OIM - AD Trusted Resource/Resource Object

I need to populate samAccountName in the Xellerate User object for Exchange Mailbox linking bc our Xellerate User User Id is a EmpID not samAccountName.
So I've added AD as a Trusted Resource. Great, I can populate samAccountName in OIM. However, my problem now is that I need AD to show up as a Resource Object under a User's Resource Profile. When AD is a Trusted Resource, the associated user object doesn't appear in the Resource Profile since there is not process form.
Is there any way to over come this?

In the end, I just created another AD User Resource Object called AD User Trusted and used that object for trusted resource/recons and used the origianl AD User object for the non trusted resouce/recons.
Works, just as I wanted. I have a AD resource associated to my users profile and I also have samAccountName populated in the Xellerate User object.

Similar Messages

  • Using Xellerate User as trusted Resource Object -  11G Release 2

    Hi all,
    I want you use Xellerate User as trusted Resource Object for trusted reconciliation. From design console I try to add my custom attributes to this RO, but when I try to save I get error that it is not permmited.Is this a kinda bug or in Release 2 something has changed and I must define new trusted RO? Any help is strongly appreciated..
    BR,
    Aliye

    There is a checkbox "Trusted Source" on the Resource profile. You can select this check box if you want to use the resource object for trusted user reconciliation. By default, this check box is not selected. It is selected by default only for the Xellerate User resource object. Since Xellerate User resource object is OOTB and very critical, it is recommended to use a different dedicated resource for simply used as Trusted Resource Object....
    Details can be found in *11.9.4 Resource Objects Form*
    http://docs.oracle.com/cd/E21764_01/doc.1111/e14309/resmgt.htm#CBBFAIEC

  • More than one trusted resource for OIM 9.1.0.2

    Hi all,
    I just heard that in OIM 9.1.0.2 it is possible to have more than one trusted source, as it is not necessary to configure it to Xellerate User Resource Object. Is that correct?
    To configure OID Connector as Trusted Source on OIM 9.1.0.2 do I have to import its XML file?
    Regards
    Hossam

    From what i recall, the OID connector does not come with a second object for the trusted one. I think it comes with the Xellerate User object updated.
    To make a new trusted resource, create the resource object, check the trusted source box. On the recon fields, add in all your recon fields you want to use. On the recon action rules tab, set your rule for match not found to create a user, and entity match to link to user. Create a reconciliation rule for this object and the xellerate user object. Create a provisioning process defintion with no additional tasks. On the reconciliation field mappings tab, map all your recon fields to OIM user fields. You'll want to create any entity adapters/event handlers needed to provide required fields such as User Type, and User Role, and Organization and so on.
    Now when you get a recon event for this object, it will be a trusted object and can create new users for you and update the OIM profile.
    -Kevin

  • Resource Object API in OIM 11g r2

    Hi All,
    I'm new to OIM 11.1.2 and I'm working on provisioning users(trusted source) to OIM using custom code.
    In oim 9x ,tcObjectOperationsIntf is used to perform Resource object  Operations.I would like to know about Resource Object api in 11g R2
    Please help me on this.
    Regards,
    Madhu

    Resource objects in OIM11GR2 are application instances. You can refer application instance service API:
    http://docs.oracle.com/cd/E27559_01/apirefs.1112/e28159/oracle/iam/provisioning/api/ApplicationInstanceService.html
    Also, you can refer oim service api for common operations:
    http://docs.oracle.com/cd/E27559_01/apirefs.1112/e28159/oracle/iam/api/OIMService.html
    regards,
    GP

  • How to delete old resource objects in OIM

    I'm working with OIM Version: 9.1.0.1866.70 and I've recently been told that we are not going to be using a certain resource object anymore.  I've looked and gone through the design console but I don't see any option for deleting an entire resource.  Is there even a way to delete a resource in OIM?  I can turn off self-requestable but our numerous provisioning admins will still have the ability to grant the defunct resource.  Is this available in a later version of OIM?

    Hi,
    This is a forum for discussion about application development in C/C++/Fortran. I think you want to raise your question in a forum about identity management. This one looks more promising:
    Identity Management
    Regards,
    Darryl.

  • API of Resource object managment - OIM 11g R2

    Hi All,
    I want to provision a resource (say 'AD User') from a post event handler (OIM 11g R2) during user creation.
    Please tell me the API to be used.
    In OIM 10g, we can use 'tcObjectOperationsIntf' interface to operate on resource objects. what API is its replace in OIM 11g R2?
    Thanks in Advance.

