Multiple sources for trusted reconciliation

Hi All,
Is it possible to have multiple trusted source in OIM . such as I have to different application (1)end-user and (2)support. Both type of user need to created OIM.
When I do the recon. on support after recon of end-user . I find that users from end-user are deleted.
I am doing trusted recon.
Am I missing anything and how we can support multiple source for trusted recon.
Cheers

Hi,
I know you can have multiple trusted sources, as long as you normalize the attributes on the way in.
I have seen an implementation with multiple trusted sources that provide the information for different attributes, as well as the same (for example, employees can change their own name in one application, HR can change it in PSFT, but PSFT is also authoritative for PSFT number). Since the First Name and Last Name can be touched by both, when the reconciliation connectors/adapters push the data into the recon engine, the attributes are named the same from both places.
You can go into the organization of the users, find the Xellerate User process for the deleted users and find out what triggered the deletion. I have no idea what is doing it...
Some ideas: if you are using the AD adapter and have Delete Recon turned on, and are doing a trusted recon, then you might get into conflicts between the users. Other adapters don't have Delete Recon, so they won't do this. I haven't looked into the new generic connector, so I am not sure if it does this as well.
Also, you can look at the data coming in from the recons in the Design Console's Reconciliation Manager. This might give you a hint as to why things are getting deleted.
Also, since I haven't played with 9.0.3 yet, it might just be a bug (I just finished my installation though and will be doing recons next week and see -- i have multiple trusted sources).
Hope this helps,
Deb

Similar Messages

  • Multiple sources for Logical Tables

    The order of the sources in the logical table(in case of multiple sources) will it affect the query results??

    Hi,
    OBIEE pick the LTS using this algorithm:
    1) every logical fact table is set to a dimension level, every level in the dimension has a number of elements at that level
    2) OBIEE multiply for every LTS all the numbers of elements defined for a specific LTS
    3) OBIEE pick the LTS that has the lower valure (like a cost of access, it picje the most aggregated table)
    4) if there are multiple LTS with the same cost, OBIEE choses the first in order of defiition
    Regards,
    Gianluca

  • Multiple sources for address book

    Is there a way to keep different sources for addresses separate and discrete in Address Book? For instance, we have our own addresses from iCloud, but I also have addresses coming from Google Mail. We've worked hard to keep the iCloud ones updated and "clean", whereas the Google Mail ones are a bit messier. Is there a way to keep them distinct when importing/subscribing from Address Book? Or, does all the information end up getting merged?
    Thanks,
    John

    Hi,
    Pete_Sg1 wrote:
    I need to write a query whiich returns book details but it should identify records (ie. Titles) with multiple authors and return the record with Authors separated with pipe ('|') like (no need of SURRID column )Get there : {message:id=9360005}
    and scroll down to "string aggregation"
    Pete_Sg1 wrote:
    A table storing book details can only be designed like above. Right ? I mean, the duplication of records for one book because of multiple authors cannot be avoided. Right ? I would have had a table for books, and a separate one for authors, and a 3rd one for their relations :
    create table books
    book_id integer,
    title varchar2(100),
    etc...
    create table authors
    author_id integer,
    name varchar2(100),
    etc...
    create table book_authors
    book_id integer,
    author_id integer
    );You could also have only 2 tables book and authors (with authors table having a fk column to book_id).
    It would depends if the author is supposed to remain unique throught different books.
    - The 3 tables model would allow a single update on author information to be automatically "propagated" to all book he participed in.
    - The 2 tables model would allow to have different information for each participation of the author to different books (but would certainly "duplicate" part of the data about the author)
    One can also have even more tables to totally avoid data "duplication".

  • OIM - GTC database trusted reconciliation not importing passwords

    Hi,
    I am using the latest available database connector (9.1.0.5.0) with OIM 9.1.0.2 BP07 and i have an issue with password reconciliation.
    Let's say i have a table MY_USERS with users login data and i want to use it as a source for trusted reconciliation.
    I have followed the tutorial available in the DBAT documentation and i get the following results:
    -if i don't map the password field from the recon staging with the one of the OIM account, original password is ignored and OIM password is set to the username
    - if i map the password field from the recon staging with the one of the OIM account i get an exception and reconciliation fails. To succeed i have to proceed as described in this tutorial http://st-curriculum.oracle.com/obe/fmw/oim/10.1.4/oim/obe12_using_gtc_for_reconciliation/using_the_gtc.htm , modifying the password field in the Design Console from "User password" to "Identity". Actually, this makes the recon work, but what happens is that original password is written in the USR table in the USR_FSS field and not in the USR_PASSWORD field (which is set to the username as above), and therefore the change is useless.
    I would like to know what should i do to import the original password from database table.
    Thanks in advance
    Alex

