OIA 11.1.1.5 - OIM 11.1.1.5 Integration Cannot see the Provisioning Server

Hi Everyone,
I'm trying to integrate OIM and OIA, I followed the steps that appear on http://docs.oracle.com/cd/E24179_01/doc.1111/e23377/integratingwithoimpreferred.htm#BABBEBFC but when I need to create the provisioning server I don't see the oracle provisioning server.
I modified all the required files and double checked they where saved and restarted the OIA server but no changes.
I deployed OIA and OIM on the same WL domain 10.3.5, also they are on Windows 2003 Server.
Please I'll appreciate all the help you can give me.
Regards,
Camila

Hi Camila
In order to view the Oracle Provisioning Server, you need to uncomment some lines in iam-context.xml file in $RBACX_HOME/WEB-INF:
<import resource="oim-commons-context.xml"/>
<import resource="oim-11g-context.xml"/> 
and you need enable the nex element
<entry key="oracle">
<ref bean="oimSolution"/>
</entry>
after that ypou need to restart your App Server.
Alex Fonts

Similar Messages

Rule based Role membership in OIA is not pushing to OIM

Hi All,
Rule based Role membership in OIA is not pushing to OIM due to error as
00:01:38,055 DEBUG [DBIAMSolution] Group Role container for JDE.JDE_BHRUSRTT found...
00:01:38,144 ERROR [DBIAMSolution] Error Occured while adding users to role
Thor.API.Exceptions.tcAPIException: Error occurred while find User information: USER_NOT_FOUND
at weblogic.rjvm.ResponseImpl.unmarshalReturn(ResponseImpl.java:234)
at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:348)
at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:259)
at Thor.API.Operations.tcGroupOperationsIntf_13pobh_tcGroupOperationsIntfRemoteImpl_1035_WLStub.getAllMemberUsersx(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:85)
at $Proxy396.getAllMemberUsersx(Unknown Source)
at Thor.API.Operations.tcGroupOperationsIntfDelegate.getAllMemberUsers(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Meth
Any one can help will be appreciate...
Thanks
Bikas
Edited by: Bikas Mandal on Mar 27, 2013 6:15 AM

Try these steps and let me know what you see:
Login to OIA > Administration > Configuration > Workflows
Select Role membership create workflow
And check if you have added OIM provisioning server in the Step5 of the workflow.
Cheers,
Vamsi.

Does OIM Provides Orphan Accounts report generation Out of the Box ???

Hi All ,
Does OIM Provides Orphan Accounts report generation Out of the Box ???

Nopes, OIM Doesn't.
Custom Report
Re: How to generate a report on 'Event Received' events for a resource objects
http://download.oracle.com/docs/cd/B32386_01/generic.902/b32137/reporting.htm

OIM-OAM 11g BP 02 integration not working as expected

Hi Experts,
We have OIM 11g and OAM 11g both upgraded to BP02 installed on separate hosts. We are using OID 11g as the directory servers and OVD 11g fronting OID for integration. We followed the steps mentioned in Oracle Document Oracle® Fusion Middleware Integration Guide for Oracle Access Manager 11g Release 1 (11.1.1)Part Number E15740-04 for integration purpose.
After performing all the integration tasks mentioned in the document, while testing the ingtegration, the expected results are not been serverd.
If I access OIM admin console URL, am getting default OIM admin console URl instead of OAM SSO login page for authencation. and also I am unable to login using either xelsysadm\oimadmin\oamadmin but I can login using weblogic, so this is referin to the default embeded LDAP of weblogic for credential validation.
OIM and OAM are deployed on separate hosts, please find the deployment details below.
1. JDK: 1.6.0_29
2. WLS : 10.3.5
3. LDAP: Oracle Internet Directory: 11.1.1.5.0
Oracle Virtual Directory: 11.1.1.2.0
4. Webserver: Oracle HTTP Server fronting the OIM
The Integration videa on Support.oracle assumes that all components OIM\OAM/OID/OHS being on the same host.
I have my OIM and OAM both patched to the latest BP which is BP 02. There is a support article which specifically talks about few settings ton be made for BP 02.
the article ID is 1447494.1.
Even after doing all these, the integration is not working.
As per the support article, I need to use preferred host name for agent fronting OIM as IAMSuiteAgent and if I do that, the proxying of OIM server with the webserver host will not work at all and ends with 404 not found error when I access using http://OHShost:OHSport/oim.
but if i use the name of agent i.e webserver name in the preferred host field, the redirection would happen and i get OAM SSO login page for authentication, however with the credential validation at this page, the OIM login page (http://OIMhost:OIMport/oim) is provided prompting for login again.
also if i access OIM login page http://OIMhost:OIMport/oim directly, the OAM SSO page is not coming for authentication.
I am awaiting your advice\suggestions or workarounds if any one has come across this kind of issue, which i am sure is an obvious case.
Thanks,
Nagendra

