OID First Time Full Reconciliation - group/role reconciliation question

My client has some roles/groups created in OID. The initial set of users lies over there. I have to bring the initial load of users into OIM. The existing set of users is around 5000. But some users belong to different groups/roles. Now if I want to do a first time reconciliation to bring all these initial set of user profiles and accounts into OIM; where do I need to specify the groups/roles in OID resource object?
I went through the OID connector guide. But in there, in the section "3.1 Performing First-Time Reconciliation", it doesn't mention anywhere to create any multivalued attribute/child form or anything. What are the steps that are needed to be taken? If I just reconcile the group/role lookup values, will it populate those values within the user process form? If so, which fields will co-relate with that?
Thanks,
- oidm.

Thanks Raj. But I think I am a bit lost over here.
So you mean to say I don't need to run the scheduled tasks which are related to populating the groups/roles lookups for first time full reconciliation? And also you mean to say that we only need these lookups at the time of provisioning user profiles to target system?
I have to create identities within OIM from OID so I have to run the 'OID User Trusted Recon Task' and not 'OID User Target Recon Task'.
Basically, my question is how will the roles/groups be depicted in the user account when I will do a trusted source reconciliation? If so, which fields in process form will hold those values? Do I need to run the lookup reconciliation tasks for the same or not?
Thanks,
- oidm.

Similar Messages

HT5312 I'm trying to buy iTunes for first time, but can't verify security questions.

I'm trying to buy iTunes for first time and can't answer security questions.
<Personal Information Edited by Host>

The page that you posted from has instructions for how to reset them i.e. if you have a rescue email address (which is not the same thing as an alternate email address) set up on your account then steps 1 to 5 half-way down that page should give you a reset link.
If you don't have a rescue email address (you won't be able to add one until you can answer your questions) then you will need to contact iTunes Support / Apple in your country to get the questions reset (these are user-to-user forums).
Contacting Apple about account security : http://support.apple.com/kb/HT5699
When they've been reset (and if you don't already have a rescue email address) you can then use the steps half-way down the HT5312 page that you posted from to add a rescue email address for potential future use

First time Full Update Error - a strange phenomena

Hi Gurus,
There is a peculiar phenomenon that I am facing.There is a Z Extractor which brings in data from a Custom Table and a standard table.It uploads in Full Update mode to a DSO.
On few occassions , the first time load fails saying no source data available. If I do a repeat within seconds or anytime after that , it picks up data and loads perfectly in the DSO.
I could find no plausible explanation for this.
Could anyone let me know , why could this happen.
Regards,

kind of hard to reply if we don't know how this Z-extractor has been created, hum

Firefox not first time cleans my history without any question

Hello, firefox not first time in ~2months automatically cleans my history and I dont like it, 2months ago I had 2years history, but 2months ago firefox deleted it without any question, I thought "okay whatever" but now ff deletes it every 1-2weeks. and I really dont like it - about 1month ago there was 1month old history but now again I have only 7days history and this is nonsense, how I should fix it? Bookmarks/passwords not gone.

There is a possibility some other software is interfering with and changin=g or deleting some of your History.
Also Firefox stores Bookmarks and History in the same database ''places.sqlite'' it is a possibility if you have a very large number of bookmarks, that because Firefox gives these priority you may loose some of your History.

Trying to redeem iTunes card told first time purchase on computer needs security question answered which I did not set up or know the answer to

Trying to redeem iTunes card. Was told first time purchase needs security questions answered and don't remeber setting them up to start with and I have made several purchases before without answering questions. Getting no help from Apple support. How can I make new answers for new security questions.

If you have a rescue email address (which is not the same thing as an alternate email address) set up on your account then the steps half-way down this page give you a reset link on your account : http://support.apple.com/kb/HT5312
If you don't have a rescue email address (you won't be able to add one until you can answer 2 of your questions) then you will need to contact iTunes Support / Apple to get the questions reset.
Contacting Apple about account security : http://support.apple.com/kb/HT5699
When they've been reset (and if you don't already have a rescue email address) you can then use the steps half-way down the HT5312 link above to add a rescue email address for potential future use

First time Apple user having a few questions...

