OIM 11g R2 - Request ID while submitting catalog

Hi,
May I know how I can make OIM to generate a request ID (in other words,OIM through request approval flow) ,while submitting a provisioning request through a catalog?.Thanks.

login as an end user and request for account. Request Id will be generated automatically.
In case of R2 , if you raise request using admin user(xelsysadm--SYSTEM ADMINISTRATOR) it act as direct provisioning. therefore no such request will be generated. If you raise request using end user, request ID will be generated.
All this decision taken by catalog engine.

Similar Messages

OIM 11g R1 Request Template issue

Hi All,
We are facing an issue with implementing the Request Management of OIM 11g R1 11.1.1.5 for Create User.
OIM already provides OOTB CreateUserDataSet.xml and a ‘Create User’ Request Template.
We have changed(customized) the OOTB CreateUserDataSet.xml at the same location in MDS and have created one our own Request Template – ‘Create Custom’.
We have also added Attribute Restrictions in the ‘Create Custom’ request template for mandatory fields like – ‘Organization’, ‘User Type’ & ’Design Console Access’.
The issue we are facing is –“After some time(not immediately) the Request Template gets corrupt and does not open thus rendering the Request Process for Create User inoperable.”
Below is the the log error of the OIM Web console error after we are trying to open ‘Create Custom’ by clicking on the Request Template.
<ADF_FACES-60096:Server Exception during PPR, #8
oracle.iam.platform.utils.MinLimitException: size < minimum limit
                at oracle.iam.platform.canonic.model.Values.setMinLimit(Values.java:187)
                at oracle.iam.requesttemplate.agentry.operations.OpenActor.renderAttributeRestrictionsTab(OpenActor.java:829)
                at oracle.iam.requesttemplate.agentry.operations.OpenActor.prepare(OpenActor.java:198)
                at oracle.iam.consoles.faces.utils.CanonicUtils.prepareOperation(CanonicUtils.java:169)
                at oracle.iam.consoles.faces.utils.CanonicUtils.prepareOperation(CanonicUtils.java:179)
                at oracle.iam.consoles.faces.render.canonic.UICursor$TableActionListener.processAction(UICursor.java:855)
                at javax.faces.event.ActionEvent.processListener(ActionEvent.java:88)
Any help in solving above issue, workarounds or knowing that is it an OIM bug will be greatly helpful.
Note* I have noticed(through Export) that in a corrupted Request Template the Organization Name that I have restricted to a Constant, has the- Organization Name's Text as value in exported xml. If I change it back to ACT KEY and import it back in OIM the Template is again restored until next corruption
Thanks already
Regards,
Nitin Tewari

Excellent! Thank you very much!
Edited by: 958794 on May 22, 2013 10:37 AM

OIM 11g selfdeprovision request error

Hi ,
I have created the request template with request type as the selfdeprovision resource. As it is known we dont need to collect any data during deprovisioning. So we did not have a request dataset. And we have created OL and RL policies with auto approval . but when a user is raising the request , while submitting it following error is thrown.
An error occurred while submitting the request. The Request Beneficiary Entity does not exist as part of the Beneficiary in the request data.
Any help would be appreciated.
thanks.

In your rules on your approval policy, have you set the rule parameter correctly to make sure it gets auto approved?
You can try creating a new request template.
Also, if you have an error on the request dataset associated with it, for whatever reason, you can export the request template using the deployment manager and it should include the dataset attached to it and perhaps you can see what is causing the error.
-Kevin

OIM 11g R1 - Request Type Description Customization (Translation)

Hello Experts,
I'd like a little help to know if it is possible to customizate the following:
OIM is using Browser locale to change the language on Web Console.
Does any one know how to change the translation to the Request Type description (the list from where we need to choose) when we are creating a Request?
Example:
Self-Request Resource = Recurso de Auto-Solicitação (in Brasilian Portuguese - we'd like to change it)
Self De-Provision Resource = Autocancelar Provisionamento de Recurso (in Brasilian Portuguese - we'd like to change it)
We work with OIM 11g R1.
Thanks.

