OIM and Entrust Integration

Guys ,
Have any one integrated OIM with Entrust ?
We are having challenges with that .
We have written a scheduler which connects to Entrust and pull users , but its not able to recon any users more than 1000 in number .
Just wana know if anyone has ever faced this issue . Do we know how can we implement batching in Entrust .
Thanks

Most likely you are running into issue with LDAP max return sizes.The solution to this problem is paged LDAP searches.
More details including code example: http://iamreflections.blogspot.com/2010/10/adldap-reconciliation-using-paging.html
Hope this helps
/Martin

Similar Messages

Info about OIM and WebCenter integration

Any info or doc/url for OIM and WebCenter integration would be helpful. Any experiences etc please provide some links.

Follow the link -
http://docs.oracle.com/cd/E21764_01/core.1111/e12037/oam.htm#WCEDG345
Follow the below points -
*"Credential and Policy Store Configuration"*
*"Oracle Access Manager 10g Integration"*
*"Oracle Access Manager 11g Integration"*
*"Configuring WebCenter Applications"*
*"Configuring WebCenter and BPEL Authentication"*
*"Backing Up the Installation"*

OIM and OIA11g Integration(error while importing Resource metadata into OIA

Hi,
I followed the below link and trying to integrate OIM 11.1.1.5 and OIA 11.1.1.3.6
And both are deployed different weblogic domains..
http://wikis.sun.com/display/OIA11gDocs/Integrating+With+Oracle+Identity+Manager,+Preferred+Method
I am getting error in Step 6: Import the Oracle Identity Manager (OIM) Data Into Oracle Identity Analytics (OIA) -> To Import Resource Metadata
10:56:21,484 DEBUG [DBIAMSolution] publishing import starting event...
10:56:21,623 DEBUG [OimUtilityFactory] ************** OIM Connection Params *************
10:56:21,628 DEBUG [OimUtilityFactory] XL Home ---> C:\Oracle\Middleware\Oracle_IDM1
10:56:21,630 DEBUG [OimUtilityFactory] login config ---> C:\Oracle\Middleware\Oracle_IDM1\server\config\authwl.conf
10:56:21,631 DEBUG [OimUtilityFactory] ****************************************************
10:56:21,636 DEBUG [OimUtilityFactory] Xellerate Discovery Settings {}
10:56:21,638 DEBUG [OimUtilityFactory] ********** Connecting to OIM Server **********
10:56:21,774 ERROR [IamDbNamespaceImporterHelperImpl] Error connecting to OIM
Thor.API.Exceptions.tcAPIException: javax.security.auth.login.LoginException: java.lang.SecurityException: [Security:090304]Authentication Failed: User xelsysadm javax.security.auth.login.FailedLoginException: [Security:090302]Authentication Failed: User xelsysadm denied
     at Thor.API.tcUtilityFactory.<init>(tcUtilityFactory.java:166)
     at com.vaau.rbacx.iam.util.oracle.oimapi.OimUtilityFactory.getUtilityFactory(OimUtilityFactory.java:67)
     at com.vaau.rbacx.iam.db.helpers.IamDbNamespaceImporterHelperImpl.readNamespaces(IamDbNamespaceImporterHelperImpl.java:87)
     at com.vaau.rbacx.iam.db.DBIAMSolution.readResourceMetadata(DBIAMSolution.java:642)
     at com.vaau.rbacx.iam.service.impl.RbacxIAMServiceImpl.importResourceMetadata(RbacxIAMServiceImpl.java:472)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
     at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
     at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
     at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
     at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
     at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
     at $Proxy274.importResourceMetadata(Unknown Source)
     at com.vaau.rbacx.scheduling.executor.iam.IAMJobExecutor.execute(IAMJobExecutor.java:107)
     at com.vaau.rbacx.scheduling.manager.providers.quartz.jobs.AbstractJob.execute(AbstractJob.java:72)
     at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
     at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:534)
10:56:21,784 ERROR [DBIAMSolution] Error Importing Namespaces : javax.security.auth.login.LoginException: java.lang.SecurityException: [Security:090304]Authentication Failed: User xelsysadm javax.security.auth.login.FailedLoginException: [Security:090302]Authentication Failed: User xelsysadm denied
10:56:21,836 DEBUG [DBIAMSolution] publishing import completed event...
10:56:21,903 INFO [VaauSchedulerEventListenerImpl] Job executed: oim tst, IAM
10:56:21,904 INFO [VaauSchedulerEventListenerImpl] Job run time: 0s
10:56:21,904 INFO [VaauSchedulerEventListenerImpl] Next Run: null
Thanks..
Edited by: IDMuser19 on Aug 24, 2011 4:06 PM
Edited by: IDMuser19 on Aug 25, 2011 10:58 PM

