OID manual provisioning from OIM

Hi,
while provisioning users in OIm and giving them certain entitlements, when I provision a user with OID It resource,it gets added to OID automatically. I want to do this provisioning manually....that is approval based
The goal is to give required access to a new User in the system by following standard approval process and manual creation of the user in respective target systems
how this can be achieved
following reports need to be generated:
•     User creation was approved/rejected by Manager.
•     User creation was approved/rejected by Manager.
•     User creation was approved/rejected by Manager.
Edited by: Chhavi Saluja on Jan 31, 2010 10:17 PM

The user in your it resource, do you have it lowercase? Also, does the user exist in your target?
-Kevin

Similar Messages

Target Invocation Exception when provisioning from OIM to People Soft

Hi All,
I am facing an error while provisioning from OIM to PSFT. In OIM error logs I get the following error :
.0] [dcid: 214014dca901f288:-1705897b:139aeade537:-7ffd-00000000000266ac] ================= Start Stack Trace =======================
[2012-09-13T16:55:07.115-04:00] [dev-oim_oim_server01] [ERROR] [] [OIMCP.PSFTUM] [tid: [ACTIVE].ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: 0000Jb1QD7cBT8q5ONK6yd1GJNkN000UYj,0] [APP: oim#11.1.1.3.0] [dcid: 214014dca901f288:-1705897b:139aeade537:-7ffd-00000000000266ac] oracle.iam.connectors.psft.usermgmt.integration.PSFTUMUserProxyProvisionManager : invoke
[2012-09-13T16:55:07.116-04:00] [dev-oim_oim_server01] [ERROR] [] [OIMCP.PSFTUM] [tid: [ACTIVE].ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: 0000Jb1QD7cBT8q5ONK6yd1GJNkN000UYj,0] [APP: oim#11.1.1.3.0] [dcid: 214014dca901f288:-1705897b:139aeade537:-7ffd-00000000000266ac] InvocationTargetException occurred
[2012-09-13T16:55:07.117-04:00] [dev-oim_oim_server01] [ERROR] [] [OIMCP.PSFTUM] [tid: [ACTIVE].ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: 0000Jb1QD7cBT8q5ONK6yd1GJNkN000UYj,0] [APP: oim#11.1.1.3.0] [dcid: 214014dca901f288:-1705897b:139aeade537:-7ffd-00000000000266ac] Description : null
[2012-09-13T16:55:07.117-04:00] [dev-oim_oim_server01] [ERROR] [] [OIMCP.PSFTUM] [tid: [ACTIVE].ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: 0000Jb1QD7cBT8q5ONK6yd1GJNkN000UYj,0] [APP: oim#11.1.1.3.0] [dcid: 214014dca901f288:-1705897b:139aeade537:-7ffd-00000000000266ac] java.lang.reflect.InvocationTargetException[[
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.iam.connectors.psft.usermgmt.integration.PSFTUMUserProxyProvisionManager.invoke(Unknown Source)
at oracle.iam.connectors.psft.usermgmt.integration.PSFTUMUserProxyProvisionManager.createUser(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.iam.connectors.psft.usermgmt.integration.PSFTUMUserProvisionManager.createUser(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpPSFTUMCREATEUSER.CREATEUSER(adpPSFTUMCREATEUSER.java:115)
at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpPSFTUMCREATEUSER.implementation(adpPSFTUMCREATEUSER.java:60)
at com.thortech.xl.client.events.tcBaseEvent.run(tcBaseEvent.java:196)
at com.thortech.xl.dataobj.tcDataObj.runEvent(tcDataObj.java:2492)
at com.thortech.xl.dataobj.tcScheduleItem.runMilestoneEvent(tcScheduleItem.java:2936)
at com.thortech.xl.dataobj.tcScheduleItem.eventPostInsert(tcScheduleItem.java:554)
at com.thortech.xl.dataobj.tcDataObj.insert(tcDataObj.java:602)
at com.thortech.xl.dataobj.tcDataObj.save(tcDataObj.java:474)
at com.thortech.xl.dataobj.tcORC.insertNonConditionalMilestones(tcORC.java:850)
at com.thortech.xl.dataobj.tcORC.completeSystemValidationMilestone(tcORC.java:1163)
at com.thortech.xl.dataobj.tcOrderItemInfo.completeCarrierBaseMilestone(tcOrderItemInfo.java:508)
at com.thortech.xl.dataobj.tcOrderItemInfo.eventPostInsert(tcOrderItemInfo.java:153)
at com.thortech.xl.dataobj.tcUDProcess.eventPostInsert(tcUDProcess.java:234)
at com.thortech.xl.dataobj.tcDataObj.insert(tcDataObj.java:602)
at com.thortech.xl.dataobj.tcDataObj.save(tcDataObj.java:474)
at com.thortech.xl.dataobj.tcTableDataObj.save(tcTableDataObj.java:2905)
