OIM 9.1.0 Available

Hi,
Just checkout oracle download and found that 9.1 available.
cheers,
Ankit

Do you now when oc4j platform will be supported? Documentation speak about a future release but no official date.

Similar Messages

OIM and OID High Availability Info

Can somebody share documents, info, links describing how we can achieve High Avilability for OIM and OID components? I know we can have two OID systems in multi-master replication configurations which can actively replicated data but need complete scenario.
Will appreciate quick response.
Thanks in advance!

The sizing guide from 2007 contains most of the information that you need: http://www.oracle.com/technology/products/id_mgmt/oxp/pdf/oracle%20identity%20manager%20sizing%20version%201.3.pdf
Some of the info is slightly outdated (i.e. the JMS discussion) but most of the info is still applicable. Also feel free to contact me through LinkedIn if you need anything specific. I do have some material around this topic that I can share.
Hope this helps
/Martin

OIM 11g High Availability Deployment

Hi Experts,
I'm deploying OIM 11g in High Available schema, following Oracle docs: http://download.oracle.com/docs/cd/E14571_01/core.1111/e10106/imha.htm#CDEFECJF, I have succesfully installed and configured OIM & SOA in weblogic domain on 'OIMHOST1', trying to propagate the configuration from 'OIMHOST1' to 'OIMHOST2' I have packed (using pack.sh) the domain on 'OIMHOST1' and unpacked (using unpack.sh) it to 'OIMHOST2' so I have updated the NodeManager executing setNMProps.sh and finally Ihave started the NodeManager. In order to Test everything is fine and following the documentation I'm traying to perform the following steps, but I'm not succeed
I'M MUST TO SAY THAT I'M RUNNING ON SINGLE STANDARD EDITION DB INSTANCE AND NOT RAC AS MENTIONED IN ORACLE DOCS, PLEASE CLARIFY IF RAC IS REQUIRED, FOR NOW I'M IN DEVELOPMENT ENVIRONMENT, SO I THINK RAC IS NOT REQUIRED FOR NOW, PLEASE CLARIFY
8.9.3.8.3 Start the WLS_SOA2 and WLS_OIM2 Managed Servers on OIMHOST2
Follow these steps to start the WLS_SOA2 and WLS_OIM2 managed servers on OIMHOST2:
Stop the WebLogic Administration Server on OIMHOST2. Use the WebLogic Administration Console to stop the Administration Server.
Start the WebLogic Administration Server on OIMHOST2 using the startWebLogic.sh script under the $DOMAIN_HOME/bin directory. For example:
/u01/app/oracle/admin/OIM/bin/startWebLogic.sh > /tmp/admin.out 2>1&
Validate that the WebLogic Administration Server started up successfully by bringing up the WebLogic Administration Console.
Here its not possible start AdminServer on OIMHOST2, first of all, it looks like boot.properties file under WLS_OIM_DOMAIN_HOME/servers/AdminSever/security is not valid, the first time I try to execute startWeblogic.sh script, it ask for username/password, I have updated boot.properties (vi boot.properties) and manually set clear username and password, this time startWeblogic.sh script passed this stage, but fails:
<Error> <util.install.help.BuildMasterHelpSet> <BEA-000000> <IOException ioe java.io.IOException: No such file or directory>
<Error> <oracle.adf.share.config.ADFMDSConfig> <BEA-000000> <MDSConfigurationException encountered in parseADFConfigurationMDS-01330: unable to load MDS configuration document
MDS-01329: unable to load element "persistence-config"
MDS-01370: MetadataStore configuration for metadata-store-usage "writeable" is invalid.
MDS-00503: The metadata path "/u01/app/oracle/product/Middleware/user_projects/domains/IDMDomain/sysman/mds" does not contain any valid directories.
I have verified that this directory "mds" does not exists, as reported by the IOException, in OIMHOST2, but it exists in OIMHOST1. from here its not possible for me following Oracle's documentation, I test this starting Adminserver in OIMHOST1, and starting WLS_SOA2 and WLS_OIM2 managed servers from OIMHOST1 AdminServer console, I have tested 2 ways:
1.- All managed servers in OIHOST1 are shutdown, for this, managed servers in OIMHOST2 works as expected
2.- All managed servers in OIMHOST1 are RUNNING, for this, first I have started SOA2 managed server, after that, I have fired OIM2 managed server, when it finish boot process the following message appears in server's output:
<Warning> <org.quartz.impl.jdbcjobstore.JobStoreCMT> <BEA-000000> <This scheduler instance (servername.domainname1304128390936) is still active but was recovered by another instance in the cluster. This may cause inconsistent behavior.>
Start the WLS_SOA2 managed server using the WebLogic Administration Console.
Start the WLS_OIM2 managed server using the WebLogic Administration Console. The WLS_OIM2 managed server must be started after the WLS_SOA2 managed server is started.
8.9.3.9 Validate the Oracle Identity Manager Instance on OIMHOST2
Validate the Oracle Identity Manager Server instance on OIMHOST2 by bringing up the Oracle Identity Manager Console using a web browser.
The URL for the Oracle Identity Manager Console is:
http://oimvhn2.mycompany.com:14000/oim
Log in using the xelsysadm password.
Your help is highly apprecciated
Regards
Juan

