OIM 11g: Can't Map (De)Provisioning Dates in Custom Trusted Recon

I'm developing a custom trusted recon to reconcile users from a legacy IdM system.
The issue I'm running into is that if I map a recon attribute to (De)provisioned/(De)provisioning date in the Reconciliation Mapping, when I try to "Create Reconciliation Profile" it fails saying: "Xellerate User: Invalid Attributes [Deprovisioning Date, Provisioning Date, Deprovisioned Date, Provisioned Date]".
I'm not sure why it's rejecting these, but is there a workaround? Updating the reconciliation profile XML manually perhaps?

Have you added oimclient.jar in the CLASSPATH of Eclipse ?
http://download.oracle.com/docs/cd/E14571_01/apirefs.1111/e17334/toc.htm

Similar Messages

OIM 11g r2 ps2. Setting end date for role requests

Hi,
reviewing the new features document on oim 11g r2 ps2: http://www.oracle.com/technetwork/middleware/id-mgmt/overview/oim-11gr2-whats-new-1709505.pdf
it says "For example, in a request that involves multiple entitlements, the requester might be required to specify the start date and end date for each of the entitlements requested. OIM enables requesters to provide such information during request that can be carried all the way to approval and provisioning processes. OIM also provides an out-of-the-box scheduled task for entitlement grant and revoke based on the start and end dates specified"
I've been searching on the documentation and doing tests on a virtual environment before a poc to a customer and can not find how to use that feature.
Is it an OotB feature or it needs codification and extra configuration?
Any tips on how to achieve this?
Thanks in advance!

Doc links:
http://docs.oracle.com/cd/E40329_01/admin.1112/e27149/appinstance.htm#OMADM5296
http://docs.oracle.com/cd/E40329_01/admin.1112/e27149/scheduler.htm#OMADM743, tasks "Sunrise of Accounts and entitlements" and "Sunset of Accounts and entitlements".
Oracle Support Document 1951854.1 (Sunrise And Sunset Of Entitlements) can be found at: https://support.oracle.com/epmos/faces/DocumentDisplay?id=1951854.1
Joost

ADF 11g can not select and copy data from cell of readonly table in IE

hi,
In ADF 11g, when render view object as readonly table with Single RowsSelection, using IE browser can not select and copy data from the cell, but it work in firefox.
is it a bug?
Edited by: kent2066 on 2009-5-18 上午8:46

Hi Timo,
Sorry forgot to mention versions.
We are using 11.1.1.7 and IE 9.
I tried in Google but could not get the solution.
Kindly let me know solution for this.
PavanKumar

Oim 11g can not install connector

Hi All,
i have installed oim 11G.
trying to install the dbum connector,
according to the manual, I have copied all the installation files and directories to OIM_HOME/server/ConnectorDefaultDirectory
but when I press the install connector on the oim admin console, the window opens ...but i can not see any connector in the LOV ,
meaning i can not install the connector, even tried bouncing the WL and OIM , not much help.
does any of you know of some error alike? / solution ?
(with v9 of oim I did nit have any problem with the same) .
Cheers
S.

Off-course it works, make sure the folder structure is correct.
*/ConnectorDefaultDirectory/<Connector-Installation-Media-Parent-Folder>/*
Now all the connector folder should be directly in there like configuration, lib etc

OIM 11g can't get default reports working

Hello,
OIM 11g and BI publisher 11g here. They are installed on different machines, so they do not share anything at all.
I want to make the standard OIM reports work into BI Publisher, so i installed BI publisher (alone), created user xelsysadm (given role XMLP_ADMIN ) and copied the reports to the Publisher server.
first question: where am i required to put them? the path the developers guide says does not exist, and if i create it, BI Publisher simply ignores it. So i put the whole stuff in user_projects/domains/bifoundation_domain/config/bipublisher/repository/Reports/OIMreports/ which appears to be the same folder where BI sample reports are.
Now BI Publisher recognizes the folder structure, but the folders are empty and don't show the reports in the Publisher Catalog.
second question: i am having a really hard time understanding which logfile should i look at to track BI Publisher application errors. I guess it's user_projects/domains/bifoundation_domain/servers/bi_server1/logs/bipublisher/bipublisher.log but i would like having it confirmed
I am trying to follow the OIM 11g developers guide and the BI guides, but it is not really helpful, any advice would be really appreciated
thx in advance
Alex