Hi,
Any help in this regard please/
Thanks
Nagendra

OIM 11g SPML Client - InvalidSecurity : error in processing the WS-Security

Hi,
Has anyone had any success creating a SPML client for interfacing with OIM 11g?
I used xelsysadm to login, but every time it errors, doesn't matter what SPML service i invoke, e.g.
<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:ns1="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" >
<soap:Header>
<ns1:Security>
<ns1:UsernameToken>
*<ns1:Username>xelsysadm</ns1:Username>*
*<ns1:Password>Passw0rd</ns1:Password>*
</ns1:UsernameToken>
</ns1:Security>
</soap:Header>
<soap:Body xmlns:ns1="urn:oasis:names:tc:SPML:2:0">
*<ns1:listTargetsRequest />*
</soap:Body>
</soap:Envelope>
---> Errors
<env:Envelope
xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">
<env:Header/>
<env:Body>
<env:Fault
xmlns:ns0="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<faultcode>ns0:FailedCheck</faultcode>
<faultstring>FailedCheck : failure in security check</faultstring>
<faultactor/>
</env:Fault>
</env:Body>
</env:Envelope>
any suggests or code much appreciated.

Prakash Gupta wrote:
You just have to add "?wsdl" at the end of String URLThanks for the reply, I tried that one, I'm getting the InvalidSecurity error, see below
<env:Fault xmlns:ns0="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<faultcode>ns0:InvalidSecurity</faultcode>
*<faultstring>InvalidSecurity : error in processing the WS-Security security header</faultstring>*
<faultactor></faultactor>
</env:Fault>
I'm assuming this has something to do with the WS-Security setting. I used Microsoft WCF (WSHttpBinding) to consume the service,
see the code below
WSHttpBinding oimBinding = new WSHttpBinding();+
oimBinding.Security.Mode = SecurityMode.Message;
oimBinding.ReliableSession.Enabled = true;
oimBinding.TransactionFlow = false;
oimBinding.Security.Message.ClientCredentialType = MessageCredentialType.UserName;
EndpointAddress oimEndpoint = new EndpointAddress("http://169.254.248.95:14000/spml-xsd/SPMLService?WSDL");*
oimBinding.MaxReceivedMessageSize = Int32.MaxValue;
_oimServiceChannel = new ChannelFactory<SPMLRequestPortTypeChannel>(oimBinding, oimEndpoint);+
oimServiceChannel.Credentials.UserName.UserName = loginUser;+
oimServiceChannel.Credentials.UserName.Password = loginPassword;+
+SPMLRequestPortTypeChannel target = _oimServiceChannel.CreateChannel();+
target.SPMLListTargetsRequest(new SPMLListTargetsRequestInput());+
I'm not sure if WCF would make any difference in consuming a webservice... any way if you have any idea, code snipets much appreicated.

[OIM] GTC (DB App Tables) doen't refresh the OIM User Stages

The scenario is as follows: I have one table as a trusted source. I mapped it to the OIM User using the stages screen (the OIM User plus some UDF Fields) and everything works fine.
The problem arised when I need to add more UDF fields. The stages screen doens't show them, neither if I press the refresh button on the OIM User stage. The weird thing is that, for example if I make a Create User, all fields are shown and more weird, if I go directly to the provisioning process of the GTC connector, in the recon mapping these new fields appears and let me make the mappings. The strange thing is that I save this, and when I go to the GTC stages screen, the new UDF still doen's appear, neither the mappings I made in the design console.
Have this happened to anyone? I don't want to mix GTC management touching directly the Design Console, I am trying to let it clean so I can make a clean export when it happen to put the connector in other environment.
Thanks!

