OIM System Validation Pending

Hello All
I have about 6k users stuck in system validation pending since I started an access policy but needed to go back and set the auto-save option. I can click the user forms and just hit save and everything goes through as it should, but I was wondering if there was a way to re-save all those users in that state so that they can be cleared from that state. I don't want to have to go through and do it all manually so a scheduled task or adapter would be helpful if it is available. Any help you guys can give would be appreciated.
Nick

I assume that the system validation is on a resource rather than on the user itself.
I would write a scheduled task (skeleton: http://iamreflections.blogspot.com/2010/08/oim-howto-scheduled-tasks.html) that simply runs findUsers for each "problem user" and then call updateUser. I think you can do this without actually changing anything but if that doesn't work simply read and rewrite the same data into the same attribute.
API guide for tcUserOperationsIntf: http://otndnld.oracle.co.jp/document/products/id_mgmt/idm_904/doc_cd/javadocs/operations/Thor/API/Operations/tcUserOperationsIntf.html
Best regards
/Martin

Similar Messages

Approval process - 'System Validation' - Pending - Assigned to xelsysadm

I created an approval process for a resource.
Whenever a request for a resource is generated for a user, the approval request is sent to a group based on user's location.
Steps:
-I created an approval process in which I added a task which sends the request to the appropriate group.
-An adapter is attached to this task which determines the group to which request is to be sent.
-I have added tcComplete adapter to the Standard Approval
However, after the request is approved by the approver(belonging to the above mentioned group), the resource does not get provisioned and the system validation is shown 'pending' - assigned to user 'xelsysadm'.
I am not able to figure out why the system validation is 'pending' and going to 'xelsysadm'.
Note that I am logged in as xelsysadm and the above pending 'system validation' task is present under 'Open Tasks' under 'To-Do-List'. Once I set the response from there as 'Complete', the resource is provisioned.

I tried provisioning another user, got the oim api error again:
INFO,18 May 2010 13:28:36,925,[XELLERATE.WEBAPP],Key not found in Custom Resource Bundle: newKey = GC.GCPROV.ADAPTER_OIMAPIERROR
DEBUG,18 May 2010 13:28:36,925,[XELLERATE.WEBAPP],Setting the response code as OIM API Error

System Validation task and orc status X

Hi All,
we noticed on some accounts where a resource status is Enabled but the orc status is X. even when we try to force them to C the X always seems to come back somehow. the only thing we can find is that for all of these at one time the System Validation task was manually completed.
of course this causes some problems with code that is dependent on the orc status. is there a way to fix these resources?
Thanx in advance.
Fred

Hi,
AD connector version is 9.1.1.0 and "System Validation" is the first default task for the AD user Resource Object. I am not sure, what will it perform. Once its complets, then process form will be generate by executing all releated adaapters and then will be create AD account for that user. How ever, the same user has been created in other Environment with same detials(So no data releated issue).
FYIP. "Auto Save Form" option for the Process Defination is checked.(I got this as solution from some other thread).
Can you please suggest me, what "System Validation" performs, and why its pending status.Any usefull links please?
Thanks.
Edited by: user13285646 on Jul 8, 2011 8:07 AM

Vendor's/manufacturer's QM system validity

Hi Team,
How to increase Vendor's/manufacturer's QM system validity date?
ERROR: While creating PO is as below.
Vendor's/manufacturer's QM system only valid to 06.05.2010
Message no. QB301
Diagnosis
The quality assurance system of the chosen vendor/manufacturer is no longer valid. You cannot, therefore, order the material concerned from this vendor/manufacturer.
Thanks

It seems vendor/Material QM info record date is past .Go to transaction QI02 ,Check the date in inspection control tab and change the date to valid date.

The method to provision the OIM System Date to a target System

Hi,
I want to provision the OIM System Date(date format : "YYYY-MM-DD HH:MI:SS") to a target System(DB Type:Oracle).
The Column type in The target System is Date Type.
I use the process adapter and assign the System Date to the Process Data - Date Type Column - in the target System.
it doesn't work.
How do i do?????
please help me

- That's simple. You have already created this date type variable in your process form. Now pass it in whichever format it is. In your code for creation in oracle, do a date conversion as required using custom code. This would work if you have written your code and you are not using DBApp Tables connector. Do it as follows:
     SimpleDateFormat input = new SimpleDateFormat("OIM_DATE_FORMAT");
     SimpleDateFormat output = new SimpleDateFormat("ORACLE_DB_DATE_FORMAT");
     Date date = input.parse("Pass form date over here");
     return output.format(date); // Pass this value to Oracle
- If its DBApp Table connector then connector must take care of this by itself.
Thanks
Sunny

GRC system validation steps

Hi, Please check and provide GRC system validation steps in serial. I am looking for the serial steps which we need to follow while validating GRC system after applying support packs or upgrade etc. Appreciate your feedback. Thanks & Regards, Koteswara Rao.