Thanks rajiv for the reply..
No i am not able to import users too..getting same error in the rbacx.log
I tried with below details
Xellerate Home: C:\Oracle\Middleware\Oracle_IDM1
Login Config : C:\Oracle\Middleware\Oracle_IDM1\server\config\authwl.conf
User Name: XELSYSADM
Password : ●●●●●●●●
( in version 11.1.1.3.6 does not prompt for these two Provider URL: t3://localhost:14000 , Initial Context Factory: weblogic.jndi.WLInitialContextFactory)
here the OIA and OIM are in different domains.. i am able loginto OIM with xelsysadm without any problem just followed the instruction in the integration doc not sure where i did a mistake..
Please let know if have any idea..Thanks..
Edited by: IDMuser19 on Aug 30, 2011 8:25 AM

OIM and ESSO integration - ROOT_RESOURCE_NAME

I have a question about setting the ROOT_RESOURCE_NAME variable...
The documentation says it should be AD Server 2003, but in the documentation from the Provisioning Gateway it says the same thing but also says the value is the repository for the ESSO_LM. When I connect to my repository, it's listed as "oim". So I'm not sure if it's just "AD Server 2003" and that's pretty much a hard set value or what.
Thanks in advance.
-Bryan

Nevermind.. its just the name of the AD resource already created.

Integration and reconciliation of OIM and OID

I need to do integration with OID and OIM, when i import the XML file, there are two XML files,
1) oimOIDuser
2) oimUser
which xml should be used for the integration of OIM and OID.
and for the trusted source Reconciliation.
-sudhan elango.

oimOIDUser.xml
If you are using OIM 9.1.0 or later then you don't have to import the connector
You can install it by copying the contents of the installation in OIM_HOME/xellerate/ConnectorDefaultDirectory
and then Deployment Manager-> Install connector and from the connector list select OID connector and Load
Hope it helps,
Saggu

Very Very Urgent Please help me Integration between OIM and Siebel CRM

1.The system is proprietary of nature and hence not out of the box provisioning agents exist to integrate the system.
Integration options for COPS(Customer Organisation Profiling System) ) is a proprietary CRM system holding contact, billing and other profile information as the authoritative source on customers;
I need complete solution.Please help me its very very urgent.

As mentioned in your Subject, if it is integration between OIM and Siebel CRM, we have an OOTB connector available for it. Even if your application is similar to Siebel CRM, you can refer the OOTB Siebel connector and do some reverse engineering on it to make a similar one..
Hope it helps.. otherwise .. all the best and go ahead with writing a new connector and share your exp with the other forum members.
cheers

Single credential for logging to OIM and integrating resources

Hello Friends,
I can have a single user account and password for the application IOM and all resources to be set (AD), for example: If a user who has access to the application of IOM with the credentials (user / password = jlk / jlkoim), and automatic provisioning is ADUs provisions the resource, and when I authenticate the team assigned to the domain, you could use the same credentials of the implementation of IOM.
What are the advantages and disadvantages might have with this scenario? What would be the best alternative in this scenario?
Thanks.

