Multiple Matches in Join Rule

Hi,
What's the default behaviour for join rules with multiple matches? I'm looking at implementing a match on a payrollID number between Oracle payroll users and AD users - both objects imported into FIM. I'm updating my AD user attributes with payroll
data such as employee manager. AD users have portal and SSPR access.
Due to my data sources being less than 100% reliable some payrollIDs overlap - what is the default action during an import if multiple objects from the data source match? Presumably it's just a matter of various attributes being incorrectly updated for the
wrong user or with the wrong values.
Thanks
IT Support/Everything

Dominik is correct the first join regardless wins. Could you use additional attributes such as last name as an additional match criteria when the payrollID=999. The specific connector routine is MapAttribute for join and Carol Wapshere has a
good write up on advanced join scenarios which might help you.
http://www.wapshere.com/missmiis/advanced-joining
Good luck!

Similar Messages

Cisco ISE - What does "Multiple Matched Rule Applies" mean?

Hi,
In Cisco ISE authroiztion policy configuration, what does the option "multiple matched rule applies" mean? I can understand the "first matched rule", but in "multiple matched rule" how is the "permissions picked if multiple rules match? Or, what is the logic involved in picking up the permissions, if multiple rules are matched in authorization policy.
No where in cisco document I see any explaination for this.
Would appreciate if any one can point me to a document or explain me the login in selecting the persmissions if multiple rules are matched. Also, what would the use-case for this?
Thanks and Regards,
Mohan

I agree with tarik & also this might be helpful for you:
An authorization policy can consist of a single rule or a set of rules that are user-defined. These rules act to create a specific policy. For example, a standard policy can include the rule name using an If-Then convention that links a value entered for identity groups with specific condition(s) or attributes to produce a specific set of permissions that create a unique authorization profile. There are two authorization policy options you can set:
•First Matched Rules Apply
•Multiple Matched Rule Applies
These two options direct Cisco ISE to use either the first matched or the multiple matched rule type listed in the standard policy table when it matches the user's set of permissions. These are the two types of authorization policies that you can configure:
•Standard
•Exception
Standard policies are policies created to remain in effect for long periods of time, to apply to a larger group of users or devices or groups, and allow access to specific or all network endpoints. Standard policies are intended to be stable and apply to a large groups of users, devices, and groups that share a common set of privileges.
Standard policies can be used as templates in which you modify the original values to serve the needs of a specific identity group, using specific conditions or permissions to create another type of standard policy to meet the needs of new divisions, or groups of users, devices, or groups in your network.
By contrast, exception policies are appropriately named because this type of policy acts as an exception to the standard policies. Exception polices are intended for authorizing limited access that is based on a variety of factors (short-term policy duration, specific types of network devices, network endpoints or groups, or the need to meet special conditions or permissions or an immediate requirement).
Exception policies are created to meet an immediate or short-term need such as authorizing a limited number of users, devices, or groups to access network resources. An exception policy lets you create a specific set of customized values for an identity group, condition, or permission that are tailored for one user or a subset of users. This allows you to create different or customized policies to meet your corporate, group, or network needs.
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_authz_polprfls.html

Translation rule question - multiple matches

Hi,
I have a translation rule
translation-rule 5000
Rule 1 5000 600
Rule 2 5000 601
Rule 3 5000 602
im trying to understand what will happen here with the rules matching the same digits. Unable to find any documentation at this stage. Will it know if it has been through the first rule or performs a round robin?
Thanks

Hi
I believe the rule will match the first rule in the list - i.e. like an access-list.
You can test it using
test translation-rule 5000 5000
Where the first 5000 specifies rule 5000, and the second it the input number.
Regards
Aaron
Please rate helpful posts...