Excellent! Thank you very much!
Edited by: 958794 on May 22, 2013 10:37 AM

Oim 11g R2 request submisson through code

Hi All,
I have written a custom code for submitting the request from client using the following program.
private RequestData buildappinstance(Catalog item,String userLogin)
UserManager userService = oimClient.getService(UserManager.class);
User user=null;
try{
user=userService.getDetails(userLogin, null, true);
}catch(Exception e){
e.printStackTrace();
throw new RuntimeException(e.getMessage(),e);
RequestData reqData=new RequestData();
Beneficiary ben= new Beneficiary();
String userkey=user.getId();
System.out.println("userkey");
ben.setBeneficiaryKey(userkey);
ben.setBeneficiaryType(Beneficiary.USER_BENEFICIARY);
RequestBeneficiaryEntity reqent=new RequestBeneficiaryEntity();
/*reqent.setRequestEntityType(OIMType.ApplicationInstance);*/
reqent.setEntitySubType(item.getEntityName());
reqent.setEntityKey(item.getEntityKey());
reqent.setOperation(RequestConstants.MODEL_PROVISION_APPLICATION_INSTANCE_OPERATION);
List<RequestBeneficiaryEntity> entities=new ArrayList<RequestBeneficiaryEntity>();
entities.add(reqent);
ben.setTargetEntities(entities);
List<Beneficiary> benfs=new ArrayList<Beneficiary>();
benfs.add(ben);
reqData.setBeneficiaries(benfs);
return reqData;
public static void main(String args[]) {
List moList = null;
try {
Sample oimSample = new Sample();
// initialize resources
oimSample.init();
// retrieve User logins with first name 'Joe'
moList=oimSample.getUserLogin("joe");
Catalog item = new Catalog();
item.getEntityName();
ApplicationInstance appInst= new ApplicationInstance();
RequestService reqsrvc = oimClient.getService(RequestService.class);
RequestData reqData=new RequestData();
ApplicationInstanceService appInstAPI = (ApplicationInstanceService)oimClient.getService(ApplicationInstanceService.class);
SearchCriteria appInstSearchCriteria = new SearchCriteria(AccountSearchAttribute.APPINST_NAME.getId(),"app2",SearchCriteria.Operator.EQUAL);
List<ApplicationInstance> appInstList = appInstAPI.findApplicationInstance(appInstSearchCriteria, null);
appInst = appInstList.get(0);
System.out.println("appinstancekey"+appInst.getApplicationInstanceKey());
System.out.println("appinstance name"+appInst.getApplicationInstanceName());
System.out.println(appInst.getItResourceKey());
item.setEntityKey("2");
item.setEntityName("app2");
System.out.println("entity key"+item.getEntityKey());
System.out.println("userlogin......"+userLogin);
reqData=oimSample.buildappinstance(item,userLogin);
reqsrvc.submitRequest(reqData);
System.out.println("request has been submitted");
System.out.println("appinastance has been created");
But getting the following error.
oracle.iam.request.exception.RequestServiceException: Request submission failed with Error getCacheEntry called with an empty or null key.
Caused by: oracle.iam.request.exception.RequestServiceException: Request submission failed with Error getCacheEntry called with an empty or null key.
when Iam writing the following statement
/*reqent.setRequestEntityType(OIMType.ApplicationInstance);*/ which is bold in the above code
getting the error
The method setRequestEntityType(OIMType) in the type RequestBeneficiaryEntity is not applicable for the arguments (OIMType)
Please help me out.
This is urgent.
Thanks.

Can you please confirm your OIMType class belongs to "oracle.iam.platform.utils.vo.OIMType" and not oracle.iam.catalog.vo.OIMType.