    AFAIK, we can't reconcile user's password from Trusted Reconciliation. If in your case you have to bring only those passwords which resides in DB Table then you can write some custom utility/sch task which will read through DB Table and update user's password using OIM APIs.

  • Trusted Reconciliation-Oracle Database to OIM

    Hi,
    I created a GTC in OIM for Trusted reconciliation with Oracle database as source.
    I can able to create & update users in OIM according to the same operation on database.
    but when i delete a user in oracle database, the same user is marked as deleted in OIM (although the user is not physically deleted).
    How to know the user is marked as deleted? i mean which attribute of user is updated? how to reflect the same in OIM admin console?
    Regards

    Hello
    About the trusted conector for an Oracle DB that you mentioned before, you said that you could create and update OIM Users....
    Could you please tell me what steps did you do to make the reconciliation work, is just that i already created the connector the same way the manual of the connector said but when I ran the reconciliation it doesnt create any OIM User, but when i saw the log it doesnt have any error.
    I hope you can help me please!!!!! TNKS!!!!

  • Trusted Reconciliation Status mapping does not work - 11g Release2

    Hi all,
    On my process for trusted reconciliation I have mapped my status attribute to Oim 'Status' attribute. It is as follow:
    UserStatus -> Status
    On my custom scheduled task I transform the status data get form HR (my trusted system) with the values 'Active', 'Disabled','Deleted' and create a reconciliation event.
    Even the value I set for the status is 'Active' , afte reconciliation the status is not updated and it is 'Disabled'., what may be the problem? any help is strongly appreciated
    Part of my reconciliation event creation code is as follow :
         params.put(AttributeConstants.TCMB.ROLE, "Consultant");
         params.put(AttributeConstants.TCMB.ORGANIZATION_NAME, "Xellerate Users");
         params.put(AttributeConstants.TCMB.XELLERATE_TYPE, "End-User");
         params.put(AttributeConstants.TCMB.DISPLAY_NAME, resourceData.getName()+" "+resourceData.getSoyadi());
         params.put(AttributeConstants.TCMB.IDENTITY_STATUS, UserManagerConstants.AttributeValues.USER_STATUS_ACTIVE.getId());
         System.out.println("Active param : "+UserManagerConstants.AttributeValues.USER_STATUS_ACTIVE.getId());
         System.out.println("Disabled param : "+UserManagerConstants.AttributeValues.USER_STATUS_DISABLED.getId());
         System.out.println("Deleted param : "+UserManagerConstants.AttributeValues.USER_STATUS_DELETED.getId());
         long result = recObject.createReconciliationEvent("TCMB_PBS_TRUSTED", params, true);
    Thnaks in advance,
    BR
    Aliye

    I would say don't supply status info for recon. OIM will update automatically based on start date and end date.
    If you have special scenario then sure we have to map it and try params.put(AttributeConstants.TCMB.IDENTITY_STATUS,"Active") for same.
    Better ignore passing status attribute. Lets OIM decide.
    --nayan                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               

