.resourceName</ref>
                                        <s>].accountGUID</s>
                                   </concat>
                                   <ref>activeSync.objectGUID</ref>
                              </set>
                         </block>
                    </Expansion>
                    <Disable>
                         <neq>
                              <ref>processType</ref>
                              <s>LINK</s>
                         </neq>
                    </Disable>
               </Field>
          </Form>
     </Extension>
     <MemberObjectGroups>
          <ObjectRef type="ObjectGroup" id="#ID#Top" name="Top"/>
     </MemberObjectGroups>
</Configuration>

Multiple resource objects provision issue in OIM10g

Hi Team,
We're facing an issue regarding multiple access policy trigger for a specific resource object in OIM.
The scenario is whenever we try to process the enablement or creation of users through flat file recon, users are created / enabled with multiple resource objects in their resource profiles.
When we checked in User Resource Access History report, we observe that the access policy has been triggering multiple times for these users resulting in users with multiple resource objects. Amongst these one shows provisioned/Enabled and the other shows provisioning/in some cases Provisioned/Enabled.
Please advise as this has become an ongoing issue and also has led into data mess-up.
Appreciate your help on this one..
Regards,
Sagar

The terminology sounds a little confusing to me:
If you mean you wanna create multiple IT Resources for a single IT Resource Instance so that the user can select the appropriate IT Resource during request creation -> All good upto here. But then since the Object/Request Form attached to a resource would be the same, so any user would always see the same form fields for creationg request.
Example: Users creating request for Oracle Database Accounts but different server locations
If it means you just need to create multiple Resource Objects then its a straighaway standard requirement and could be handled with normal Connector Development methodology.
Example: Users creating requests for different resources like Oracle Database Accounts & Active Directory Accounts

OIM 11g - Mail Notification for multiple resources

User will be provisioned to 5 target system through access policies.So instead of sending 5 different mail notifications to the manager on the Create User task about the account creation, is it possible to send one consolidated mail about the provisioned resources in OIM 11g.

Hi,
How abt for the following requirement for sending single mail for multiple resources provisioned.
We have 3 Access Policies which is defined as follows.
1) Policy 1 -> R1,R2,R3 Resources
2) Policy 2 -> R3,R5 Resources
3) Policy 3 -> R1,R4 Resources
In such a case we will not be able to put dependencies on Resources and adding a task for sending email.

Creating Multiple Resource Objects for OOTB Connectors

All,
I am trying to create a second AD User resource object for the OOTB connector. I would like to think that the AD Connector (and all connectors, for that matter) was designed to handle the creation of multiple Resource Objects for the same Resource Types, but am I wrong? It doesn't seem like the OIM Connector can handle this easily.
Has anyone created multiple resource objects for a connector? Is this a fairly simple task, or will it require a large effort? Is it even possible? Any pointers?
Thanks!

I will provide a little help with the duplication. I found the best way to do it is to import the original connector. Go through the different pieces making each one have a unique name, that is not part of any of the other piece names. You need to have unique names for the following:
1. Resource Object
2. Process Definition - Provisioning
3. IT Resource
4. Form - Process
5. Scheduled Task
After you import the connector, rename each of the following to something unique. I would also update your process form to have a default value of your IT Resource, as well as your scheduled task values to point to the new unique names. Export the 5 items, no dependecies. The adapters will all be the same. Use find and replace for the values and then import the new XML. If it works, duplicate the XML for each of the new workflows you want to create.
-Kevin

Multiple resources on one task

Hi all
I'm a little rusty. I'm working in 2010.
I have been given the durations (in days) that tasks will take. I have multiple resources, all of whom will be working on the same tasks, all assigned units will differ, example, resource A will spend 60%, B will spend 20% and C will spend 20%.
Apparently each resource with have a different number of effective hours per day.
How should I handle this in the schedule?
thanks
JD
J Day

Hi J Day,
1- You can set the task type based on your business context. You can for example set your task to fixed unit. Doing this, if the work increases, the duration will increase accordingly and the %unit will be kept. Thus you'll see a duration variance.
2- Be aware that setting the max unit of a resource in the resource sheet is NOT taken into account while assigning the resource on a task. It is only used to flag weither or not a resource is overallocated. For example, if you set the resource A has
a max unit of 50% (4hrs/day) and then you assign it at 100% on a task, it will be assign at 8hrs thus shown as overallocated. Project will not make the calculation that the 100% you set in the assignment is 100% of 50%, meaning 4hrs. You have to do this calculation
by yourself while creating assignments. Note also that the max unit is used when you assign a resource without entering a %unit; Project will take by default the max unit. Hope this is clear.
Hope this helps,
Guillaume Rouyre, MBA, MCP, MCTS |

Publish Multiple Resource Calendars Superimposed To A Web Page

Hi, I'm hoping you can assist.
I have succeeded in publishing a resource calendar to a web page hosted on Exchange 2013.
In the Outlook web client it is possible for a user to view multiple resource/room calendars superimposed.
My question is; Is it possible to achieve this view in a single published web page?
Many Thanks
Mike

