OIM Open provisioning Tasks

On the OIM home page there is a Open Provisioning Task counter. I want to make that set to "Check". I remember that you set the property skipPendingApprovalsOpenTaskCount in xlDefaultAdmin.properties file to false and it then does not show the counter but shows "Check" link instead. I set it to false, restarted server but counter is still there. Am I missing something else? Any help would be appreciated. Thanks.

Not that much difficult Dude. Its actually a System Configuration property and not in the xlDefaultAdmin.proerties file.
- Go to property XL.WebAdminHome.CounterDisplay.Type
- Change its value from DayLimit to CheckLink
- You are done without even re-starting
Sunny

Similar Messages

Task not coming in Open Provisioning Task when Request is raised(OIM 9i)

Hi
When ever i am assigning the task to group that task is not getting updated in the open provisioning tasks. I i assign the task to xelsysadm instead of the group i am able to see the task in open provisioning tasks.
I thought its permission issue and created a user U1 under the system administrators and assigned the task to this user while provisioning but now also its not getting updated in the open provisioning tasks.
The above tasks if i saw in resource profile they are in pending status..
Can any one update how to resolve this issue so that if i assign a task to group it updates in Open provisioning tasks..

Verify Steps:
Create Process Defn
Check Auto Save and Pre Populate
Save
Add a task "Create User"
Save
Go to Assignment tab
Select Target Type as Group and Select your Group Name say "ALL USER"
Search any user, go to Resource Profile and Click Provision Resource and Submit

OIM 9: User assigned Provisioning Task can't see "Open Provisioning Tasks"

I have a user who is assigned a task through the Assignment tab, but when they log in, they don't see the "Open Tasks" menu. If I make them sys-admin, they can see it, so It has to be a permissions thing, but where exactly?
Any help would be appreacited!
Thanks
Alex

You need to assign the following menu items "To-Do List Open Tasks menu item" to the group the user belong to.

Retry open provisioning tasks

Hi,
I've created a non-conditional task called "ValidateAttr" in the Xellerate User Process Definition, so that while creating an account, the task got executed in order to validate an attribute. This task is supported by an adapter (adpVALIDATEATTR).
The problem is that I didn't mapped correctly the responses on the process task definition, so I got every task with "Rejected" status, even if the result was success.
I've corrected this and I don't get this error anymore. But I have 26000 provisioning opened tasks asigned to xelsysadm. I can close them manually with the administrative console, but I'm looking for the way to close these tasks automatically. I've written a scheduled task that search for the open tasks and invokes the tcProvisioningOperationsIntf.retryTasks() method, but I got the following message:
ERROR,13 feb 2009 12:36:28,764,[XELLERATE.SERVER],Class/Method: tcScheduleItem/checkRetryAllowed Error : Invalid retry.No event handler is attached in ScheduleItem.
ERROR,13 feb 2009 12:36:28,932,[XELLERATE.APIS],Class/Method: tcProvisioningOperationsBean/retryTasks encounter some problems: maoRejections:This task is not automated. If task is completed, set status to UC.

This is the snippet from the scheduled task:
tcProvisioningOperationsIntf provUtil = (tcProvisioningOperationsIntf)
super.getUtility("Thor.API.Operations.tcProvisioningOperationsIntf");
Map<String, String> atributos = new HashMap<String, String>();
String[] estados = {"Rejected"};
tcResultSet openTasks = resultado = provUtil.getAssignedProvisioningTasks(1, atributos,
estados);
if(openTasks!=null){
int numRow = openTasks.getRowCount();
if(numRow>0){
long[] idTareas = new long[numRow];
for(int i=0;i<numRow;i++){
tareasAbiertas.goToRow(i);
idTareas[i] = openTasks.getLongValue("Process Instance.Key");
Map<String,String> resultados = provUtil.retryTasks(idTareas);
by executing this, I got the error reported on the first message. I'm considering the "easy way" proposed by Kevin.
Thanks

OIM SPML provisioning task generic connector

We need to know how could get a custom message response from generic connector. Right now we are using a message like:
<addResponse status="Error">
<psoID ID="150">
<targetID ID="IDDESTINO"/>
<containerID ID="ContainerID"/>
</psoID>
</addResponse>
We want to process the message with different status code because with the generic connector always get success when we response with a good formed spml response. We have tryed changing the status to different codes without success.
Is there some sample code or more information to this issue anywhere?
Regards