I have a G5 and I have tried many times to download a version of Windows Media player, but every time I can never get it to actually work. I end up with getting a Windows Media.sitx on my desktop, and when I click it, a box comes up for me to choose an application in order to open up Windows Media.sitx. The problem is, I can't find an application that will open it. I don't know if I need to download another program or what, and I haven't been able to find anything about this on these board, but perhaps I missed something.
Another question I have is that I have The Sims 2 game that I used on my old PC doesn't seem to want to work on my G5, and I have been reading posts about actual "mac versions." Does my Sims2 work with Macs at all or do I need to purchase a "mac version"?
I have been finding very similar problems with other programs/games where I just can't seem to get any sort of "install" program to start running. If anyone can help me out, I would sure appreciate it.
Thanks!
G5 iMac Mac OS X (10.4.3)

I try to avoid WMP like the plague it is, but atlas there is a free, open source alternative for most content you'll find online.
http://www.apple.com/downloads/macosx/video/vlcmediaplayer.html
If you want to record the screen w/sound there is a excellent software called SnapZ ProX from Ambrosia, the full version will screen record into a Quicktime movie. This software can come in handy to record Real and WM files as well. Plus if you buy the Quicktime Player Pro there is a Export option for the video iPod.
If you want to place DVD movies onto your iPod directly read this excellent tutorial here (remember to reset the picture settings on each new DVD and drag/drop the file to your iTunes Library for synching to the viPod.)
http://macteens.com/index.php/features/fullstory/puttingdvds_onto_youripod/

I'm trying to make a purchase on App store for the first time and I forgot my security questions. What should I do?

I have set up my apple ID quite some time ago and I don't remember what I answered for my security questions. Can someone help me with how to change them so that I can make my purchase? Thanks

If you have a rescue email address (an alternate email address is different) on your account then you can use that to reset them : http://support.apple.com/en-us/HT6170
If you don't have a rescue email address (you won't be able to add one until you can answer your questions) then you will have to contact Support in your country to get the questions reset.
Contacting Apple about account security : http://support.apple.com/en-us/HT5699
If your country isn't on that page then try this form and explain and see what they reply with : https://ssl.apple.com/emea/support/itunes/contact.html
When they've been reset, and if you don't already have a rescue email address, you can then add one for potential future use : http://support.apple.com/en-us/HT201356
Or if it's available in your country you could change to 2-step verification : http://support.apple.com/en-gb/HT5570

I have a Samsung Galaxy Stellar 4 GB first time user. I have a question about ringtones.

My basic smart phone before the Samsung was a LG touch cell. What I liked best about that phone was the ringtone. It would call out (voice) the name of the person calling or sending a text. I can't find this feature on the Samsung. Does anyone know if this cell has the capabilites of a verbal announcement ringtone for names on my contact list? Since it doesn't appear to be on the selection list for ringtones, is there an app I can download to add it to my Samsung for incoming texts or phone calls? I'm starting to like this new cell but I miss the verbal ringtone announcement.

To my knowledge, there's nothing built in on the phone itself, though I could be wrong. On my DROID RAZR M there is a way you can have the phone announce calls and text messages, so it's possible to do. I would look in the Google Play store to see if there's a free app that can do this for you, or see if you can find in the phone "app" some settings for announcing callers

First time battery charge

Hello,
I just got myself a new 13-inch Macbook Pro retina display. I've been reading about the first battery charge and how to use it later on, but I have another question on the first charge:
For the first charge, do I need to turn the Macbook off or can I use it while it charges for the first time, full charge.
Thank you!

Hi j,
You can use it, just make sure you charge it all the way up before disconnecting the power adapter. Enjoy!

Downloading for the first time in creative cloud

i am downloding for the first time in creative cloud but my question is how long does it take two dowload photoshop it has been like one hour but their a circule that it goes around and around and im not sure that it is downloding,

We can't know. You have not provided any info about your system or your Internet connection. The download is about 1.1 GB but based on your description you are not even at this point because you didn't actually hit the download button. If you see the spinning circle, then there is a connection problem. Refer to this:
http://helpx.adobe.com/x-productkb/policy-pricing/activation-network-issues.html
Mylenium

OIM 10G OID user account / group membership reconciliation

Hello
I have an OID environment that is used for OAM access to applications within the environment. I need to be able to reconcile users from OID into OIM along with their group membership so that roles for users are maintained and updated. I have ORM integrated within the environment so entitlements would need to flow to orm to document that users are members of a role / OIM group. Not sure if this is possible through the trusted reconciliation or if there is a user / group target reconciliation that can be used for this. Any help you can give for this would be appreciated.
Thanks

When i use ADCS timestamp as 0 (to capture changes from the beginning and not necessarily after the group change event occured on the AD side) and run AD user target recon this is getting updated. Is this correct and if so how can i always default ADCS timestamp as 0 in the scheduled task and are there any side effects for this sort of approach.
Prasad.
Edited by: Prasad on Nov 7, 2011 12:31 PM

First Time Manual Bank Reconciliation In SAP

Dear Experts
Is it mandatory to keep opening balance always 0 when we are posting manual bank reco first time?
Please clarify.
Regards
Nitin Shukla
Moderator: Please, avoid asking basic questions

Hi:
It depends on the balance in the main bank account GL that will be assigned to your house bank against a particular ID in FI12. If it has nothing in it (can be seen in FS10N) then BRS will created with 0 as opening balance. Mostly in case of First time new bank statement it starts with ZERO balance.
Regards

