OIM vs OIA : Identity Certification

Hello Experts,
I need to analyze the Identity Certification feature of OIM 11gR2 vs OIA i.e. what advantage/disadvantage do one has over the other.
What all features are supported by one and not by the other. Is it really necessary to install OIA for the purpose of identity certifications or OIM 11gR2 is sufficient.
Kindly share some link/info which has this kind of comparison.
Thanks :)

You can delegate all accounts belong to certain user to someone else in "User Entitlement Certification". This is available when you check the option "Employee Verification Required" while creating the certification. You cannot selectively select certain accounts to be delegated to another certifier.

Similar Messages

Error in OIA-OIM Integration while importing user from OIM to OIA

Hi,
I have followed all the steps mentioned in the below link.
http://wikis.sun.com/display/OIA11gDocs/Integrating+With+Oracle+Identity+Manager%2C+Preferred+Method
Whenever I am trying to import the users from OIM in OIA I encountered below error. Kindly provide me any pointer to resolve this issue:
Server Information:
1. OIA 11g- Deployed in Welblogic Server
2. OIM 9.1.0.2 - Deployed in Weblogic Server
11:14:19,097 ERROR [JBOSSLOGINHANDLER] Error in creating login context
javax.security.auth.login.LoginException: unable to find LoginModule class: org.jboss.security.ClientLoginModule
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:808)
at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
at javax.security.auth.login.LoginContext.login(LoginContext.java:579)
at Thor.API.Security.LoginHandler.jbossLoginHandler.login(Unknown Source)
at Thor.API.Security.ClientLoginUtility.login(Unknown Source)
at Thor.API.tcUtilityFactory.<init>(Unknown Source)
at com.vaau.rbacx.iam.oracle.OIMIAMSolution.getUtilityFactory(OIMIAMSolution.java:2542)
at com.vaau.rbacx.iam.oracle.OIMIAMSolution.readUsers(OIMIAMSolution.java:754)
at com.vaau.rbacx.iam.service.impl.RbacxIAMServiceImpl.importUsers(RbacxIAMServiceImpl.java:119)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy325.importUsers(Unknown Source)
at com.vaau.rbacx.scheduling.executor.iam.IAMJobExecutor.execute(IAMJobExecutor.java:121)
at com.vaau.rbacx.scheduling.manager.providers.quartz.jobs.AbstractJob.execute(AbstractJob.java:72)
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:525)
11:14:19,145 ERROR [ACCOUNTMANAGEMENT] Class/Method: tcUtilityFactory/tcUtilityFactory(Hashtable env, String psUserId, String psPassword) encounter some problems: java.lang.SecurityException: [Security:090398]Invalid Subject: principals=[admin, Administrators]
com.thortech.xl.security.tcLoginException: java.lang.SecurityException: [Security:090398]Invalid Subject: principals=[admin, Administrators]
at Thor.API.Security.ClientLoginUtility.login(Unknown Source)
at Thor.API.tcUtilityFactory.<init>(Unknown Source)
at com.vaau.rbacx.iam.oracle.OIMIAMSolution.getUtilityFactory(OIMIAMSolution.java:2542)
at com.vaau.rbacx.iam.oracle.OIMIAMSolution.readUsers(OIMIAMSolution.java:754)