solved, look here
Re: OIM 11g and BI Publisher Reports

OIM Event Handler Triggers on Manual Entry but not for Trusted Recons

Hi,
I'm having some trouble getting my plugin to trigger upon a reconciliation. I've developed a plugin to modify some Xellerate User attributes on the OIM Profile.
- I've created a custom package with some java classes that retrieve attributes being passed in, manipulates the data, and returns the data through an EventResult
- I have system.out commands in my BulkEventResult function to see when this function is triggered
- My Plugin.xml calls this java class, which has a plugin point of oracle.iam.platform.kernel.spi.EventHandler
- I've uploaded the plugin (development) by putting the plugin.zip in the /server/plugin folder
- I've created an event handler that calls the plugin class upon an operation = "MODIFY". It also contains entity-type="User", stage="postprocess", order="FIRST", sync="TRUE"
- I've imported this using the weblogic import utility, setting OIMMetadata, and loaded the file to /custom/iam-data/EventHandler.xml
Upon testing, I am able to see my system.out debug statements in the logs, and can see the data actually changing when I am logged into OIM making changes directly on the system.
I am unable to see any of this come through when I run a trusted OID reconciliation against the same user, manipulating the same fields.
From what I've read, all I needed to do was put the code in the BulkEventResult function. However, none of my debug statements are being triggered, causing me to believe that this event handler is not even being triggered upon a trusted recon.
Does anyone have any ideas why this is, or if I have a configuration somewhere that is incorrect?
Any help is very welcome!

Everyone,
Thanks for your help.
I found out the root of my issue: it was that my OPERATION was set to "MODIFY" in my EventHandler XML. It should have been "ANY". After I did this, it started to work.
As for registering plug-ins, you can actually drop the plugin zip file on the Oracle_IDM1/server/plugin directory for testing purposes, then re-import the EventHandler.XML you created.
I also found a few strange behaviors-
- If the order was too large (for example, 1000), it wouldn't trigger until the second time I updated it. I lowered the number to 50 and it kicked off every time.
- There is no purge cache needed when I re-imported the xml file after uploading the .jar again

OIM 11g r2 disabling multiple account provisioning

Hello all,
I have a question, in oim 10g and 11g, on resource object there was a "allow multiple" checkbox.
So you could configure your resource if you want to prevent it from multiple provisioning.
But in 11gr2 I cannot see that checkbox.
How can i configure my resource as it is going to disable multiple account provisioning?

Is there anyone who can help?

OIM 11g R2 - Issue while removing child data

Hi,
We are facing the following issue when we try to submit a "Modify Account" request by removing all the child form data.The issue is there only if the child form contains attributes which are of type integer ,date etc (non-string).
Steps followed
==========
1.Create a Parent process form with an attribute ( For e.g Firstname)
2.Create a Child process form with 3 attributes ( EmpID --> Integer , Date of Joining --> Date, Address --> String )
3.Created a resource object
4.Created a process definition and attached this resource object and parent form
5.Created some process tasks (Create user,Child Data insert etc) and attached tcCompleteTask
6.Provision this resource object to an user with one entry for child data.Since tcCompleteTask is attached,the status of the account now is "Provisioned"
7.Click on "Modify Account" button and remove the child entry (so that there is no child entry presents ) and click on submit
8.Getting an error in the UI saying "IAM-2050061:Type mismatch for the attribute EmpID.The type passed is string but the corresponding type in dataset is integer".
Any idea onhow to solve this issue?.Thanks.

This could be a bug. Try raising an SR. Also more logs if you can.