Explanation needed for Join rules

I try to configure the join Engine for some days now, andf probably I got something completly wrong... Here is what I try:
I have a "Participating View" (which is a NT Connector View) and a Meta View. When I enable the NT Connector View for the join engine, all entries flow from NT Connector View to the Meta View.
But when I change something in Meta View, it does not flow to the Connector View. I don't understand why.
Settings in Participant View are:
Attribute flow:
to connector atomic
to meta view: atomic
joinrules:
to conn: atomic
to mv: "testruleset"
DN mapping rules:
to conn: atomic
to mv: atomic
filters:
to conn: none
to mv: none
entry default ownership:
to conn: Meta View
to mv: Connector View
entry default membership:
To connector: Not a member of CV
to mv: Member of CV
"testRuleset" has one join rule:
1. Optional Token Assignments: <none>
Selection Criteria: <none>
givenname=%givenname%
As I understood the documentation, this rule should join entries, which have the same givenname.
So if I have two entries:
in MV:
dn: uid=test1,o=company
givenname: jack
sn: smith
uid: test1
telephonenumber: 123
and in CV:
dn: uid=test2,o=company
givenname: jack
sn: smith
uid: test2
mail: [email protected]
This rule should (as I read the documentation) join both entries in the MV to one entry containing a mail address an a telephone number, but it does not.
Could anyone correct tell me what part I got wrong or post a working example?
Thanks!
Florian

Hi, if you've just one Connector View (CV) and you want to synchronise entries from the CV to the MetaView (MV) then you need a "DN Mapping Rule". It's the purpose of the DNMappingRule to create the new DistinguishedName and entry in the target view. You do not have a DNMappingRule setup typically the rule would be something like uid=%uid% assuming uid is the RDN.
No not use Atomic where possible it's best practise to apply more control over the flow of attributes using an Attribute Flow Rule.
You don't need a Join Rule if there's only one datasource (ConnectorView) , the Join Rule is used to join entries that are split across multiple Data Sources say perhaps in Oracle and Directory Server.
Hope this helps,
Paul

Oracle 8i -multiple LEFT OUTER JOIN

Hi,
I have to convert some stored procedure from Sql Server to Oracle 8i where I have multiple LEFT OUTER JOIN on a table. Because Oracle 8i accept only one outer join on a table how can I convert this:
select a.id, b.id
from test as a LEFT JOIN test1 b ON a.id(+)=b.id
and a.display(+)=b.display
and a.name(+)='Done';
Thanks.

FROM test a LEFT JOIN test1 b ON b.key = a.keyis equivalent to
FROM test a, test1 b WHERE b.key(+) = a.keyThere is a restriction (when using the "(+)" syntax) that a table may be outer-joined to at most one other table, but that does not prevent you from having multiple join conditions between those two tables.
From your example I'm not sure whether you need this:
SELECT a.id, b.id
FROM   test a
     , test1 b
WHERE a.name = 'Done'
AND    b.id (+)= a.id
AND    b.display (+)= a.display;or this:
SELECT a.id, b.id
FROM   test1 b
     , test a
WHERE a.id (+)= b.id
AND    a.display (+)= b.display;
WHERE a.name (+)= 'Done';

Multiple matches issue

Strange issue with voice dialing finds a specific multiple match. I have an entry for "Mom" and one for "Mom - France". When I say "Call Mom" it says there are multiple entries and lists the above. When it beeps for me to speak again and I say "Mom" it always says "Calling Mom - France".
I never mention "France", I speak clearly, and for all other numbers it recognises me fine. If there are multiple numbers for one person (home, mobile etc) it recognises my choice with no problems. So why mis-hear this one with an extra word?

Not a direct answer but a workaround. I presume these are for the same people just different geographical locations.
Combine "Mom - France" into the Mom contact by adding the France number after the first number. Label it "France" so when you say "Call Mom" it will say something like, "Mobile or France?". Or you could just say "Call Mom Mobile" or "Call Mom France".
-SM

Uncheck "Suppress Multiple Alerts of This Rule"

Hello,
In Alert Configuration I try to uncheck the option "suppress Multiple Alerts of This Rule" and with out success.
The option still stay with V sign.
Any idea?
Regards
Elad

Elad,
1. Make sure that the security setting of your Browser is set to minimum level.
2. Next, select the Option--> and then click on Modify Rule.
Regards
Bhavesh

How to test alert mechanisum after checking., Suppress Multiple Alerts of this Rule.

Hi Experts,
Currently, Suppress Multiple Alerts of this Rule. condition is not checked, now its checked to avoid dulicate alerts.
Please let me know how to test this conditon?
Thanks,
Thrilok Chandar

make the message fail in PI for example 3 times, and check if you get 3 alerts.
you won't get 3. after one you have to confirm the alert then only you will get another consecutive one.
for that go to alert inbox and complete the alert and check if you get the alert or not.
if you don't check Suppress Multiple Alerts of this Rule no need to do above activity.