Hello Gurus,
I too am looking for similar information so I am posting my question in the same thread.
I was going through the GRC 5.3 sizing guide for figuring out the hardware requirement for RAR. We wanted to go with the expert sizing of RAR. Expert sizing takes into account the factors such as no.of users, roles and violations. I thought we can easily figure out the no.of roles and no.of users but how do I estimate "Number of SOD Violations"? Please advice..
@ Sanjay,
I will just outline of what we did so far..hope this might help you
Here at our company, we started off by 1) buying the GRC access control suite, 2) deciding what components within GRC will be implemented first. 3) systems (ECC, BI, etc) in scope
4) System landscape (Dev and Test will be on one box, Prod will be on another box)
5) Sizing based on systems in scope
6) Decide whether to install on existing Solman or install on a new box...(bcos all that GRC 5.3 needs is NW04s Java stack)
7) Buy hardware based on sizing, Install NW
and so on...
Thanks in advance for your input...
regards,
Venkateswara Rao

OIM Custom validation on entitlement request submission.

Hi,
We have a requirement in OIM to do some custom validation on entitlement request submission through catalogue.
Can we leverage the requestdatavalidator here. Is there any other way of doing it?
Thanks in advance,

What you would need to do is create a controller to allow for this functionality to occur. the processformrequest procedure is the best one to achieve this functionality. Once you have written the custom validation, personalize the page you need the control on and add in the controller.

OIM 9.1 Pending task installing new conector

Hello,
I've been installed a new conector for SAP. I created a new Resource Object and some process defenition but I've two pending task in the installation:
- Task name: Installation -- Organization: Requests
- Task name: Enter Info into Oracle Identity Manager --- Organization: Requests
What could be the problem? Is there a way to retry this task?
Thanks

You should be able to manually complete these tasks.
-Kevin

Problems Implementation Password Policy on OIM 9.1.0

Hello,,,
Please help me,
i was create password policy on OIM, i inject that pass policy to one of resource object, i create object form and process form with same configuration ( field table ), i use data flow to transmit the data between object form and process form..
i set process definition with check AUTO SAVE FORM, and AUTO PRE-POPULATE,
the Problems is :
1. When i try to do provisioning process ( with delegated admin : xelsysadm ) to that resource object (target system) , after admin submit , status process is provisioning, and the detail is System Validation : Pending
2. Then i try to remove password policy on resource object, and i try again to do the provisioning, and the process working fine, status process provisioned, detail process
system validation : completed, Create user : completed
why it'is happen ?
that the important point is, why AUTO SAVE FORM cannot working fine if i inject Password Policy on resource Object...
Warm regards,
Ricky R
Manila

When you say you have checked auto prepop means that there are pre pops attached to certain fields on your process form that you want to be auto triggered before provisioning commences. So i'm assuming that you are pre-populating password field. Is the password value that you are prepopping the field with conform to the standards of the password policy? If not that could be the reason why your provisioning process isnt getting kicked off. you will need to supply a password (either manually or if you want to automate it (pre pop it)) that coforms to the password policy defined on the resource object. Also i think the name of the password field must be _PASSWORD.

AD Provisioning - 11gR2

I have the AD reconciliation working and it's importing users into OIM from AD. My AD connector is set as a trusted resource.
I am trying to now provision users from OIM to AD, including updating users that were imported from AD. I create a user in OIM and select the Auto Generated Application Instance for Resource: AD User and IT Resource: Active Directory from the Catalog. The AD User provisioning process attempts to run and shows as Provisioning with an Unknown account type. Investigating the resource history, I have a Task Name of System Validation Pending and it's assigned to the xelsysadm user.
I'm not sure what to do with this now to get the account to provision to AD.

make sure you populate all the mandatory field on process form. have you populated OU??.
just goto account tab->open form-> verify the form attribute and populate all required info in cart- and submit the request.
the assignment and all is fine, system validation pending due to mandatory field is not being populated(uid, password,first name, last name etc)
--nayan

Resource Depends status is Waiting

i have problem about depends resource,
i have Resource object A, B, C, D ,E. Resource object B,C,D,E depends on Resource A.
after Resource Object A Provisioned , it should Resource B,C,D,E running.
why it just resource B,C running (Provisioned ) and Resource D,E is waiting.
any help me ?
thank's
darvesth

If i running resource without depends on, status my resource is provisioning(system validation pending),
I alredy checking my resource and process definition. Resource d,e same like b,c.
Auto prepopulate,auto save form is checklist. And in weblogic logger doesn't occour error.
Thank's
darvesth