at com.thortech.xl.dataobj.tcORC.autoDOBSave(tcORC.java:2978)
at com.thortech.xl.dataobj.util.tcOrderPackages.createOrder(tcOrderPackages.java:523)
at com.thortech.xl.dataobj.util.tcOrderPackages.orderPackageForUser(tcOrderPackages.java:177)
at com.thortech.xl.dataobj.tcOIU.provision(tcOIU.java:563)
at com.thortech.xl.dataobj.tcOIU.eventPostInsert(tcOIU.java:303)
at com.thortech.xl.dataobj.tcDataObj.insert(tcDataObj.java:602)
at com.thortech.xl.dataobj.tcDataObj.save(tcDataObj.java:474)
at com.thortech.xl.dataobj.tcTableDataObj.save(tcTableDataObj.java:2905)
at com.thortech.xl.dataobj.tcUserProvisionObject.insertImplementation(tcUserProvisionObject.java:283)
at com.thortech.xl.dataobj.tcDataObj.insert(tcDataObj.java:591)
at com.thortech.xl.dataobj.tcDataObj.save(tcDataObj.java:474)
at com.thortech.xl.ejb.beansimpl.tcUserOperationsBean.provisionObject(tcUserOperationsBean.java:2813)
at com.thortech.xl.ejb.beansimpl.tcUserOperationsBean.provisionObject(tcUserOperationsBean.java:2615)
at Thor.API.Operations.tcUserOperationsIntfEJB.provisionObjectx(Unknown Source)
at sun.reflect.GeneratedMethodAccessor2471.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.jee.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:37)
at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
at com.bea.core.repackaged.springframework.jee.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:50)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy303.provisionObjectx(Unknown Source)
at Thor.API.Operations.tcUserOperationsIntf_e9jcxp_tcUserOperationsIntfRemoteImpl.provisionObjectx(tcUserOperationsIntf_e9jcxp_tcUserOperationsIntfRemoteImpl.java:2808)
at sun.reflect.GeneratedMethodAccessor2470.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:84)
at $Proxy165.provisionObjectx(Unknown Source)
at sun.reflect.GeneratedMethodAccessor2469.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:198)
at $Proxy302.provisionObjectx(Unknown Source)
at Thor.API.Operations.tcUserOperationsIntfDelegate.provisionObject(Unknown Source)
at oracle.iam.requestactions.eventhandlers.ProvisionResource.provisionObject(ProvisionResource.java:281)
at oracle.iam.requestactions.eventhandlers.ProvisionResource.execute(ProvisionResource.java:209)
at oracle.iam.requestactions.eventhandlers.ProvisionResource.execute(ProvisionResource.java:96)
at sun.reflect.GeneratedMethodAccessor2116.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.iam.platform.kernel.impl.EventHandlerDynamicProxy.invoke(EventHandlerDynamicProxy.java:30)
at $Proxy236.execute(Unknown Source)
at oracle.iam.platform.kernel.impl.OrchProcessData.runActionEvents(OrchProcessData.java:1035)
at oracle.iam.platform.kernel.impl.OrchProcessData.runEvents(OrchProcessData.java:644)
at oracle.iam.platform.kernel.impl.OrchProcessData.executeEvents(OrchProcessData.java:227)
at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.resumeProcess(OrchestrationEngineImpl.java:669)
at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.resumeProcess(OrchestrationEngineImpl.java:716)
at oracle.iam.platform.kernel.impl.OrhestrationAsyncTask.execute(OrhestrationAsyncTask.java:108)
at oracle.iam.platform.async.impl.TaskExecutor.executeUnmanagedTask(TaskExecutor.java:100)
at oracle.iam.platform.async.impl.TaskExecutor.execute(TaskExecutor.java:70)
at oracle.iam.platform.async.messaging.MessageReceiver.onMessage(MessageReceiver.java:68)
at sun.reflect.GeneratedMethodAccessor1761.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy326.onMessage(Unknown Source)
at weblogic.ejb.container.internal.MDListener.execute(MDListener.java:466)
at weblogic.ejb.container.internal.MDListener.transactionalOnMessage(MDListener.java:371)
at weblogic.ejb.container.internal.MDListener.onMessage(MDListener.java:327)
at weblogic.jms.client.JMSSession.onMessage(JMSSession.java:4659)
at weblogic.jms.client.JMSSession.execute(JMSSession.java:4345)
at weblogic.jms.client.JMSSession.executeMessage(JMSSession.java:3821)
at weblogic.jms.client.JMSSession.access$000(JMSSession.java:115)
at weblogic.jms.client.JMSSession$UseForRunnable.run(JMSSession.java:5170)