It is a common requirement of any client that maintaining password from OIM.
For sending Password to AD you need to setup SSL between OIM and AD.
Advantage:
Password will be maintained by OIM in all the resources and all passwords will be in Synch.
Cost Saving

OAM-OIM 11g r2 integration is failing

Hi,
Following is my configuration,
1. I have OIM 11g r2 and OAM 11gr2 installed on different weblogic domains.
2. OIM synchronized with OUD LDAP
3. I followed the steps described in http://docs.oracle.com/cd/E27559_01/integration.1112/e27123/oim.htm
4. After the integration, I'm not able to login to the Oracle Access Manager console. Though my authentication is successful, I'm getting authorization error.
As per the doc, oamadmin user (member of oamadministrator group) should be able to login to the console. On weblogic console -> security realms screen, I can see oudauthenticator (authenticates against OUD LDAP) created by the idmconfig tool (tool used for the integration). On the same screen, if I open oamadmin user profile, I don't see any group membershiip information for this user. I also created Administrator group in my LDAP and assigned oamadmin as a member, but in vain. My guess is, since oam server is not recognizing user's role, it's giving an authorization error.
The documentation mainly talks about using OID as LDAP between OIM and OAM, though it claims other LDAPs are also supported. If anyone has successfully integrated, what do you see in oamadmin user profile, especially in the group membership attribute. Any other ideas/workarounds are greatly appreciated.
Thanks, Nishanth

I successfully did this into my VMWare and oamadmin user has there:
[oracle@thiagoleoncioVM ~]$ ldapsearch -D cn=orcladmin -w **** -b "dc=leoncio,dc=thiago" -L -s sub -v orclmtuid=*oaamadmin* memberOf
filter pattern: orclmtuid=*oaamadmin*
returning: memberOf
filter is: (orclmtuid=*oaamadmin*)
dn: cn=oaamadmin,cn=Users,dc=leoncio,dc=thiago
memberof: cn=oaamcsrgroup,cn=groups,dc=leoncio,dc=thiago
memberof: cn=oaamcsrmanagergroup,cn=groups,dc=leoncio,dc=thiago
memberof: cn=oaamenvadmingroup,cn=groups,dc=leoncio,dc=thiago
memberof: cn=oaaminvestigationmanagergroup,cn=groups,dc=leoncio,dc=thiago
memberof: cn=oaaminvestigatorgroup,cn=groups,dc=leoncio,dc=thiago
memberof: cn=oaamruleadministratorgroup,cn=groups,dc=leoncio,dc=thiago
memberof: cn=oaamsoapservicesgroup,cn=groups,dc=leoncio,dc=thiago
1 matches
I hope this information helps you with your issue then you should be able to see what is missing there,
Thiago Leoncio.

OIM with ESSO integration problem

I am attempting to build a demo of OIM and ESSO, completely integrated and having trouble. I have OIM setup and working with AD, creating accounts and provisioning passwords. I am failing at integrating ESSO with it.
It seems when I copy the ESSO provisioning gateway files into the JBOSS \lib\endorsed directory, JBOSS throws a fit and I can no longer load the OIM web console.
I am running OIM 9.1.0.1 with JBoss 4.2.3.GA and JDK 1.6.0_16.
Any help would be greatly appreciated. It only seems to be the xercesImpl.jar file that breaks it. I have copied all of the other files in and have modified the run.bat in the Jboss bin directory. As soon as I copy the xercesImpl.jar in, nothing works.
Any ideas?
Thanks in advance.
-B

Nevermind.. its just the name of the AD resource already created.

OIM and OIA same box?

Looking for recommendations here. What is the best way to install OIA? in the same weblogic cluster as OIM? Any reason not to use weblogic or the same app server? Any special considerations for a cluster (2-node)?
Thank you!