Hi,
I got the same problem... I added two UDF after I'had created the GTC and it didn't read them up, so I added the lines below in the xml schema in the database. After that, I could map the UDFs to the Reconciliation Staging fields.
<Field default=" " keyfield="false" type="String " required="false" size="60 " encrypted="false" order="0 " name="USR_UDF_SAMPLE1" password="false">
</Field>
<Field default=" " keyfield="false" type="String " required="false" size="15 " encrypted="false" order="0 " name="USR_UDF_SAMPLE2" password="false">
</Field>
<Field default=" " keyfield="false" type="String " required="false" size="30 " encrypted="false" order="0 " name="USR_UDF_SAMPLE3" password="false">
</Field>
I think that would exist a button to refresh OIM User Schema used by the adapter, so the UDFs can be updated.
tks.
Renato.

[OIM 11g] How can a pwd changed in the AD be sent to OIM User account?

Hi Gurus,
I am working in a PoC. I have AD and AD Pwd Sync connectors, and DBAT connector installed.
IHAC who expected to see the following behavior regarding user password management:
1) When user change password in the OIM account, this password should be propagated for all the targets (AD and DB table).
Ok...I got the behavior.
2) When user change password in the AD account, this password should be propagated for OIM user account (consequently this password will be propagated for all the target)..
How can I do to achieve that?
With AD password sync I am able to just sync the password between Target password and Resource form password.
Note: AD is not the Trusted Source. The AD only should be trusted source for password.
I would appreciated any help.
Best regards.
Edited by: user12295533 on 01/09/2011 07:05

Hi Kevin, Thanks for your reply.
By the AD Pwd Sync documentation (2.3.2 Configuring the IT Resource for the Target System section), I understood that the password changed into target system (AD account) would be changed only in the process form of the resource (ADUser), and it wouldn't be propagated to OIM user account (password attribute).
When the password is changed on Microsoft Active Directory:
The updated password is detected by the connector and sent to Oracle Identity Manager.
On Oracle Identity Manager, the password is compared with the current password of the Active Directory resource. Because both passwords are different, the password of the Microsoft Active resource on Oracle Identity Manager is updated.
The updated password is detected by the user management connector and sent to Microsoft Active Directory.
The password of the Microsoft Active Directory is modified, even though this is the same password that was set by the user.
The password of the account is detected by the password synchronization connector and sent to Oracle Identity Manager.
On Oracle Identity Manager, the password is compared with the current password of the Active Directory resource. Because both passwords are the same, no further action is taken.
If password history policy is set on Oracle Identity Manager, then an exception for the SPML request (sent by the password synchronization connector) is encountered. You can ignore this exception.
Are you informing that the password changed in the AD should be propagated to OIM user account (password field)? Sorry, I am asking because it is not clear for me and I need to be sure of that. Because in this case then I need to check the configuration and try find any error.
Thanks again Kevin.

Error while deploying OIA in domain same as OIM

HI,
I have installed and configured IDM and IAM in one domain. Every thing is working fine.
Later i tried to deploy OIA in same domain. I followed OIA install guide. I configured OIA. Copied few Jars from OIM home to lib in OIA as per few forum thread.
While Deploymentnot resolve reference to bean 'ftSearchProvider' while setting bean property 'searchProvider'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'ftSearchProvider' defined in ServletContext resource [WEB-INF/search-context.xml]: Cannot resolve reference to bean 'fullTextSearchEngine' while setting bean property 'fullTextSearchEngine'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'fullTextSearchEngine' defined in ServletContext resource [WEB-INF/search-context.xml]: Instantiation of bean failed; nested exception is org.springframework.beans.BeanInstantiationException: Could not instantiate bean class [com.vaau.commons.search.searchengine.solr.MultiCoreClusterAwareEmbeddedServer]: Constructor threw exception; nested exception is java.lang.RuntimeException: com.thoughtworks.xstream.converters.ConversionException: Cannot construct com.vaau.commons.util.fileUtils.FileUtils$WrappedFile as it does not have a no-args constructor : Cannot construct com.vaau.commons.util.fileUtils.FileUtils$WrappedFile as it does not have a no-args constructor
---- Debugging information ----
message : Cannot construct com.vaau.commons.util.fileUtils.FileUtils$WrappedFile as it does not have a no-args constructor
cause-exception : com.thoughtworks.xstream.converters.reflection.ObjectAccessException
cause-message : Cannot construct com.vaau.commons.util.fileUtils.FileUtils$WrappedFile as it does not have a no-args constructor
class : com.vaau.commons.util.fileUtils.FileUtils$WrappedFile
required-type : com.vaau.commons.util.fileUtils.FileUtils$WrappedFile
path : /file
line number : 2
     at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory$1.run(AbstractAutowireCapableBeanFactory.java:405)
     at i am getting following error:
Are there any specific steps to acrry out when we are deploying OIA in same domain of OIA?
Regards,
Nilesh