at weblogic.work.SelfTuningWorkManagerImpl$WorkAdapterImpl.run(SelfTuningWorkManagerImpl.java:528)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:173)
Caused by: bea.jolt.ApplicationException: TPESVCFAIL - application level service failure
at bea.jolt.JoltRemoteService.decodeCALL(JoltRemoteService.java:452)
at bea.jolt.JoltRemoteService.call(JoltRemoteService.java:345)
at bea.jolt.JoltRemoteService.call(JoltRemoteService.java:267)
at psft.pt8.net.NetReqRepSvc.sendRequest(NetReqRepSvc.java:613)
at psft.pt8.net.NetService.requestService(NetService.java:153)
at psft.pt8.net.NetReqRepSvc.requestService(NetReqRepSvc.java:350)
at psft.pt8.joa.JOAService.joaRequestService(JOAService.java:60)
at psft.pt8.joa.CISvc.invokeMethod(CISvc.java:117)
at psft.pt8.joa.CI.invokeMethod(CI.java:282)
at PeopleSoft.Generated.CompIntfc.UserProfile.setPassword(UserProfile.java:361)
... 119 more
[2012-09-13T16:55:07.119-04:00] [dev-oim_oim_server01] [ERROR] [] [OIMCP.PSFTUM] [tid: [ACTIVE].ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: 0000Jb1QD7cBT8q5ONK6yd1GJNkN000UYj,0] [APP: oim#11.1.1.3.0] [dcid: 214014dca901f288:-1705897b:139aeade537:-7ffd-00000000000266ac] ================= End Stack Trace =======================
[2012-09-13T16:55:07.122-04:00] [dev-oim_oim_server01] [ERROR] [] [OIMCP.PSFTUM] [tid: [ACTIVE].ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: 0000Jb1QD7cBT8q5ONK6yd1GJNkN000UYj,0] [APP: oim#11.1.1.3.0] [dcid: 214014dca901f288:-1705897b:139aeade537:-7ffd-00000000000266ac] ================= Start Stack Trace =======================
[2012-09-13T16:55:07.123-04:00] [dev-oim_oim_server01] [ERROR] [] [OIMCP.PSFTUM] [tid: [ACTIVE].ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: 0000Jb1QD7cBT8q5ONK6yd1GJNkN000UYj,0] [APP: oim#11.1.1.3.0] [dcid: 214014dca901f288:-1705897b:139aeade537:-7ffd-00000000000266ac] oracle.iam.connectors.psft.usermgmt.integration.PSFTUMUserProxyProvisionManager : createUser
[2012-09-13T16:55:07.124-04:00] [dev-oim_oim_server01] [ERROR] [] [OIMCP.PSFTUM] [tid: [ACTIVE].ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: 0000Jb1QD7cBT8q5ONK6yd1GJNkN000UYj,0] [APP: oim#11.1.1.3.0] [dcid: 214014dca901f288:-1705897b:139aeade537:-7ffd-00000000000266ac] Exception occurred
[2012-09-13T16:55:07.125-04:00] [dev-oim_oim_server01] [ERROR] [] [OIMCP.PSFTUM] [tid: [ACTIVE].ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: 0000Jb1QD7cBT8q5ONK6yd1GJNkN000UYj,0] [APP: oim#11.1.1.3.0] [dcid: 214014dca901f288:-1705897b:139aeade537:-7ffd-00000000000266ac] Description :
[2012-09-13T16:55:07.125-04:00] [dev-oim_oim_server01] [ERROR] [] [OIMCP.PSFTUM] [tid: [ACTIVE].ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: oiminternal] [ecid: 0000Jb1QD7cBT8q5ONK6yd1GJNkN000UYj,0] [APP: oim#11.1.1.3.0] [dcid: 214014dca901f288:-1705897b:139aeade537:-7ffd-00000000000266ac] oracle.iam.connectors.common.ConnectorException: [[
at oracle.iam.connectors.psft.usermgmt.integration.PSFTUMUserProxyProvisionManager.invoke(Unknown Source)
at oracle.iam.connectors.psft.usermgmt.integration.PSFTUMUserProxyProvisionManager.createUser(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.iam.connectors.psft.usermgmt.integration.PSFTUMUserProvisionManager.createUser(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
From PSFT jolt logs we see the folloing error :
UStreamId=013523_22586.158, Token=PSFT_EP/2012-09-06-21.35.23.887462/OIMUM/ENG owAAAAQDAgEBAAAAvAIAAAAAAAAsAAAABABTaGRyAk4Aawg4AC4AMQAwABSJ/euKJi2vwYeA5MWPoFQixOa+JmMAAAAFAFNkYXRhV3icHYlLDkBQEATLIxYWbkIY/wMgFj4J1g7gig6n86bTVUnPC0ShCwL5c/hLdhZWbjUe2ZhJD04mLh5GDmqjoMTI5MGzFU1bTkUjmpzTKx21vgY/W9ULMQ==
PSAPPSRV.22586 (159) [09/07/12 01:35:28 OIMUM@corwloimhd01 PSBusComp](1) (NET.346): Failed to execute PSBusComp request
PSAPPSRV.22586 (159) [09/07/12 01:35:28 OIMUM@corwloimhd01](2) Service PSBusComp failed
PSAPPSRV.21114 (242) [09/07/12 02:16:10 GetCertificate](3) Returning context. ID=OIMUM, Lang=ENG, UStreamId=021610_21114.242, Token=PSFT_EP/2012-09-06-22.16.10.689063/OIMUM/ENG
Any one has an idea on how to resolve this

