OIM 11g R2 - SOA error with Auto Approval

Hi,
I am trying to provision a resource through catalog wizard as an end user .I have created both Operational Level and Request level approval policies with Auto Approval Enabled.The RequestID is getting generated but I am getting the following error in screen
[Security:090304]Authentication Failed: User SOAAdminPassword javax.security.auth.login.FailedLoginException: [Security:090302]Authentication Failed: User SOAAdminPassword denied
May I know where should I go and change the SOAAdmin Password ?.Thanks.

I've run into the same error with oim 11gr2 bp04:
<Mar 18, 2013 11:07:09 AM CDT> <Notice> <Stdout> <BEA-000000> <<Mar 18, 2013 11:07:09 AM CDT> <Error> <oracle.soa.services.identity>
<BEA-000000> <<oracle.tip.pc.services.identity.jps.AuthenticationServiceImpl.authenticateUser()> authentication FAILED>>
<Mar 18, 2013 11:07:09 AM CDT> <Notice> <Stdout> <BEA-000000> <<Mar 18, 2013 11:07:09 AM CDT> <Error> <oracle.soa.services.identity>
<BEA-000000> <<.> Identity Service Authentication failure.
Identity Service Authentication failure.
Either the user name or password is incorrect. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.
ORABPEL-10528
Identity Service Authentication failure.
Identity Service Authentication failure.
Either the user name or password is incorrect. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.
     at oracle.tip.pc.services.identity.jps.JpsProvider.authenticateUser(JpsProvider.java:2337)
Caused By: javax.security.auth.login.LoginException: [Security:090304]Authentication Failed: User SOAAdminPassword javax.security.auth.login.FailedLoginException:
[Security:090302]Authentication Failed: User SOAAdminPassword denied
     at oracle.security.jps.internal.jaas.module.authentication.JpsUserAuthenticationLoginModule.login(JpsUserAuthenticationLoginModule.java:71)
     ...Did you find what the issue is? I'm finding scant information about this user named "SOAAdminPassword" (who makes up these usernames :-/).

Similar Messages

  • OIM 11g selfdeprovision request error

    Hi ,
    I have created the request template with request type as the selfdeprovision resource. As it is known we dont need to collect any data during deprovisioning. So we did not have a request dataset. And we have created OL and RL policies with auto approval . but when a user is raising the request , while submitting it following error is thrown.
    An error occurred while submitting the request. The Request Beneficiary Entity does not exist as part of the Beneficiary in the request data.
    Any help would be appreciated.
    thanks.

    In your rules on your approval policy, have you set the rule parameter correctly to make sure it gets auto approved?
    You can try creating a new request template.
    Also, if you have an error on the request dataset associated with it, for whatever reason, you can export the request template using the deployment manager and it should include the dataset attached to it and perhaps you can see what is causing the error.
    -Kevin

  • OIM 11g r2: SOA  workflows for two level approval.

    HI Experts,
    I am using SOA workflows in OIM 11g r2. The requirement is to have a two level approval for a role (which provisions Oracle DBUM connector at present) : first for Manager and second for the Role owner.
    I have created and deployed the composite with name AddAccessApproval but need to find how to use this for two level approval.
    There is option for serial approval but how to pass it to Role owner.
    Any help in this regard is appreciated.
    Many Thanks,
    Arvind

    I've run into the same error with oim 11gr2 bp04:
    <Mar 18, 2013 11:07:09 AM CDT> <Notice> <Stdout> <BEA-000000> <<Mar 18, 2013 11:07:09 AM CDT> <Error> <oracle.soa.services.identity>
    <BEA-000000> <<oracle.tip.pc.services.identity.jps.AuthenticationServiceImpl.authenticateUser()> authentication FAILED>>
    <Mar 18, 2013 11:07:09 AM CDT> <Notice> <Stdout> <BEA-000000> <<Mar 18, 2013 11:07:09 AM CDT> <Error> <oracle.soa.services.identity>
    <BEA-000000> <<.> Identity Service Authentication failure.
    Identity Service Authentication failure.
    Either the user name or password is incorrect. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.
    ORABPEL-10528
    Identity Service Authentication failure.
    Identity Service Authentication failure.
    Either the user name or password is incorrect. Check the error stack and fix the cause of the error. Contact Oracle Support Services if error is not fixable.
         at oracle.tip.pc.services.identity.jps.JpsProvider.authenticateUser(JpsProvider.java:2337)
    Caused By: javax.security.auth.login.LoginException: [Security:090304]Authentication Failed: User SOAAdminPassword javax.security.auth.login.FailedLoginException:
    [Security:090302]Authentication Failed: User SOAAdminPassword denied
         at oracle.security.jps.internal.jaas.module.authentication.JpsUserAuthenticationLoginModule.login(JpsUserAuthenticationLoginModule.java:71)
         ...Did you find what the issue is? I'm finding scant information about this user named "SOAAdminPassword" (who makes up these usernames :-/).