Hi,
Thanks a lot for reply. For SPML through web service(custom), I am using Generic connector and when I am trying to create a user using this connector it is hiiting the web service with the request
<addRequest xmlns="urn:oasis:names:tc:SPML:2:0" xmlns:dsml="urn:oasis:names:tc:DSML:2:0:core">
<targetID ID="Target5"/>
<containerID ID="1"/>
<data>
<dsml:attr name="objectclass">
<dsml:value>userobject</dsml:value>
</dsml:attr>
<dsml:attr name="lastName">
<dsml:value>sh</dsml:value>
</dsml:attr>
<dsml:attr name="firstName">
<dsml:value>abc1</dsml:value>
</dsml:attr>
</data>
</addRequest>
Of course, I want to add more attibute in this one.....but I didnt find any way to add more attribute in this message...or no ways to modify this request.
With above request it is hiiting the web service and from web service I am returing following reponse as byte array:
<addResponse status="success">
<psoID ID="ash">
<targetID ID="Target5"/>
<containerID ID="1"/>
</psoID>
</addResponse>
but as the response it is giving following on OIM server window:
Response: GCPROV.null
Response Description: An unknown response was received
Error Details
Setting task status... "GCPROV.null" does not correspond to a known Response Code. Using "UNKNOWN".
Can anyone pls help me to figure out this. Also how can I modify SPML message to send more info to the target.
Thanks in advance

OIM Failed provisioning

Hi All
I have integrated OIM with OID as target resource. Suppose OID goes down for some time. I want to know whether OIM will automatically retry the failed tasks in case the target OID was down for some time or the OIM admin will have to retry the task manually again.
How do we keep a track of how many tasks have failed since the OID was down. Has someone faced such case in past.
Thanks

How do we keep a track of how many tasks have failed since the OID was down.
Another possible approach is, create a group say OID Support Officer and give him menu item To-Do List Open Tasks menu item to see Open Provisioning Tasks in Admin Console. In OID process definition go to Assignment tab of Create User task then select target type as Group and select this group under Group lookup.
Now login as user who belongs to the group OID Support Officer and you can see number of rejected tasks under Open Provisioning Tasks.

OIM provisioning in bulk causes several provisioning tasks to be listed as

OIM 9102 Provisioning in bulk causes several provisioning tasks to be listed as "provisioning in queue" We are using offline provisioning as we had some issues running without it.
If i bring in via trusted resource, 10 or so users, the first 5 or 6 work fine, and then 1 or 2 will show some of their resources as provisioning in queue. It looks like it didn't get around to running those as I don't see errors in the log(debug on everything) if I open and save the form, they provision immediately with no trouble. I'm just trying to figure out what the hold up is, and is there a way to have it automatically retry when this happens?
Any help would be great.

also each one this happens to is a different resource. on a different user. and each is stuck and system validation.

OIM-OID Provisioning - OID Group PrePopulate Approach :

Hi,
I am working on OID Connector 9.0.1.14 with OIM 11.1.1.5.
I have reconciled all the Roles and Groups from OID to OIM and can successfully provision users to the OID along with membership to these specific Roles and Groups.
I want to prepopulate the OID Group based on certain attribute from the OIM User form. My Approach so far is :
1) Created an Entity Adapter with a variable : say Org and GroupName.
2) Set the Logic as if Org = XYZ (+XYZ does exist on OIM+) set GroupName as = "OID Group 1" else set GroupName as = "OID Group 2"
3) Attached this adapter to the "OID User Group" form on the "Data Object Manager" at the pre-insert stage.
4) Mapped the Adapter variable as :
a) Org Maps to "Organization Definition" with the qualifier "Organization Name"
b) GroupName maps to the "Entity Field" with the qualifier "UD_OID_GRP_GROUP_NAME"
However nothing seems to happen when I create/modify a user with Orgization Name as XYZ and manually Provision the OID Resource. I can see the form but nothing is populated in the Group Field. Upon completing the request, I get the user provisioned to OID but without any Group information..
Is my approach right ? Am I missing something ?