- I understand you ran schedule task, but did it bring all the valid values in the lookup ?
- In addition to it, are you supplying all the values i n the form while doing so ?
- If you are doing auto-provisioning , do it manually and see.
Thanks
Sunny

Extend Provisioning (from OIM to OID) for already provisioned resources

We use OIM 9.1.0 to provision users to several target systems, for example OID. Not all information stored for a user in OIM is also provisioned to OID (for example department or location or phone is only stored in OIM). The provisionig task automatically is created via access policys.
This works fine.
Now we want to provision some more data (including department and location) to OID. So I changed the oid connector configuration to also provision these fields. This works fine for new users (which are not already provisioned to oid).
But we also need these additional fields in OID for users which have already been provisioned in the past. How can this requirement be implemented? Is there a way to resubmit these provisiong tasks oder to automatically update the process form.

Create a schedule task which will read the data from OIM User Profile and update the process form using tcFormInstanceOperationsIntf OIM APIs.
Also create their Label Name updated task in OID Workflow (Process Defintion)

Error while provisioning from OIM to MS Exchange

Hi All,
I am trying to provision a user from OIM to MS Exchanger server 2007. For that i used MSFT_Exchange _91110 connector. I also deployed the AD connector(MSFT_AD_Base_91100) before deploying this Exchange connector.
I can provision a user from OIM to AD using AD base connector. But when i am trying to provision a user from OIM to MS Exchange i am getting an exception that
ERROR,09 Apr 2010 04:38:48,031,[XELLERATE.WEBAPP],Class/Method: tcLookupFieldAct
ion/lookupByColumnFiltered encounter some problems: No Values Present
I already enabled the scheduled task Exchange mail store lookup reconcilliation and its status is running.
What could be the error?
Can anyone help me where i am going wrong?
Thanks & Regards.
new2idm

- I understand you ran schedule task, but did it bring all the valid values in the lookup ?
- In addition to it, are you supplying all the values i n the form while doing so ?
- If you are doing auto-provisioning , do it manually and see.
Thanks
Sunny

Provisioning from oim to ssh unix

hello,
i was tring to provision users from oim to linux redhat4.x .user is getting rejected with an error as SSH_USER_UNKNOWN_FAIL....
can anyone tell what is the problem with it.
here is the url for the image :
thank you in advanace .
Edited by: user11228346 on Jun 3, 2009 3:50 PM

The user in your it resource, do you have it lowercase? Also, does the user exist in your target?
-Kevin

SPML web service provisioning from OIM 9.1.0.1 using the OOTB GTCframework

Hello there,
There is a .NET web service client which is successfully able to access the weblogic application server wsdl from oim 9101 and it can see the complete user profile as a response from the same.
1.) Now, there is a situation where oim needs to send some attribute values to that .NET web service client, after the data from their side comes to OIM and updates a single attribute values for e.g. PIN. How can we do that ?
2.) and I want to add some UDFs into the existing SPML provisioning user profile. How can I do that ?
3.) Also, how will OIM know that it was able to successfully send the attribute values to the web service client.
http://download.oracle.com/docs/cd/E10391_01/doc.910/e10360/creategtc.htm#Toc153968032
I have gone through this. I didnt found this in OIM 9101.
Any ideas/references/clues/hints appreciated in this concern.
Thanks in advance,
- oidm.