  • OIM 11g integration AutoLogin error (first login or forgot password)

    Hi,
    We are currently integrating OAM+OIM 11g (R2). We have used a 10g webgate for this.
    When the user logs in for the first time, and sets his password and answers the challenge questions, he should be "Auto logged in" when he is finished.
    The same scenario should happen, if the user forgot his password, and resets it. He should be "Auto-logged in" when finished.
    This is not happending for us.
    The OIM logs tells us this:
    ERROR: Autologin failed oracle.iam.ui.platform.sso.exception.AutoLoginException: Error occured while retrieving TAP partner key from Credential store
    We have tried to verify everything recommended by this Oracle Support article:
    How to Solve Autologin problems in OIM with OAM? [ID 1475297.1]
    Any ideas what we are missing?
    Thanks & Regards,
    Henrik

    Maybe this is a something?
    Whate should the value of the property OAM_SERVER_VERSION be, when running idmConfigTool.sh and using a 10g webgate for the integration?
    Chapter 7.6 in the integration documentation states this:
    OAM_SERVER_VERSION: 11g (use 10g if Oracle Access Manager 10g is used)
    http://docs.oracle.com/cd/E27559_01/integration.1112/e27123/oim.htm#CACFCJHI
    Under chapter 2.4.5 in the idmConfigTool documentation it's described like this:
    OAM_SERVER_VERSION: Required only when Access Manager server does not support 11g webgate in Oracle Identity Manager-Access Manager integration. In that case, value should be provided as '10g'.
    http://docs.oracle.com/cd/E27559_01/integration.1112/e27123/idmcfgtool.htm#CIHCICHD
    When we ran the script, we had the value set to "11g" (because that's our OAM version)... now I'm wondering if I need to set this value at all..
    Regards,
    Henrik

  • OIM 11g setXellerate password fails with weird message on massive usage

    Hi,
    i have set up trusted reconciliation from a database table with OIM 11g (11.1.1.3). Now, the default password is the concatenation of two other fields and i have built an adapter that uses the setXelleratePassword method to set the OIM user password an attached it to the xellerate reconciliation insert event. Now, when running the reconciliation, the password is correctly set only for the first 10 users or so, after which i get this error for every following event.
    <Apr 6, 2011 12:07:27 PM CEST> <Error> <oracle.iam.identity.usermgmt.impl> <BEA-000000> <The password change operation failed.>
    <Apr 6, 2011 12:07:27 PM CEST> <Error> <XELLERATE.APIS> <BEA-000000> <Class/Method: tcPasswordOperationsBean/setXelleratePassword encounter some problems: Error occurred while setting user password.>
    Thor.API.Exceptions.tcAPIException: The password change operation failed.
         at com.thortech.xl.ejb.beansimpl.tcPasswordOperationsBean.setXelleratePassword(tcPasswordOperationsBean.java:158)
         at Thor.API.Operations.tcPasswordOperationsIntfEJB.setXelleratePasswordx(Unknown Source)
         at sun.reflect.GeneratedMethodAccessor1074.invoke(Unknown Source)
         at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
         at java.lang.reflect.Method.invoke(Method.java:597)
    the error is quite generic, and does happen only when there is a "massive" reconciliation run. I thought about the open file limit and the connection pool max values, but in the logs there are no errors related
    What should i look at?
    Thanks in advance

    Hi
    Have you tried to change the reconciliation batch size to 1 or something?
    I had something similar with just one account getting updated by my post-process hanndler.
    Anyway how did you attach your adapter to the reconciliation insert event? I have been trying to do this but the list that comes back does include the adapter i have created when i tried to select and adapter to run.
    Please guide how you did on design console or gui.
    Thanks