Java.lang.Exception: Multiple Matches Found

Hi,
I have written scheduler task to connect people soft DataBase get the users list and disable user accounts in IDM . Below is the peace of code.
=============================
ResultSet results = stmt.executeQuery(selectQuery);
tcReconciliationOperationsIntf reconUtil = (tcReconciliationOperationsIntf)getUtility("Thor.API.Operations.tcReconciliationOperationsIntf");
HashMap[] userValues = null;
userValues = createDeleteHashMap(results);
if (userValues.length < 1)
return;
Set deletedAcc = reconUtil.provideDeletionDetectionData(this.resourceObject, userValues);
============================================================
In the Set deletedAcc = reconUtil.provideDeletionDetectionData(this.resourceObject, userValues); i am getting the following exception . please help me
Regarding this.
[XELLERATE.APIS],Class/Method: tcReconciliationOperationsBean/provideDeletionDetectionData encounter some problems: Multiple Matches Found
java.lang.Exception: Multiple Matches Found
Edited by: user11084273 on Sep 26, 2012 12:36 AM

I believe this API expects only to match no more than one user on each of the criteria set in the paoAccountDataList (userValues) in your case, i.e. each entry in the map must give a unique identifier of one resource. This map is not a map of attributes of one account, which together identify one resource, as any one ambiguous value in the map will give this error. It appears at least one entry in you userValues map is ambiguous and matches multiple resources. I guess this all depends on what your initial select query was.

Multiple matches found for CD

I just started using my iTunes on my MacBook Pro. I began by downloading my new box set of remastered Beatles albums. Some have been no issue. But on others I receive a popup box saying, "Multiple matches found online for this CD. Please choose the correct one." And then it will have 2 or 3 listings of the album title below, some the same, some slightly different- with no way to check to see what you're choosing. On the 1st one I choose the match I thought to be correct and now when I insert that CD all the song names are in Chinese. And no apparent way to change it, the computer recognizes it that way every time now. INFURIATING. Obviously I didn't download it into my iTunes. I even tried other CD's and it happened with some of those, too. I've been using iTunes for a couple of years now and have downloaded dozens of CD's into my library, this is a new issue.
How do I fix the CD from recognized incorrectly and how do I get this to stop? Thank you.

If more than one entry is found for the CD (that can occur if more than one person submitted information for the same CD to the Gracenote service), select one of the entries. If it isn’t correct, choose Advanced > Get CD Track Names again and choose the other entry. If it’s still not correct, you can edit the information yourself.

Need your help to confirm the table join rules on DocEntry and DocNum.

Hi guys,
I've done some study and awared table join rules on SBO documents, let me put in the followings:
(1) the table of documents head (i.e. ODLN) and line items (i.e. DLN1) can be joined via DocEntry/BaseEntry.
(2) the table of related documents (i.e. RDR1 and DLN1) can be joined via DocNum/BaseRef.
finnally, can we say that we can ONLY join table by DocEntry/BaseEntry or DocNum/BaseRef, and we should NOT use DocEntry/BaseRef.
Am I right? pls help to correct it for my misunderstanding.
Thanks.

thanks for your help.
but I'm truly confused about why some table have both BaseRef and BaseEntry columns, some table only have DocEntry columns?
As I know, e.g. OWOR and WOR1, there have some series generated from NMM1, the value of DocEntry/DocNum in OWOR may not be the same, and we can only join OWOR/WOR1 via OWOR.DocEntry = WOR1.DocEntry.
So when to use (T0.DocEntry/T1.DocEntry), when to use (T0.DocEntry/T1.BaseEntry) and when to use (T0.DocNum/T1.BaseRef)?

Multiple LEFT OUTER JOIN on Oracle 8i

Hi,
I have to convert some stored procedure from Sql Server to Oracle 8i where I have multiple LEFT OUTER JOIN on a table. Because Oracle 8i accept only one outer join on a table how can I convert this:
select a.id, b.id
from test as a LEFT JOIN test1 b ON a.id(+)=b.id
and c.display(+)=b.display
and c.name(+)='Done';
Thanks.

Rewrite as:
select a.id, b.id
from test, test1 b
WHERE a.id(+)=b.id
and a.display(+)=b.display
and a.name(+)='Done';
Though I would lose the (+) in a.name(+) = 'Done' unless you want every name.