In the entire thread many experts have given nice queries in different formats...
The best approach would be to open up the SQL Developer, connect with the OIM Database and experiment with all sorts of SQL queries provided by all the experts..
Learn some SQL techniques, like Inner Join etc...
Then you yourself will be able to figure out what you need, in exactly which format, for which users and for whom you have to restrict
Then not only this question, you would be able to solve dozens of similar such issues yourself...
And trust me, nothing can match that...
Just in case, you are not familiar with SQL Developer,
http://www.oracle.com/technetwork/developer-tools/sql-developer/downloads/index.html
Oracle SQL Developer 3.2.1 (3.2.10.09.57)
September 24, 2012
The Disabled DATE will be the creation date of that entry in the UPA_FIELDS table when Users.Status changed to Disabled.
SELECT USR.USR_LOGIN, UPA_FIELDS.CREATE_DATE
FROM UPA_FIELDS
WHERE UPA_FIELDS.FIELD_NAME='Users.Status'
AND UPA_FIELDS.FIELD_NEW_VALUE='Disabled'
AND UPA_FIELDS.UPA_USR_KEY=USR.USR_KEY
AND USR.USR_LOGIN NOT IN ('XELSYSADM', 'XELOPERATOR', 'WEBLOGIC');

Users not provisioned from OIM to OID groups

I've created an Access policy such that when i create a user with role as consultant he is automatically provisioned to OID resource and OID group( cn=group1,cn=groups,dc=ad,dc=company,dc=com ).
The user is provisioned to OID users(cn=users) but not to cn=group1,cn=group....
What could be wrong?
i have run the OID group lookup tasks to generate freshly added group lookups. Theses lookups are populated in process form when i create an access policy.
For ex the lookup generated is cn=group1,cn=group,dc=ad,dc=company,dc=com and the decode value is group1
The user profile and process form are not linked. That means changes in process form are not reflected to user profile. Can this be possible reason for the hassle defined above
please help me resolve this issue.
Edited by: Chhavi Saluja on Feb 15, 2010 1:30 AM

Hi,
Today I have also done the same thing of auto provisioning of OID through access policy. Only difference is that for selecting "Container DN" and "User group" we have created two user defined fields(lookup)in the user form which will refer to the lookups "Lookup.OID.Organization" and "Lookup.OID.Group" for inputs.These lookups are already reconciled once from OID.
As far as "container DN" iam successful but while selecting "user group" iam able to select and when i click on "create user" user is getting provisioned to OID into Container DN i specified.But user is not going into that particular group i specified.Iam assuming the reason is that as User Group is a mutivalued attribute and if we observe the process form of group selection we will see the add button. But on user form we dont have the option of child form to ADD/REMOVE the groups.
Someone pls suggest how to proceed further on this.How do i push the user into particular group/groups from the create user form itself?

Users not provisioned from OIM to OID user group child form

I have created 3 fields in UserForm named Application1, Application2 and Application3.All are textfield. Now I have a field in Process form in child table name Applications which is a lookup type and a multivalue attribute. Now the requirement is that whenever a user gets some value in UF for any application (Application 1, 2 or 3), the field Applications in PF should get auto populated by that application value.
Applications lookup in Process Form has already all the applications1, 2 and 3 in the lookup code and decode value.

In your adapter, read all the values from UDF (User Form)
If value is not equal to NULL then use tcFormInstanceOpetaionsIntf API to add values in Process Form.
http://otndnld.oracle.co.jp/document/products/id_mgmt/idm_903/doc_cd/javadocs/operations/Thor/API/Operations/tcFormInstanceOperationsIntf.html#addProcessFormChildData%28long,%20long,%20java.util.Map%29

It's posible the OID role Provisioning With OIM?