can you provide me the jdbc.properties details for Jdbc.url attribute
normally jdbc.url=jdbc:oracle:thin:@$<IP_ADDRESS>:<PORT>:<ORACLE_SID>
--nayan

OIM 9.1.0.2 ORA-0936 encountered when provisioning roles

I've configured an Access Policy that provisions users without requiring approval to a DB through the DB connector. It also provisions them with roles: CONNECT and DBA.
The latter was achieved by making Role provisioning dependent upon User creation completion in the Access Policy. The Access Policy is also where the roles are specified.
The user is created and role provisioning fires OK, but gets rejected.
The relevant section in the log looks like this:
ERROR RMICallHandler-266 XELLERATE.DATABASE - select UD_DB_ORA_P_PRIVILEGE from UD_DB_ORA_P where UD_DB_ORA_P_KEY =
java.sql.SQLException: ORA-00936: missing expression
     at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:138)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:316)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:282)
     at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:639)
<snip>
     at java.lang.reflect.Method.invoke(Method.java:585)
     at com.evermind.server.rmi.RmiMethodCall.run(RmiMethodCall.java:53)
     at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
     at java.lang.Thread.run(Thread.java:595)
ERROR RMICallHandler-266 XELLERATE.DATABASE - Class/Method: tcDataBase/readPartialStatement encounter some problems: ORA-00936: missing expression
java.sql.SQLException: ORA-00936: missing expression
     at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:138)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:316)
     at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:282)
     at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:639)
     at oracle.jdbc.driver.T4CStatement.doOall8(T4CStatement.java:113)
     <snip>
     at com.evermind.server.rmi.RmiMethodCall.run(RmiMethodCall.java:53)
     at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
     at java.lang.Thread.run(Thread.java:595)
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem entered.
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem - Data: event - Value: adpDBADDPRIVILEGE
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem - Data: New Status - Value: R
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem - Data: SchData - Value: Data Access Error
DEBUG RMICallHandler-266 XELLERATE.ADAPTERS - Class/Method: tcAdpEvent/updateSchItem - Data: Reason - Value: Exception com.thortech.xl.dataaccess.tcDataSetException: Data Access Error was thrown in adapter "DB Add Privilege". The Adapter Response was "Data Access Error"
There is an article about this on Oracle support, which I think is relevant, it states:
CAUSE
The error is caused by the fact that the rule is based on the values of the process form which are not yet commited to the database.
The usage of the process form will be avoided when creating rules for prepopulate adapters.
SOLUTION
Create a rule based on the "Request Target Information" which is reffering attributes of the OIM target user which has to be provisioned.
Suppose an access policy is used and this is based on a specific autogroup membership, the same rule can be used when creating the rule for the prepopulate adapter.
Unfortunately, this is greek to me.
Can anyone explain how I can resolve this problem with the role provisioning?
Many thanks,
2Hugh
Edited by: 2hughg on 08-Mar-2011 09:19

I had a privilege provisioning task set up as well, when I removed that, the error condition went away.
2hugh

OIM with EBS HR for recon and UM for provisioning - urgent

Hi All
I am trying to setup OIM with EBS HR mod as the trusted source and EBS User mod for user provisioning. I am using the OOB EBS connector version 90430 with OIM 9.1.0.1. I have configured the reconcialiation and provisioning as per the oracle documentation. But only few of the parameters are reconciled into the OIM->USR table. When I go to Reconciliation Manager, I can see only few data fields in the processed data region and rest are in the unprocessed data region. The recon engine is able to pick up the corresponding values from the HR system but is not able to process the same.
Please let me know where can be the problem reside.
Also when I provision a record into Oracle EBS User mod, even if I give all the required data in the direct provisioning form, an account is created in the EBS system with partial data e.g. email is not getting provisioned.
Please help me in setting up recon and provisioning in OIM - EBS.
This is really urgent.. please help !!!
Thanks