  • OIM 11gR2 PS1: Need to configure auto approval for self registration

    Hi All
    I need to configure auto approval for self registration in OIM 11g R2 PS1. I have done this in R1 but looks like it is different in R2.
    Can you please guide me or point me to some blog/guide.
    Thanks

    check this link:
    Developing Workflows for Approval and Manual Provisioning - 11g Release 2 (11.1.2.1.0)

  • Problems with Auto approval workflow (WS 10000060) for shopping carts

    Hi SAP Network community,
    I have got a problem with the auto approval workflow for shopping carts.
    Basically the workflow approves the shopping cart once it was created.
    But then the related Purchase Order remains in Status held. If the PO gets ordered manually then it is not transferred to the R/3 backend system.
    For testing purposes also the one step approval workflow was activated. If the shopping cart gets approved by clicking into the detail approval screen (not by approving through the green tick box in the shopping cart overview) then the PO gets ordered and transferred to the backend system as normal.
    But if the shopping cart gets approved by using the green tick box in the shopping cart overview then the same problem occurs as described for the auto approval workflow.
    The system version is SRM 4.00
    Did anybody have the same or similar problems with the auto approval workflow and what could be the reason for this problems.
    Thanks in advance,
    Robert

    Hi
    Which SRM Workflow Scenario are you using (IS it Item level workflow or Shopping cart level Workflow) ?
    Are you using customized SRM Business workflow or Standard SRM Workflow ?
    <u>Please go through these links as well.</u>
    http://help.sap.com/saphelp_srm50/helpdata/en/2c/e68d406b305537e10000000a1550b0/frameset.htm
    http://help.sap.com/saphelp_srm50/helpdata/en/eb/289f4099852e54e10000000a1550b0/frameset.htm
    Incase you are using Standard SRM Workflow, please raise an Customer OSS message with SAP at the earliest.
    Regards
    - Atul

  • OIM 11G, DSML integration failing  with null pointer exception

    Hi,
    we are facing the similar probelm while sending a request from TIBCO BW to OIM 11G (Which is weblogic)
    The below request from TIBCO is not working and thowing a NULL POINTER EXCEPTION
    <?xml version="1.0" encoding="UTF-8"?>
    <SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
    <SOAP-ENV:Header>
    <ns:OIMUser xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:ns="http://xmlns.oracle.com/OIM/provisioning" xmlns:ns0="http://schemas.xmlsoap.org/soap/envelope/">
    <ns:OIMUserId>xelsysadm</ns:OIMUserId>
    <ns:OIMUserPassword>Welcome123</ns:OIMUserPassword>
    </ns:OIMUser>
    </SOAP-ENV:Header>
    <SOAP-ENV:Body>
    <ns0:processRequest xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:ns0="http://xmlns.oracle.com/OIM/provisioning">
    <sOAPElement xmlns="">
    <ns:modifyRequest xmlns:ns="urn:oasis:names:tc:SPML:2:0" xmlns:ns0="http://schemas.xmlsoap.org/soap/envelope/" returnData="data">
    <ns:psoID ID="Users:21"/>
    <ns:modification name="Users.User ID" operation="add">
    <ns:value>Richard1</ns:value>
    </ns:modification>
    </ns:modifyRequest>
    </sOAPElement>
    </ns0:processRequest>
    </SOAP-ENV:Body>
    </SOAP-ENV:Envelope>
    But if we change the <sOAPElement xmlns=""> to <sOAPElement> (removing the empty namespace) we can able to fire this soap.
    Could you please let me know are there any patch, workaround for this issue.
    Thanks
    Madhu

    I don't think OIM 11g supports DSML profile and may be that's the reason you are getting NPE.
    See: http://docs.oracle.com/cd/E14571_01/doc.1111/e14309/spmlapi.htm#CHDCBJAI
    It states:
    "SPML has two profiles: the XSD profile and the DSML profile. This release of Oracle Identity Manager makes use of the XSD profile."

