OAM - Create User Workflow

Hi experts !
I am creating "Create User" workflow using QuickStart . However, when i edit the workflow and set the participants for both "Initial Step" and "Error Reporting" to "Anyone", and try to save the workflow after saving the steps, it prompts "Please set participants for step(s) : 1,3". when i try to verify if the participants have in fact been set to Anyone, the check box next to Anyone is again blank.
Please help me out.
Regards

Has this workflow been executed a couple of times? I mean, do you see any open tickets for this WF definition? In that case, you need to close/delete all open tickets and then try modifying the participants.
-shetty2k

Similar Messages

Create User Workflow

When I login into administrative as configurator I need to find the Create User workflow.
From BPE I can access it. No problem.
But from the debug page when I choose Task Definition and List Objects I cannot find Create User.
Why?
Thank you.

You can find it under ProvisioningTask.
Why they had to put it somewhere different i don't know....
Just to make things akward i guess.
Tine

Error in create user workflow......

Hi...........
I have customized create user workflow and added email user activity to notify activity. Since i don't have any SMTP host name..... i am using a text file to recive the email....when i create a new user i am getting the error.....
com.waveset.util.WavesetException: Unknown administrator C:/opt/ses/lab/output/email/approval.txt.
But all mail are redirecting to text file name that i give in the waveset.property file notifiction redirect=path...
if we want to send mail to different text file ie for each organization a diffent approvers ie approver a mail should be in spreate text file so on.. where should i mention the path name of file for each approver..........

When you set the notification.redirect property in waveset.properties, the process will redirect all the email notifications to the same file.
The error you are getting here is probably because you are passing the filename with the path in the "to address" in your email template. The "to address" should always have a valid email address in it.

Create User Workflow & Reconciliation

How do I add an approval for users created via reconciliation? It appears that reconciliation does not use the Create User workflow.

The per-account workflow is executed after an account is created during reconciliation. I want to hook-into the account creation process and add a approval prior to the account getting created.

Calling Create User Workflow

Hi all,
Is it possible that the Create User workflow can be called from another user defined workflow?
If possible then how it can be called and what are the arguments that we have to pass it so that using this the user can be created.
Thanks

You need to create a user view, modify the attributes you want and then check in the user view. This will spawn the create process with the view you just manipulated.
Something like this:
<Activity id='0' name='Create View'>
<Comments>Initialize a new view.</Comments>
<Action id='0' application='com.waveset.session.WorkflowServices'>
<Argument name='op' value='createView'/>
<Argument name='type' value='User'/>
<Argument name='id' value='accountId'/>
<Return from='view' to='user'/>
</Action>
<Transition to='activity1'/>
<WorkflowEditor x='156' y='88'/>
</Activity>
<Activity id='1' name='activity1'>
<Action id='0'>
<expression>
<block/>
</expression>
</Action>
<Transition to='Checkin View'/>
<WorkflowEditor x='265' y='82'/>
</Activity>
<Activity id='2' name='Checkin View'>
<Comments>Commit an updated view.</Comments>
<Action id='0' application='com.waveset.session.WorkflowServices'>
<Argument name='op' value='checkinView'/>
<Argument name='view' value='$(user)'/>
</Action>
</Activity>

Create user workflow in OAM

Hi,
I am using OAM with OVD. And my OVD is configured with AD,DB and sunone. Now iam created one workflow to create a user in AD or DB or Sunone. Now iam trying to create a user through OAM it display an error like "Invalid or no domain specified.". Suppose if my OVD is configured with sunone only at that time also iam getting the same exception. Can any one tell me like is it possible to create a user in OAM through OVD respect target resources.
Thanks in advance

If iam trying to create a user in AD.Means My OVD is connected with only AD. But iam unable to create a users in AD. My logs are updated as fallows
0x00000010     ../ldap_util.cpp:1784     "Operation will affect RDN of entry and the operation is not supported"     dn^CN=oam admin,ou=ADUsers,dc=mydomain,dc=com
2009/08/20@08:59:20.865668     1425     475165     DB_RUNTIME     WARNING     0x00000504     ../ldap_util.cpp:1828     "Exception during DB runtime code"     function^ModifyDBEntryEx()     dn^CN=oam admin,ou=ADUsers,dc=mydomain,dc=com
2009/08/20@09:00:00.465750     1429     540705     DB_RUNTIME     WARNING     0x00000010     ../ldap_util.cpp:882     "Operation will affect RDN of entry and the operation is not supported"     function^AddDBEntry()     dn^cn=test,ou=ADUsers,dc=mydomain,dc=com
2009/08/20@09:00:00.465906     1429     540705     DB_RUNTIME     WARNING     0x00000504     ../ldap_util.cpp:958     "Exception during DB runtime code"     function^AddDBEntry()     dn^cn=test,ou=ADUsers,dc=mydomain,dc=com
Can any one tell me what i need to do?

