[OIM 11g] How can a pwd changed in the AD be sent to OIM User account?

Hi Gurus,
I am working in a PoC. I have AD and AD Pwd Sync connectors, and DBAT connector installed.
IHAC who expected to see the following behavior regarding user password management:
1) When user change password in the OIM account, this password should be propagated for all the targets (AD and DB table).
Ok...I got the behavior.
2) When user change password in the AD account, this password should be propagated for OIM user account (consequently this password will be propagated for all the target)..
How can I do to achieve that?
With AD password sync I am able to just sync the password between Target password and Resource form password.
Note: AD is not the Trusted Source. The AD only should be trusted source for password.
I would appreciated any help.
Best regards.
Edited by: user12295533 on 01/09/2011 07:05

Hi Kevin, Thanks for your reply.
By the AD Pwd Sync documentation (2.3.2 Configuring the IT Resource for the Target System section), I understood that the password changed into target system (AD account) would be changed only in the process form of the resource (ADUser), and it wouldn't be propagated to OIM user account (password attribute).
When the password is changed on Microsoft Active Directory:
The updated password is detected by the connector and sent to Oracle Identity Manager.
On Oracle Identity Manager, the password is compared with the current password of the Active Directory resource. Because both passwords are different, the password of the Microsoft Active resource on Oracle Identity Manager is updated.
The updated password is detected by the user management connector and sent to Microsoft Active Directory.
The password of the Microsoft Active Directory is modified, even though this is the same password that was set by the user.
The password of the account is detected by the password synchronization connector and sent to Oracle Identity Manager.
On Oracle Identity Manager, the password is compared with the current password of the Active Directory resource. Because both passwords are the same, no further action is taken.
If password history policy is set on Oracle Identity Manager, then an exception for the SPML request (sent by the password synchronization connector) is encountered. You can ignore this exception.
Are you informing that the password changed in the AD should be propagated to OIM user account (password field)? Sorry, I am asking because it is not clear for me and I need to be sure of that. Because in this case then I need to check the configuration and try find any error.
Thanks again Kevin.

Similar Messages

  • Since 2012 I have Photoshop Elements always worked without any problem, however now the language is suddenly German how can this be changed, removed the program and re-installed, not working. Program is downloaded and updated via the apple app store?

    Since 2012 I have Photoshop Elements always worked without any problem, however now the language is suddenly German how can this be changed, removed the program and re-installed, not working. Program is downloaded and updated via the apple app store?

    I've done some research on the SQLite database. Whenever Aperture hangs up (like during auto-stack or opening the filter hud) there are thousands of SQLite queries happening. These SQLite queries cause massive file I/O because the database is stored on the disk as 1kb pages. However, the OS is caching the database file; mine's only 12MB. I'm trying to track down some performance numbers for SQLite on osx but having trouble.
    It's starting to look like most of the speed problems are in the libraries that Aperture uses instead of the actual Aperture code. Of course, that doesn't completely let the developers off the hook since they choose to use them in the first place.
    Oh, and if anyone is curious, the database is completely open to queries using the command line sqlite3 tool. Here's the language reference http://www.sqlite.org/lang.html
    Hmm, just found this. Looks like someone else has been playing around in the db http://www.majid.info/mylos/stories/2005/12/01/apertureInternals.html
    Dual 1.8 G5   Mac OS X (10.4.3)   1GB RAM, Sony Artisan Monitor, Sony HC-1 HD Camera

  • How can I move/copy scanned photos that were sent to my gmail account? I have not been able to move or copy to iPhoto.

    How can I move/copy scanned photos that were sent to my gmail account? I have not been able to move or copy to iPhoto.

    Hello SusieMacBook,
    Welcome to the Apple Support Communities! 
    You can definitely get these photos into iPhoto if they are the correct file type (JPEG, GIF, TIFF, and PNG).  The way you import the photo attachments depends on where you check your e-mail.  The following article is for iPhoto 11 (but should work for previous versions as well).  It outlines how to import photos from Mac Mail, other e-mail applications, and web browsers, so just look at the section that applies to you. 
    iPhoto '11: Import a photo sent in email
    http://support.apple.com/kb/PH2354
    I hope this helps! 
    Best,
    Sheila M.

  • How can i make changes from the user in TabBar with more button persistent?  I´m using the Storyboard.

    I have build an App with more than 5 Tabs, the user can change the order of the items, but this is not persitent.
    How can i fix this on iOS 7 and i´m using the Storyboard.

    Can I do it afterwards ?
    Yes. In addition to what Bee Jay said, here are some other tips.
    First record a pattern that's a few bars long, and don't tweak any knobs while you're doing this. Set a Cycle Range, because we want to play this pattern over and over again. Press A to make Automation visible (although there isn't any yet).
    Find the channel strip for this track, either in the Inspector or in the Mixer window. Just above the meter, look for the button that says "Off." Hold down this button and a menu will appear. Select "Touch." Press Play. As the pattern plays the first time, pick a knob in the ABL2 window, and mess with that knob. At the end of the pattern, let go of the knob, and then watch what the knob does as the pattern plays again. Then as the pattern plays some more, mess with another knob. You'll notice that curves are being drawn in the Arrange window as you mess with the knobs.
    This should help get you started.