  • 11g Human Task; problem with Auto-Generate Task Form

    Version: WebLogic Server 10.3.5.0 Fri Apr 1 20:20:06 PDT 2011 1398638
    Using book: Getting Started with Oracle SOA 11g R1, A Hands-On Tutorial
    Had success through Chapt 7. Now working through 8, Creating Human Tasks -- almost everything checks out.
    Deployed POProcessing success (with 1 warning: assignee not specified)
    Deployed ApproveTaskDetails (from Application menu) success
    -Run the test tool in Enterprise Manager 11g
    -Response looks according to book, using Launch Flow Trace button I see ManualPOApproval is in running state, as expected.
    -Run Oracl BPM Worklist, log in according to book (weblogic)
    -I can see the Approve Order line under the My Tasks tab
    When I select the Approve Order line item, according to book I should see Approve Order Contents in the lower pane.
    But the details never populate the pane and I see "Waiting for..." in Explorer status bar.
    The logs are filling up with the following statement repeated about 2/second (from D:\oracle\Middleware\home_11gR1\user_projects\domains\domain1\servers\soa_server1\logs\access.log) ...
    =====snippet begins======
    0:0:0:0:0:0:0:1 - weblogic [21/Oct/2011:17:38:05 -0500] "GET /integration/worklistapp/faces/login.jspx?_afrLoop=2609043717008&_afrWindowMode=0&_adf.ctrl-state=bcqg1x7gm_9 HTTP/1.1" 200 5486
    0:0:0:0:0:0:0:1 - - [21/Oct/2011:17:38:05 -0500] "GET /workflow/ApproveTaskDetails/faces/adf.task-flow?bpmWorklistTaskId=47d0f109-2de1-4851-a5cf-1c338050f3c2&bpmWorklistContext=b5d5e48b-9c54-4e3d-a707-19c9e99f618e%3B%3B4iKnpxQCfUvYnghbxihMXgZAOsVJ%2BqeiE79gFBzb%2BlKq9vlbpqV2%2FyQ21%2BLHnBcvJA6mBOoc238GDGR9odBPBE%2FZdeDrfVwfIUCOa%2Fsc%2BRRnmEkzS5f1mKd3oWpasvIhZDkCz5conIhVCKJvCxxz0i1NpCk9WWoVBHpUX39ayhF%2B0aI1p%2FGImOsYBEXDIBEDADen3JkeoewYEJwpVcQf6XzOA5rTEojcUHt28znFHboPdkJ8TW7jfvgQnHNRS5XB&bpmWorklistHttpURL=http%3A%2F%2Flocalhost%3A8001%2Fintegration%2Fworklistapp%2Ffaces&bpmWorklistHome=home.jspx&bpmWorklistReassign=reassignTask.jspx&bpmWorklistRoute=routeTask.jspx&bpmWorklistRequestInfo=requestInfo.jspx&bpmWorklistSecurity=signTask.jspx&tz=America%2FChicago&lg=en&cy=US&vr=&dispNameLg=en&dispNameCy=US&dispNameVr=&df=medium&dt=both&tf=short&bpmWorklistSessionTimeoutInterval=1500&bpmBrowserWindowStatus=taskFlowReturn&adf.tfDoc=%2FWEB-INF%2FManualPOApproval_TaskFlow.xml&adf.tfId=ManualPOApproval_TaskFlow&_task-flow-return=http%3A%2F%2Flocalhost%3A8001%2Fintegration%2Fworklistapp%2Ffaces%2Fadf.task-flow-return%3F_adf.ctrl-state%3Dbcqg1x7gm_49&_adf.winId=bcqg1x7gm_40&_afrLoop=4624989043858&_afrWindowMode=0&_afrWindowId=null HTTP/1.1" 200 5478
    =====snippet ends======
    Thanks for any assistance!
    MichaelM

    Resolved by disabling pop-up blocking in IE8.