at com.vaau.rbacx.iam.service.impl.RbacxIAMServiceImpl.importUsers(RbacxIAMServiceImpl.java:119)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy325.importUsers(Unknown Source)
at com.vaau.rbacx.scheduling.executor.iam.IAMJobExecutor.execute(IAMJobExecutor.java:121)
at com.vaau.rbacx.scheduling.manager.providers.quartz.jobs.AbstractJob.execute(AbstractJob.java:72)
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:525)
11:14:19,147 ERROR [OIMIAMSolution] Error Connecting to OIM Server
Thor.API.Exceptions.tcAPIException: com.thortech.xl.security.tcLoginException: java.lang.SecurityException: [Security:090398]Invalid Subject: principals=[admin, Administrators]
at Thor.API.tcUtilityFactory.createLoginException(Unknown Source)
at Thor.API.tcUtilityFactory.<init>(Unknown Source)
at com.vaau.rbacx.iam.oracle.OIMIAMSolution.getUtilityFactory(OIMIAMSolution.java:2542)
at com.vaau.rbacx.iam.oracle.OIMIAMSolution.readUsers(OIMIAMSolution.java:754)
at com.vaau.rbacx.iam.service.impl.RbacxIAMServiceImpl.importUsers(RbacxIAMServiceImpl.java:119)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy325.importUsers(Unknown Source)
at com.vaau.rbacx.scheduling.executor.iam.IAMJobExecutor.execute(IAMJobExecutor.java:121)
at com.vaau.rbacx.scheduling.manager.providers.quartz.jobs.AbstractJob.execute(AbstractJob.java:72)
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:525)
11:14:19,148 ERROR [OIMIAMSolution] Error Connecting to OIM Server : : Error Connecting to OIM Server : com.thortech.xl.security.tcLoginException: java.lang.SecurityException: [Security:090398]Invalid Subject: principals=[admin, Administrators]
11:14:19,149 ERROR [JobRunShell] Job IAM.test6 threw an unhandled Exception:
java.lang.NullPointerException
at com.vaau.rbacx.iam.oracle.OIMIAMSolution.readUsers(OIMIAMSolution.java:819)
at com.vaau.rbacx.iam.service.impl.RbacxIAMServiceImpl.importUsers(RbacxIAMServiceImpl.java:119)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy325.importUsers(Unknown Source)
at com.vaau.rbacx.scheduling.executor.iam.IAMJobExecutor.execute(IAMJobExecutor.java:121)
at com.vaau.rbacx.scheduling.manager.providers.quartz.jobs.AbstractJob.execute(AbstractJob.java:72)
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:525)
11:14:19,150 ERROR [ErrorLogger] Job (IAM.test6 threw an exception.
org.quartz.SchedulerException: Job threw an unhandled exception. [See nested exception: java.lang.NullPointerException]
at org.quartz.core.JobRunShell.run(JobRunShell.java:213)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:525)
Caused by: java.lang.NullPointerException
at com.vaau.rbacx.iam.oracle.OIMIAMSolution.readUsers(OIMIAMSolution.java:819)
at com.vaau.rbacx.iam.service.impl.RbacxIAMServiceImpl.importUsers(RbacxIAMServiceImpl.java:119)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy325.importUsers(Unknown Source)
at com.vaau.rbacx.scheduling.executor.iam.IAMJobExecutor.execute(IAMJobExecutor.java:121)
at com.vaau.rbacx.scheduling.manager.providers.quartz.jobs.AbstractJob.execute(AbstractJob.java:72)
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
... 1 more
11:15:00,343 ERROR [IDAPolicyViolationPersistenceHandler] No Identity Audit configuration was found, skipping notifications