  • Error while creating GTC for trusted source reconciliation in OIM11g

    Hi,
    I got an exception while trying to create GTC for Trusted source Reconciliation in OIM11g
    Class/Method: CreateGenConnectorAction/imageScreen encounter some problems: Provider Exception[[
    java.lang.Exception: Provider Exception
    at com.thortech.xl.webclient.actions.CreateConnectorAction.getGenericAdapter(CreateConnectorAction.java:2265)
    at com.thortech.xl.webclient.actions.CreateConnectorAction.imageScreen(CreateConnectorAction.java:1196)
    at com.thortech.xl.webclient.actions.CreateConnectorAction.goNext(CreateConnectorAction.java:521)
    at sun.reflect.GeneratedMethodAccessor4673.invoke(Unknown Source)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:600)
    at org.apache.struts.actions.DispatchAction.dispatchMethod(DispatchAction.java:269)
    at com.thortech.xl.webclient.actions.tcLookupDispatchAction.execute(tcLookupDispatchAction.java:133)
    at com.thortech.xl.webclient.actions.tcActionBase.execute(tcActionBase.java:894)
    at com.thortech.xl.webclient.actions.tcAction.execute(tcAction.java:213)
    at com.thortech.xl.webclient.actions.CreateConnectorAction.execute(CreateConnectorAction.java:135)
    at org.apache.struts.chain.commands.servlet.ExecuteAction.execute(ExecuteAction.java:58)
    at org.apache.struts.chain.commands.AbstractExecuteAction.execute(AbstractExecuteAction.java:67)
    at org.apache.struts.chain.commands.ActionCommandBase.execute(ActionCommandBase.java:51)
    at org.apache.commons.chain.impl.ChainBase.execute(ChainBase.java:191)
    at org.apache.commons.chain.generic.LookupCommand.execute(LookupCommand.java:305)
    at org.apache.commons.chain.impl.ChainBase.execute(ChainBase.java:191)
    at org.apache.struts.chain.ComposableRequestProcessor.process(ComposableRequestProcessor.java:283)
    at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1913)
    at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:462)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
    at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
    at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
    at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:300)
    at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
    at com.thortech.xl.webclient.security.XSSFilter.doFilter(XSSFilter.java:103)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
    at com.thortech.xl.webclient.security.CSRFFilter.doFilter(CSRFFilter.java:61)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
    at oracle.iam.platform.auth.web.PwdMgmtNavigationFilter.doFilter(PwdMgmtNavigationFilter.java:115)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
    at oracle.iam.platform.auth.web.OIMAuthContextFilter.doFilter(OIMAuthContextFilter.java:100)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
    at oracle.dms.wls.DMSServletFilter.doFilter(DMSServletFilter.java:330)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
    at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
    at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.doIt(WebAppServletContext.java:3684)
    at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3650)
    at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
    at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
    at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2268)
    at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2174)
    at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1446)
    at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
    at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
    Caused by: java.lang.reflect.InvocationTargetException
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:48)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
    at java.lang.reflect.Method.invoke(Method.java:600)
    at com.thortech.xl.gc.util.ProviderFacade.getProvider(ProviderFacade.java:344)
    at com.thortech.xl.webclient.actions.CreateConnectorAction.getGenericAdapter(CreateConnectorAction.java:2201)
    ... 47 more
    Caused by: java.lang.NullPointerException
    at com.thortech.util.logging.Logger.isDebugEnabled(Logger.java:599)
    at com.thortech.xl.gc.impl.recon.SharedDriveReconTransportProvider.initialize(SharedDriveReconTransportProvider.java:106)
    ... 53 more
    Thanks & Regards,
    Prasad

    Most likely you are hitting below bug
    Bug 14271576 - OIM BETA : CONNECTOR LOGS ARE NOT GETTING UPDATED IN 11G R2 [preferrred fix ...]
    or
    Bug 13605443 - NULL POINTER EXCEPTIONS IN OIM SERVER DURING RECONCILIATION USING GTC CONNECTOR
    Thanks Deepak

  • OIM 11g DBAT connector - trusted reconciliation for user roles

    Hi,
    We have a database table containing a bunch of user records, and a table with a foreign key that contains all the associations user-group. We would like to do trusted reconciliation from those two tables into OIM. I already did that for target reconciliation but now I am having a look at the DBAT connector docs, and I have found this:
    "Child Table/View Names
    If you want to use the connector for trusted source reconciliation, then do not enter a
    value. If you want to use the connector for target resource reconciliation and if user data is
    spread across parent and child tables, then enter a comma-separated list of child table
    names."
    Does this mean that role membership trusted reconciliation is not supported by the DBAT connector?
    thanks in advance

    DBAT connector does not support trusted source with child data.
    But that does not mean you cannot configure user table as trusted source.
    What is it that you want to do with child table ?

  • Are Multiple (Concurrent) ABAP Data Sources for AS Java UME Possible?