User Reconciliation Groups - PSCD

Hi Experts,
We are on ECC 604 and use the PSCD module for our Accounts Receivable. Is there a way to maintain the User Reconciliation Groups without it requiring it to be a transport? Tcode: s_kk4_74002323 Program: SAPLFKV2. Even though we've added the tcode to an end user's role, we get the error that the system has to be open to maintain the table (user name and reconc. grp).
Thanks for any guidance you can provide,
Cindy

It is an IMG - Customizing activity hence it has to be transported from the Golden client to target client lets say Quality or Production .
It is because the system status ( Client status ) is kept non modifiable for IMG activities hence you will have to transport it .
There are 2 alternatives available :
1. Transport the same from golden client ( the client in which all customizing is maintained ) .
2. Talk to your basis guy and ask him to open ( change the setting of the client to modifiable ) the client for sometime , there you can maintain the entries and then the basis guy can close the client for customizing .
From security point of view point no. 1 is advisable and from comfort/ease of use point of view point no. 2 is recommended . have a word with your basis counter part and see how things work.
Cheers ,
Dewang

HT201250 Hi, I hope this question won't seem too basic but if I want to use a new larger external drive for my time machine backups, will it do a new full backup the first time I plug it in and if so, do I really need all the old backups on my smaller ext

Hi, I hope this question won't seem too basic but if I want to use a new larger external drive for my time machine backups, will it do a new full backup the first time I plug it in and if so, do I really need all the old backups on my smaller external drive?

50maz wrote:
Hi, I hope this question won't seem too basic but if I want to use a new larger external drive for my time machine backups, will it do a new full backup the first time I plug it in
Yes, it will do a full backup.
and if so, do I really need all the old backups on my smaller external drive?
Only if you want to be able to go back in time to those previous Time Machine backups. When you plug in the new larger external drive, you will only be able to go back as far as the first day you plugged it in and ran the first Time Machine backup on it.