Creating user using IDXML

Hi All,
Any idea how can i create user using IDXML, any sample IDXML format to refer for creating a user using IDXML.....
Regards,
Nitin

you can extract an example from a blog post I wrote here:
http://coreidng.blogspot.com/2008/07/oam-identity-xml-idxml-via.html
this presumes that you understand workflow and you have setup a working create user workflow.
I think the developer's guide is pretty good in this area know as well.
hope that helps,
Mark

URGENT: issue while creating user through reconciliation of AD

Hi,
We have a requirement where we need to create users in IDM through reconcilition against Active Directory. For certain type of account Ids I want to trigger a custom workflow used for user creation. So I set "viewOptions.Process" to my custom workflow in the user form assigned to the admin who is the proxy admin for the reconcilaition process. But it doesn't seem to kick off my custom workflow. Will this work? Is this the correct form to specify the custom workflow to be triggered?
Also I tried putting some trace satements in the default "Create User" workflow to see that if it is being called during user creation by recon. In the logs I don't see my trace statements. So the question is: Which is the workflow that is called when a user is created through reconciliation? How to specify a custom workflow name in this regard?
Thanks,
kIDMan.

I'm wondering if you have an answer to this?
I need to do a similar thing. For me, I reconcile against an oracle DB and there are Active and Inactive users. I only want to reconcile Active users. I put the following code in the user form but it still created Inactive users. "Exclude Inactive User" is an empty WF that has only start and end activities.
<Field name='viewOptions.Process'>
<Expansion>
<s>Exclude Inactive User</s>
</Expansion>
<Disable>
<neq>
<ref>global.status</ref>
<s>I</s>
</neq>
</Disable>
</Field>

Beneficiary Details coming as null in SOA Custom Composite--Create User

I have created a soa composite which works on create user workflow. This has one level of approval workflow and once the approval is done i'm sending mail to beneficiary user with the benefeciary firstname,lastname etc which i seleted from the payload... What i observered is that these values are coming as blank in the email.
I had added the wait event before this mail and sending the mail after 5 mins . In this case also the values are coming as blank.
One alternative which i found is that to create custom notification template and send mail to end user with the required details. Is there any alternative for populating the beneficiary details in the soa composite while creating user.

You can check the payload in EM by logging in into EM and then clicking on the soa-infra on the left tree and then clicking on the running instance on the right pane. On opening up the running instance of the process, you should get a popup and in those you will have the various stages the process is in. Click through each stage to check the payload xml and you can verify there. Check the BPEL doc and the steps screenshots should be somewhere, can't recall now where I read it from but had been using it for sometime myself.
-Bikash

Update User Workflow

Hi there.
I´ve spent some time with IDM but always working with the Create User Workflow. Now I have some questions about the Update User Workflow:
I see it´s launched when you click "Save" in the edit user form and I imagine that in the same way when any change is detected in a resource. Are there other situations where this workflow will be used?
Thanks.

Check if the form fields are user.global.attrName. If global fields are set, then all linked resources will be updated. If not the account attributes for the resource will have to be set explicitly in the form (user.accounts[LDAP resource].attrName)

SPML Modify user workflow

Does anyone come across with this error from SPML request " <spml:errorMessage>ID 'id' is invalid. </spml:errorMessage>.
Im getting this error while im trying to modify user with SPML request. It is using custom form and custom workflow. The same workflow and form works fine for create user, but it is giving above error for modify user. I know that create and modify user uses same workflow and form.
If i use create user workflow (out-of-the-box), it works fine for create and modify user using SPML, but i customized .
Any suggestion is appriciated
-S-

I've usually seen errors like this when the accountId is null on a workflow view checkIn operation such as this snip below (note that id is an argument).
<Action application='com.waveset.session.WorkflowServices'>
          <Argument name='op' value='checkoutView'/>
          <Argument name='type' value='User'/>
          <Argument name='id'>
            <ref>accountId</ref>
          </Argument>What I'd suggest you try if possible is put a global error handler in your workflow like right at the top outside of any Activity such as Start and just below the variable declarations like this:
<Comments>
      Object containing information for registering a sunset date/time.
    </Comments>
      </Variable>
      <Variable name='error'>
        <Comments>Set in the event of unusual processing errors.</Comments>
      </Variable>
      <Variable name='options'>
        <Comments>Options to pass to the provisioning task regarding resource
              provisioning.
    </Comments>
      </Variable>
     <Transition to='end'>
<Comments>
 Terminate if we encounter unusual errors (not provisioning errors).
 </Comments>
<select>
<ref>error</ref>
<ref>WF_ACTION_ERROR</ref>
</select>
</Transition>
      <Activity id='0' name='start'>
        <Transition to='Rename'>
          <notnull>Then use the Workflow debugger to set a breakpoint on this <select> code and then you can trap the point in which the error occurs and inspect the variable namespace. If you don't want to use the debugger you could use the dumpView method:
<invoke name='dumpFile'>
         <ref>user</ref>
         <s>c:/temp/requestAccess-userView.xml</s>
</invoke> If you using activeSync and you're seeing this error I'd be tempted to breakpoint the activeSync userForm and simply step through the execution of the workflow until you find the error. Before the debugger was introduced debugging workflow errors was a world of pain.
HTH,
Paul