    Hi All,
    We have a solution which is using a JAAS logon module for partner authentication. for reason's I won't go into we have decided that it is best to use an ABAP data source. We will also be using the same JAAS approach for other ABAP applications in the future. Ideally we would configure the same JAAS server to use ABAP UME data sources from ABAP server 1 and ABAP server 2.
    I see there are provisions in the documentation for multiple UME data sources of different types but it doesn't clearly say about different concurrent data sources. IS this even possible? If so is it wise?
    Thanks,
    Doug

    Julius,
    Thanks again for your reply. This is confusing. We have an existing .Net logon application where we centrally administer accounts and where users log in. On successful login they are issued a .net Auth cookie. Our JAAS module takes that cookie, does a web service call back to .Net and authenticates them. So authentication is done on the basis of the .Net cookie, not the java UME. We simply need a java ume to allow users to execute the application that invokes the JAAS module. The application invokes the JAAS module and if they successfully authenticate they are forwarded to the requesting SAP application. So the JAAS ume is really just needed to allow various users to run the JAAS invoking application starter. Ideally we'd use the same starter application for users of SAP Application 1,2,3, etc.
    So that's where the question came from on multiple ABAP  UME data sources for a single Java instance.
    Hope that makes sense. Regardless the answer I guess is not possible but you see the method to our madness. And yes it is madness.
    Thanks,
    Doug

  • Multiple data sources for 1 info object

    hi all,
    i am working with ods 0fiap_003 info source overview u can see for 0comp_code
    Company Code: Attributes and Tests (Flexible Update) this is a transaction data  data source.
    G/L Account: Attributes (Flexible Update) this is a transaction data  data source
    G/L Account: Texts (Flexible Update) 0GL_ACCOUNT_TEXT   this is a transaction data  data source
    and there r master data data sources for these objects
    G/L Account  hierarchy text  attributes r available.
    so only for 0gl_account  5 data sources available.
    3 master data ds.2 flexible data trans data data sources.same for comp code.
    so how can we map for these 5 dsources  in this scenario.
    i am going to create process chains for master data(3) transaction data(1).
    should i put trans .data  info packages in the transaction data process chain
    ex: G/L Account: Attributes (Flexible Update) this one.
    plz suggest me
    regards
    sridhar

    Hi Sri,
    There can be multiple datasources assigned to a single master object. Only they should be unique per source system.
    Regarding process chain, u should include the infopackage for transaction data in trans data process chain. This is because ur job scheduling for master and transaction load would differ. So the process chains should be separate.

  • SLT Replication for the same table from Multiple Source Systems

    Hello,
    With HANA 1.0 SP03, it is now possible to connect multiple source systems to the same SLT Replication server and from there on to the same schema in SAP HANA - does this mean same table as well? Or will it be different tables?
    My doubt:
    Consider i am replicating the information from KNA1 from 2 Source Systems - say SourceA and SourceB.
    If I have different records in SourceA.KNA1 and SourceB.KNA1, i believe the records will be added during the replication and as a result, the final table has 2 different records.
    Now, if the same record appears in the KNA1 tables from both the sources, the final table should hold only 1 record.
    Also, if the same Customer's record is posted in both the systems with different values, it should add the records.
    How does HANA have a check in this situation?
    Please throw some light on this.

    Hi Vishal,
    i suggest you to take a look to SAP HANA SPS03 Master Guide. There is a comparison table for the three replication technologies available (see page 25).
    For Multi-System Support, there are these values:
    - Trigger-Based Replication (SLT Replication): Multiple source systems to multiple SAP  HANA instances (one  source system can be connected to one SAP HANA schema only)
    So i think that in your case you should consider BO Data Services (losing real-time analytics capabilities of course).
    Regards
    Leopoldo Capasso

  • Since 1.5: Multiple sources of package comments found for package

    SInce I upgraded to JDK 1.5, I get these warnings
    Multiple sources of package comments found for package "x.y.z"
    for my package comments. Did something change for package.html content?

    I already have them in the sources ...Ok, but are you sure that the Javadoc classpath option does not also point to directories with package html files?
    It works without warnings, when using 1.4 ... these warnings appear since using 1.5.Yep. The Doclet interface of the Doclet API specifies a method void setRawCommentText(String text) prior to 1.5 this method did exactly what its name implies. With 1.5 the implementation was changed to generate a warning and do nothing if it was attempted to set the comment text multiple times.
    What happens is this:
    Javadoc sees the package.html files in the sources, creates an appropriate Doc (PackageDoc) instance and sets the comment text. Then for some reason Javadoc encounters package.html files for already existing Doc instances and tries to set the comment text a second (third, fourth, ...) time.
    So, all you need to do is to ensure that Javadoc parses the package.html file for a given package only once, i.e. ensure that only sourcepath points to the package.html files but not classpath.