Here is what I have done for a client. My requirement was for a given department, a user must have a list of groups provisioned to them. So here is what i've done:
1. Create a lookup that has Code Key = Department, Decode = CN of the groups in a delimited format.
2. Create a provisioning task that will look at the department code from the user form, reference the lookup and find the decode values. Split them based on a delimiter. Then using each value, lookup the code key value from the real lookup that contains the full distinguished name of the group in the OID Group lookup. I even appened the IT Resource Key and ~ so that my search would be Decode or Code = "IT Resource Name~CN=<CN VALUE>%". This would return only the single group code key value. And then i add it to the child table. Repeat this for all the values in the delimited field.
3. Create a provisioning task that removes the values from the child table based on the delimited value. You'll need to search through the existing child table values.
Once you have the 2 tasks, you'll want to add a value to the your Lookup.USR_PROCESS_TRIGGERS that is your group determining field. Create your task name in this lookup. On your provisioning workflow, for the Adding of the groups task, make this unconditional, and have a preceding task of the Create User. Give it the name from your Lookup.USR_PROCESS_TRIGGERS and append " - Add Groups" to the task name. Create another task called the same, but append " - Delete Groups" to the task name. On the Add Groups task, make the preceding task the Delete groups. When you map your inputs to the adapters, on the delete, select the old value check box from the User Form so that you get the old value. Now, when the value changes on the user form, it will first remove the old groups, then add the new ones. All this will be done using the child table APIs, so that the existing Insert and Delete task triggers for your child table will run.
-Kevin

OIM 11gR2 provisioning with GTC

Hello,
We are curently implementing Oracle Identity Manager 11gR2, and we are having difficulties with the implementation of the provisioning from OIM to the Target Systems exposed through a webservice on Oracle Service Bus.
We are using the Generic Technology Connectors as a basis of working. And initially we have created a GTC with only reconciliation Transport & Format Providers:
Connector Name TargetSystem1
Transport Provider (Provisioning):
Format Provider (Provisioning):
Transport Provider (Reconciliation): Database Application Tables Reconciliation
Format Provider (Reconciliation): Database Application Tables Reconciliation
We have configured the Process Definition of TargetSystem1 with all the operations (Create User, Update User, Enable User, Disable User, Delete User, etc.) connected with custom Java implementations, that are working just fine is we trigger them form Eclipse. The “Create User” task has only “Required for Completion”, “Allow Cancelation while Pending” and “Allow multiple instances” check boxes set to CHECKED; it also has all the fields in Integration TAB mapped, Responses mapped, but when we create a User in OIM and provision it with an account on the TargetSystem1_GTC Application Instance, the provisioning process in not accessing the “Create User” task to make the provisioning in the target system. The user that we are trying to provision has the account Status set to “Provisioning” and the Account Type set to “Unknown”. We have also checked the logs of OSB, but there is no activity there, because no request from OIM is being received.
After we investigated more closely the Oracle documentation for the Generic Technology Connectors we discovered that if we do not select Transport & Format Providers during the GTC creation, then the corresponding steps are not performed and they are not initialized, thus the provisioning cannot be done. The documentation also states that if we need to create custom providers in order to make the Provisioning with the GTC, but unfortunately we have no knowledge or any examples on how to do such custom providers for the provisioning of Users from OIM on the target systems via the Oracle Service Bus.
We have installed a second GTC with both provisioning and reconciliation Transport & Format Providers:
Connector Name: TargetSystem2
Transport Provider (Provisioning): Web Services
Format Provider (Provisioning): SPML
Transport Provider (Reconciliation): Database Application Tables Reconciliation
Format Provider (Reconciliation): Database Application Tables Reconciliation
The Web Services and SPML options were the only options that we could select from the out of the box connectors that are installed, and we did not find any other connectors in the download section of Oracle for this product, that can accommodate such communication. So, we configured the provisioning accordingly, and modified the “Create User” task from the TargetSystem2_GTC Process Definition, in order to use our custom adaptor instead of the adpTargetSystem2_GTC adapter that was preset when the TargetSystem2_GTC is created. But this does not help us, because the provisioning is not done, and the “Create User” task is not used. The user that we are trying to provision has the account Status set to “Provisioning” and the Account Type set to “Unknown”.
Next we tried to see if the GTC can be used to communicate directly with the OSB, using the Web Services Transport Provider and SPML Format Provider, and we did not make any modifications to the after the normal installation of the TargetSystem2 GTC. In this case the we can see that the OSB is being accessed by OIM, but unfortunately this case does not help us also, because the operations implemented on the OSB webservice have a different structure then the one SPML expects as default:
Caused by: com.thortech.xl.gc.exception.XSDValidationException: The SOAP response does not contain a valid SPML response type. Should be one of these -->addResponse modifyResponse deleteResponse resumeResponse suspendResponse setPasswordResponse
Do you have any suggestion on how to make the provisioning process work?
Edited by: user1717356 on 22.10.2012 03:22