  • How can I stop iTunes from trying to start in another open user account?

    When I run iTunes, it often tries to open in another open User account, causing distracting Windows warning tones.  How can I stop it from trying to automatically open in the other account?

    Close iTunes before switching profiles or disable fast user switching.
    tt2

  • How can I use iweb 1.1.2 for more than one user account on my macbook?

    I wonder if someone can guide me or point me to a previous answer on this, since I haven't found one. I'm simply trying to use iweb 1.1.2 on two user accounts (both labled as administrators) on our macbook. The program functions fine on one account, but when I switch over to another user account on the computer iweb will open, but does not let me start a new page, save, etc.
    Thanks much for any response.

    Welcome to the discussions. If iWeb's menus are greyed out, the following trick has worked for some:
    In the user account which does not let you start a new page, save, etc. — Quit iWeb. Start iPhoto. Select a couple of photos, click on the iWeb icon at lower right and choose Photo Page. iWeb will open up and invite you to choose a template for your new Photos page. Choose any template so that the page is created and then delete that newly created page.
    ...Now perhaps things are no longer greyed out in iWeb.

  • How can I make changes in the informations permanent?

    Hi all,
    I spent hours updating my songs with accurate informations only to find out as soon iTunes plays them they will be reset to the initial informations and the whole work was for naught.
    Please advice.

    I'm having a similar issue; however it appears to only affect midi files. I can rename them in itunes or finder (either directly or with the information window); the results are the same: The data (name, artist genre etc.) appears to be ok until the file is played.
    I am using iTunes 7.6.1 on the mac.
    Mumpitz, are you having this issue with mp3's as well?
    Message was edited by: Travmac63 -- added iTunes version ID and OS

  • How can I move notes (in the notes app) from "On My iPhone" account to my "iCloud" account so that they will sync with iCloud and with my computer (and not 1 note at a time either - all at once)?

    I used to be able to use iTunes to sync notes between my iPhone and my Mac. With iOS-7 and OS-X 10.8, that is no longer possible.  The notes were created on my iPhone in the "On My iPhone" account.   My understanding is that in order to synch them, I need to move them to my iCloud account on the iPhone (I'd be glad to hear that this isn't true, ...).
    So how do I get my notes (several hundred of them) from my On My iPhone account to my iCloud account?
    alternately, what other means could I use to synch my notes between my iPhone and my Mac, given that they reside i

    I am having the same issue! Please let me know if you find any info anywhere else.

  • How can I do change File Character when I export application (4.2.1.00.08)

    Hello,
    Please, help me!
    I need to change "File Character" when I export application with Apex 4.2.1.00.08 version, but this option, is not possible. The ComboBox already select with
    "Unicode UTF-8]', but I need "ISO-8859-1 - Europa Ocidental", how can I do change it?
    Thanks

    Please register for a "real" user account rather than the anonymous user7266483.
    You can not change it on the export...this is simply set to whatever is in effect in the DB.
    However, it is totally unnecessary to change it on export. If the database into which you need to import the exported application is "ISO-8859-1 - Europa Ocidental", at the time you begin to import, it will default to "ISO-8859-1 - Europa Ocidental". You need to change this to the character set under which it was exported. In this case, it was "Unicode UTF-8".
    It does not matter that you export and import in the same character set. It only matters that you correctly set the import to match how it was exported.
    -Joe

  • How can I see changes in table with insertrow();postchanges()without commit

    Hi friends;
    I use jdeveloper 10.1.3.1 with jheadstart 10.1.3.1.
    I create two view object.In the first page I create table with one view object.
    In the second page I create table (with tableselectmany) with other view.
    I select many rows in second page and in the managed bean,
    I insert selectted rows atributes to first pages tables attributes.
    I use this code.
    public String commandbuttonaction(){
    CoreTable table = this.getTable1();
    Set rowSet = table.getSelectionState().getKeySet();
    Iterator rowSetIter = rowSet.iterator();
    BindingContainer bindings = getBindings();
    DCIteratorBinding pr_dcib = (DCIteratorBinding)
    bindings.get("DeptIterator");
    int i=206;
    while (rowSetIter.hasNext()){
    Key key = (Key) rowSetIter.next();
    pr_dcib.setCurrentRowWithKey(key.toStringFormat(true));
    RowImpl prRow = (RowImpl) pr_dcib.getCurrentRow();
    String AM="model.AppModule";
    String CF="AppModuleLocal";
    ApplicationModule empSvc = Configuration.createRootApplicationModule(AM, CF);
    ViewObject emps = empSvc.findViewObject("EmpsView1");
    Row newEmp = emps.createRow();
    newEmp.setAttribute("Manager",new Number(1));
    newEmp.setAttribute("Department",new Number(1));
    newEmp.setAttribute("Depno",new Number(3));
    emps.insertRow(newEmp);
    try {
    newEmp.validate();
    catch (Exception ex) {
    System.out.println("validate catch");
    try {
    empSvc.getTransaction().postChanges();
    catch (Exception ex) {
    System.out.println("post catch");
    Configuration.releaseRootApplicationModule(empSvc,true);
    i=i+1;
    In this code I only postchanges() in first view and dont want to commit.
    But I cant see changes row in the page .If I press save I see transaction completed succesfully message.
    But in database not insertted any rows.
    If I write commit() after postchanges() code I see rows in the table .But I dont want to commit.Only post
    my changes and if necessary I press save button in page.
    How can I see changes in the page without commit???Thanks for all....