OIM 11g R2 PS1 Installation - DBUM provisioning issue

Hi,
I am facing issue in DBUM connector provisioning. I have installed connector server and connector on OIM side successfully.
BUt, when i try to check for Direct Provisioning i get exception log as :
Thread Id: 20 Time: 2013-06-07 18:18:30.886 Class: org.identityconnectors.framework.server.impl.ConnectionListener Method: processOperationRequest Level: ERROR Message: org.identityconnectors.framework.common.objects.AttributeInfoBuilder.buildCurrentAttributes(Ljava/lang/String;)Lorg/identityconnectors/framework/common/objects/AttributeInfo;
java.lang.NoSuchMethodError: org.identityconnectors.framework.common.objects.AttributeInfoBuilder.buildCurrentAttributes(Ljava/lang/String;)Lorg/identityconnectors/framework/common/objects/AttributeInfo;
at org.identityconnectors.dbum.DBSchemaOp.schema(DBSchemaOp.java:80)
at org.identityconnectors.dbum.DBUMConnector.schema(DBUMConnector.java:310)
at org.identityconnectors.framework.impl.api.local.operations.SchemaImpl.schema(SchemaImpl.java:45)
at sun.reflect.GeneratedMethodAccessor25.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.identityconnectors.framework.impl.api.local.operations.ConnectorAPIOperationRunnerProxy.invoke(ConnectorAPIOperationRunnerProxy.java:93)
at $Proxy5.schema(Unknown Source)
at sun.reflect.GeneratedMethodAccessor25.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.identityconnectors.framework.impl.api.local.operations.ThreadClassLoaderManagerProxy.invoke(ThreadClassLoaderManagerProxy.java:107)
at $Proxy5.schema(Unknown Source)
at sun.reflect.GeneratedMethodAccessor25.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.identityconnectors.framework.impl.api.DelegatingTimeoutProxy.invoke(DelegatingTimeoutProxy.java:107)
at $Proxy5.schema(Unknown Source)
at sun.reflect.GeneratedMethodAccessor25.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.identityconnectors.framework.impl.api.LoggingProxy.invoke(LoggingProxy.java:76)
at $Proxy5.schema(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.identityconnectors.framework.server.impl.ConnectionProcessor.processOperationRequest(ConnectionProcessor.java:287)
at org.identityconnectors.framework.server.impl.ConnectionProcessor.processRequest(ConnectionProcessor.java:191)
at org.identityconnectors.framework.server.impl.ConnectionProcessor.run(ConnectionProcessor.java:121)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
at java.lang.Thread.run(Thread.java:662)
Please provide input to resolve this issue.
Thanks,
RPB

If anyone is faced this issue...please provide helpful pointer on this
Is it from OIM side or problem with Connector Server installed on DB side ?
Thanks,
RPB

OIM 11g: send direct link to provisioning tasks in email notification

Hi everyone!
What do I want to achieve: I want to send email notification to admins in case if some task in OIM has finished with errors and this notification must have direct link to this task.
To find direct link to task detail page I used document ID 748447.1. I found that this link must be formed in next way:
http://ip.address:port/xlWebApp/OpenTasks.do?method=loadTaskDetails&entityKey=<TaskID>
To create this link I must insert ID of the task to the end of the string.
Next I created email template via design console and attached it in notification tab of the task to status ‘R’.
The problem is next: during creation email template there are any variables that holds task ID.
How can I obtain ID of task in an email template?

Thanks for the quick response!
I use a standard mechanism for sending notifications - via email template. This is a standard mechanism has a number of variables that are dynamically calculated at the time of posting. Among these available variables do not have the required me taskid.
Is there any mechanism which would give an opportunity to expand the list of dynamically calculated variables in a way that I figured taskid?
Or what do you mean by the phrase "+have to fetch it from the database+"?
I do not know how to connect the logic of its own calculation of the required variables in the template notifications.