I think it all depends on your hardware capabilities, the size of your environment, and your cluster configurationsEXCELLENT ADVISE!
I would recommend putting OIA on an environment that allows you to access as much heap as possible.SOMEONE GIVE THIS GUY A MEDAL!!!
You guys might as well say, 'Make sure you turn on your computer before installing' or 'Use your fingers when installing OIM/OIA... using your toes is prone to error'
OK rant over,
OOTB, you need to put OIA and OIM on separate managed domains. The conflict of .jars caused trouble when when startup and also integration. The location of the DB is fine though, Use RCA and the OIA schema file to build up the DB's. IDEALLY, use the same app server technology when talking to both products, different app server uses different protocols. I had problems with apache and glassfish when I was trying to mix and match
Regards,
Daniel

Oracle Portal and Discoverer Integration

Portal Version: 9.0.2.0.1
RDBMS Versjion: 9.0.1.3
OS/Vers. Where Portal is Installed:: Suse 7 SLES
Error Number(s)::
Oracle Portal and Discoverer Integration
We're trying to integrate Discoverer with Portal unsuccessfully.
We made many things in accordance with oracle's documentation until add discoverer portlets (worksheet and list of workbooks) in a test page.
In view mode, the worksheet portlet shows the error:
"The portlet has not been defined. The publisher must define the portlet by clicking on Edit Defaults for the portlet on the edit mode of this page. Please contact the publisher of this page."
We think we have to edit properties before. Is this? Anyway edit worksheet portlet crashes between step 1 and 2. The error is: "The listener returned the following Message: 500 Internal Server Error".
We have a public conection created in EM and a discoverer application which can be viewed using plus or viewer.
Furthermore, it's not possible delete the added portlets neither the page that contain it. The error at delete is:
Error: An unexpected error occurred: User-Defined Exception (WWC-44082)
(WWC-00000)
An unexpected error has occurred in portlet instances: User-Defined Exception (WWC-
44846)
An unexpected error occurred: User-Defined Exception (WWC-43000)
The following error occurred during the call to Web provider:
oracle.portal.provider.v2.PortletNotFoundException
at oracle.portal.utils.v2.ContainerException.fillInStackTrace(Unknown Source)
at java.lang.Throwable.<init>(Throwable.java:78)
at java.lang.Exception.<init>(Exception.java:29)
at oracle.portal.utils.v2.ContainerException.<init>(Unknown Source)
at oracle.portal.provider.v2.PortletException.<init>(Unknown Source)
at oracle.portal.provider.v2.PortletNotFoundException.<init>(Unknown Source)
at oracle.disco.portlet.provider.DiscoPortletPersonalizationMgr.destroy
(DiscoPortletPersonalizationMgr.java:65)
at oracle.portal.provider.v2.DefaultPortletInstance.deregister(Unknown Source)
at oracle.webdb.provider.v2.adapter.soapV1.ProviderAdapter.deregisterPortlet
(Unknown Source)
at java.lang.reflect.Method.invoke(Native Method)
at oracle.webdb.provider.v2.utils.soap.SOAPProcessor.doMethodCall(Unknown Source)
at oracle.webdb.provider.v2.utils.soap.SOAPProcessor.processInternal(Unknown Source)
at oracle.webdb.provider.v2.utils.soap.SOAPProcessor.process(Unknown Source)
at oracle.webdb.provider.v2.adapter.SOAPServlet.doSOAPCall(Unknown Source)
at oracle.webdb.provider.v2.adapter.SOAPServlet.service(Unknown Source)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:336)
at com.evermind.server.http.ResourceFilterChain.doFilter
(ResourceFilterChain.java:59)
at oracle.security.jazn.oc4j.JAZNFilter.doFilter(JAZNFilter.java:283)
at com.evermind.server.http.ServletRequestDispatcher.invoke
(ServletRequestDispatcher.java:523)
at com.evermind.server.http.ServletRequestDispatcher.forwardInternal
(ServletRequestDispatcher.java:269)
at com.evermind.server.http.HttpRequestHandler.processRequest
(HttpRequestHandler.java:735)
at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:151)
at com.evermind.util.ThreadPoolThread.run(ThreadPoolThread.java:64)
(WWC-43147)
Edit properties for portlet List of Workbook works but in view mode we have the error in the portlet area:
"Failed to refresh portlet. Please verify that the information used to create the
portlet instance or customization is still valid. Otherwise, please contact your
iAS administrator. oracle.discoiv.controller.FatalControllerException:
DiscoNetworkException - Nested exception: org.omg.CORBA.OBJECT_NOT_EXIST: minor
code: 0 completed: No null"
Any ideas?
Thanks