    Create a role and add a rule membership to that role using your custom attribute.
    Create an access policy to provision AD resource and use the role created above while creating access policy. There will be a schedule task with the name "Evaluate user access policies". Change its schedule to run for every 1 minute.
    Now, create a user who satisfies the above role membership and make sure this user got the role membership. Immediately after a minute, this new user should be provisioned to AD resource automatically.

  • OIM - How To not show the "Disable" option for a Resource object to a group

    Hello there,
    Is there anyway we can remove or don't show the option to "Disable" a already provisioned resource object ?
    I have a requirement over here wherein there is no reason available to show the "disable" option out of the 3 available - "enable", "disable" and "revoke" for an already provisioned RO.
    How can we remove it ? We don't want users belonging to a specific group see that option, at all.
    Is there any menu item associated with it ? or is there any other way we can configure it ?
    Please advise to the earliest.
    Thanks !!
    P.S.: this is OIM 9102 running on solaris.
    Edited by: 786001 on Oct 13, 2010 7:22 PM

    Modify JSP:
    And to do this just for a particular group, put your java code in JSP itself. This is the easiest approach.
    Otherwise you can modify the action class to return two action forwards and then use two different JSP's.
    Thanks
    Sunny

  • How to create clone of exsiting Resource Object in OIM

    Hi..I need a help here.
    I have already one Resource object in OIM with all required mapping for Object reconciliation and Action rule.
    I want to create clone of the same resource object with diffrent name and keep same Object reconciliation and reconciliation Action mapping in OIM.
    How can i do that
    Thanks !!

    Take the export of this Resource Object.
    Do changes in the XML like resource Object Name, Form Names, Process Defintion, Email Template (if required)
    Save it and import it back into OIM.
    Note: Take export of independent Lookups or any configuration which you are using in existing Resource Object.

  • Special character issue with Resource Object in OIM 11g

    Hello
    While creating Resource Object with special character '/' in OIM 11g, it's not allowing me.
    For ex: Peoplesoft Finance/Reporting
    Do we have any other workaround without changing the Resource Object name??
    Thanks for your help.

    Nothing is there in system configuration related to special character.

  • How to Create Resource Object in OIM through SQL queries or OIM APIs

    Hello,
    I have to create few (100) resource Objects in OIM. I was creating manually through Design console one by one. In future we might need to create many more Resource Objects .It takes lot of time if we do it through Manually.
    Is there any possiblity we can create Resource Objects through SQL query or OIM APIs ???
    Thanks!!

    Yes. I do it all the time.
    If you are using 11G 11.1.1.3
    Go here
    http://fredforester.org/code/xmlstarters/
    Download the files.
    RESCFORM.xml is an example resource built from the template
    buildtemplate.sh is a shell script that creates a resource from the template
    index.php - you dont need this
    templateresource.xml - this is the template resource. it was created by building a simple resource with all its basic tasks and components then editing it and renaming things so I can find them with sed
    to create Resource C you would
    ./buildtemplate.sh RESCFORM "Resc Resource" "Resc Process"
    you would end up with a file called RESCFORM.xml where when imported would have
    UD_RESCFORM
    Resc Resource Resouce Defintion
    Resc Process Process Defition with basic tasks pointing to a dummy adapter.
    You can optionally create your own prepop so it will get assigned to the form when you import.
    Good luck

  • Provision a Resource Object to Organization automatically in OIM 11g

    Hi All,
    How to provision a resource Object to Organizations automatically in OIM 11g.
    Can we use Access Policy for this , if not , is there any other way to solve this.
    Regards
    Edited by: 903745 on 31 May, 2012 1:40 AM

    Are you referring to creating an resource object (e.g. group) on the Organization itself (as opposed to users in that Organization) ? If so this can be done from a post-process event handler on the Organization object.

  • Export OIM 11g Resource object with dependencies

    Hi All,
    I am looking for sample code that will export all OIM 11g Resource objects along with dependencies into XML format. Can somebody help?
    I am using the below code to retreive all resource objects but don't have dependencies.
    FileWriter fstream = new FileWriter("OIMResources.xml");
    BufferedWriter out = new BufferedWriter(fstream);
    tcExportOperationsIntf moExportUtility = (tcExportOperationsIntf) ioUtilityFactory
              .getUtility("Thor.API.Operations.tcExportOperationsIntf");
    Collection lstObjects = moExportUtility.findObjects(export_object, "*");
    String s = moExportUtility.getExportXML(lstObjects, "*");
    out.write(s);
    Thanks
    Mahendra.