OIM 11g Self Registration - authenticated against external data source

Dear All,
Out of the box server registration is unauthenticated. How to make it authenticated?
What configuration should I perform?
Thank you for your help
Kind Regards
Maria Adair
Edited by: Maria on Oct 25, 2010 9:26 AM

Hi,
I am assuming in clustered environment you are having two instances running.
It must be an issue with a single server,,because the problem is intermittent.
To see which server is causing problem....just perform the following steps:
1) Stop server1 and keep running server2..and fire new registration request...
2) stop server 2..and keep running server1.....and fire new registration request.
Using above, atleast you can see which server is causing the problem...
Regards,
J
Edited by: J_IDM on Mar 21, 2011 10:52 PM

Developping custom trusted recon connector with ICF - 11g Release 2

Hi all,
We need to develop a custom connector for trusted source reconciliation (trusted source is HR system). We need to implement custom logging mechanizm (catch the comming data from HR and log it to db). Also in our HR system user deletion is not flaged but directly the record is deleted from the db, can we handle this with ICF? I mean can we search both HR and IDM for all records on the connector side? Any guide is strongly appreciated...
Thanks in advance..
Aliye

Thank you for your response Gyanprakash...
From what I understand at all, when I develop custom connector bundle using ICF (implementig the interfaces for Connector and ConnectorConfiguration) :
The implemented methods
SchemaOp, CreateOp, DeleteOp, UpdateOp, SearchOp<Map<String, String>>, GetApiOp, is all for the target system, I mean our searches are always on the target system(in my case HR system), if I want to make search for users on IDM(to get all users on IDM) we must use OIM API, am I right?
Thank you for your help
BR

OIM 11g Modify User Profile for Updating End Date

Hi Gurus!
We have an OIM implementation where users may request the creation of other users by means of a Create User request template. In this template we set the End Date to be 3 months after the request date.
In order for the requester to extend the period of a user's OIM user account (along with its provisioned resources) we customized a Modify User Profile by displaying the End Date field and automatically populate it again to 3 months after the request date. Also we developed a custom event handler to enable the user when it is disabled and the End Date is updated to a future date.
This Modify User Profile is working great when the user is still enabled (the End Date is still in the future), however, when the End Date has passed (and the user is Disabled) the requester is not able to see the user when selecting the Modify User Profile request template.
Is there a way to allow requesters to also see disabled users in the Modify User Profile request template?
Thank you in advance.
Regards,

Hi Kevin,
thanks for your reply!
But, in this case, when the user is already disabled due to his End Date, how can a requester, through the Self Service TAB, enable it?
The Enable User request template does not work since when trying to enable the user, OIM sees the End Date is already passed and the DataSet validation throws an exception.
The only way I saw was providing a Modify User Profile Request template to change the End Date and developing a custom event handler to enable the user upon the extension of the End Date...
How can, in this situation, a requester enable the user and extend its End Date?
Thank you!
Regards,

OIM 11g R2 Group Membership

Hi All,
In OIM 11g R2, when i try to manually add a user to a group (custom or OOTB), i do not see the "Assign" button active and with the absence of the assign button, i could not assign a new user to the group. But, I can see that the Create Rule option is active.
Does this mean that the group membership in OIM 11g can only happen through Group membership rule satisfaction?
Please help.
Thanks,
Srini

You can manually add an user to a role in OIM 11gR2. Open identity console --> Click on Roles--> Search
You will get all the roles listed. Select the role to which you want to add a member. Assign tab will be visible under the Members panel layout in the bottom frame.
When you click on assign the request catalog opens with the selected target user and the role. You can change the target user or add another target user.
Then click on submit.
If this process is done through sysadmin login then directly the member is assigned to the role
Else it will create a request and after approval is completed the member will be assigned to the role.

Mapping a parameter to the form field (OIM 11g)

Hello, people!
How can I get an information from a created form field?
In more details: I have to assign a manual creating of a resource to a concrete group of users. So I made a form that contains a field named "Admin Group", made a process for this form that contains a manual task "manual create user", in assignment tab of this task I'm using a task assignment adapter. This adapter has one input parameter - Group name using what I want to find a group key. So the problem is in mapping this parameter. I expected to find my "Admin Group" field and map to it, but i didn't find that. How can I get information from this field?
Regards
Anton Litvin

I think you have created Object Form. Are you seeing Object Data while mapping.
Create one process form. Populate Process Form Field using Data Flow under Process Definition.
While mapping you'll see Process data to map with your Admin Group.
Sorry don't know how they have handled in OIM 11g... Above is for 10g.

OIM 11g: Can't Map (De)Provisioning Dates in Custom Trusted Recon

Similar Messages

Maybe you are looking for