    You should NEVER use statements like this in managed beans:
    ApplicationModule empSvc = Configuration.createRootApplicationModule(AM, CF);
    This will create a separate application module instance, not shared by the the web pages. That's why you do not see the changes.
    Instead, you can use the following code:
    ApplicationModule am = (ApplicationModule)JsfUtils.getExpressionValue("#{data.MyAppModuleDataControl.dataProvider}");
    where MyAppModuleDataControl shoud be replaced with the name of your am data control.
    Steven Davelaar,
    JHeadstart Team.

  • How can I add/change art work to albums where the art work isn't available at iTunes?

    How can I add/change art work to albums where the art work isn't available at iTunes?

    Go to google and search for the artwork.  When you find it, save it to your computer.  Right click the album and select get info.  Drag the image you saved to the empty box for album art.

  • I have a problem with mail autofilling info email addresses. Emails sent to me the from looks like this: Holiday in the United States email address . I have no idea what this Holiday in the United States is...How can I fix/change to my name?

    I have an irritating problem with mail autofilling info in email addresses. Emails sent to me the from looks like this: Holiday in the United States <my email address>. I have no idea what this Holiday in the United States is or how it got to be there...How can I fix/change to my name?
    I fixed the To: autofilling incorrectly by deleting my email address from the Previous Recipients List, but is there a way to stop that from coming up on emails that I receive?

    Have you checked your Mac address book? If your email is saved somewhere in your address book with the name "Holidays in the United States" it might be adding the name automatically in Mac Mail.
    Alternatively, try this:
    Delete an Email Address from Auto-Complete in Mac OS X Mail
    To remove an email address from the auto-complete list in Mac OS X Mail:
    Start typing the recipient's address or name in a new message.
    Select the desired address from the auto-complete list as if you'd compose an email to them.
    Click the small down arrow in the recipient.
    Select Remove from Previous Recipients List from the menu.
    You can also search for the unwanted address directly in the previous recipients list:
    Select Window | Previous Recipients from the menu in Mac OS X Mail.
    Highlight the address you want to remove.You can highlight multiple addresses by holding down the Command key.
    Click Remove from List.
    Source: About.com

  • I downloaded Icloud somehow I changed my itunes account information and cannot get back to my original account that had a redeemed balance on it  how can I get back to the original account?

    I downloaded Icloud somehow I changed my itunes account information and cannot get back to my original account that had a redeemed balance on it  how can I get back to the original account?

    Buy the songs that your friend put on the iPod that you liked. They had no right to give you the copyrighted music when they sold you the device.
    tt2

  • How can I manually change the height of the "Type ...

    Hi all
    Just got automatically installed the latest 6.22 version of skype few minutes ago and I got a few questions. 
    First and foremost, how can I MANUALLY change the height of the textbox, where I type the messages. I would like to make it larger, like in the previous versions of skype. I don't want to move my mouse cursor through the entire monitor to reach this tiny textbox.
    And second, why you guys are trying constanly to ruin something that is working perfectly ? Going to revert to the previous version until you fix all these nuisances.
    Regards

    There is no way to do this, it is designed to be strictly landscape with keyboard, portrait without - not the best thought-out phone on the market, mainly geared towards compulsive texters and e-mailers.
    There's no way to know whetherNokia will change this with any future updates, perhaps you should make the recommendation to them directly using the 'contact us' link.

  • I have changed the email signature on my iPhone, when composing a new email the signature is there, however when I am replying to an email it is not, how can I make sure that the signature is at the end of every email I send?

    I have changed the email signature on my iPhone, when composing a new email the signature is there, however when I am replying to an email it is not, how can I make sure that the signature is at the end of every email I send?

    Yes I know what you mean about it cluttering the thread and for personal emails it is better without the signature. However this relates to sending business emails from an iPhone so I need the signature present on every email.
    I can't find anything in Settings so I was hoping someone may have some knowledge/information/experience regarding this problem.

Maybe you are looking for