Hi,
it seems that your configuration is set to jboss and not weblogic
javax.security.auth.login.LoginException: unable to find LoginModule class: org.*jboss.security*.ClientLoginModule
Ensure that the following $XL_HOME/xellerate/lib/.jar files are present in the $RBACX_HOME/WEB-INF/lib folder:
* wlXLSecurityProviders.jar
* xlAuthentication.jar
For WebLogic server copy * oim_design_console\xlclient\ext\wlfullclient.jar
Regards,
Daniel

Date parse error while importing users from OIM to OIA (SRM 5.0.3)

Hi All,
Env Details:
OIA (SRM 5.0.3), Weblogic and Oracle 10g DB
We have integrated OIM to OIA with extended attributes mapping by modifying iam-context.xml file to load users. Its done successfully. But when we map "Date" related attribute, its giving "Date Parsing error" and its not loading the users.
We have tried loading users using flatFile mechanism, its also giving same result.
Please suggest me. Thanks in Advance !!!
Regards,
Ravi G.

Hi,
Its a problem with OOB's OIMIAMSolution.class file, which is called while importing users from OIM. It used DateParse () conversion method only for all attributes which OIA attributes' name is ends with "Date". It defined, the conversion of date from (yyyy-MM-dd). So its expecting the input value should be in defined format(yyyy-MM-dd), if not, it gives a parse error.
We found work around for this as follows,
We have used other related OIA attribute which name ends other than "Date" string.
Thanks,
Ravi G.

Issue in import data from OIM to OIA

Hi All,
While importing entitlements from OIM to OIA ,we are getting following exceptions in OIA logs :
19:01:29,839 INFO [OIMDataProviderImpl] Start : Get Status of Data Collection ...
19:01:29,860 DEBUG[IamDataSyncMonitorImpl] OIMStatus FAILED
19:01:29,860 DEBUG[DBIAMSolution] Data Staging Failed: DATA COLLECTION FAILED. Aborting. Let'sFinalize data collection.
19:01:29,860 INFO [OIMDataProviderImpl] Start Finalize Data Collection ...
19:01:30,063 INFO [OIMDataProviderImpl] End Finalize Data Collection ...
19:01:30,063 ERROR[DBIAMSolution] ERROR: Data Staging Failed: DATA COLLECTION FAILED. Aborting.
19:01:30,071 DEBUG[DBIAMSolution] publishing import completed event...
19:01:30,072 DEBUG[DefaultIAMListener] Queuing IAM Event.com.vaau.rbacx.iam.IAMEvent[source=com.vaau.rbacx.iam.db.DBIAMSolution@75592f8b]
19:01:30,072 ERROR[DBIAMSolution] Data Staging Failed: DATA COLLECTION FAILED. Aborting.
19:01:30,899 DEBUG[DefaultIAMListener] ProcessingEvent:com.vaau.rbacx.iam.IAMEvent[source=com.vaau.rbacx.iam.db.DBIAMSolution@75592f8b],
exception:null
Please provide any helpful pointer to resolve this issue.
Thanks,
RPB

Hi All,
While importing entitlements from OIM to OIA ,we are getting following exceptions in OIA logs :
19:01:29,839 INFO [OIMDataProviderImpl] Start : Get Status of Data Collection ...
19:01:29,860 DEBUG[IamDataSyncMonitorImpl] OIMStatus FAILED
19:01:29,860 DEBUG[DBIAMSolution] Data Staging Failed: DATA COLLECTION FAILED. Aborting. Let'sFinalize data collection.
19:01:29,860 INFO [OIMDataProviderImpl] Start Finalize Data Collection ...
19:01:30,063 INFO [OIMDataProviderImpl] End Finalize Data Collection ...
19:01:30,063 ERROR[DBIAMSolution] ERROR: Data Staging Failed: DATA COLLECTION FAILED. Aborting.
19:01:30,071 DEBUG[DBIAMSolution] publishing import completed event...
19:01:30,072 DEBUG[DefaultIAMListener] Queuing IAM Event.com.vaau.rbacx.iam.IAMEvent[source=com.vaau.rbacx.iam.db.DBIAMSolution@75592f8b]
19:01:30,072 ERROR[DBIAMSolution] Data Staging Failed: DATA COLLECTION FAILED. Aborting.
19:01:30,899 DEBUG[DefaultIAMListener] ProcessingEvent:com.vaau.rbacx.iam.IAMEvent[source=com.vaau.rbacx.iam.db.DBIAMSolution@75592f8b],
exception:null
Please provide any helpful pointer to resolve this issue.
Thanks,
RPB