Hi Vaasu,
I have succeeded deploying OIM in HA, just now my customer and I are working on the installation of webtier. Now I have a better understand about HA concepts and the way weblogic works -really nice, but little tricky-
All the magic about HA is configuring properly the network interfaces in each Linux boxes (our case) so, first of all you need to create 2 new floating IP's on each Linux boxes (google: how to create virtual Ip in linux, if you don't know) clone and modify your 'eth0' network script to create the virtual IPs
Follow the procudere in the HA guide: http://download.oracle.com/docs/cd/E14571_01/core.1111/e10106/imha.htm#CDEFECJF
create DB schemas with RCU
install weblogic
install SOA
patch SOA
install IAM
---if you are working on a virtual machine is good idea to take a snapshot here---
Create and configure the weblogic domain (special attentention whe configuring the cluster), see step 13 of 8.9.3.2 Creating and Configuring the WebLogic Domain for OIM and SOA on OIMHOST1, here you need to cofigure:
For the oim_server1 entry, change the entry to the following values:
Name: WLS_OIM1
Listen Address: the IP that is confured in eth0:1 of Linux box1
Listen Port: 14000
For the soa_server1 entry, change the entry to the following values:
Name: WLS_SOA1
Listen Address: the IP configure on eth0:2 of Linux box1
Listen Port: 8001
For the second OIM Server, click Add and supply the following information:
Name: WLS_OIM2
Listen Address: the IP configured on eth0:1 of Linux box2
Listen Port: 14000
For the second SOA Server, click Add and supply the following information:
Name: WLS_SOA2
Listen Address: the IP configured on eth0:2 of Linux box2
Listen Port: 8001
Click Next.
On Step 16 ensure you are using the UNIX tab to configure the machines, also ensure that for machine1 you use the IP configured on the eth0 interface of Linux box1, the same for machine2
please confirm you have performered 8.9.3.3.2 Update Node Manager on OIMHOST1
if everything is ok you must be able to start the AdminServer as described in the guide.
configure OIM: 8.9.3.4.2 Running the Oracle Identity Management Configuration Wizard, in my case I don't need LDAPsync, I have skipped this section, if you configure properly OIM, then you mus perform 8.9.3.5 Post-Configuration Steps for the Managed Servers
resrtar AdminServer then from the weblogic console, start OIM and SOA if node manager is properly configured SOA and OIM must run properly, update deployment mode and coherence as described in the guide and verify that OIM run perfectly in Linux box1.
Propagate OIM from Linux box1 to Linux box2 as described in the guide, using pack and unpack (you MUST use the same filesystem directory structure on both Linux boxes)
Update and start NodeManager as described in the guide
VERY IMPORTAN OBSERVATION
the guide say:
8.9.3.8.3 Start the WLS_SOA2 and WLS_OIM2 Managed Servers on OIMHOST2
Follow these steps to start the WLS_SOA2 and WLS_OIM2 managed servers on OIMHOST2:
Stop the WebLogic Administration Server on OIMHOST2. Use the WebLogic Administration Console to stop the Administration Server.
JUAN OBSERVATION:
IS NOT POSSIBLE TO START OR STOP ADMINSERVER ON HOST2 SINCE ADMIN SERVER WERE CONFIGURED TO LISTEN ON THE IP ADDRES OF eth0 INTERFACE ON HOST1, SO, ITS NOT POSSIBLE TO PLAY IT ON HOST2, I THINK AND ADDITIONAL PROCEDURE SHOULD BE FOLLOWED TO CONFIGURE ADMINSERVER IN HA IN A ACTIVE-PASSIVE MODE
Start the WebLogic Administration Server on OIMHOST2 using the startWebLogic.sh script under the $DOMAIN_HOME/bin directory. For example:
/u01/app/oracle/admin/OIM/bin/startWebLogic.sh > /tmp/admin.out 2>1& -----NOT APPLICABLE
Validate that the WebLogic Administration Server started up successfully by bringing up the WebLogic Administration Console. -----NOT APPLICABLE
Start the WLS_SOA2 managed server using the WebLogic Administration Console. ----START SOA2 FROM THE CONSOLE RUNNING ON HOST1, IT DOESN'T MATTER
Start the WLS_OIM2 managed server using the WebLogic Administration Console. The WLS_OIM2 managed server must be started after the WLS_SOA2 managed server is started. ------ START OIM2 FROM THE CONSOLE RUNNING ON HOST1
HERE YOU MUST BE ABLE TO LOGIN TO OIM2 SERVER AS DESCRIBED IN THE GUIDE, YOU DON'T NEED TO EXECUTE config.sh SCRIPT THIS SHOULD WORK AS DESCRIBED.
Server migration should work straight-forward if you have configured the floating IPs as described, I have not configured the persistence yet since my customer does not have the skills to share a storage.
I hope this helps, and feel free to comment or complement.
By the way, did you know how to set up a valid SSL certificate in Windows 2003 server??? I need it to test and Exchange 2007 I'm tryin to integrate
Regards
Juan