How to display Checkbox instead dropdown in OIM 11g using request dataset

Hello,
I am trying to display as check boxes instead of dropdown in requestor screen using request dataset.
It still shows dropdown. Here is my request dataset.
Is there anything wrong??
<?xml version='1.0' encoding='UTF-8'?>
<request-data-set xmlns="http://www.oracle.com/schema/oim/request" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" operation="PROVISION" entity="ACCOUNTING CONTROL" name="ProvisionResourceACCOUNTING CONTROL" xsi:schemaLocation="http://www.oracle.com/schema/oim/request">
<AttributeReference available-in-bulk="true" length="20" widget="*checkbox*" type="*Boolean*" attr-ref="Instance" name="Instance" required="true">
<lookupValues encoded-value="Dev" decoded-value="ACCOUNTING CONTROL (DEV)"/>
<lookupValues encoded-value="QA" decoded-value="ACCOUNTING CONTROL (QA)"/>
<lookupValues encoded-value="PRD" decoded-value="ACCOUNTING CONTROL (PRD)"/>
</AttributeReference>
</request-data-set>
Thanks!!!

What are you trying to achieve here? If you are using checkboxes than you can't have multiple options to it but would rather have to put static values.
Something like:
<AttributeReference name="Field1" attr-ref="Dev" available-in-bulk="false" type="Boolean" length="30" widget="checkbox" required="false"/>
<AttributeReference name="Field2" attr-ref="QA" available-in-bulk="false" type="Boolean" length="30" widget="checkbox" required="false"/>
<AttributeReference name="Field3" attr-ref="PRD" available-in-bulk="false" type="Boolean" length="30" widget="checkbox" required="false"/>
AFAIK OIM does not allow for a multiselect box in dataset.
-BB

OIM 11g R2 -Request Data

Hi,
We have users being reconciled from a flat file and we have a post eventhandler that raise a resource request (AD, Exchange) for all the users being on-boarded. Now the requester is coming in as OIMINTERNAL instead of the user, where should we change in OIM to say the actual requester is the user instead of OIMINTERNAL?//
Thanks.

It seems that you are using Platform.getService to get RequestService. It will give you OIMINTERNAL only.
If you want to use some other user then you'll have to use external method to get UtilityFactory or Request Service i.e. PrivateKey, UserName/Password etc but that is not recommended.

How to get details of Pending Approval request in OIM 11g R2?

Hi,
We need to find out following details from Pending Approval Request in OIM 11g R2 -
Request ID,Assignees,Requested Resource Name, Title of Request, Beneficiary, Status of Request.
Out of above attributes we could find out Assignees, Title of Request, Status of Request, Beneficiary, etc. But we are not getting Request ID and Requested Resource Name.
We have used API - 'IworkflowServiceClient'
If we use API - 'RequestService' then we are not getting Assignees and Resource name from Pending approval request.
Can any one suggeste how can we get these details? Do we need to use other API or other alternative to get all of attributes from Pending Approval Request.
Thanks.

Thanks Kevin for your suggestion.
In OIM 11g R2 I tried task.getIdentificationKey() to get Request ID and task.getSystemMessageAttributes().getTextAttribute6() to get requested resource name but I am getting null values out of it. Is there something I am missing?
Which common thing I can use to retrieve data from both OIM and SOAINFRA? As I am not getting Request ID from 'IworkflowServiceClient' API so I could not use it to earch request in OIM using 'RequestService'. Even if I have to use query what will be common thing I can use to fetch data from both tablespaces?
Thanks.

Creating approver only field in OIM 11g R2

Hi,
I need to create some fields in OIM 11g R2 request data set, so that those field will be visible only to approvers and they can only enter the data into it.
In 11g R1 I know how to create those field, but I don't know how to create the same type of field in OIM 11g R2.
Please help

Hi ,
Thanks for your reply .. I am able to understand the scenario what you are trying to explain .. I tried to do the same ...but in my scenario ,this is the problem that I am facing ..
1)When a user modifies only his First Name then it works fine and gets auto approved .
2)When a user modifies only his Last Name then it works fine and goes for approval and waits till it gets approved.
3)Now the problem is when a user modifies both his First Name and Last Name and submits as a single request , how to handle this ? In this case the First Name should get committed and the Last Name should not get committed .. But he has submitted only a single request .. so how to handle this scenario ?How to divide a single request into two to commit one attribute and not commit another one ?