OIA-OIM Integration, Error while trying to import users from OIM to OIA

Hi Experts,
I have used depreciation method to integrate OIA 11gR1 with OIM 9.1.0.2 BP13.
When I am trying to import Users from OIM to OIA, I am getting the following error: " failed reading the magic number mapping file"
Here are logs. Can anyone tell me what is this error about?
12:28:33,000 DEBUG [QuartzJobListener] OIM1: job about to be executed
12:28:33,000 DEBUG [IAMJob] ******* executing job OIM1 *******
12:28:33,000 INFO [DefaultRemoter] Exec: dwrSchedulerService.getJobStatus()
12:28:33,000 DEBUG [DefaultRemoter] --Object created, not stored. id=0
12:28:33,000 DEBUG [DebuggingPrintWriter] out(46): throw 'allowScriptTagRemoting is false.';
12:28:33,000 DEBUG [DebuggingPrintWriter] out(46): //#DWR-INSERT
12:28:33,000 DEBUG [DebuggingPrintWriter] out(46): //#DWR-REPLY
12:28:33,000 DEBUG [DebuggingPrintWriter] out(46): var s0={};var s1={};s0.currentCount=0;s0.groupName="IAM";s0.job=null;s0.jobName="OIM1";s0.jobStatusId=null;s0.jobType="Import/Export Progress";s0.lastAccessedTime=0;s0.launcher=null;s0.monitorMap=s1;s0.status=1;s0.timeElapsed=0;s0.totalCount=0;
dwr.engine._remoteHandleCallback('20','0',[s0]);
12:28:33,015 DEBUG [IAMJob] ---> executing job 'OIM1' using IAMJobExecutor
12:28:33,015 DEBUG [IAMJobExecutor] found valid iam service
12:28:33,015 DEBUG [IAMJobExecutor] looking for iam server connection 'OIM1'
12:28:33,031 DEBUG [IAMJobExecutor] ----> adding connection defined in config files [dbIAMConnection, fileIAMConnection]
12:28:33,031 DEBUG [IAMJobExecutor] found 3 iam server connections
12:28:33,031 DEBUG [IAMJobExecutor] checking iam server connection 'OIM1'
12:28:33,031 DEBUG [IAMJobExecutor] found matching iam server connection 'OIM1'
12:28:33,031 DEBUG [IAMJobExecutor] found valid iam server OIM1
12:28:33,031 DEBUG [IAMJobExecutor] IAM action specified is ACTION_IMPORT_USERS[2]
12:28:33,031 DEBUG [OIMIAMSolution] In Read Users ...
12:28:33,031 DEBUG [OIMIAMSolution] publishing import starting event...
12:28:33,031 DEBUG [OIMIAMSolution] Starting import run id ---> null
12:28:33,031 DEBUG [OIMIAMSolution] Trying to establish a connection with OIM Server...
12:28:33,031 DEBUG [OIMIAMSolution] ************** OIM Connection Params *************
12:28:33,031 DEBUG [OIMIAMSolution] XL Home ---> E:\Middleware10G_Home\xellerate
12:28:33,031 DEBUG [OIMIAMSolution] login config ---> E:\Middleware10G_Home\xellerate\config\auth.config
12:28:33,031 DEBUG [OIMIAMSolution] Naming Factory Initial ---> : weblogic.jndi.WLInitialContextFactory
12:28:33,031 DEBUG [OIMIAMSolution] Provider URL --> t3://vkalyan-in:7001
12:28:33,031 DEBUG [OIMIAMSolution] ****************************************************
12:28:33,031 DEBUG [OIMIAMSolution] ********** Connecting to OIM Server **********
12:28:33,031 DEBUG [DefaultIAMListener] storing new ImportRun
12:28:33,109 DEBUG [SrmIndexDaemon] Checking Imports or Re-Indexing Activity...
12:28:33,109 INFO [SrmIndexDaemon] Imports or Re-Indexing are Running. Stopping online indexing
