OIM - Reconciliation Events notifications

Hi. I have a customer who is asking if it is possible to configure mail notifications for failed reconciliation events.
As far as i know oim does not provide this functionality and a possible workaround would be to manage this through a scheduled task that reads those recon events and send the notifications. Is that correct or has oim any OoTB functionality for this.
Thanks in advance.
OIM version: 11g

OIM don't have OOTB functioanlity for this. You can either configure BI publisher and using query you can extract data for failed recon events and using schedule task mail this report daily to manager.
Or You can directly configure schedule task to find recon events, as you are already doing it.
regards,
GP

Similar Messages

Reconciliation Event Notification

Is there any way to get OIM to send out an email if a reconciliation event does not link?
Kerry

yes , by some customization , using OIM APIs , and this may not be the best approach. You can create a custom schedule task in which you will read thru the recon events and find out which are not linked , gather them and send an email. You may have to store the last event examined somewhere in a propeties file or as an attribute of scheduled task , so you can examine from next one the in the next run.

11gR2PS1 OIM Reconciliation Events Archival Process

(1) Predefined schedule Tasks:
http://docs.oracle.com/cd/E37115_01/admin.1112/e27149/scheduler.htm#BABECJFD
ob Name
Description
User-Configurable Attributes
Enabled By Default
Job History Archival
This scheduled task is designed to archive/purge entries for Job History.
Archival Date: Use this attribute to specify date till which the records need to be archived/purged.
Batch Size: Use this attribute to specify the size of a batch in which the records must be processed.
Operation Type: Use this attribute to specify the operation type. This attribute can have two possible values, Archive and Purge.
The default value is Archive.
No
(2) Archival tool (similar to what we have in OIM 10g):
http://docs.oracle.com/cd/E37115_01/admin.1112/e27149/archival_utilities.htm#CHDJBFEA
In what all aspect (1) different than (2) ? It looks like (1) doesn't need any separate tablespace. Is that correct?
I couldn't see much details on documentation for (1) which is pretty new in 11gR2PS1. Any input will be greatly appreciated.
Thanks,

I run it when it takes a long time to load the scheduled task because it has such a long history. It will with either move the history to existing ARCH_JOB_HISTORY table if you chose the "Archive" option, If you use "Purge", then it will just delete them.
-Kevin

Custom Event Notification (email) for Approval Tasks in OIM 11g

Hi,
how to create event notification for approval tasks in OIM 11g. I mean how to send email notification to user who sholuld accept or reject approval task?
best
mp
Edited by: J23 on 2011-05-30 04:08

Here is the documentation http://download.oracle.com/docs/cd/E21764_01/integration.1111/e10224/bp_notif.htm#SOASE548
Search for SOA BPEL Email Notifications for more information:
http://soa-bpel-esb.blogspot.com/2010/01/email-notification-in-bpel.html
http://download.oracle.com/docs/cd/B31017_01/core.1013/b28764/bpel013.htm
There are many more search links that can help you out.
-Kevin

How to retrieve Reconciliation Event Data using OIM API ?

Hi,
I want to retrieve values of some field from reconciliation event. I could not find any API method available
to get event data.

Check this link
Re: API for reading reconciliation Processed-Data

How to delete child table records while creation reconciliation event

Hi,
I developed custom scheduler task to create reconciliation events with child form information:
if (!reconOperations.ignoreEventAttributeData(objectName, attrs, "Roles", childs)) {
long eventId = reconOperations.createReconciliationEvent(objectName, attrs, eventAttributes);
for (int f = 0; f < childs.length; f++) {
reconOperations.providingAllMultiAttributeData(eventId, "Roles", true);
reconOperations.addDirectMultiAttributeData(eventId, "Roles", childs[f]);
reconOperations.finishReconciliationEvent(eventId);
but when I delete roles from target system roles won't delete from OIM.
How config recon Operations to do this?

objName - The Name for the object for which the reconciliation is taking place
parentRecord - A map containing the field-value pairs for the data received from the target.
childTableName - The name of the multi-attribute reconciliation field that the data is for
childRecords - A List containing the Hashtable objects. Every Hashtable will have field-value pairs for the data record pertaining to that attribute received from the target.