Hello Mike,
Firstly, I would like to know how did you publish the resource calendar to a web page hosted on Exchange 2013.
On Exchange, the free/busy data are stored on the users mailbox. Generally, Exchange uses EWS service to retrieve the free/busy data.
Thanks,
Simon Wu
TechNet Community Support

Changing properties of multiple resources in one transaction

Hi,
Does anyone have an idea how to change a property in multiple resources in one atomic transaction.
There are some interesting comments regarding the use of "mass calls" in various SAP documents but not really anything specific.
The changing of one property in multiple resources is not the problem. This is easy. The challenge is the operation in one transaction. There is a ITransactionManager in the KM Javadoc but this looks like more of an internal class.
Thanks.
Dick

Does this imply that the properties of these selectors can be modified simultaneously?
Correct.

How to open multiple forms through differnt responsiblity

I have a 11.5.10.2 system on Linux red hat.
Business pepole want to open multiple forms through different responsiblities from multiple web brower sessions.
However when I opened 2 IE brower sessions, log into responsiblity and open one oracle form in one IE session and log into another responsiblity through second IE session. The first opened form disappear and replaced by the second oracle form opened from another IE session. That means only one Oracle form can be open at the same time for this case.
The current walkaround solution is to open 2 browser sessions using 2 different browsers ( one is IE another is Firefox) to fix this issue. Apparently this is not a good solution.
Can you please give me some suggestion to fix this issue?

Thank you very much for the information.
The note mention:
The new forms launcher does not support opening multiple forms applets for the same database across different responsibilities. Opening a form in another responsibility will cause any forms currently open to close. This behaviour is standard.
However it is possible to enable users to open multiple forms sessions for the same database for the same responsibility when using MS Internet Explorer as the client browser. This is made possible with Patch 3293241. This patch is included in Oracle Applications release 11.5.10 as standard.
My current system is 11.5.10.2. I verified that patch 3293241 has been applied. I have no problem to open mutiple forms with in SINGLE web brower session, within same responsibility. I am aware that you can not open multiple forms through SINGLE web brower session through multiple responsiblity. What I tried to do is to open mutiple forms through multiple web browers sessions. Open one brower session, log into system and open a form, then open another web brower session, log into the sytem and open a form through different responsiblity. The system does not allow me to open multiple forms through multiple web brower sessions. Only the latest form can be displayed. Is this standard design for 11.5.10?
Can Form Servlet architecture solve this limitation?
Actually afterI changed some form funcation paramter in Oracle Application Developer responsiblity, I can open 2 form session from 2 different responsiblities through 2 web brower sessions. I can open one form session as Application Developer and another form session through another responsiblity. Then I can switch to other responsiblity through Application Developer responsiblity to open forms.
Is there any other way I can open multiple form sessions to the same database through multiple web brower sessions?
Thanks a lot for your help
Edited by: wcxtao on Nov 3, 2008 9:47 AM
Edited by: wcxtao on Nov 3, 2008 9:57 AM
Edited by: wcxtao on Nov 3, 2008 10:08 AM

How to create plant wise STO from multiple requisition through Me59N

How to create plant wise STO from multiple requisition through Me59N

Due to the different supply plants the system does not know which one
to use and therefore throws the error message.
The only workaround would be to create the PO's seperatly per PR item.
Hoep this helps you

Multiple Resources for one role CATS scenario

Hi
We are on cPro 4.5 sp 006
the scenario is
One Role (say Consultant): Multiple Resources (say Niranjan, Amit) at a time (using Edit in parallel)
We have Time confirmation against Role
We have activated Confirmations against Project header as well
now when i try to enter time in CAT2 for Niranjan (who is staffed first) i get all attributes like Project, Project subobject, WBS element etc.
for Amit however I get project and WBS header and I get Subobject as Object does not have a de
It allows Amit to save data but when i try to transfer data to cProjects using Report the program throws error.
Thus for single resource staffing it works not for multiple staffed resources
Any inputs on this.
Niranjan

Raised to SAP
Note: 0001344595

Select from multiple tables through dblink

I am seeking help. Can I select multiple tables through a dblink from a remote database? I tried, it seems it always return ORA-00933 error. code like this:
select A.ID, B.CODE, C.TYPE_DESC
from TABLE_ONE A@db_link , TABLE_TWO B@db_link, TABLE_THREE C@db_link;
where A.ID = B.ID
and B.CODE = C.CODE
Thanks in advance.

Just as an FYI, from a performance standpoint, it is frequently the case (though certainly not guaranteed) that you'll get better performance creating a view on the remote database that does the join of all three tables and to use that view in your query, particularly if you're also joining in local tables. Optimizing SQL statements across database links tends to be particularly hard, a view often helps force Oracle to join the remote tables on the remote database which is generally what you'd want. Of course, this is not a guarantee, and you can always get explicit with hints to force joins to happen on one or the other system, but this is frequently the easiest starting point.
Justin

Multiple Accounts on Multiple resources through ActiveSync

Similar Messages

Maybe you are looking for