  • How to retrieve Request Form Data in OIM 11g for SOA workflows

    Hi,
    I have a business requirement wherein, I need to retrieve a field's value inside my SOA composite for further processing and decide on the Approver of the Request. Say for e.g. I'm having a field *"Country"* inside my Request Form, and what i need to do is, as soon as the request form is submitted, I need to retrieve the value for *"Country"* attribute inside my SOA Composite using Payload, and further process it. This scenerio is with respect to provision an application instance to a user.
    Now, in a similar scenario, where I was trying to create a user of type *"Contractor"*, I had used Request Service Api to retrieve the Basic information of the userform submitted, and decide on approval. Fortunately, the basic data like, First Name, Last Name, Login etc was successfully being fetched from the Request and I was able to perform further operations.
    Unfortunately, the same code which was working for Creation of a User, is not working when I'm trying to provision an application instance to the user.
    Below is the code which worked fine for me to retrieve basic request data for user creation, and isn't working for provisioning application instance:
    RequestService reqSvc = (RequestService)oimClient.getService(RequestService.class);
    String reqId = ((oracle.xml.parser.v2.XMLElement)getVariableData("inputVariable", "payload", "/ns3:process/ns4:RequestID")).getText();
    System.out.println("request ID: " reqId);+
    Request req = reqSvc.getBasicRequestData(reqId);
    List <RequestEntity> targetEntities = req.getTargetEntities();
    System.out.println("targetEntities : " targetEntities);+
    System.out.println("------------");
    for (RequestEntity rea : targetEntities)
    +{+
    List <RequestEntityAttribute> attributes = rea.getEntityData();
    for( oracle.iam.request.vo.RequestEntityAttribute attribute : attributes)
    +{+  
    System.out.println("Attribute.getName() : " attribute.getName().toString());+
         if(attribute.getName().equals("User Manager"))
         +{+
    beneficiaryManagerKey = attribute.getValue().toString();
         System.out.println("User Manager : " beneficiaryManagerKey);+
    +}+
         e+lse if(attribute.getName().equals("User Login"))+
         +{+
    userid = attribute.getValue().toString();
         System.out.println("User Login  : " userid);+
    +}+
    +}+
    +}+
    Any pointers to this would be of a great help.
    Regards

    List <RequestEntity> targetEntities = req.getTargetEntities();
    System.out.println("targetEntities : " + targetEntities);
    System.out.println("------------");
    The above piece of code retrieves the attributes and their values from the request form while creating a user, but not from the request form, which provisioning a resource to a user.
    Regards,

  • OIM 11g installation failed: Error Restart domain step failed

    Hi,
    I'm stuck in OIM installation at the following point. Please help.
    Here is the description of error:
    Bootstrap Domain Configuration
    Log
    Config Action Bootstrap Domain Configuration started
    Create Domain
    Log
    Create Domain
    Step Create Domain started
    Create Domain
    Step Create Domain ended successfully
    Create ODS Managed Server
    Log
    Create ODS Managed Server
    Step Create ODS Managed Server started
    Create ODS Managed Server
    Step Create ODS Managed Server ended successfully
    Create OIF Managed Server
    Log
    Step Create OIF Managed Server started
    Step Create OIF Managed Server ended successfully
    Stop Managed Server
    Log
    Stop Managed Server
    Step Stop Managed Server started
    Stop Managed Server
    Step Stop Managed Server ended successfully
    Apply Java Required Files
    Log
    Step Apply Java Required Files started
    Step Apply Java Required Files ended successfully
    Apply EM Template
    Log
    Step Apply EM Template started
    Step Apply EM Template ended successfully
    Restart Domain
    Error
    Error while starting the domain.
    Cause:
    An error occurred while starting the domain.
    Action:
    See logs for more details.
    Step Restart Domain failed
    Log
    Step Restart Domain started
    Error while starting the domain.
    Cause:
    An error occurred while starting the domain.
    Action:
    See logs for more details.
    Step Restart Domain failed
    Following is the description from the log file: C:\Program Files (x86)\Oracle\Inventory\logs\install2012-06-15_02-17-54AM.log
    [2012-06-15T04:21:41.828-07:00] [as] [ERROR] [] [oracle.as.provisioning] [tid: 19] [ecid: 0000JVjWcgOFs1WFLz7U8A1FqjrQ00000A,0]
    [2012-06-15T04:21:41.828-07:00] [as] [ERROR] [] [oracle.as.provisioning] [tid: 19] [ecid: 0000JVjWcgOFs1WFLz7U8A1FqjrQ00000A,0] [[
    oracle.as.provisioning.util.ConfigException:
    Error while starting the domain.
    Cause:
    Starting the Admin_Server timed out.
    Action:
    See logs for more details.
         at oracle.as.provisioning.util.ConfigException.createConfigException(ConfigException.java:123)
         at oracle.as.provisioning.weblogic.ASDomain.startDomain(ASDomain.java:3150)
         at oracle.as.provisioning.engine.WorkFlowExecutor._startStopServersAndApps(WorkFlowExecutor.java:830)
         at oracle.as.provisioning.engine.WorkFlowExecutor.executeWLSWorkFlow(WorkFlowExecutor.java:483)
         at oracle.as.provisioning.engine.Config.executeConfigWorkflow_WLS(Config.java:866)
         at oracle.as.idm.install.config.BootstrapConfigManager.doExecute(BootstrapConfigManager.java:1105)
         at oracle.as.install.engine.modules.configuration.client.ConfigAction.execute(ConfigAction.java:371)
         at oracle.as.install.engine.modules.configuration.action.TaskPerformer.run(TaskPerformer.java:88)
         at oracle.as.install.engine.modules.configuration.action.TaskPerformer.startConfigAction(TaskPerformer.java:105)
         at oracle.as.install.engine.modules.configuration.action.ActionRequest.perform(ActionRequest.java:15)
         at oracle.as.install.engine.modules.configuration.action.RequestQueue.perform(RequestQueue.java:64)
         at oracle.as.install.engine.modules.configuration.standard.StandardConfigActionManager.start(StandardConfigActionManager.java:160)
         at oracle.as.install.engine.modules.configuration.boot.ConfigurationExtension.kickstart(ConfigurationExtension.java:81)
         at oracle.as.install.engine.modules.configuration.ConfigurationModule.run(ConfigurationModule.java:86)
         at java.lang.Thread.run(Thread.java:662)
    Thanks in advance for help.
    Thanks,
    Prasad Shinde