    Hi Vladimir,
    I am using the below code snippet to do the export of Resources.
    public Boolean export() {
         Boolean result = true;
         //String export_object = Util.config.getProperty(Constants.EXPORT_PATH);
         String export_object="Resource";
         /*if (export_object != null && !export_object.endsWith(File.separator)) {
         export_object = export_object.concat(File.separator);
         //String export_object_path = export_object.concat(xmlFile);
         try {
         FileWriter fstream = new FileWriter("OIMResources.xml");
         BufferedWriter out = new BufferedWriter(fstream);
         tcExportOperationsIntf moExportUtility = (tcExportOperationsIntf) ioUtilityFactory.getUtility("Thor.API.Operations.tcExportOperationsIntf");
         Collection<RootObject> lstObjects = moExportUtility.findObjects(export_object, "*");
         System.out.println(lstObjects);
         lstObjects.addAll(moExportUtility.getDependencies(lstObjects));
         lstObjects.addAll(moExportUtility.retrieveChildren(lstObjects));
         lstObjects.addAll(moExportUtility.retrieveDependencyTree(lstObjects));
         String s = moExportUtility.getExportXML(lstObjects, "*");     
         out.write(s);
         LOG.info(Resource + " Objects are successfully exported --------------->");
         out.close();
         } catch (Exception e) {
         LOG.log(Level.SEVERE, "Exception occured while exporting OIM object - " + Resource, e);
         return result;
    I am not getting its dependent objects as I was getting through OIM Deployment manager console. If I export the details through OIM console, the file size is around 3 MB. If I exported through above java code, file size is 300 KB only.
    Please let me know if I am missing anything.
    Edited by: Mahendra K on Jun 19, 2012 10:19 AM

  • Search a particular resource object in an organization in OIM?

    Hello,
    Can any body please suggest me which OIM API method i should use to search for a resource object inside an organiozation??

    tcObjectOperationsIntf
    getAssociatedOrganizations
    public Thor.API.tcResultSet getAssociatedOrganizations(long objectKey,
    java.util.Map attributeMap)
    throws Thor.API.Exceptions.tcObjectNotFoundException,
    Thor.API.Exceptions.tcAPIException,
    tcAPIException
    This method is used to get the list of organizations for whom the specified object is being provisioned. If not filter is specified, it returns all the organizations who are associated with this object in any way
    Parameters:
    objectKey - This is the resource object key

  • OIM 11gR1: Add a Task to a Resource Object

    Hello
    I have added a new process task to a Resource Object. Task name is "Change Unique Value" on the RO. I'd like to programatically add this task to all users where the RO is either "Enabled" or "Provisioned"
    I cannot seem to find an 11g API that allow me to find all resources provisioned to a user, and then find all available tasks, and add it.
    Can someone please point me to the API that will allow me to add a task to an RO?
    Thank you.

    tcProvisioningOperationsIntf.addProcessTaskInstance(long plTaskKey, long plOrcKey)
    Run this query for the task key:
    select mil_key from mil where mil_name = 'Change Unique Value'
    Then run the query to get the orc_key
    select oiu.orc_key
    from oiu, ost, obj, obi
    where oiu.ost_key=ost.ost_key
    and oiu.obi_key=obi.obi_key
    and obi.obj_key=obj.obj_key
    and obj.obj_name = :resourceName
    and ost.ost_status in ('Provisioned','Enabled'))
    Then use this code and put a comma seperated value of the orc_key output.
    public void addProcessTask(){
    long[] keys = new long[] {<COMMA_SEPERATED_ORC_KEY};
    int counter = 0;
    for (long key:keys){
    try {
    counter++;
    provIntf.addProcessTaskInstance(<MIL_KEY FROM ABOVE>, key);
    System.out.println(counter + "|" + keys.length);
    } catch (Exception e) {
    System.out.println(e.getLocalizedMessage());
    System.out.println(e.getMessage());
    Verify with one user first, then run the rest. It uses the tcProvisioningOperationsIntf.
    -Kevin

  • Not able to see newly created dummy resource object in OIM admin console.

    Hi,
    Created a new IT resource type and IT resource.Next created a new resource object "ResourceABC" and provided Allow all and Self Request Allowed option. However, still am able to see the resource object "ResourceABC" in the list of resources(when user selects Provision resource template) during self service or request for others.
    Please let me anything I have missed during resource object creation. I guess issue is at the resource object level.
    Note: It is a dummy resource object.
    Thanks.

    I have selected the check box for Allow All and Self Request. With regard to assign the resource by going to each organization, I believe is to provision the resource to all users in under that organization. But I want end user to request for this resource with self service console for self/others. But resource is not showing up in the list of resources.
    Kindly help.
    Thanks.

Maybe you are looking for