Hi there,
Have you applied any patches to 9ias since it was first installed? We had the same problem and had to apply a couple of patches to get the portlets working.
1. Apply the 9.0.2.53.16 one-off patch for Oracle 9iAS Discoverer which takes Discoverer up to 9.0.2.53.16. This patch appears to be password protected and you need to get someone at Oracle support to give you a password.
2. Apply the Discoverer Portlet Provider: 9.0.2.53.00c patch (patch no. 2595444) which gives you a new discportal.xsl file that actually works. It's this second step that solves your problem but you need to do step 1 before this. This is password protected as well.
3. As you've upgraded Disco on the server to 9.0.2.53, you'll need to upgrade Disco Admin & Desktop within your 9iDS installation using patch no. 2555265. This is because Disco 9.0.2.53 uses an upgraded EUL that Disco Admin & Desktop need to be patched to use.
This was the course of action Oracle support advised us about nine months ago. Of course they may have released a further patch to Disco that does 1 & 2 in one go, but we regularly carry out steps 1 and 2 on servers we use and we can use the Disco portlets successfully.
Hope this helps
Mark Rittman
[email protected]

Unit testing and system integration testing for crystal report

Hi gurus,
I am creating crystal report by oracle procedure, will you please tell me how to do unit testing and system integration testing? appreciate very much.

The focus of this forum is report design. The actual testing of reports would be subject to your own internal policies and procedures.
Jason

Question regarding MM and FI integration

Hi Experts
I have a question regarding MM and FI integration
Is the transaction Key in OMJJ is same as OBYC transaction key?
If yes, then why canu2019t I see transaction Key BSX in Movement type 101?
Thanks

No, they are not the same. The movement type transaction (OMJJ) links the account key and account modifier to a specific movement types. Transaction code (OBYC) contains the account assignments for all material document postings, whether they are movement type dependent or not. Account key BSX is not movement type dependent. Instead, BSX is dependent on the valuation class of the material, so it won't show in OMJJ.
thanks,

Jabber and O365 integration

Hello,
Do we need any additional licenses from Cisco or Microsoft to make a full possible integration between O365 and Jabber ?
For example features like :
Single Inbox Unified Messaging with SpeechView transcriptions, Microsoft Word Click to Call, SharePoint Presence & Click to Call, Jabber video calling and desktop sharing, and WebEx on desktop and iPad,
Thank you for your help
Best Regards,
Tomasz

Tomek,
There is no direct integration between Jabber and Office 365, except for Exchange Gateway integration on IMP server side which is not supported with Office 365. All other Jabber integrations do not go to Office 365, calendar client integrations are done with Outlook, and UM integration is between Office 365 and Unity Connection, which does not affect Jabber.
HTH,
Chris (Krzysiek) :-)

REPORT WITH SALES AND PRODUCTIN INTEGRATION?

HI,
HERE I NEED TO DISPLAY THE SALES AND PRODUCTION INTEGRATED (FOR MAKE TO STOCK) LIST BY DAY WISE ,I AM NOT ABLE TO FIND THE TABLES FOR THAT.
HERE LIST HEADER IS FOLOWING.
MATERIAL CODE, MATERIAL DISCRIPTION, PRODUCTION QTY, PROD. VALUE, SALES(BILLING QTY, SALES(BILLING) VALUE.
AND THAT LIST TOTAL PRODUCTION VALUE SHOULD EQUAL TO THAT PARTICULAR DAY TOTAL PRODUCTION VALUE,
AND THAT LIST TOTAL SALES(BLIING) VALUE SHOULD EQUAL TO THAT PARTICULSR DAY TOTAL SALES(BILLING) VALUE.
PLZ HELP OUT FROM THIS,
REWARDS IN ADVANCE....
REGARDS,
NAVEEN

Have you tried the txn code MC-Q or the report program RMCV0500.

OIM and Entrust Integration

Similar Messages

Maybe you are looking for