AD- OIM Reconciliation with Manager as Approver of Resources

Hi, I'm trying to setup the following scenario:
AD->OIM Reconciliation with user's manager information. Setup the manager as the user's approver for every resource available in OIM.
When a user gets added to the AD, he is reconciled into OIM and I have made 2 user defined fields, one to store his managers distinguished name and another to store the users - "usr_udf_man_dn" and "usr_udf_dn". This is working fine, both columns get populated on reconciliation.
What I would like to do is assign the manager as the approver for all the resources that are requested by the user. I am thinking of populating the usr_manager_key through an sql query, by matching "usr_udf_man_dn" with "usr_udf_dn" and getting the managers "usr_key", then storing it in usr_manager_key of the user. The query is not my real problem.
As I'm new to OIM, I don't yet know how to build the 'logic' of this process. How and where to I make the query? I'm assuming these fields can only be populated after the user has been reconciled (because there won't be any fields to do an sql query on before that). Do I use an adapter? How do I setup the approval process?
Any feedback will be greatly appreciated :)
Message was edited by:
user638778

This is very simple and infact there are 2 ways to do it:
# 1) Create a User Process Trigger that adds on Change Event of your Manager UDF Field. This will kick in as soon as a value is put into the Manager UDF field (doesn't matter - via Recon or by hand). Then create an adapter that looks up a User in AD with the DN (your manager) and returns back a SamAccountName. Based on this returned SamAccountName, get the update the user with manager key. Attach this adapter to your process task event in Xellerate User Process Definition.
# 2) Create an Entity adapter that does the same operation as written in #1. Attach this entity adapter to Xellerate User Update event. This is simpler. Drawback of this is that anytime you update the user (for anything - like last name change , org change etc.) - it will repeat this process of updating the user with its manager key. so any change on employee will trigger the manager update. #1 is more efficient.
As far as the approval processes are concerned, there are 2 ways to achieve that also:
# 1) Attach approval in the standard task and assign it to User's Manager for approval. Limitation is that you can not get rid of this in future once you go production with such a setup. You can but you might not want to.
# 2) Individually on each approval process of each resource object, attach the approval task and assign it to User's Manager. That should do it.
Hope this helps.
rajnishbhatia19
For Additional Code Snippets, you may refer to my Blog site:
http://rajnishbhatia19.blogspot.com
Add RSS feed to your portals (google / yahoo / whichever:)
http://rajnishbhatia19.blogspot.com/feeds/posts/default
Connect to me:
http://www.linkedin.com/in/rajnishbhatia19

Remove Pendng Reconciliation Events

Hello All,
I have run into this problem a number of times- Where I kick off a misconfigured reconciliation task. As a result, OIM then potentially creates thousands of records which ultimately fail and remain in event received status. Due to a number of reasons, the reconciliation processing time may last for hours. To avoid having to wait for a reconciliation job I already know will fail to complete, my question is this-
How do I remove the reconciliation tasks which are still in queue/have not been processed by OIM? I would rather kill all the tasks OIM is currently reconciling than wait around for the task to complete, especially if I know these tasks will will fail.
So far, I know a few things -
1. The "disable" and "stop execution" checkboxes in the DC are useless.
2. The reconciliation events all reside in the RCE table
I have been trying to find a pattern in the table counts, but have not come up with any conclusions. Any ideas on how to cut this down?
Thanks.