How to search any user while raising a request in OIM 11g

Hello,
In OIM 11g request access screen, How to search any user while trying to raise a request for access ?
Currently when I login to OIM 11g with my id then I can search only my subordinates not all the users present in OIM.
I know this comes by default with OIM 9.1.0.2, not sure any configuration changes required for OIM 11g ?
Pls help me if you have any information on that.
Thanks!!

Thanks Rajiv, I did as you told .
I created new Authorization Policy name called "Test Policy"
Entity Name: User Management
Permission Name: Search User
Data Constraints: All Users
Assign By Role: ALL USERS
After that when I login as a end user and click search, It does not serach for any users.
Could you pls pls let me know if i am missing anything or anything wrong?
Thansk again.

Creation of a Request in OIM 11G using API's

Hi Friends,
I am trying to create a request using OIM 11g API's.
I am trying to do this for EBS Responsibility resource and this resource has a request dataset has EBS-IT-Resource-Instance, application name, responsibility name, start date and security group. Please note application name, responsibility name, start date and security group are in child form.
I am trying to populate the request dataset using the below code.
List<RequestBeneficiaryEntityAttribute> entityAttrList;
RequestBeneficiaryEntity entity = null;
entityAttrList = new ArrayList<RequestBeneficiaryEntityAttribute>();
entity = new RequestBeneficiaryEntity();
tcITResourceInstanceOperationsIntf tcITResourceIntf = Platform.getService(tcITResourceInstanceOperationsIntf.class);
HashMap searchcriteria = new HashMap<String, String>();
searchcriteria.put("IT Resources.Name", "EBSHF-APPS12");
tcResultSet resultSet = tcITResourceIntf.findITResourceInstances(searchcriteria);
long itResourceKey=resultSet.getLongValue("IT Resources.Key");
entityAttrList.add(this.getAttrLong("eBusiness Suite Instance Name",itResourceKey));
entityAttrList.add(this.getAttr("Application Name","3~300"));
entityAttrList.add(this.getAttr("Responsibility Name", "3~300~52281"));
entityAttrList.add(this.getAttr("Security Group", "3~0"));
entity.setEntityKey(getResourceKey("Oracle eBusiness Responsibility"));
entity.setEntityType(RequestConstants.RESOURCE);
entity.setEntitySubType("Oracle eBusiness Responsibility");
entity.setEntityData(entityAttrList);
private RequestBeneficiaryEntityAttribute getAttr(String name, String value)
RequestBeneficiaryEntityAttribute attr = null;
attr = new RequestBeneficiaryEntityAttribute(name, value, RequestBeneficiaryEntityAttribute.TYPE.String);
return attr;
private RequestBeneficiaryEntityAttribute getAttrLong(String name, long value)
RequestBeneficiaryEntityAttribute attr = null;
attr = new RequestBeneficiaryEntityAttribute(name, value, RequestBeneficiaryEntityAttribute.TYPE.Long);
return attr;
My code is working fine and a request is getting created. But when I try to open the request dataset(object form) for the newly created request, I am getting null exceptions.
If I did not populate the fields that are in the child form application name, responsibility name and security group which are highlighted above, then I am able to view the form with the correct IT-Resource-Instance name after request creation.
So, I am thinking I am doing something wrong while populating child form data in the request dataset.
Can you please provide me some code snippet to populate the child using 11G API'S?