Multiple left outer join in single select query

My client requires to apply multiple left outer join in single select query.
Tell me how it is possible . tell me if we can use native sql query.

HI vineet,
Using multile left join is possible but it reduce performance as it takes a long time to retrieve data.
The following code would help you in knowing how to use multiple left join
REPORT test.
PARAMETERS:
p_auart LIKE vbak-auart.
DATA:
BEGIN OF fs_sales,
    auart LIKE vbak-auart,
    vbeln LIKE vbak-vbeln,
    posnr LIKE vbap-posnr,
    matnr LIKE vbap-matnr,
    netwr LIKE vbap-netwr,
END OF fs_sales,
fs_temp LIKE fs_sales.
DATA:
t_sales LIKE STANDARD TABLE OF fs_sales.
SELECT k~auart
       k~vbeln
       p~posnr
       p~matnr
       p~netwr
INTO TABLE t_sales
FROM vbak AS k
OUTER JOIN vbap AS p
ON k~vbeln = p~vbeln
WHERE auart = p_auart
   AND p~netwr LT 1000.
IF sy-subrc EQ 0.
WRITE:/5 'Sales Document'(001),/,
        15 'Sales Document Item'(002),
        40 'Material Number'(003).
sort t_sales by netwr ascending.
LOOP AT t_sales INTO fs_sales.
    WRITE:/ fs_sales-vbeln under text-001.
    LOOP AT t_sales INTO fs_temp WHERE vbeln = fs_sales-vbeln.
      WRITE:/ fs_temp-posnr under text-002,
              fs_temp-matnr under text-003.
    ENDLOOP.
ENDLOOP.
ELSE.
MESSAGE 'No Record Found' TYPE 'I'.
ENDIF.
But i would suggest you to go with views instead of using multiple joins..
Best of luck,
Bhumika

Validate message multiple records in Business Rule

I have Order message as below:
<Orders>
<Order>
<Header>
<BillToID>001</BillToID>
<ShipToID>002</ShipToID>
<Id>Order001</Id>
</Header>
<OrderLine>
<Id>Line001</Id>
<Date>2015-01-01T00:00:00</Date>
<Qty>10</Qty>
<Status></Status>
</OrderLine>
<OrderLine>
<Id>Line002</Id>
<Date>2015-01-01T00:00:00</Date>
<Qty>15</Qty>
<Status></Status>
</OrderLine>
</Order>
<Order>
<Header>
<BillToID>002</BillToID>
<ShipToID>003</ShipToID>
<Id>Order002</Id>
</Header>
<OrderLine>
<Id>Line003</Id>
<Date>2015-01-01T00:00:00</Date>
<Qty>5</Qty>
<Status></Status>
</OrderLine>
<OrderLine>
<Id>Line004</Id>
<Date>2015-01-01T00:00:00</Date>
<Qty>65</Qty>
<Status></Status>
</OrderLine>
</Order
</Orders>
I want to use Business rule to check Quantity value and update status for the order line, that if quantity < 10 set the status to Approved, if quantity between 10 to 50 then set status to Pending, if quantity > 50 need to set the status to Reject.
The business is simple, if the Order message just have one record, but when the Order message that contain multiple record the business rule just get the first quantity and set the status value.
Anyone have any idea to implement with that requirement?
Thanks in advance!

Have a look into the below articles and let us know if you face any further issue.
They are addressing a similar issue
http://www.neudesic.com/blog/apply-bre-rules-looping-data-dynamic-policy-execution/
How to construct BRE "Condition" on multiple repeating record
Thanks,
Prashant
Please mark this post accordingly if it answers your query or is helpful.

Issues with Multiple Match Records

Hi,
We have scenario like RFC<--->XI<---->SOAP, we are able to send the request and get the response from webservice.
Auctully this scenario works based on Match records . If we send the exact match record to SOAP, webservice would give only one result with exact details, otherwise Webservice would return multiple match records. We need to catch all these results and send it to SAP via RFC.
it should be like : Request Map is 1:1 and Response Map N:M.
Currently we are struggling for send the Multiple records to RFC. How RFC could take this?
So please let us know:
1. How we are going to handle MessageType for receiver side?
2. Does it required Multimap in Response ? How we are going to handle this multimap?
3. Does it required any BPM for this?How do I make BPM design?
4. How do I make receiver determination?
Please put your design ideas on this and give me brief steps for handle this situvation.
Thanks for your time .
- Ravi
Edited by: Ravi on Jun 5, 2008 12:50 AM