Hi,
I did this long time back but you can try this one but please take a backup of your database as this is direct sql query. I won't recommend untill its inevitable.
delete from rcb where rce_key in ( select rce_key from rce where rce_status='Required Data Missing' );
delete from rcd where rce_key in ( select rce_key from rce where rce_status='Required Data Missing' );
delete from rch where rce_key in ( select rce_key from rce where rce_status='Required Data Missing' );
delete from rpc where rce_key in ( select rce_key from rce where rce_status='Required Data Missing' );
delete from rcm where rce_key in ( select rce_key from rce where rce_status='Required Data Missing' );
delete from rcd where rce_key in ( select rce_key from rce where rce_status='Required Data Missing' );
delete from rcp where rce_key in ( select rce_key from rce where rce_status='Required Data Missing' );
delete from rce where rce_status='Required Data Missing';
You can change your rce_status.
Regards
Nitesh

Disable Reconciliation event similar to deleteDetectedAccounts

Hi,
I would like to know whether there is any method or functionality we can use to create a reconciliation event of type "Disable".
Currently we are using "deleteDetectedAccount" method in tcReconciliationOperationsIntf and it is deleting the accounts but I want to know how can we disable the user resource assinment in OIM instead of deleting.
Any help would be appreciated.
Thanks,

Pretty Simple
- Create an RO Attribute, say Status
- Grab any of the two values for this field while performing reconciliation. Enabled or Disabled
- Map it to OIM Object Status field in the Process Definition of your Resource Object
You are done.
Thanks
Sunny

GTC Reconciliation events error

Hi all,
Do you know what's happened when the status of Reconciliation Events tab(Reconciliation Manager) in Design Colsole said those processes are matched and no users weren't created on database table?
-Product versions-
OIM: 9.1.0.2
SO: RHEL 4 update 5
Database: 10.2.0.5
best regards,

And all of them are provisioned twice. So, i have two equal lines in my csv file , the process definition form have all columns listed in this file as a key and reconciliation rules have these conditions:
1- No matched found(Assing to ADM..); 2- One Entity Match Found(Establish link); 3- One Process Match Found(Establish Link).
So, the other question is:
For reconciliation process doesn't create to provisioned resources for the same account twice, what should I do?
1-Create another rule condition to Multiple process matched found and action none?
Any advise will be helpful.
regards,
Thiago Leoncio

False alarm when processing reconciliation events.

Hi,
I use OIM 11.1.1.3. I create reconciliation event and process it with tcReconciliationOperationsIntf.processReconciliationEvent(). It works like a charm, but always produces annoying log error messages
<Nov 23, 2011 5:55:00 PM MSK> <Error> <oracle.iam.reconciliation.dao> <IAM-5010001> <Calling stored procedure - XL_SP_RECONEVALUATEUSER
strTargetTableName_in=RA_HRDEMO30
strRequiredAttributesList_in=RECON_USR_TYPE,RECON_USR_EMP_TYPE,RECON_USR_LOGIN,RECON_USR_EMAIL,RECON_HRLASTNAME504F823F,RECON_H> RFIRSTNAME920A3B11,RECON_ORG_NAME
strMatchingRule_in=(((UPPER(USR.USR_LOGIN)=UPPER(RA_HRDEMO30.RECON_USR_LOGIN))))
intEventKey_in=91
intUserKey_in=1>Does anybody know if Oracle has fixed this in some new releases or patches?
Regards,
Vladimir

Dewan.Rajiv wrote:
You can login into support.oracle.com and if you have access then you can have a option to create SR.I do not see anything like "Create SR", so probably I do not have this option (only the button "SRs Created by Me" available :-)).
>
GTC means Generic Technology Connector. Go to Advance Console there you'll find it.Yes I know, my question is what GTC creates as output. If it creates reconciliation events, then the problem will persist, since it happens during recon event processing.