Hi Bikash,
After referring your code, i made changes in mine. Here is my updated code.
RequestBeneficiaryEntityAttribute parantAttr=null;
List<RequestBeneficiaryEntityAttribute> entityAttrList;
RequestBeneficiaryEntity entity = null;
entity = new RequestBeneficiaryEntity();
parantAttr=this.getAttrLong("eBusiness Suite Instance Name", itResourceKey);
RequestBeneficiaryEntityAttribute mid1 = new RequestBeneficiaryEntityAttribute();
List <RequestBeneficiaryEntityAttribute> childAttributesList = new ArrayList<RequestBeneficiaryEntityAttribute>();
childAttributesList.add(this.getAttr("Application Name", "3~555"));
childAttributesList.add(this.getAttr("Responsibility Name", "3~555~22862"));
childAttributesList.add(this.getAttr("Security Group", "3~0"));
mid1.setChildAttributes(childAttributesList);
mid1.setAction(RequestBeneficiaryEntityAttribute.ACTION.Add);
entityAttrList = new ArrayList<RequestBeneficiaryEntityAttribute>();
entityAttrList.add(parantAttr);
entityAttrList.add(mid1);
But when I try to run this, it is getting failed saying "RequestServiceException: IAM-2050033:Invalid attribute name null. No corresponding reference was found in the data set ProvisionResourceOracle eBusiness Responsibility".
Here is my request data set for your reference.
<AttributeReference name="eBusiness Suite Instance Name" attr-ref="eBusiness Suite Instance Name" type="Long" length="50" widget="itresource-lookup" required="true" available-in-bulk="true" itresource-type="eBusiness Suite UM"/>
<AttributeReference available-in-bulk="true" length="10" widget="text" type="String" attr-ref="UD_EBH_RSCP" name="EBS HR Foundation User Responsibilities">
<AttributeReference name="Application Name" attr-ref="Application Name" type="String" length="256" widget="lookup-query" available-in-bulk="true" required="true">
<lookupQuery lookup-query="select lkv_encoded as Value,lkv_decoded as Description from lkv lkv, lku lku where lkv.lku_key=lku.lku_key and lku_type_string_key='Lookup.EBS.Application' and lkv_encoded like concat('$Form data.eBusiness Suite Instance Name', '~%')" display-field="Description" save-field="Value"/>
</AttributeReference>
<AttributeReference name="Responsibility Name" attr-ref="Responsibility Name" type="String" length="256" widget="lookup-query" available-in-bulk="true" required="true" primary="true">
<lookupQuery lookup-query="select lkv_encoded as Value,lkv_decoded as Description from lkv lkv,lku lku where lkv.lku_key=lku.lku_key and lku_type_string_key='Lookup.EBS.Responsibility' and lkv_encoded like concat('$Form data.Application Name','~%')" display-field="Description" save-field="Value"/>
</AttributeReference>
<AttributeReference name="Security Group" attr-ref="Security Group" type="String" length="256" widget="lookup-query" available-in-bulk="true" required="true">
<lookupQuery lookup-query="select lkv_encoded as Value,lkv_decoded as Description from lkv lkv, lku lku where lkv.lku_key=lku.lku_key and lku_type_string_key='Lookup.EBS.SecurityGroup' and lkv_encoded like concat('$Form data.eBusiness Suite Instance Name', '~%')" display-field="Description" save-field="Value"/>
</AttributeReference>
I am not sure why it is not referencing to the attribute. In your blog, it is saying your code is to set process form. But i am trying to create a request using API's. so, I need some code snippet to populate request dataset. Do you think, this will serve both?
Thanks for your help.

Error While Creating User in OIM 11g R2

Experts,
I am working on OIM 11g R2, while creating user i am getting below prompt
IAM-2050242: Orchestration process with id 815, failed with error message IAM-3010201:LDAP create event failed: Object Class Violation.
any pointers?

Try to check which OBJ Class violation are you hitting , for example: If you have uniquemember instead of member and try to add more than one member this will be a rule violation. Eg: ADD request to an attribute that is included in an account entry because the attribute entry has been existed prior to the ADD request.
I hope this helps.
Thiago Leoncio.