  • Javadoc: warning - Multiple sources of package comments found for package

    h1. The Problem
    By creating the Maven Site for our software we receive the following error messages:
    javadoc: warning - Multiple sources of package comments found for package*
    We use maven with maven projects containing multiple maven modules.
    We have the same package names used in different modules (e.g. util-api with package util.text and util-impl with package util.text)
    Package Info are created using package-info.java files.
    We use maven-javadoc-plugin
    A search pointed to the following old links:
    http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=5095714
    http://forums.sun.com/thread.jspa?forumID=41&threadID=713300
    Does anyone experience the same problem? How can it be solved?
    h1. Our configuration
    $ mvn -version
    Apache Maven 2.2.0 (r788681; 2009-06-26 15:04:01+0200)
    Java version: 1.6.0_14
    Default locale: de_CH, platform encoding: UTF-8
    OS name: "linux" version: "2.6.18-92.1.1.el5" arch: "amd64" Family: "unix"
    maven-javadoc-plugin version=2.6.1
    no special configuration

    h1. The Problem
    By creating the Maven Site for our software we receive the following error messages:
    javadoc: warning - Multiple sources of package comments found for package*
    We use maven with maven projects containing multiple maven modules.
    We have the same package names used in different modules (e.g. util-api with package util.text and util-impl with package util.text)
    Package Info are created using package-info.java files.
    We use maven-javadoc-plugin
    A search pointed to the following old links:
    http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=5095714
    http://forums.sun.com/thread.jspa?forumID=41&threadID=713300
    Does anyone experience the same problem? How can it be solved?
    h1. Our configuration
    $ mvn -version
    Apache Maven 2.2.0 (r788681; 2009-06-26 15:04:01+0200)
    Java version: 1.6.0_14
    Default locale: de_CH, platform encoding: UTF-8
    OS name: "linux" version: "2.6.18-92.1.1.el5" arch: "amd64" Family: "unix"
    maven-javadoc-plugin version=2.6.1
    no special configuration

  • Connection Source for .... failed because the environment is not trusted

    I got a message like this -
    Connection Source for .... failed because the environment is not trusted
    when trying to bind a field to a data connection field. What does this mean? I setup the data connection and it tested out fine.

    I am not exactly sure what you are referring to by the see "Note". I didn't find a "Note" that was related. The only thing I did find was the following:
    "If you are using external data sources in a form design that you want users to fill in Adobe Reader, you must set usage rights for the form by using Reader Extensions Server."
    I am only trying to display back information out of a database. I don't want to write information. Is there any way to get around this?
    Matt

  • Red Raw Source Settings - multiple settings for one long clip?

    Hello everyone,
    I have a timeline with red raw material from Red Scarlet 4K. My DOP wants to make some adjustments in the source settings before Grading. I have some long merged clips (with a lot of changes in light etc.) and I have let`s say two different parts of one of the long clips in the timeline, so I tried to make some changes in the source settings for those two clips in the timeline, but the source settings change the master clip and not only the edited clips in the timeline. Is there a way to make adjustments in the source settings separately for every clip in the timeline?
    after I open the source settings it won`t show me the part of the clip which I have in the timeline, but the whole clip from the beginning, so I have to search manually where my clip in the timeline begins, so I know how to adjust it. Is there a way that the source settings show me only the part of the clip (or at least an in and out point) I have in the timeline?

    In my experience, each .RDC container can only have a single RMD (settings) file associated with it.
    To create multiple settings for the same clip, you would have to duplicate the .RDC folder and its contents for each new setting required.
    You would then have to replace each use of that file within your sequence, for each new setting required,
    i.e. 3 settings would require original plus 2 duplicate .RDC folders, then you'd have to replace each occurrence of that clip with 1 of 3 files that has the proper new setting.
    Now, of course, if you're not grading in PrP, I can't say how the color correction software would know which duplicated files or settings to link to.
    No, there is currently no way to open the Settings dialog for a .R3D file and have it match frame to a clip in the sequence. Perhaps you could submit a feature request for that option.
    Adobe - Feature Request/Bug Report Form

Maybe you are looking for