Hi experts,
I'm installing and configuring the OIM connector for OID. However I've found on the installation guide the next 'warnings':
- Reconciliation of roles is supported only for ODSEE and Novell eDirecotory target systems.
- Provisioning of roles is supported only for ODSEE and Novell eDirecotory target systems.
then my question is: how can I provision OID roles to any user using OIM??? If I can't do role provisioning to OID, I cant see so much utility for this connector.
My request its to provisioning roles that I've created on OID, using OIM interface.
Has anyone done this?
Thanks for you time.
regards.
Edited by: Daniel Cermeño on Sep 10, 2012 4:39 PM

Hi Leoncio and Gyanprakash,
Tanks for your response, thats make me feel more quiet.
I have still one question about this. In the installation and configuration guide says:
- If you are using the default connector configuration, for every group in the target system, create a corresponding organizational unit (with the same group name) in Oracle Identity Manager. This ensures that all groups from the target system are reconciled into their newly created organizational units, respectively.
- You can also configure the connector to reconcile the groups under one organization.
Then, when I run the reconciliation of OID groups in OIM. I obtain one organization with one resource representing my OID group. Or, if I prefer, I obtaion one organization with many resource that represents all my OID groups. However, I dont find how to provision this resources to my OIM users, cause I need that one user be part of one o more groups. If I put the user in the organization that represent my OID group, how I can provision more groups?
Furthermore, the reconciliations of OID groups creates resources/organizations, but in my understending this no create OIM roles isn't?
I'm sorry for my ignorance. This maybe is a trivial question, but I hope you can clarify this concepts to me.
Thanks for your time.
regards.
Edited by: Daniel Cermeño on Sep 11, 2012 8:08 AM

Exchange 2010 Provisioning from OIM 11g

I am having trouble provisioning to Exchange 2010. The error I am receiving is "Empty Arguments Passed in either Root Context,Admin FQDN,Admin Password,Server Address,Port Number in the IT Resource." I don't recall setting any of these parameters as part of the Exchange IT Resource. Do these come from the AD IT Resource or some Lookup object that I have missed? During the request I only specified AD Server, Mail Store and Mail Alias.
Thanks,
Pete

Check the values in ADITResource. Yes these come from ADITResource.

OID provisioning via OIM

OID provisioning from OIM
i have deployed and configured OID connector but users not provisioned to OID. it gives INVALID_NAMING_ERROR. what could be the possible reason.

please check and reply :
View IT Resource Details and Parameters
IT Resource Name OID IT Resource
IT Resource Type OID Server
Port 389
Use XL Org Structure false
Last Trusted Delete Recon TimeStamp
CustomizedReconQuery
SSL false
Server Address 10.76.118.72
Recon Attribute Lookup Code AttrName.Recon.Map.OID
Root DN dc=ad,dc=infosys,dc=com
Admin Id cn=orcladmin,cn=Users,dc=ad,dc=infosys,dc=com
Last Target Recon TimeStamp
Last Target Delete Recon TimeStamp
Last Trusted Recon TimeStamp
Admin Password *********
Prov Attribute Lookup Code AttrName.Prov.Map.OID

Provisioned user in exchange from OIM created as Mail Enabled User

Hi,
I have provisioned a user from OIM to exchange and the user is created as MAIL ENABLED RECEPIENT in the exchange instead of MAIL BOX ENABLED RECEPIENT .The difference between both is like the MAIL BOX ENABLED user will be having a seperate button(MAILBOX RIGHTS) in the exchange advanced tab and also he has exchange features tab.
Is there any field in OIM which differentiates both MAIL ENABLED and MAIL BOX Enabled user.
When i see the tabs of the MAIL ENABLED USER in the exchange i'm able to see just alias fields in one of the tabs but the MAIL BOX ENABLED user is having even the mail store field.
When i googled for the difference between MAIL BOX enabled and MAIL Enabled i could see like the user created directly with exchange is getting MAIL BOX enabled and any third party user or different domain user wont get this MAIL BOX enabled instead he will be MAIL ENABLED
I want the user to be MAIL BOX enabled when he is provisioned from OIM.
Please update if any one has come across this type of issue.

hi Rajiv,
thanks...
i have run the AD Organisation lookup Recon and have given the following parameters
Lookup Search Filter:     (|(objectclass=OrganizationalUnit)(objectclass=container))
Search Base:     DC=<domain_name2>,DC=<domain_name1>,DC=com
Recon Type:     Update
IT Resource Name:     ADITResource
AttrName For Decode Value In Lookup:     distinguishedName
AttrName For Code Value In Lookup:     distinguishedName
Lookup Code Name:     Lookup.ADReconciliation.Organization
Configuration Lookup:     Lookup.AD.Configuration
But still theres no value for Organisation Lookup in process form for provisioning the user. what could be the cause for the same?
Also i was testing if the connector is installed properly by using the testing utility. i used the following command to run it : . runADtest.sh 2
But i got the following error.
Exception in thread "Main Thread" java.lang.NoClassDefFoundError: com/thortech/xl/integration/ActiveDirectory/test/ADTestClient
Caused by: java.lang.ClassNotFoundException: com.thortech.xl.integration.ActiveDirectory.test.ADTestClient
at java.net.URLClassLoader$1.run(URLClassLoader.java:202)
at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
Could not find the main class: com.thortech.xl.integration.ActiveDirectory.test.ADTestClient. Program will exit.
Please help me for this also.
Edited by: 827805 on Feb 9, 2011 4:11 AM