Creating a request type in OIM 11g R2

Hi All,
I came to know that the request templates have been removed from OIM 11g R2 . I have the below scenario,
1)When an end user logs into Identity console and access his self profile through the 'My Information' link.
2)If he tries to modify some of his attributes(say First Name) the approval policy should not get triggered and should be auto approved and committed to the database
3)For some of the attributes(say Last Name) approval policy has to be triggered and request has to be created and wait for the approval .
4)Now that request templates are removed , Can I create a new request type like 'Modify Custom attributes' similar to 'Modify User Profile' for this scenario to be achieved ?
Please let me know how the above scenario is going to work in OIM 11g R2 ?
Regards,
Senthil.

Hi ,
Thanks for your reply .. I am able to understand the scenario what you are trying to explain .. I tried to do the same ...but in my scenario ,this is the problem that I am facing ..
1)When a user modifies only his First Name then it works fine and gets auto approved .
2)When a user modifies only his Last Name then it works fine and goes for approval and waits till it gets approved.
3)Now the problem is when a user modifies both his First Name and Last Name and submits as a single request , how to handle this ? In this case the First Name should get committed and the Last Name should not get committed .. But he has submitted only a single request .. so how to handle this scenario ?How to divide a single request into two to commit one attribute and not commit another one ?

Customizing request datasets in OIM 11g

Hi Friends,
I have couple of questions/issues while customizing request datasets in OIM 11g. Can you please help me?
1) I gave read-only="true" in my request dataset for one of the attribute, but I was still able to edit that attribute value while raising requests.
2) I gave hidden="true" in my request dataset for one of the attribute, but I was still able to see that attribute while raising requests.
3) I have around 90 attributes in my request dataset. Is there any way to display category type and under that category display the attrbitues i.e. just like attributes in user profile.
4) As I have 90 attributes, I am expecting the format will be like first 45 will be shown in left panel(column) and remaining 45 in right panel (column). Instead of this , it is showing first 70 in left panel and the remaining 20 in right panel which is very ugly to see. Is there any way to show frist 45 on left side and remaining 45 on the right side? Please help me.

Regarding the first two points:
1) The read only property applies to the approver only, i.e. approver can read and not modify the attribute. It does not apply to the requester. I don't believe you can configure a read-only attribute in the data set.
2) If you want to hide an attribute, you can restrict it in your request template.

How to polulate data from lookup using request dataset in OIM 11g

Hi,
Using Request dataset in OIM 11g, I need to display one dropdown with the roles those need to come from Lookup.
For Ex; I have 2 resources,i.e Resource A and Resource B. Resource A has 5 roles and Resource B has 3 Roles.
While creating a request, If I select Resource A, then I should be able to get 5 Roles and if I select Resource B then I should be able to see corresponding 3 roles.
Pls. note I have only one Look up definition , where I have roles for both Resource A and B.
I have done simillar thing in OIM 10g , however I am unable to do it using OIM 11g Request dataset.
Pls suggest.

Hi BB,
I am trying to follow up your response.
You are suggestng to use prepopulate adapter for to populate respource object name, that means We have to just use an sql query from obj tabke to get the resource object name. right ?? it could be like below, what should I have entity-type value here ??
<AttributeReference name="Field1" attr-ref="act_key"
available-in-bulk="false" type="Long" length="20" widget="ENTITY" required="true"
entity-type="????"/>
<PrePopulationAdapter name="prepopulateResurceObject"
classname="my.sample.package.prepopulateResurceObject" />
</AttributeReference>
<AttributeReference name="Field2" attr-ref="Field2" type="String" length="256" widget="lookup-query"
available-in-bulk="true" required="true">
<lookupQuery lookup-query="select lkv_encoded as Value,lkv_decoded as Description from lkv lkv,lku lku
where lkv.lku_key=lku.lku_key and lku_type_string_key='Lookup.xxx.BO.Field2'
and instr(lkv_encoded,concat('$Form data.Field1', '~'))>0" display-field="Description" save-field="Value" />
</AttributeReference>
Then I need think about the 'Lookup.xxx.BO.Field2' format.
Could you please let me know if my understanding is correct?? What is the entity-type value of the first attribute reference value?
Thanks for your all help.

OIM 11g R2 - Request ID while submitting catalog

Similar Messages

Maybe you are looking for