Custom tabs under userprofile - resources in OIM 11g

Currently in OIM 11g user's available resource accounts are shown as a list under resources tab.
Is there any way we can customize this page to display one more layer of tabs below it, and fliter the resource accounts to be disaplyed under each sub-tab?

For OIM 11g R2, we don't have any composer and all. You need to understand the OIM UI then you need to proceed with Customization.
Steps:
http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/oim/oim_11g/customize_oim_ui_selfservice_tabs/customize_oim_ui_selfservice_tabs.htm
Pointers: http://docs.oracle.com/cd/E23943_01/doc.1111/e14309/uicust.htm#BABIGCJA

OIM - multivalued data propagation

OIM guru,
We are implementing OIM project where among others we would like to propagate user roles (from HR) to AD. It means we need to deal with multivalued data in OIM.
Based on available documentation we have to setup target resource reconciliation from CSV (by GTC) and provisioning to AD.
CSV(HR) ---> OIM ---> AD
We have no idea how to setup propagation from CSV account table to AD process form and even how to propagate multivalued data from CSV (account child table) to AD group memberships.
Any idea is appreciated!
Jiri

Hi,
I guess you are reconciling from CSV so my suggestion will be stored group name as different delimiter.
Your csv should look like this:
UserId,FirstName,LastName,Group
test1,test1,test1,Group1|Group2|Group3|Group4
So now you reconcile the user the UDF will be populated with
Group1|Group2|Group3|Group4
Now when you these value in UDF you can easly process the UDF field using String oeprations.
Please let me know if you have follow up questions.
Regards
Nitesh

Oracle Directory Server Enterprise Edition/Sun DSEE oim11g r2 connector

Hi,
is there any OOTB oim 11g r2 connector available for Oracle Directory Server Enterprise Edition/Sun DSEE

Yes. The standard LDAP OIM ICF connector fully support ODSEE.

API Setup - Different machine?

Hey guys,
Just starting out here with the API and trying to get my bearings. There doesn't seem to be a lot of good documentation on things. In fact, I can't even get a good list of what the API can and cannot do. If anyone knows of such thing, please let me know.
But my question is in regards to a development environment. I've seen the docs for setting up eclipse and such, but one thing I cannot figure out is if I can develop and test on a different machine that that on which OIM is running? Can I create my project folder with the /config /lib whatever folders on a DIFFERENT machine than OIM?
Thanks much

Yes you can definitely do that. See an OBE for 'Running OIM API's through Eclipse*. For that you have to copy all OIM specific files in the Eclipse workspace and then this as a whole behaves as a design console. So you have no limitation to run it on OIM server machine.
For docs, the only OIM API's docs available are with the installation docs. They are not descriptive at all. They just tell you what API expects and what it returns. Nothing very clear. Many a times you need to hit-n-try to see the results.
Thanks
Sunny