12:28:33,156 ERROR [JobRunShell] Job IAM.OIM1 threw an unhandled Exception:
java.lang.ExceptionInInitializerError
at org.jgroups.conf.ClassConfigurator.<clinit>(ClassConfigurator.java:46)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
at java.lang.Class.newInstance0(Class.java:355)
at java.lang.Class.newInstance(Class.java:308)
at org.jgroups.stack.ProtocolStack.<init>(ProtocolStack.java:88)
at org.jgroups.JChannel.init(JChannel.java:1568)
at org.jgroups.JChannel.<init>(JChannel.java:257)
at org.jgroups.JChannel.<init>(JChannel.java:240)
at org.jgroups.blocks.NotificationBus.<init>(NotificationBus.java:69)
at com.opensymphony.oscache.plugins.clustersupport.JavaGroupsBroadcastingListener.initialize(JavaGroupsBroadcastingListener.java:113)
at com.opensymphony.oscache.base.AbstractCacheAdministrator.configureStandardListeners(AbstractCacheAdministrator.java:328)
at com.opensymphony.oscache.general.GeneralCacheAdministrator.createCache(GeneralCacheAdministrator.java:305)
at com.opensymphony.oscache.general.GeneralCacheAdministrator.<init>(GeneralCacheAdministrator.java:99)
at com.thortech.xl.cache.OSCacheProvider.initialize(Unknown Source)
at com.thortech.xl.cache.CacheFactory.getCacheProvider(Unknown Source)
at com.thortech.xl.cache.CacheUtil.<clinit>(Unknown Source)
at Thor.API.tcUtilityFactory.getPropertyValue(Unknown Source)
at Thor.API.tcUtilityFactory.<init>(Unknown Source)
at com.vaau.rbacx.iam.oracle.OIMIAMSolution.getUtilityFactory(OIMIAMSolution.java:2542)
at com.vaau.rbacx.iam.oracle.OIMIAMSolution.readUsers(OIMIAMSolution.java:754)
at com.vaau.rbacx.iam.service.impl.RbacxIAMServiceImpl.importUsers(RbacxIAMServiceImpl.java:119)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy116.importUsers(Unknown Source)
at com.vaau.rbacx.scheduling.executor.iam.IAMJobExecutor.execute(IAMJobExecutor.java:121)
at com.vaau.rbacx.scheduling.manager.providers.quartz.jobs.AbstractJob.execute(AbstractJob.java:72)
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:534)
Caused by: org.jgroups.ChannelException: failed reading the magic number mapping file
at org.jgroups.conf.ClassConfigurator.init(ClassConfigurator.java:101)
at org.jgroups.conf.ClassConfigurator.<clinit>(ClassConfigurator.java:43)
... 38 more
Caused by: java.io.IOException
at org.jgroups.conf.MagicNumberReader.parseClassData(MagicNumberReader.java:89)
at org.jgroups.conf.MagicNumberReader.parse(MagicNumberReader.java:69)
at org.jgroups.conf.MagicNumberReader.readMagicNumberMapping(MagicNumberReader.java:57)
at org.jgroups.conf.ClassConfigurator.init(ClassConfigurator.java:73)
... 39 more
Caused by: java.lang.NullPointerException
at org.jgroups.conf.MagicNumberReader.parseClassData(MagicNumberReader.java:84)
... 42 more
12:28:33,156 ERROR [ErrorLogger] Job (IAM.OIM1 threw an exception.
org.quartz.SchedulerException: Job threw an unhandled exception. [See nested exception: java.lang.ExceptionInInitializerError]
at org.quartz.core.JobRunShell.run(JobRunShell.java:213)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:534)