    Your problem sounds somewhat like mine, although not exactly. In my case it seems as if my CD/DVD drive didn't like the hologram on my Windows XP install CD. I solved this by using Disk Utility to make a disk image of the Windows DVD and then burning the disk image onto a new DVD with an opaque "label". That solved that problem.
    A further problem occurred after that. When I got to the screen that told me to hit "Enter" to start the installation process my keyboard was unresponsive. I solved this by buying a cheap Windows keyboard. That solved that problem and I now have Windows XP running just fine.
    I think that you'll find that Apple tech support isn't very responsive to these sort of problems. I don't have Apple Care but was willing to pay my $49 for tech support. I ended up talking to a "Boot Camp specialist". He was polite but told me that it was "a windows problem" and that Apple didn't support Windows. I agree that Apple can't support windows but it seemed like my two problems were "Mac problems". Anyway, after tearing my hair out for 4 days I finally got it done. I have to admit that I'm not happy with apple tech support.

  • OIM 11g R1 LDAP Synch with OID.

    Hi,
    We are doing an LDAP Synch with OID directly. The users from various organisations in OIM needs to be synched to different OU's in OID, instead of a single container. How do we acheive this? would it be easy if we involve OVD also?

    Here is some sample code configuration which may give you a start - hope it helps.
    Sample code that can be called in a pre-process event handler to copy the users organinisation to the LDAP Organization Unit
    HashMap<String, Serializable> parameters = orchestration.getParameters();
    Serializable param = parameters.get("act_key");
    String act_key = null;
    if (param instanceof ContextAware) {
    act_key = ((ContextAware) param).getObjectValue().toString();
    } else {
    act_key = param.toString();
    if (act_key != null) {
    OrganizationManager orgMgr = Platform.getService(OrganizationManager.class);
    Set<String> retAttrs = new HashSet<String>();
    retAttrs.add("Organization Name");
    Organization org = null;
    try {
    org = orgMgr.getDetails(act_key, retAttrs, false);
    } catch (OrganizationManagerException e) {
    } catch (AccessDeniedException e) {
    String orgName = (String) org.getAttribute("Organization Name");
    orchestration.addParameter("LDAP Organization Unit", orgName);
    Sample container mapping rule
    <rule>
    <expression>LDAP Organization Unit=Test Organization</expression>
    <container>ou=Test Organization,ou=users,o=org</container>
    <description>Add user to the Test Organization OU in LDAP if their OU is set to Test Organization</description>
    </rule>
    Sample change in /db/LDAPUser
    <!-- Two act_key entries in the <reconFields> section to set RECON_ACT_KEY. -->
    <!-- The first sets RECON_ACT_KEY to the default value from the scheduled job -->
    <!-- The second overwrites RECON_ACT_KEY with an OU value if supplied in the LDAP User data. -->
    <reconAttr>
    <oimFormDescriptiveName>act_key</oimFormDescriptiveName>
    <reconFieldName xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" xsi:type="xs:string">Organization Name</reconFieldName>
    <reconColName>RECON_ACT_KEY</reconColName>
    <emDataType>number</emDataType>
    <formFieldType/>
    <targetattr keyfield="false" encrypted="false" required="false" type="String" name="act_key"/>
    </reconAttr>
    <reconAttr>
    <oimFormDescriptiveName>act_key</oimFormDescriptiveName>
    <reconFieldName xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xs="http://www.w3.org/2001/XMLSchema" xsi:type="xs:string">ou</reconFieldName>
    <reconColName>RECON_ACT_KEY</reconColName>
    <emDataType>number</emDataType>
    <formFieldType/>
    <targetattr keyfield="false" encrypted="false" required="false" type="String" name="act_key"/>
    </reconAttr>