Create User WF - Expire Lighthouse Password

I want to automatically expire the Lighthouse password when a new user is created manually or via FFAS. I tried setting the following in the "Create user" workflow as the first Action in the 'Provision' Activity:
<dolist name='resAccountName'>
<ref>user.password.accounts[*].name</ref>
<block trace='true'>
<set>
     <ref>user.password.accounts[$(resAccountName)]</ref>
     <s>expirePassword</s>
     <s>true</s>
</set>
<set>
     <ref>user.waveset</ref>
     <s>expirePassword</s>
     <s>true</s>
</set>
</block>
</dolist>But the newly created user's password is not expired. How can I expire the Lighthouse password by setting an attribute in the user view?
Did I miss something and this is not possible in the user view and I have to checkout/checkin a ResetPassword view?

Setting waveset.passwordExpiry to a new instance of [java.util.Date|http://java.sun.com/j2se/1.5.0/docs/api/java/util/Date.html#Date()] does the trick.
waveset.passwordExpiry:
Contains the date on which the Identity Manager password will expire. When the view is initially constructed, the memory representation will be a java.util.Date object. As the view is processed with the form, the value can either be a Date object or a String object that contains a text representation of the date in the format mm/dd/yy.Hence, using the default toString() of java.util.Date wouldn't work and indeed did not work for me.
Either you expire the password in your UserForm:
<Field name='waveset.passwordExpiry'>
     <Default>
          <new class='java.util.Date'/>
     </Default>
</Field>or in the appropriate workflow (in my case, in Create User):
<Action id='0' name='expire password for certain users'>
<Condition>

</Condition>
<expression>
     <set>
       <ref>user.waveset</ref>
       <s>passwordExpiry</s>
       <new class='java.util.Date'/>
     </set>
</expression>
</Action>

Not able to create users in identity system -OAM

Hi all,
I am new to OAM and trying to create users from identity system -OAM.
I have logged in as 'orcladmin', who is my 'Master Administrator' and 'Master identity Administrator'.
To create the user, I click on 'User Manager' tab and then 'Create user identity' tab but I get a message saying
"*You do not have sufficient access rights*."
Same message comes up when I try to create groups also.
Please guide me on how I can give these rights to 'orcladmin'.
It will be helpfull if you can specify some links where I can learn the basic consepts of OAM(identity system and access system).
Thanks in advance
Roopa

Hi,
Before you attempt to create a user, you would need to create a workflow in OAM Identity System.
Below is the link which will get you started -
http://download.oracle.com/docs/cd/E15217_01/doc.1014/e12489/workflow.htm#BABEFGAA
-- Pramod Aravind

Unable to Create Users/Groups/Orgs in OAM

I have created a admin user [oamadmin] in Sun One Directory Server and configured the admin user as a Administrator during the initial installation/configuration. When I go the Identity System Console, I can see the users from Sun One Directory Server. When I tried to create a User, Group or a Organization, I see the error message
"You do not have sufficient access rights"
Is there anything I'm missing? What should I tune if I have to create users, groups and organizations from Identity System Console? I have included the admin user [oamadmin] in Directory Administrators group in Directory Server.

You have to create a workflow that creates user, group, ... and make the current logged in user (your admin in this case) the initiator of this workflow
for more details check the identity and common administration guide section 5 - chaining identity actions into workflows

Creating Oracle Workflow Users

Hi,
Can anybody tell me how to create users in Oracle Workflow.
I want to create users and maintain it in a custom tale where i will store the password also.the expectation is that the user logs in and is able to see his notifications and also get them in the email.
i m using oracle workflow 2.6.0 and 9i release 1 database 8.1.7.4
help needed urgently
rajeev

Rajeev,
The workflow directory service provides the users/roles who can participate in a workflow process.
Workflow provides, by default, a directory service based on oracle database users. You can also choose to use OID and provide SSO functionality with your users stores in OID. You can also choose a custom directory service.
For more information on the directory service, please refer to workflow documentation.
Cheers,
Raja

OAM - Create User Workflow

Similar Messages

Maybe you are looking for