Caused by: java.lang.ExceptionInInitializerError
at org.jgroups.conf.ClassConfigurator.<clinit>(ClassConfigurator.java:46)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
at java.lang.Class.newInstance0(Class.java:355)
at java.lang.Class.newInstance(Class.java:308)
at org.jgroups.stack.ProtocolStack.<init>(ProtocolStack.java:88)
at org.jgroups.JChannel.init(JChannel.java:1568)
at org.jgroups.JChannel.<init>(JChannel.java:257)
at org.jgroups.JChannel.<init>(JChannel.java:240)
at org.jgroups.blocks.NotificationBus.<init>(NotificationBus.java:69)
at com.opensymphony.oscache.plugins.clustersupport.JavaGroupsBroadcastingListener.initialize(JavaGroupsBroadcastingListener.java:113)
at com.opensymphony.oscache.base.AbstractCacheAdministrator.configureStandardListeners(AbstractCacheAdministrator.java:328)
at com.opensymphony.oscache.general.GeneralCacheAdministrator.createCache(GeneralCacheAdministrator.java:305)
at com.opensymphony.oscache.general.GeneralCacheAdministrator.<init>(GeneralCacheAdministrator.java:99)
at com.thortech.xl.cache.OSCacheProvider.initialize(Unknown Source)
at com.thortech.xl.cache.CacheFactory.getCacheProvider(Unknown Source)
at com.thortech.xl.cache.CacheUtil.<clinit>(Unknown Source)
at Thor.API.tcUtilityFactory.getPropertyValue(Unknown Source)
at Thor.API.tcUtilityFactory.<init>(Unknown Source)
at com.vaau.rbacx.iam.oracle.OIMIAMSolution.getUtilityFactory(OIMIAMSolution.java:2542)
at com.vaau.rbacx.iam.oracle.OIMIAMSolution.readUsers(OIMIAMSolution.java:754)
at com.vaau.rbacx.iam.service.impl.RbacxIAMServiceImpl.importUsers(RbacxIAMServiceImpl.java:119)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy116.importUsers(Unknown Source)
at com.vaau.rbacx.scheduling.executor.iam.IAMJobExecutor.execute(IAMJobExecutor.java:121)
at com.vaau.rbacx.scheduling.manager.providers.quartz.jobs.AbstractJob.execute(AbstractJob.java:72)
at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
... 1 more
Caused by: org.jgroups.ChannelException: failed reading the magic number mapping file
at org.jgroups.conf.ClassConfigurator.init(ClassConfigurator.java:101)
at org.jgroups.conf.ClassConfigurator.<clinit>(ClassConfigurator.java:43)
... 38 more
Caused by: java.io.IOException
at org.jgroups.conf.MagicNumberReader.parseClassData(MagicNumberReader.java:89)
at org.jgroups.conf.MagicNumberReader.parse(MagicNumberReader.java:69)
at org.jgroups.conf.MagicNumberReader.readMagicNumberMapping(MagicNumberReader.java:57)
at org.jgroups.conf.ClassConfigurator.init(ClassConfigurator.java:73)
... 39 more
Caused by: java.lang.NullPointerException
at org.jgroups.conf.MagicNumberReader.parseClassData(MagicNumberReader.java:84)
... 42 more
12:28:33,156 DEBUG [QuartzJobListener] OIM1: job was executed
12:28:33,156 DEBUG [VaauSchedulerEventListenerImpl] Processing VaauSchedulerEvent
12:28:33,156 INFO [VaauSchedulerEventListenerImpl] Job executed: OIM1, IAM
12:28:33,156 INFO [VaauSchedulerEventListenerImpl] Job run time: 0s
12:28:33,156 INFO [VaauSchedulerEventListenerImpl] Next Run: null
Regards
Kalyan