  • Error with workflow approval BADI- BBP_WFL_APPROV_BADI

    Hi All,
    We are running SRM 5.5 Classic Scenario.
    We have activated "BBP_WFL_APPROV_BADI" for n-step approval process of shopping carts. From a certain period of time I am facing the following problem: when a user, with defined output limit in the extended attributes, creates shopping cart below this limit, the shopping cart instead to be ordered immediately stays in status u201CIn your inboxu201D and there is a message in the field "notes for approval" that the user WF-BATCH is not assigned in the organizational structure, and the item status is u201Cawaiting approvalu201D. Although, if you go to approval preview, the message is that no approval is required, the shopping cat is sent for approving to the manager.
    It is very strange, because workflow user has never been assigned to the organizational structure and the other strange thing is that this problem exists in all SRM systems (development, quality and training).
    We tried to debug the BADI, and we couldn't find any problem. The BADI first checks the spent limit of the user (which is the set output limit in the extended attributes of that user) and because the validation is ok (the value of the shopping cart is below the spent limit) the process stops. But at the same time the shopping cart is sent for approving to the first manager.
    Has anybody of you faced this problem?
    Thank you in advance!
    Desislava

    Hi Masa,
    Yes, this is my issue, that the shopping cart is sent to the manager for approving! And at the same time when the user is checking the status of the shopping cart -the status is"In your inbox" and the status of the item is "awaiting approval". When you go to item details-> to additional specification tab(field),  a system message is generated in the field "notes for approval" and the message is "Cannot find org unit for user WF-BATCH". In my opinion that means that the system is searching for WF-batch as approver. Let me briefly tell you how the BADi works, first validates the spent limit of the user if the value of the shopping cart is below then the shopping cart should be sent directly to r/3 system and a PO should be created. If the value is above, the system start checking to which organizational unit the users belongs, and after that determines the first approver!
    Hope it is more clear for you!
    Thanks
    Desislava

  • Error  with WF :  Approval workflow is ambiguous

    Hi, I have actived the WF 14000044 Completion of shopping cart by purchaser (requester view) AND the  WF  14000109 Approval n-step over Value Limit and a I got error message:  Approval workflow is ambiguous
    thanks
    Dayana

    Hi,
         It seems for a particular condition,both the workflows are getting triggered for the event "SC CREATED"..Hence the message...
        Please check the start conditions for both the WF's.They should be unique.i.e. Under which case the corresponding worklfow should be triggered should be definate.
    HTH.
    BR,
    Disha.
    Pls reward points for useful answers.

  • OIM 11g R2 PS1 error in App instances page due to multiple prcoess forms for a single RO

      By mistake I attached two process definitions to a single resource object (RO) and it in turn mapped two process forms to the single resource object.
    Now when I go to application instances page and do a searc, it shows the below error in the UI
    IAM-4067027 : An error occurred in findAppInstances and the cause of error is An error occurred in getParentFormInfo and the cause of error is Multiple process forms exist for Test_Emp_RO.. 
    I tried to assign a different RO and Form to the second process def in teh design console, but it throws SDK update failure error. How to resolve this error?  Any inputs are appreciated.

    Check the for duplicacy in OBJ_KEY column of the process defination. If duplicate values exit then set them to 'null'  and commit. Restart OIM if required

Maybe you are looking for