Provision a multivalued attribute from OIM to OID

Hi,
I have a requirement to provision a new multivalued attribute from OIM to OID.
Steps followed:
Created a child form
Attached child form to the OID Parent form
Created a process task adapter.
Created a task in process definition and the attached the adapter
Adapter code.
public String addChildData(tcDataProvider ioDatabase, long procInstKey, long childDefKey){
          try{
               tcFormInstanceOperationsIntf formInstOper = (tcFormInstanceOperationsIntf)tcUtilityFactory.getUtility(ioDatabase, "Thor.API.Operations.tcFormInstanceOperationsIntf");
               HashMap testval = new HashMap();
               testval.put("UD_TESTCHIL_TESTGROUP","abcd2134");
               System.out.println("testval..."+testval);
               long formreturn = formInstOper.addProcessFormChildData(childDefKey,procInstKey,testval);
               System.out.println("formreturn" +formreturn);
          catch(Exception e){
               System.out.println("exce" +e);
          return "Success";
After attaching while provisioning I am seeing both parent and child forms. I have provided the values and its successfully provisioning.
But how I can provision the new OID multivalued attribute. We have to do any setting in the lookup?
Regards,
KK

Just create your new adapter for add and delete from this new child table just like the other triggered tasks. If it's a multi value on the user profile, use the adapter for Add Multi Value Attribute that comes with the connector. In the property name, put in your multi value attribute name, and map the value from the child table.
-Kevin

User Provisioning not working from OIM to OID

Hi All,
I am trying to create new user from OIM to OID, am getting following error message on console...
Response: INVALID_NAMING_ERROR
Response Description: Naming exception encountered
Notes:
In logs files while creation am getting following message....
INFO,09 Oct 2011 23:37:50,253,[XELLERATE.WEBAPP],retrieving object from cache key = xlCustomClienten_US
INFO,09 Oct 2011 23:37:50,253,[XELLERATE.WEBAPP],Key not found in Custom Resource Bundle: newKey = global.udf.USR_UDF_ALIAS
INFO,09 Oct 2011 23:37:50,253,[XELLERATE.WEBAPP],Writing Custom default resource bundle object to cache : Key = xlConnectorResourceBundleen_US
INFO,09 Oct 2011 23:37:50,254,[XELLERATE.WEBAPP],retrieving object from cache key = xlCustomClienten_US
INFO,09 Oct 2011 23:37:50,254,[XELLERATE.WEBAPP],Key not found in Custom Resource Bundle: newKey = global.udf.USR_UDF_CUSTID
INFO,09 Oct 2011 23:37:50,254,[XELLERATE.WEBAPP],Writing Custom default resource bundle object to cache : Key = xlConnectorResourceBundleen_US
INFO,09 Oct 2011 23:37:50,254,[XELLERATE.WEBAPP],retrieving object from cache key = xlCustomClienten_US
INFO,09 Oct 2011 23:37:50,254,[XELLERATE.WEBAPP],Key not found in Custom Resource Bundle: newKey = global.udf.USR_UDF_IVRPIN
INFO,09 Oct 2011 23:37:50,254,[XELLERATE.WEBAPP],Writing Custom default resource bundle object to cache : Key = xlConnectorResourceBundleen_US
INFO,09 Oct 2011 23:37:50,255,[XELLERATE.WEBAPP],retrieving object from cache key = xlCustomClienten_US
INFO,09 Oct 2011 23:37:50,255,[XELLERATE.WEBAPP],Key not found in Custom Resource Bundle: newKey = global.udf.USR_UDF_USERAPPSTATUS
INFO,09 Oct 2011 23:37:50,255,[XELLERATE.WEBAPP],Writing Custom default resource bundle object to cache : Key = xlConnectorResourceBundleen_US
INFO,09 Oct 2011 23:37:50,255,[XELLERATE.WEBAPP],retrieving object from cache key = xlCustomClienten_US
INFO,09 Oct 2011 23:37:50,255,[XELLERATE.WEBAPP],Key not found in Custom Resource Bundle: newKey = global.udf.USR_UDF_CREATEDDATE
INFO,09 Oct 2011 23:37:50,255,[XELLERATE.WEBAPP],Writing Custom default resource bundle object to cache : Key = xlConnectorResourceBundleen_US
INFO,09 Oct 2011 23:37:50,256,[XELLERATE.WEBAPP],retrieving object from cache key = xlCustomClienten_US
INFO,09 Oct 2011 23:37:50,256,[XELLERATE.WEBAPP],Key not found in Custom Resource Bundle: newKey = global.udf.USR_UDF_OAMLOCKTIME
INFO,09 Oct 2011 23:37:50,256,[XELLERATE.WEBAPP],Writing Custom default resource bundle object to cache : Key = xlConnectorResourceBundleen_US
INFO,09 Oct 2011 23:37:50,256,[XELLERATE.WEBAPP],retrieving object from cache key = xlCustomClienten_US
INFO,09 Oct 2011 23:37:50,256,[XELLERATE.WEBAPP],Key not found in Custom Resource Bundle: newKey = global.udf.USR_UDF_PASSWORD_EXPIRE
INFO,09 Oct 2011 23:37:50,257,[XELLERATE.WEBAPP],Writing Custom default resource bundle object to cache : Key = xlConnectorResourceBundleen_US
Please help me on this....
Thanks in Advance
YJR