I solved the above error by removing oscache***.jar file and keeping only oscache.jar in lib directory.
However I am getting some other error this time. Let me know if you have any suggestions:
11:27:08,015 DEBUG [QuartzJobListener] job1: job about to be executed
11:27:08,015 DEBUG [IAMJob] ******* executing job job1 *******
11:27:08,046 DEBUG [IAMJob] ---> executing job 'job1' using IAMJobExecutor
11:27:08,046 DEBUG [IAMJobExecutor] found valid iam service
11:27:08,046 DEBUG [IAMJobExecutor] looking for iam server connection 'OIM1'
11:27:08,078 DEBUG [IAMJobExecutor] ----> adding connection defined in config files [dbIAMConnection, fileIAMConnection]
11:27:08,078 DEBUG [IAMJobExecutor] found 3 iam server connections
11:27:08,078 DEBUG [IAMJobExecutor] checking iam server connection 'OIM1'
11:27:08,078 DEBUG [IAMJobExecutor] found matching iam server connection 'OIM1'
11:27:08,078 DEBUG [IAMJobExecutor] found valid iam server OIM1
11:27:08,078 DEBUG [IAMJobExecutor] IAM action specified is ACTION_IMPORT_USERS[2]
11:27:08,078 DEBUG [OIMIAMSolution] In Read Users ...
11:27:08,078 DEBUG [OIMIAMSolution] publishing import starting event...
11:27:08,078 DEBUG [OIMIAMSolution] Starting import run id ---> null
11:27:08,078 DEBUG [OIMIAMSolution] Trying to establish a connection with OIM Server...
11:27:08,078 DEBUG [OIMIAMSolution] ************** OIM Connection Params *************
11:27:08,078 DEBUG [OIMIAMSolution] XL Home ---> E:\Middleware10G_Home\xellerate
11:27:08,078 DEBUG [OIMIAMSolution] login config ---> E:\Middleware10G_Home\xellerate\config\auth.config
11:27:08,078 DEBUG [OIMIAMSolution] Naming Factory Initial ---> : weblogic.jndi.WLInitialContextFactory
11:27:08,078 DEBUG [OIMIAMSolution] Provider URL --> t3://vkalyan-in:7001
11:27:08,078 DEBUG [OIMIAMSolution] ****************************************************
11:27:08,078 DEBUG [OIMIAMSolution] ********** Connecting to OIM Server **********
11:27:08,078 DEBUG [DefaultIAMListener] storing new ImportRun
11:27:08,156 INFO [DefaultRemoter] Exec: dwrSchedulerService.getJobStatus()
11:27:08,156 DEBUG [DefaultRemoter] --Object created, not stored. id=0
11:27:08,156 DEBUG [DebuggingPrintWriter] out(35): throw 'allowScriptTagRemoting is false.';
11:27:08,156 DEBUG [DebuggingPrintWriter] out(35): //#DWR-INSERT
11:27:08,156 DEBUG [DebuggingPrintWriter] out(35): //#DWR-REPLY
11:27:08,156 DEBUG [DebuggingPrintWriter] out(35): var s0={};var s1={};s0.currentCount=0;s0.groupName="IAM";s0.job=null;s0.jobName="job1";s0.jobStatusId=null;s0.jobType="Import/Export Progress";s0.lastAccessedTime=0;s0.launcher=null;s0.monitorMap=s1;s0.status=1;s0.timeElapsed=0;s0.totalCount=0;
dwr.engine._remoteHandleCallback('139','0',[s0]);
11:27:11,187 ERROR [JobRunShell] Job IAM.job1 threw an unhandled Exception:
java.lang.AssertionError: Failed to generate class for com.thortech.xl.ejb.beans.tcUnauthenticatedOperationsSession_j7uqe_EOImpl_1032_WLStub
     at weblogic.rmi.internal.StubGenerator.generateStub(StubGenerator.java:790)
     at weblogic.rmi.internal.StubGenerator.generateStub(StubGenerator.java:779)
     at weblogic.rmi.extensions.StubFactory.getStub(StubFactory.java:74)
     at weblogic.rmi.internal.StubInfo.resolveObject(StubInfo.java:226)
     at weblogic.rmi.internal.StubInfo.readResolve(StubInfo.java:207)
     at sun.reflect.GeneratedMethodAccessor81.invoke(Unknown Source)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at java.io.ObjectStreamClass.invokeReadResolve(ObjectStreamClass.java:1061)
     at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1762)
     at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1329)
     at java.io.ObjectInputStream.readObject(ObjectInputStream.java:351)
     at weblogic.rmi.extensions.server.CBVInputStream.readObject(CBVInputStream.java:64)
     at weblogic.rmi.internal.ServerRequest.unmarshalReturn(ServerRequest.java:100)
     at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:348)
     at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:259)
     at com.thortech.xl.ejb.beans.tcUnauthenticatedOperationsSession_j7uqe_HomeImpl_1032_WLStub.create(Unknown Source)
     at Thor.API.tcUtilityFactory.getUnauthenticatedOperations(Unknown Source)
     at Thor.API.tcUtilityFactory.getPropertyValue(Unknown Source)
     at Thor.API.tcUtilityFactory.<init>(Unknown Source)
     at com.vaau.rbacx.iam.oracle.OIMIAMSolution.getUtilityFactory(OIMIAMSolution.java:2542)