Wlconfig with custom role mapper always fails FIRST time only

WLS 8.1 sp2.
I have a very strange problem, where I'm "coldstarting" a server and
configuring it, much like the ant build script for medrec. Only I have a
custom role mapper (medrec has a custom authentication provider). Anyway,
the first time I execute this task (after a clean), it consistently fails
like so:
[wlconfig] OK
[wlconfig] OK
BUILD FAILED
file:P:/dgs/build.xml:186: Unable to create mbean:
weblogic.management.MBeanCreationException: - with nested exception:
[java.lang.ClassNotFoundException:
weblogic.management.configuration.com.combinenet.security.CNRoleMapperProvid
erMBean]
(that class looks bogus to me, BTW, as my provider class is
com.combinenet.security.CNRoleMapperProvider)
Now, the SECOND time I execute "coldstart", which runs wlconfig, the server
starts up fine, and my custom role mapper is loaded successfully. So,
obviously I figured something was left around the first time which somehow
helped matters, but the strange thing is that I delete the entire domain
directory before "coldstarting" the server, and I also re-copy the role
mapper provider jar into the mbeantypes directory, so I'm very puzzled. I'm
copying the coldstart task below (and the clean).
Can anyone tell me what's wrong with this task that would make it fail the
first time through after a clean? Is this a bug? And why would it succeed on
all subsequent attempts (without a clean)? I just don't see anything wrong
with what I'm doing.
TIA,
Miles
<target name="coldstart"
description="Start a new DGS Server with an empty config"
depends="configServerEnv,startPointBase,configPointBase,dist" >
<delete dir="${dgs.root}" quiet="true"/>
<mkdir dir="${dgs.root}"/>
<wlserver
beahome="${bea.home}"
dir="${dgs.root}"
domainname="${dgs.domain}"
host="${dgs.host}"
port="${dgs.port}"
servername="${dgs.serverName}"
username="${wl.username}"
password="${wl.password}"
productionmodeenabled="false"
generateconfig="true"
action="start">
</wlserver>
<wlconfig url="t3://${dgs.host}:${dgs.port}"
username="${wl.username}"
password="${wl.password}">
<query domain="${dgs.domain}" type="Server"
name="${dgs.serverName}"
property="dgs.server"/>
<create type="JDBCConnectionPool"
name="DgsPool"
property="dgs.pool">
<set attribute="CapacityIncrement" value="1"/>
<set attribute="DriverName"
value="com.pointbase.jdbc.jdbcUniversalDriver"/>
<set attribute="InitialCapacity" value="1"/>
<set attribute="MaxCapacity" value="10"/>
<set attribute="Password" value="${pointbase.password}"/>
<set attribute="Properties" value="user=${pointbase.username}"/>
<set attribute="RefreshMinutes" value="0"/>
<set attribute="ShrinkPeriodMinutes" value="15"/>
<set attribute="ShrinkingEnabled" value="true"/>
<set attribute="TestConnectionsOnRelease" value="false"/>
<set attribute="TestConnectionsOnReserve" value="false"/>
<set attribute="URL" value="jdbc:pointbase:server://localhost/demo"/>
<set attribute="Targets" value="${dgs.server}"/>
</create>
<create type="JDBCTxDataSource" name="DGS Tx DataSource">
<set attribute="JNDIName" value="DgsTxDataSource"/>
<set attribute="PoolName" value="DgsPool"/>
<set attribute="Targets" value="${dgs.server}"/>
</create>
<create type="JMSConnectionFactory" name="Queue">
<set attribute="JNDIName" value="jms/QueueConnectionFactory"/>
<set attribute="XAServerEnabled" value="true"/>
<set attribute="Targets" value="${dgs.server}"/>
</create>
<create type="JMSJDBCStore" name="DgsJDBCStore"
property="dgs.jdbcstore">
<set attribute="ConnectionPool" value="${dgs.pool}"/>
<set attribute="PrefixName" value="Dgs"/>
</create>
<create type="JMSServer" name="DgsJMSServer">
<set attribute="Store" value="${dgs.jdbcstore}"/>
<set attribute="Targets" value="${dgs.server}"/>
<create type="JMSQueue" name="Registration Queue">
<set attribute="JNDIName" value="jms/REGISTRATION_MDB_QUEUE"/>
</create>
</create>
<create type="MailSession" name="Dgs Mail Session">
<set attribute="JNDIName" value="mail/DgsMailSession"/>
<set attribute="Properties"
value="mail.user=joe;mail.host=mail.mycompany.com"/>
<set attribute="Targets" value="${dgs.server}"/>
</create>
<create type="StartupClass" name="StartBrowser">
<set attribute="Arguments" value="port=${dgs.port}"/>
<set attribute="ClassName" value="com.combinenet.test.StartBrowser"/>
<set attribute="FailureIsFatal" value="false"/>
<set attribute="Notes" value="Automatically starts a browser on
server boot."/>
<set attribute="Targets" value="${dgs.server}"/>
</create>
<set mbean="Security:Name=myrealmDefaultAuthenticator"
attribute="ControlFlag" value="SUFFICIENT"/>
<set mbean="Security:Name=myrealmDefaultAuthenticator"
attribute="MinimumPasswordLength" value="10"/>
<set mbean="Security:Name=myrealm"
attribute="DeployPolicyIgnored" value="false"/>
<set mbean="Security:Name=myrealm" attribute="DeployRoleIgnored"
value="false"/>
<set mbean="Security:Name=myrealm"
attribute="FullyDelegateAuthorization" value="true"/>
<set mbean="Security:Name=myrealm"
attribute="AuthenticationProviders"
value="Security:Name=myrealmDefaultAuthenticator|Security:Name=myrealmDefaul
tIdentityAsserter"/>
<set mbean="Security:Name=myrealm" attribute="RoleMappers"
value="Security:Name=myrealmDefaultRoleMapper|Security:Name=myrealmCNRoleMap
perProvider"/>
<create type="com.combinenet.security.CNRoleMapperProvider"
domain="Security" name="myrealmCNRoleMapperProvider"/>
<set mbean="Security:Name=myrealmCNRoleMapperProvider"
attribute="Realm" value="Security:Name=myrealm"/>
<query domain="${dgs.domain}" type="Server" name="DgsServer">
<set attribute="StdoutEnabled" value="true"/>
<set attribute="StdoutSeverityLevel" value="64"/>
<set attribute="ListenAddress" value=""/>
<set attribute="ListenPort" value="${dgs.port}"/>
</query>
<query domain="${dgs.domain}" type="WebServer" name="DgsServer">
<set attribute="LogFileName" value="logs/access.log"/>
</query>
</wlconfig>
<copy file="${dist}/lib/dgs.ear" todir="${dgs.root}"/>
<wldeploy action="deploy"
source="${dgs.root}/dgs.ear"
name="dgsapp"
user="${wl.username}"
password="${wl.password}"
verbose="true"
adminurl="t3://localhost:7001"
debug="true"
targets="${dgs.serverName}"/>

<sleep hours="10"/>
</target>
<target name="clean"
description="Clean the build tree(s)"
depends="init">
<delete dir="${build}" verbose="true"/>
<delete dir="${dist}" verbose="true"/> (dist is where the ear file is
created)
</target>

g_wolfman wrote:
Are you using Parallels?
Wolfman, thats a good hint!
Additional info at --> http://reviews.cnet.com/8301-13727_7-20106682-263/macbook-airs-double-booting-wi th-parallels-and-filevault-enabled/
Thanks for the input.
Lupunus

OID First Time Full Reconciliation - group/role reconciliation question

Similar Messages

Maybe you are looking for