Thanks Vijaya laxmi..
We have similar sync scenarios are working fine, except this one.
We are able to see messages payload in Moni..thing is the response contains another strings which are coming from webservice. There XI couldn't understand how to map response fields to RFC.respone!
We need to hide extra strings which we got from Webservice , then we could able to map WS resonse to RFC response.
Currently we are getting this resonse from WS on moni:
<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
- 
- <AddressValidatorResponse xmlns="http://tempuri.org/geostan3/AddressValidator" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
- <AddressValidatorResult>
- <xs:schema id="AddressCheck" xmlns="" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:msdata="urn:schemas-microsoft-com:xml-msdata">
- <xs:element name="AddressCheck" msdata:IsDataSet="true">
- <xs:complexType>
- <xs:choice maxOccurs="unbounded">
- <xs:element name="Address">
- <xs:complexType>
- <xs:sequence>
<xs:element name="Addline1" type="xs:string" minOccurs="0" />
<xs:element name="Addline2" type="xs:string" minOccurs="0" />
<xs:element name="URB" type="xs:string" minOccurs="0" />
<xs:element name="Lastline" type="xs:string" minOccurs="0" />
<xs:element name="Location" type="xs:string" minOccurs="0" />
<xs:element name="OutBlock" type="xs:string" minOccurs="0" />
<xs:element name="OutCBSA" type="xs:string" minOccurs="0" />
<xs:element name="MatchCode" type="xs:string" minOccurs="0" />
<xs:element name="LocationCode" type="xs:string" minOccurs="0" />
<xs:element name="DPVConfirm" type="xs:string" minOccurs="0" />
<xs:element name="DPVFalse" type="xs:string" minOccurs="0" />
<xs:element name="FootNote1" type="xs:string" minOccurs="0" />
<xs:element name="FootNote2" type="xs:string" minOccurs="0" />
<xs:element name="FootNote3" type="xs:string" minOccurs="0" />
<xs:element name="Msg" type="xs:string" minOccurs="0" />
</xs:sequence>
</xs:complexType>
</xs:element>
</xs:choice>
</xs:complexType>
</xs:element>
</xs:schema>
- <diffgr:diffgram xmlns:msdata="urn:schemas-microsoft-com:xml-msdata" xmlns:diffgr="urn:schemas-microsoft-com:xml-diffgram-v1">
- <AddressCheck xmlns="">
- <Address diffgr:id="Address1" msdata:rowOrder="0" diffgr:hasChanges="inserted">
<Addline1>220 W MAIN ST</Addline1>
<Addline2 />
<URB />
<Lastline>LOUISVILLE, KY 40202-1395</Lastline>
<Location>-85754010, 38256144</Location>
<OutBlock>211110049001067</OutBlock>
<OutCBSA>31140</OutCBSA>
<MatchCode>SE1</MatchCode>
<LocationCode>AS0</LocationCode>
<DPVConfirm />
<FootNote1 />
<FootNote2 />
<FootNote3 />
<Msg>OK</Msg>
</Address>
</AddressCheck>
</diffgr:diffgram>
</AddressValidatorResult>
</AddressValidatorResponse>
But Auctully this response required for response mapping(example for you, I have modified according to our scenario from above auctual payload):
<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
- 
- <AddressValidatorResponse xmlns="http://tempuri.org/geostan3/AddressValidator" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
<AddressValidatorResult>
<Addline1>220 W MAIN ST</Addline1>
<Addline2 />
<URB />
<Lastline>LOUISVILLE, KY 40202-1395</Lastline>
<Location>-85754010, 38256144</Location>
<OutBlock>211110049001067</OutBlock>
<OutCBSA>31140</OutCBSA>
<MatchCode>SE1</MatchCode>
<LocationCode>AS0</LocationCode>
<DPVConfirm />
<FootNote1 />
<FootNote2 />
<FootNote3 />
<Msg>OK</Msg>
</AddressValidatorResult>
</AddressValidatorResponse>
let me know how to hide extra strings in respone form WS?
- Ravi
Edited by: Ravi on Jun 9, 2008 7:07 PM

Multiple Matches in Join Rule

Similar Messages

Maybe you are looking for