Creating reconciliation events from a flat file--a design question

Hello,
I am currently evaluating an existing OIM implementation to rebuild it using OIM 11g and have a question regarding the ideal method to create reconciliation events from a flat file.
The current implementation is using a web service call to process a flat file and creates the reconciliation events. This runs every hour.
Although this looks cool but I thought there was no need to go to the extent.
If OIM cannot consume the flat file directly, meaning if it needs some data massage, I can always load the data from the flat file into an external table, write a pl/sql procedure to transform the data and put it into a temporary global table and create reconciliation events like that.
What would be the ideal method to load data from a flat file into OIM?
THanks
Khanh

If it's a flat file, then have you looked at GTC option? And why any staging in between? OIM can read flat files just fine either through GTC or write up your own recon code.
-Bikash

Oim reconciliation not update after adding custom fields

In Oracle Identity Manager 11.1.2 with connector
Connector for Oracle Internet Directory Release 11.1.1
I reconciliated users LDAP to oim, and after I add custom fields for target reconciliation, and I try to update these users with the new custom fields resend reconciliation event, this new custom fields displays in the event reconciliation page and do not in the user form for LDAP.
I already create the new form with the news custom fields associated with the application Instance.

Solution:
FVC (Form Version Control Utility) comes with OIM which updates the form which are associated with existing users.
Using the Form Version Control Utility - 11g Release 2 (11.1.2)
OR
Update PROCESS_FORM_TABLE set PROCESS_FORM_TABLE_VERSION =(Select SDK_ACTIVE_VERSION from SDK where SDK_NAME='PROCESS_FORM_TABLE');COMMIT;NOTE:Replace PROCESS_FORM_TABLE with actual process form i.e. "UD_XXX"

OIM reconciliation fails when more then one record in trusted source table

I've create a reconciliation connector against an oracle table with 2 colums:
user_id
email
When I run the connector with only one record exists in the table everything works fine and the user is propogated to the OIM user store. If I add a second record and run the reconciliation again I get:
ERROR,18 Jun 2010 10:15:58,715,[XELLERATE.JMS],The Reconciliation Event with key -1 does not exist
ERROR,18 Jun 2010 10:15:58,716,[XELLERATE.JMS],Processing Reconciliation Message with ID -1 failed.
I'm fairly certain this is something simple.
Does anyone have any thoughts?

How about performing the update IN the database using a stored
procedure?
By using non-database fields on your form to get the
information, you can then call the procedure in the database to
perform the updates. If an error occurs in the procedure you
rollback, if necessary, and send a message or status back to the
form. If it succeeds you might wish to commit and then re-
execute the form's query -- using either the original key values
or the new key values...
null

OIM Reconciliation

Hi All,
OIM is provisioned to AD and Exchange, and I can able to see the resource information in user's resource info thru OIM web console. There, it shown two resources as provisioned. But after reconciliation, one more Exchane resource row has displayed info in user's resource info page. (I think, OIM established one more link to Exchane for the same user). How ever, Exchane Recon rule is UserLogin=samAccountName
But in this case, userlogin=1234 and samAccountName=i1234(both are not equal). Then how come its getting reconciled and establishing the link with the same user.
Please suggest me. I have to stop building this one more exchage resource for the same user.
regards,
Ravi G.

Kevin, Thanks for your help. I have worked in SUN IDM, I am new to OIM. Please do let me know, if I miss any basic things here.
After exchange provisioning, OIM is displaying the obejectGUID value, when we view the exchange form in User's resource info. you meant to say, from target, this value is comming as null. thats why its going towards entity match. Entity recon action rule is also "establish link' in my case. So process match is not matched with any user and Entity match is matched with the same OIM user, thats why its established link with the user and displayed in user's resource info page.
But for Exchange resource "allowMultiple" is unchecked in my case.
How ever, How can I get the objectGUID value here to match the process match.
FYR, In OIm Reconciliation Manager, I am able to see the objectGUID value and the status for recon event is "Event Linked". I am not understood, if its event linked, Then Why OIM is displaying two resources for excahnge, in User's resource info page.
Thanks.

OIM - Reconciliation Events notifications

Similar Messages

Maybe you are looking for