Hi,
I think you need to put this check only for few attributes?
If Yes, then lets suppose you want to have a check for Country Field in Database which once modified by target Admin, then OIM should know.
1) Create one dummy field CountryDummy (Hidden) in OIM TargetProcess form and dont map it to any target attributes. This dummy field will only store values populated from OIM user profile to -> DB Connector Process Form.
2) On success of "Reconcilation Update Recievced", Put a custom process task which does a comparison with "CountryDummy" & "Country" and inform Admin using email notifications that this mismatch has been found.
HTH,
~J

OIM manipulating provisioning - description on resource profile

Kamaraden!
I have an OIM installation with AD and Exchange connectors. When users are provisioned, going back to the resource profile, you can see the resource and several data, for example the Description field. For AD User, descriptions shows the windows logon name (what I think it is correct), and for Exchange, it shows a number (probably a key of some table). Trying to discover from where this description field is taken, I realized that it comes from the ORC table, ORC_TOS_INSTANCE_KEY (if I change it, it changes in the description of the resource profile too).
I have many questions about this. First of all, who puts this value in this field of the ORC table. I followed the provisioning tasks for AD and Exghange (Create User and Create Mailbox), and got inside the code (I decompiled it with cavaj), but the logic of the adapters attached to that process task and the code in the java classes, only creates efectively the user or the mailbox, and returns.. so, when the resource profile is being modified?
Other question related to that, is where are the conventions of the process tasks names for provisioning? For example, FIELD Updated reacts over the event of modification of FIELD. Create User sounds logic for provisioning when a resource is granted on an application, but Create Mailbox? How is this task attached with the provisioning submit of a resource?
DrLDAP

You are right, the number that you see in the description field in the resource profile is the ORC KEY. If you need to change this to show any value in the process form, you can do so by going to the provisioning workflow form in the design console and click of Map Descriptive field.
I dont think it has been documented anywhere about the field name<space updated> task.
The name Create User or Create Mailbox has no significance. you can really keep any name for the task. The way OIM understands that it needs to execute this task is if it sees the task is marked as "Required for Completion". all tasks marked required for completion will be executed by oim before it can say that provisioning has been completed. For e.g i a provisioning process all you might need to do is send a mail and not create any account etc.
then you have a task "Send mail" (or any name) mark the task as required for completion. Now when this resource is granted by the admin to the user, this task would have executed. The name is not of essence when it comes to provisioning.

Retrying provisioning Task error in OIM11g

Hi to all.
I'm facing a strange issue when trying to retry a provisioning task. In particular, I have connected the OIM11g to an UNIX Server. When the provisioning task is rejected (I'm trying to provision an already provisioned user login, causing SSH_USER_USEREXISTS_FAIL error), the provisioning task goes correctly in "Rejected" status. With the same user that tries to finalize the privisioning, I try to "Retry the provisioning task". But this retry fails. It says me: "Unable to retry task", and the OIM log says "<XELLERATE.APIS> <BEA-000000> <The logged in user does not have permissions to perform this operation>". But the user is the same that I used to finalize the provisioning task.
Could anyone help me? I've already tried to assign the user all the privileges to complete the retry of the task but this did not solved my issue.
Thank you all in advance.
Regards,
Giuseppe.

Hi All,
I have the same requirement so I created a custom role and addded the above Data Object permissions for the role. In the organization I had added the custom role in Administrative role list with write access but still I am getting error saying 'Logged In user does not have permissions'. Added all the permissions present in Data Object Permissions for this role but still I am getting the same error. When I add the system Administrator role as super role to my custom role then the user who belongs to the custom role is able to retry the task but I cant give this permission to this role. So please suggest me if I miss anything.
Thanks,
Rajesh

Manual Provisioning task throwing error

In OIM 10g we have a manual provisioning task which is assigned to an user. when he tries to click Set Response he is getting 'UNKNOWN' also as one of the options with the other two options 'Complete' and 'Cancel'. Also when trying to Complete the provisioning process it throws an error as
DOBJ.SCHTM_SCH_DATA_CHANGED
Schedule data cannot be changed once it has been set.
Please let me know what might be the cause. Thanks
Regards,
Durgaprasad

Hi Kevin,
Thanks for your reply. I dont have a process task adapter attached to this task. I have a task assignment adapter only. Also i dont have any clue why 'UNKNOWN' option is getting displayed in the set response page.
Regards,
Durgaprasad