TcUtilityFactory initialization in adapters

What is the proper way to initialize tcUtilityFactory in adapters? Most of the example describe how to setup tcUtilityFactory in remote clients, but not in local clients.
Is static getUtility(tcDataProvider, String) method tcUtilityFactory correct way? Or should one use constructors instead?
In some cases, i have seen adapters throwing NameNotFoundException exception when trying lookup "java:comp/env/ejb/tcUserOperationsLocal".
Thanks, Juha

I actually found out that local clients build on adapter factory can take advantage of database reference task variable mapping to use Operations interfaces. As for remote clients, username/password is required one way or the other.
And of course you have OIM libraries and configs available with working with adapter factory and custom java classes.

Available attributes in OIM 11g notifications

We have been using the new notifications templates in oim11g following the descriptions as given in the blog post below.
http://fusionsecurity.blogspot.com/2011/07/oim-11g-notifications.html
This is how an event is specified:
<?xml version='1.0' encoding='UTF-8'?>
<Events xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="../../../notification/metadata/NotificationEvent.xsd">
<EventType name="ApprovalTaksOpenEvent">
<StaticData>
<Attribute Name="usrLogin" DataType="X2-Entity" EntityName="User"/>
</StaticData>
<Resolver class="oracle.iam.request.notification.CustomResolver">
<Param Name="usrLogin" DataType="X2-Entity" EntityName="Request"/>
</Resolver>
</EventType>
</Events>
Basically we found that wat is in the StaticData part is show in the notification template interface as Available data (in the above example all user attributes are shown). Now my question is it somehow possible to have any attribute show in the Available Data section of an Notification Template. It would be create if "business" users don't have to "guess" which placeholders are available for a certain notification template. I already tried the variant below but it did not have the desired result.
<StaticData>
<Attribute Name="somePlaceHolder" DataType="String"/>
</StaticData>
Greetings
Bas
Edit-> As per documentation it should be possible to do this with the non static data, I will investigate it furter
Edited by: bsteen on Apr 6, 2012 7:11 AM

You can open the jar file with a decompiler and just view the NotificationResolver class and see what attributes are being sent to it.
-Kevin

Is OIM 10.x available for WebLogic Server?

Is OIM 10.x available for WebLogic server? The only download I see on the site for OIM 10.x is the fully bundled suite with OracleAS.

If by OIM you mean Oracle Identity Manager, then OIM 9.1 is supported on Weblogic 10.x. OIM 9.1 is NOT part of or the same thing as Oracle Identity Management 10g. The latter is a set of services tightly coupled with Oracle's app server (OC4J). Identity Management 10g does not run on Weblogic. Some people like to say that Identity Management 10g includes all Oracle identity management products which adds to the confusion.
Look here: http://www.oracle.com/technology/documentation/oim1014.html

OIM and High Availability

Hi All...
Question about OIM and High Availability and licensing:
If I license OIM for production Server and OIM connectors and I want two have a 2nd machine that serves as stand-by machine, do I have to licence OIM and connectors for the stand-by machine?
Thanks.

Scheduled tasks tuns on a specific server so running in a cluster won't really help you with having redundancy for scheduled tasks.
If you have very big scheduled task you have a few options:
1. Introduce milestones
Change the code so that the process does the work in batches. If something happens you can return to the last milestone instead of having to go back to scratch.
2. Multiple communicating threads
Implement batching and also run multiple threads that coordinate the effort and makes sure that there always are instances running on all nodes. If not spawn more instances until you get threads on all nodes. If a node dies the work is journaled back and is divided between the other threads. Would work but would probably get very complex.
Oracle recently ran training courses in OIM HA. I attended the course but I can't really distribute the material so please contact your Oracle account manager and ask them about the training.
Hope this helps
/M

OIM 11g R2 Available Roles For Organizations Is Empty After XML Import

Hi,
When we exported Organizations in OIM via Deployment Manager and imported them back, available roles on Organizations are gone.
To be exact; Hierarchical role assignments are gone, which are done using "include-sub-orgs" check while putting organizations to Roles.
To understand the problem,
We took a single organization, exported it, changed only organization name in the XML and imported it back. The results are the same.
We included every possible dependency in the xml to see if this was the issue, apparently it wasn't.
Furthermore,
On the Role screens' Available Organization's tab, when we check the "include sub orgs" box, it works fine on manually added organizations. They are shown on Available Roles for the Organizations.
But this doesn't work on imported organizations.
Is there a trick to this in R2?
How can we export-import the organizations and still see the available roles?
Thanks,
Erdogdu

Hi All
Any updates please . Can any one just update whether creating a custom attribute on User Profile adds the attribute in the list of attributes for membership rules for roles .
Thanks
Darshan

Language pack available in OIM 10g

Hi,
Can any tell me about the different language pack available in OIM 9.x.X
I have an requirement to change the default English language to some other language e.g chinese language . Is this possible?
In case of provisioning can I enter different language in database and how it will be interpreted by the target if using SPML based provisioning?
Thanks!