How to cancel pending system reboot

My windows XP update program auto-updated my system and requested a restart, which prevented some other software from being installed. The installer always complains something like "Setup has detected that there is a system reboot pending on this machine. Please install this product after rebooting the system". But, for some reason, I can't restart my windows XP at this time. My question is if there is a method by which I can bypass this check.
I tried to set HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\UpdateExeVolatile\Flags to 0
and delete key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations
but, it's no difference.
Any sugguest?
Thanks a lot
- Hatricker

In my case, I found this PendingFIleRenameOperations that links to a temp file.
This temp file is "wpro_41_2001woem.tmp". It's the file associated with Intel(R) Smart Connect software .
Even deleting the key, it generate new key after reboot, or power on.
I ended up uninstall Intel Smart Connect software.
restart Windows.
After restart I no longer have this messages, and I'm able to install the software I needed.
Cheers,
I had the same problem on my HP ENVY, I downgraded my HP from WIN8 to WIN7pro and when I tried to install Siemens Step 7 V 5.5 I had the same problems. The suggestions on the Siemens web site did not work, the "wpro....." would be back in the registry after
reboot. Uninstalling this Intel Smart Connect Software did the job. Thanks for the suggestion!!!
Cheers,

Manage OIM 11g System Properties via API

Can someone please help me understand how to use the OIM 11g API to manage OIM System Properties. In the prior version I was able to use the tcPropertyOperationsIntf class, but it looks like this now only supports reading the attributes, but I need the ability to update and delete properties from the API.
What is the proper API to use to implement this in an EventHandler class that extends tcBaseEvent?
Thanks!

Hey,
Sorry to revive this pretty old thread, but it's still unanswered and I would be interested in having the answer to this question...
Thanks,
--jtellier

SAP LSO: Validation of system (Pharma Industrie)

Good morning everyone,
I am currently implementing SAP LSO within a global template for a Pharma company. They want to validate the LSO part, but not the global template (PA, OM, etc.). Does anyone know if it would be acceptable from a validation perspective if we have LSO on a different system (validated) and connected via ALE to Core SAP HCM (not validated)? Does Core SAP HCM need to be then validated as well?
Thanks,
Nadja

Hi Nadja,
We are also in the process of validating LSO for compliance perspective. Our HR department is working with outside FDA compliance consultants and the direction we have got so far is , we need to only validate LMS, not core HR.
But, it is always a good idea to check with FDA consultants before going ahead.
Good luck with your validation work,
Jaya

OIM 9.1.0.2 - Note field issues

Hi Gurus,
IHAC who has got a strange behavior in OIM for a custom connector ( there are a lot of resource using it).
After request is concluded, if customer goes to User Detail --> Resource Profile and select the resource that was requested, he find out all the generated task (system validation, create user, etc) with the information (************) in Note field. That was not configured to be so. And as that field is used to received Target's response notes, when the target sends an error message with some information (we can see the notes in the logs), that information is not able to be inserted in Note field in the OIM. This behavior has only happened to some resources.
Has anyone a tip?
What could I check?
TiA,

Hi Gurus,
Regarding to issue reported above, I have found the bug 7590135 (https://bug.oraclecorp.com/pls/bug/webbug_edit.edit_info_top?rptno=7590135 ).
For that bug, as informed in the bug below, there was released a fix in the 9.1.0.2 BP 01.
In that bug there is the following information:
@ We need to add following property in 9101BP01 release document to fix this
@ issue.
@ <store>
@ <Note>
@ <SpecialField>true</SpecialField>
@ </Note>
@ </store>
@ true : to show the decrypted value for password field
@ false : to show blank value for password field
By the code below is possible to verify the status of the attribute:
tcProvisioningOperationsIntf taskOperations = (tcProvisioningOperationsIntf) this.getUtilityOperations("Thor.API.Operations.tcProvisioningOperationsIntf");
Map<String, String> filtro = new HashMap<String, String>();
//filtro.put("Objects.Name", "Sistema Atlys");
//filtro.put("Objects.Name", "Sistema PP");
statusFiltro[0] = "Pending";
tcResultSet tarefas = taskOperations.findAllOpenProvisioningTasks(filtro, statusFiltro);
for(int i=0; i<tarefas.getRowCount(); i++)
     tarefas.goToRow(i);
     long tKey = tarefas.getLongValue("Process Instance.Task Details.Key");
     System.out.println("isTaskNoteEncrypted: [" + this.taskOperations.isTaskNoteEncrypted(tKey) + "]");
RESULTS:
- "Sistema Atlys" resultado: "isTaskNoteEncrypted: [true]"
- "Sistema PP" resultado: "isTaskNoteEncrypted: [false]"
Can I consider that bug the same I have faced?
And the problem now is, How can I configure the Note to be displaying not encrypted results? Is this a system property (OIM)??
Regards,
Edited by: user12295533 on 23/05/2011 13:21

OIM System Validation Pending

Similar Messages

Maybe you are looking for