No email notification from manual provisioning task - 11gR2

I have a disconnected application instance and I am using the standard DisconnectedProvisioning flow for provisioning - modified to assign the provisioning task to a group, using a rule which determines the group via the app. instance name.
The flow itself works as expected and the Manual Task in the flow is assigned to the correct group - the task shows up in the Inbox of the member of the group in the Self Service console
I would like to send an email to the user when the task is assigned and I have therefore configured SMTP Notification according to this http://allidm.com/blog/2012/11/configuring-smtp-notifications-in-oracle-identity-manager-11gr2/
I have confirmed that the SMTP server works as expected - I am able to send and receive message using this server.
On the Notification Tab of my Manual Task I have configured:
General:
Status: Assign / Recipient: Assignees
Status: Complete / Recipient: Initiator
Status: Error / Recipient: Owner
Advanced:
Remind Once: 0 days, 0 hours, 1 minute "After Assignment"
Encoding: UTF-8
Make Notifications Secure: False
Show worklist/workspace URL in notification: True
Make notification actionable: True
Send Task attachment: False
Group Notification Configuration: "Send individual emails"
I have redeployed my DisconnectedProvisioning flow to my SOA server a couple of times - remembering not to change the version number and to force overwriting the existing flow.
My SOA and IDM servers have been restarted as well.
When requesting the disconnected application instance using the catalog, the manual provisioning task is assigned to the correct user - however - he does not receive any email nor do I send any errors or stack traces from my SOA or IDM servers.
There must be some check box somewhere that I forgot to tick!
Does anybody have an idea - did I forget to configure something?
Kind regards,
- Tom

Ok - so I did in fact forget to tick a check box!
After setting up UMS using this: http://docs.oracle.com/cd/E27559_01/admin.1112/e27149/notification.htm#CACCEDGF and enabling notifications via:
Enterprise Manager, SOA, soa-infra, SOA Infrastructure drop-down, SOA Administration, Workflow Config:
Notification Mode: Email
After restarting my SOA and OIM managed servers - I now receive emails as expected.
Case closed :-)
Kind regards,
- Tom

Firefox opens in task manager but does not display.

This morning my Firefox stopped working and I had to end task. Afterwards when trying to restart Firefox the firefox process will open under task manager but nothing displays on the screen. I've tried ending all firefox processes and restarting my pc. I also tried creating a new profile under the firefox,exe -manageprofile command. When I created the new profile and ran under it I had the exact same problem. I tried running under safe mode and I get the pop up telling me that mozila is running under safe mode with the check box's for clearing settings but there is still no window displayed and when clicking continue in safe mode the pop up box goes away and I'm left with nothing once again. I tried running the firefox setup freshly downloaded in an attempt to repair the setup of sorts but this had no effect.
I also did a short search of the forum for any soloutions but so far haven't found anything. If anyone could suggest some more things to try before I do a complete wipe of Firefox using CCleaner.
Also in the event I use CCleaner I'd like to back up my bookmarks first so if anyone knows a start parameter to back up bookmarks or even what file the bookmarks are stored (already found a forum topic on the saved passwords file) in and if copying that file into a new installation will work please let me know.
Regards to any one who can assist.

I had this problem for a couple weeks as well and it was extremely frustrating considering we use firefox for all our company tasks. Here is the solution:
First of all if you have no bookmarks you want to save, then go directly to step 7. If you want to save your bookmarks first, then follow these steps.
1. Shut down the computer
2. Reboot and open firefox
3. Go to Task Manager, right click firefox.exe, and click END PROCESS TREE
4. WAIT 30 SECONDS! Then Double-click the shortcut to try and open firefox again
5.Repeat steps 3 and 4 until firefox finally opens (trust me, eventually it will)
6. Once it finally opens, backup your bookmarks,
7. Download a copy of firefox from there website
8. Uninstall from programs menu and make sure to check the box REMOVE ALL COMPONENTS
9. install the new copy and BOOM! it works
If it doesn't work, you're an idiot. If you don't want to reinstall firefox, then you're out of luck. Good Luck!

Avoid needing to Open this Task to complete an individual Task

I have built a custom workflow using SPD that starts a task process for different individuals to go and update columns associated with a document library. Basically they look at the document and select Reviewed when they are done. My problem is that I
cannot find a way for their individual Task to be marked as completed once they have selected Reviewed. They still need to manually open the task and complete it by selecting the complete button. How can I make the selection of Reviewed fulfill the task obligation
for each user? I have tried manipulating the Task behaviors in SPD but have not found the magic. Please help:)

Hi,
According to your description, I have done a test and I can re-appear your issue.
It is by default that it jumps to the document when we click "Review".
And we need to click "Open this Task" to complete an task.
Best Regards,
Lisa Chen
Lisa Chen
TechNet Community Support

OIM Open provisioning Tasks

Similar Messages

Maybe you are looking for