The standard suggestion for that is:
- What's the reeson for using EBIZ connector version *9043*. That's an older version and may be these things which you are referring to could not be part of that connector.
- Use the ORCL_EBS_UM_91000 and ORCL_EBS_ER_91000. You can download it from OTN. This should resolve the outstanding issues for you.
Thanks
Sunny

OIM 9 and Identity Analytics integration : ClassNotFoundException

Good afternoon,
I was trying to configure SoD Invocation Library using this guide:
http://docs.oracle.com/cd/E14899_01/doc.9102/e14763/segregation_duties.htm#sthref117
I implemented SoDAnalysisExecutionOper and SoDDataValidationOper, compiled my Jar file and put it into JavaTasks and ScheduledTasks folders.
While running InitiateSODCheck I get this exception:
Class/Method: SoDObjectFactory/getDataTransformationService encounter some problems: Failure in getDataTransformationService
Class/Method: SoDObjectFactory/getDataTransformationService encounter some problems: com.gis.oim.integration.OIM_adapters.transformation.IdMvsSoDDataTransformationOperOIMvsOIA
java.lang.ClassNotFoundException: com.gis.oim.integration.OIM_adapters.transformation.IdMvsSoDDataTransformationOperOIMvsOIA
     at weblogic.utils.classloaders.GenericClassLoader.findLocalClass(GenericClassLoader.java:296)
     at weblogic.utils.classloaders.GenericClassLoader.findClass(GenericClassLoader.java:269)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
     at weblogic.utils.classloaders.GenericClassLoader.loadClass(GenericClassLoader.java:177)
     at java.lang.Class.forName0(Native Method)
     at java.lang.Class.forName(Class.java:247)
     at oracle.iam.grc.sod.SoDObjectFactory.getDataTransformationService(SoDObjectFactory.java:154)
     at oracle.iam.grc.sod.SoDInvocationRuntimeEngine.getDataTransformationInput(SoDInvocationRuntimeEngine.java:115)
Can anyone tell me what should I do and where do I need to put my Jar file?

Good afternoon,
I was trying to configure SoD Invocation Library using this guide:
http://docs.oracle.com/cd/E14899_01/doc.9102/e14763/segregation_duties.htm#sthref117
I implemented SoDAnalysisExecutionOper and SoDDataValidationOper, compiled my Jar file and put it into JavaTasks and ScheduledTasks folders.
While running InitiateSODCheck I get this exception:
Class/Method: SoDObjectFactory/getDataTransformationService encounter some problems: Failure in getDataTransformationService
Class/Method: SoDObjectFactory/getDataTransformationService encounter some problems: com.gis.oim.integration.OIM_adapters.transformation.IdMvsSoDDataTransformationOperOIMvsOIA
java.lang.ClassNotFoundException: com.gis.oim.integration.OIM_adapters.transformation.IdMvsSoDDataTransformationOperOIMvsOIA
     at weblogic.utils.classloaders.GenericClassLoader.findLocalClass(GenericClassLoader.java:296)
     at weblogic.utils.classloaders.GenericClassLoader.findClass(GenericClassLoader.java:269)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
     at weblogic.utils.classloaders.GenericClassLoader.loadClass(GenericClassLoader.java:177)
     at java.lang.Class.forName0(Native Method)
     at java.lang.Class.forName(Class.java:247)
     at oracle.iam.grc.sod.SoDObjectFactory.getDataTransformationService(SoDObjectFactory.java:154)
     at oracle.iam.grc.sod.SoDInvocationRuntimeEngine.getDataTransformationInput(SoDInvocationRuntimeEngine.java:115)
Can anyone tell me what should I do and where do I need to put my Jar file?