Hi Metmieru.
Did you, by any chance, upgraded from 8 to 8.1?
If so, please check this article:
Language packs are no longer available after upgrade to 8.1
Hope this helps.
Please click on Propose As Answer or to mark this post as and helpful for other people. This posting is provided AS-IS with no warranties, and confers no rights.

What all connectors are available for OIM to connecting to a LDAP?

Hi,
Please let me know what all connectors are available for OIM to connecting to a LDAP?

To answer your question a little more clearly:
The first reply does have a list of connectors.
If you are running OIM 9.x you will be better off using an older version of the Active Directory connector. You might have to search the web or request it through an SR. I have multiple versions of this particular connector to service different clients.
If you are running OIM 11gR1 or 11gR2 or 11gR2PS1 then you will want to use the Microsoft Active Directory User Management connector which is the activedirectory-11.1.1.5.0.zip download. Be sure to apply patch p14190610 if you have OIM 11gR2 or PS1.
If this answers your question completely please mark the thread accordingly.

OIM 11g high availability - is LDAP required for Weblogic credential store

Hi all,
Trying to understand whether we need an LDAP in an HA architecture with [OIM/SOA] - [OIM/SOA/Admin]?
The HA guide: http://docs.oracle.com/cd/E14571_01/core.1111/e10106/imha.htm#CDEFECJF
Does not mention this requirement, in fact it specifically says you only need an LDAP if: "only for LDAPSync-enabled Oracle Identity Manager installations and for Oracle Identity Manager installations that integrate with Oracle Access Manager. "
However I have seen mention of issues with viewing tasks in SOA from OIM:
How To : ORABPEL-30504: After Oim 11g Installation, Approval Tasks Cannot Be Read Through OIM Console
Stating then when using OIM, SOA and an isolated Admin server, you need to switch to a proper LDAP as a credential and policy store:
http://docs.oracle.com/cd/E17904_01/core.1111/e12036/net.htm#CIHIDJCC
"2.4 LDAP as Credential and Policy Store
With Oracle Fusion Middleware, you can use different types of credential and policy stores in a WebLogic domain. Domains can use stores based on XML files or on different types of LDAP providers. When a domain uses an LDAP store, all policy and credential data is kept and maintained in a centralized store. However, when using XML policy stores, the changes made on managed servers are not propagated to the Administration Server unless they use the same domain home.
An Oracle Fusion Middleware SOA Suite Enterprise Deployment Topology uses different domain homes for the Administration Server and the managed server as described in the Section 2.3, "Shared Storage and Recommended Directory Structure." Derived from this, and for integrity and consistency purposes, Oracle requires the use of an LDAP as policy and credential store in context of Oracle Fusion Middleware SOA Suite Enterprise Deployment Topology. To configure the Oracle Fusion Middleware SOA Suite Enterprise Deployment Topology with an LDAP as Credential and Policy store, follow the steps in Section 11.1, "Credential and Policy Store Configuration."
So which is it does anyone know?
Thanks,
Wayne.
Edited by: wblacklock on May 17, 2012 6:12 AM

Note that you can use the internal LDAP that comes with WebLogic, for your users and groups if you want.
When you have multiple domains, you have a problem with this set-up as the internal LDAP is coupled to
a specific domain. This means that users you created in one domain are not visible in the other. When using
a separate LDAP that contains the users. You can configure in each domain an authenticator that points
to the LDAP. In this way you can share to user accross multiple domains.
When you are planning to use one domain you can stick with the internal LDAP if you want.
An example set-up (that uses access manager not identity manager) can be found here: http://middlewaremagic.com/weblogic/?p=7819,
which might help you in how to proceed.

OIM 9.1.0 Available

Similar Messages

Maybe you are looking for