That is not the log output of the OID connector. Check the connector docs, and enable the OID logging only. The INVALID_NAMING_ERROR means something is wrong with the naming of your object. Most likely there is an LDAP error output somewhere, but all the output you provided is info level, nothing wrong with it.
-Kevin

OIM to OID direct provisioning to a particular OU

Hello - Can some one suggest if provisioning to a partciluar ou in OID directory is possible from OIM using configuration as oppose to coding?
let say, my DIT looks like this:
dc=abc,dc=com
o=Org-A
-     ou=unit1A
-     ou=unit2A
-     ou=unit10A
o=Org-B
-     ou=unit1B
-     ou=unit2B
-     ou=unit10B
I can provision user account to OID fine OTTB i.e. using the default connector configuration and adding them to cn=users container.
But now if I want to add user to a particular ou in OID then what is required (high level steps would be great).
Just to clarify, I want to pick the ou during user creation e.g. if I want i should be able to pick ou=unit1A or ou=unit1B.
Thank you.
Edited by: user9231583 on 09-Mar-2010 21:08
Just wanted to update the question, after testing few fields I can provision user account to either o=Org-A level or if I can create a new ou under the top node dc=abc,dc=com then I can provision the user but I am not sure what config changes are required to add user under the unit1a or unit2a? Any suggestions please.

Thanks everyone who replied but I guess I have not explained it clearly, The question is how to provision under an ou=Unit1A that is under o=Org-A.
Here is some information that I have configured that might help to point me to the right direction. I would appreciate any help. hopefully it make sense.
The process form contain Container DN field. This field is defined as LookupField in the process form.
The lookup table from which the Container DN gets the value is Lookup.OID.Organization
I have populated my Lookup.OID.Organization with the Organization units that I have created in OID; from my above example it contains values like
Code key Decode
ou=Unit1A unit1A
ou=Unit2A unit2A
ou=Unit1B unit1B
etc
The values for ldapOrgDNPrefix and ldapOrgUnitObjectClass in Lookup.OID.configuration is set as follows:
ldapOrgDNPrefix=ou
ldapOrgUnitObjectClass=organizationalUnit
When I try to provision user to these ou (unit1A or unit1B), i get "no such object" return error which makes sense since OIM is trying to add this user under ou=unit1A,dc=abc,dc=com which does not exist in OID. It should be ou=unit1A,o=org-A,dc=abc,dc=com but I am not sure how to tell that to OIM.
Just to you know:
I can provision either at the o=Org-A level by changing the values in Lookup.OID.configuration lookup table to ldapOrgDNPrefix=o and ldapOrgUnitObjectClass=organization
OR
If i create an organizational unit ou=Test under the top node i.e. dc=abc,dc=com and then change the values in Lookup.OID.configuration lookup table to ldapOrgDNPrefix=ou and ldapOrgUnitObjectClass=organizationalUnit then I can provision to ou=Test.dc=abc,dc=com
but I am not able to provision under ou=unit1A if it is under o=Org-A.
Thank you.

OID manual provisioning from OIM

Similar Messages

Maybe you are looking for