OIM 9.1.0.2 OOTB error-trying to see the task details and got an error

Hi gurus,
I am facing this issue for one specific group when I try to see one request:
SPOC(group that works):
INFO,23 May 2011 12:34:57,[XELLERATE.DATABASE],DB read: select req.req_number,req.req_createby,req.req_create,req.req_key, req.req_type,req.req_prov_sched_date,req.req_target_type,req.req_obj_action,req.req_priority,req.req_note,req.req_rowver,req.req_consolidated_data_value,req.ost_key,orc_key,ost_status,rqr.usr_key,rqr.usr_login as requester,rqr.usr_first_name as requester_first_name, rqr.usr_last_name as requester_last_name, req.req_update, req.req_updateby, reqadm.usr_key as requestadmin_key,reqadm.usr_login as requestadmin, reqadm.usr_first_name as requestadmin_first_name,reqadm.usr_last_name as requestadmin_last_name,mgr.usr_first_name rqr_mgr_fname,mgr.usr_last_name rqr_mgr_lname,mgr.usr_login rqr_mgr_login,mgr.usr_key rqr_mgr_key,req_upd_usr.usr_first_name req_updateby_fname,req_upd_usr.usr_last_name req_updateby_lname,req_upd_usr.usr_login req_updateby_login from req req left outer join usr reqadm on req.usr_key=reqadm.usr_key left outer join usr req_upd_usr on req.req_updateby=req_upd_usr.usr_key left outer join usr rqr on rqr.usr_key=req.req_createby left outer join usr mgr on rqr.usr_manager_key=mgr.usr_key, ost ost where req.ost_key=ost.ost_key and ( req.req_key in (43) )
DEBUG,23 May 2011 12:34:57,[XELLERATE.DATABASE],select req.req_number,req.req_createby,req.req_create,req.req_key, req.req_type,req.req_prov_sched_date,req.req_target_type,req.req_obj_action,req.req_priority,req.req_note,req.req_rowver,req.req_consolidated_data_value,req.ost_key,orc_key,ost_status,rqr.usr_key,rqr.usr_login as requester,rqr.usr_first_name as requester_first_name, rqr.usr_last_name as requester_last_name, req.req_update, req.req_updateby, reqadm.usr_key as requestadmin_key,reqadm.usr_login as requestadmin, reqadm.usr_first_name as requestadmin_first_name,reqadm.usr_last_name as requestadmin_last_name,mgr.usr_first_name rqr_mgr_fname,mgr.usr_last_name rqr_mgr_lname,mgr.usr_login rqr_mgr_login,mgr.usr_key rqr_mgr_key,req_upd_usr.usr_first_name req_updateby_fname,req_upd_usr.usr_last_name req_updateby_lname,req_upd_usr.usr_login req_updateby_login from req req left outer join usr reqadm on req.usr_key=reqadm.usr_key left outer join usr req_upd_usr on req.req_updateby=req_upd_usr.usr_key left outer join usr rqr on rqr.usr_key=req.req_createby left outer join usr mgr on rqr.usr_manager_key=mgr.usr_key, ost ost where req.ost_key=ost.ost_key and ( req.req_key in (43) )
Only GIA User(did not work):
DEBUG,23 May 2011 12:12:37,[XELLERATE.DATABASE],select req.req_number,req.req_createby,req.req_create,req.req_key, req.req_type,req.req_prov_sched_date,req.req_target_type,req.req_obj_action,req.req_priority,req.req_note,req.req_rowver,req.req_consolidated_data_value,req.ost_key,orc_key,ost_status,rqr.usr_key,rqr.usr_login as requester,rqr.usr_first_name as requester_first_name, rqr.usr_last_name as requester_last_name, req.req_update, req.req_updateby, reqadm.usr_key as requestadmin_key,reqadm.usr_login as requestadmin, reqadm.usr_first_name as requestadmin_first_name,reqadm.usr_last_name as requestadmin_last_name,mgr.usr_first_name rqr_mgr_fname,mgr.usr_last_name rqr_mgr_lname,mgr.usr_login rqr_mgr_login,mgr.usr_key rqr_mgr_key,req_upd_usr.usr_first_name req_updateby_fname,req_upd_usr.usr_last_name req_updateby_lname,req_upd_usr.usr_login req_updateby_login from req req left outer join usr reqadm on req.usr_key=reqadm.usr_key left outer join usr req_upd_usr on req.req_updateby=req_upd_usr.usr_key left outer join usr rqr on rqr.usr_key=req.req_createby left outer join usr mgr on rqr.usr_manager_key=mgr.usr_key, ost ost where req.ost_key=ost.ost_key and ( req.req_key in (,) )
ERROR,23 May 2011 12:12:37,[XELLERATE.DATABASE],select req.req_number,req.req_createby,req.req_create,req.req_key, req.req_type,req.req_prov_sched_date,req.req_target_type,req.req_obj_action,req.req_prio
thank you
Thiago | Guimaraes

Hi Kevin,
Thank you for your answer. The group has permission to view this request. And example: If I include all permissions that group SPOC has on GIAAnalyst it still not working. In this environment we are not using the administrative queue.
Thiago Leoncio

OIM 11g R2 - Setting a field as mandatory while provisioning through catalo

Hi,
May I know how i can make a field as mandatory (Red Asterick) while trying to provision an account through catalog wizard.I dont see any option to set required=true while creating a form for an application instance.Thanks.

login to sysadmin-> create sandbox-> go to form designer->select your form now click on customize link(right top corner)->select your attribute and set the required field as true and then save it. finally export sandbox. run catalog sync job. and then verify if attribute is mandatory in the request form/dataset or not.
same mentioned in R2 release note

OIM API Code to change the link of the provisioned Account to another User

tcResultSet rset;
          HashMap <String, String> map;
          try{
               userIntf=(tcUserOperationsIntf)utilityFactory.getUtility("Thor.API.Operations.tcUserOperationsIntf");
               map = new HashMap <String, String>();
               map.put("Users.User ID",toUserLogin);
               map.put("Users.Status","Active");
               rset=userIntf.findUsers(map);
               // Get the User Key for the User given his User ID
               rset.goToRow(0);
               long toUserKey=rset.getLongValue("Users.Key");
               System.out.println(" Key for the ToUser is :" + toUserKey);
               map = new HashMap <String, String>();
               map.put("Users.User ID",fromUserLogin);
               map.put("Users.Status","Active");
               rset=userIntf.findUsers(map);
               // Get the User Key for the User given his User ID
               rset.goToRow(0);
               long fromUserKey=rset.getLongValue("Users.Key");
               System.out.println(" Key for the FromUser is :" + fromUserKey);
               // Now get all the objects thats been provisioned for the user given user's Key
               rset=userIntf.getObjects(fromUserKey);
               HashMap tmap = new HashMap();
               for(int k=0;k<rset.getTotalRowCount(); k++){
                    rset.goToRow(k);
                    System.out.println("####################################################");
                    String targetName=rset.getStringValue("Objects.Name");
                    System.out.println("targetName :: Objects.Name = "+targetName);
                    long objInstKey = rset.getLongValue("Users-Object Instance For User.Key");
                    System.out.println("Users-Object Instance For User.Key = "+objInstKey);
                    String status =rset.getStringValue("Objects.Object Status.Status");
                    System.out.println("Objects.Object Status.Status = "+status);
                    System.out.println("####################################################");
                    if(status.equalsIgnoreCase("Enabled")&& targetName.equalsIgnoreCase(resorceName) ) {
                         System.out.println("Changing to service Account..");
                         userIntf.changeToServiceAccount(objInstKey);
                         System.out.println("Account changed to service Account");
                         System.out.println("Linking Account to another User....");
                         userIntf.moveServiceAccount(objInstKey, toUserKey);
                         System.out.println("Account Linked");
                         System.out.println("Changing Account from service......");
                         userIntf.changeFromServiceAccount(objInstKey);
                         System.out.println("Account changed to normal");
          }catch(Exception exception){
               System.out.println("Exception occurred :"+exception.getMessage());
          }

HI rumesh,
    Don't use resource link as you did. Try using normal link and create a component(HTMLB or anyother) from KM reource content, then add that component to the link as below.
   comp = ....(should be a component from your Km content resource)
Link link = new Link("Link");
link.setTarget("www.yahoo.com");
link.setReference("www.yahoo.com");
link.addComponent(comp);
finally add that link to your search UI . I hope this will help.
I am sorry if i confused you.
Thanks & regards.
Rumeshbabu

OIM 9: User assigned Provisioning Task can't see "Open Provisioning Tasks"

I have a user who is assigned a task through the Assignment tab, but when they log in, they don't see the "Open Tasks" menu. If I make them sys-admin, they can see it, so It has to be a permissions thing, but where exactly?
Any help would be appreacited!
Thanks
Alex

You need to assign the following menu items "To-Do List Open Tasks menu item" to the group the user belong to.

OIA 11.1.1.5 - OIM 11.1.1.5 Integration Cannot see the Provisioning Server

Similar Messages

Maybe you are looking for