     at com.vaau.rbacx.iam.oracle.OIMIAMSolution.readUsers(OIMIAMSolution.java:754)
     at com.vaau.rbacx.iam.service.impl.RbacxIAMServiceImpl.importUsers(RbacxIAMServiceImpl.java:119)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
     at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
     at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
     at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
     at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
     at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
     at $Proxy114.importUsers(Unknown Source)
     at com.vaau.rbacx.scheduling.executor.iam.IAMJobExecutor.execute(IAMJobExecutor.java:121)
     at com.vaau.rbacx.scheduling.manager.providers.quartz.jobs.AbstractJob.execute(AbstractJob.java:72)
     at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
     at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:534)
Caused by: java.lang.reflect.InvocationTargetException
     at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
     at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
     at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
     at weblogic.rmi.internal.StubGenerator.generateStub(StubGenerator.java:788)
     ... 37 more
Caused by: java.lang.ArrayIndexOutOfBoundsException: 20
     at com.thortech.xl.ejb.beans.tcUnauthenticatedOperationsSession_j7uqe_EOImpl_1032_WLStub.ensureInitialized(Unknown Source)
     at com.thortech.xl.ejb.beans.tcUnauthenticatedOperationsSession_j7uqe_EOImpl_1032_WLStub.<init>(Unknown Source)
     ... 42 more
11:27:11,203 ERROR [ErrorLogger] Job (IAM.job1 threw an exception.
org.quartz.SchedulerException: Job threw an unhandled exception. [See nested exception: java.lang.AssertionError: Failed to generate class for com.thortech.xl.ejb.beans.tcUnauthenticatedOperationsSession_j7uqe_EOImpl_1032_WLStub]
     at org.quartz.core.JobRunShell.run(JobRunShell.java:213)
     at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:534)
Caused by: java.lang.AssertionError: Failed to generate class for com.thortech.xl.ejb.beans.tcUnauthenticatedOperationsSession_j7uqe_EOImpl_1032_WLStub
     at weblogic.rmi.internal.StubGenerator.generateStub(StubGenerator.java:790)
     at weblogic.rmi.internal.StubGenerator.generateStub(StubGenerator.java:779)
     at weblogic.rmi.extensions.StubFactory.getStub(StubFactory.java:74)
     at weblogic.rmi.internal.StubInfo.resolveObject(StubInfo.java:226)
     at weblogic.rmi.internal.StubInfo.readResolve(StubInfo.java:207)
     at sun.reflect.GeneratedMethodAccessor81.invoke(Unknown Source)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at java.io.ObjectStreamClass.invokeReadResolve(ObjectStreamClass.java:1061)
     at java.io.ObjectInputStream.readOrdinaryObject(ObjectInputStream.java:1762)
     at java.io.ObjectInputStream.readObject0(ObjectInputStream.java:1329)
     at java.io.ObjectInputStream.readObject(ObjectInputStream.java:351)
     at weblogic.rmi.extensions.server.CBVInputStream.readObject(CBVInputStream.java:64)
     at weblogic.rmi.internal.ServerRequest.unmarshalReturn(ServerRequest.java:100)
     at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:348)
     at weblogic.rmi.cluster.ClusterableRemoteRef.invoke(ClusterableRemoteRef.java:259)
     at com.thortech.xl.ejb.beans.tcUnauthenticatedOperationsSession_j7uqe_HomeImpl_1032_WLStub.create(Unknown Source)
     at Thor.API.tcUtilityFactory.getUnauthenticatedOperations(Unknown Source)
     at Thor.API.tcUtilityFactory.getPropertyValue(Unknown Source)
     at Thor.API.tcUtilityFactory.<init>(Unknown Source)
     at com.vaau.rbacx.iam.oracle.OIMIAMSolution.getUtilityFactory(OIMIAMSolution.java:2542)
     at com.vaau.rbacx.iam.oracle.OIMIAMSolution.readUsers(OIMIAMSolution.java:754)
     at com.vaau.rbacx.iam.service.impl.RbacxIAMServiceImpl.importUsers(RbacxIAMServiceImpl.java:119)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
     at java.lang.reflect.Method.invoke(Method.java:597)
     at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
     at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
     at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
     at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
     at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
     at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
     at $Proxy114.importUsers(Unknown Source)
     at com.vaau.rbacx.scheduling.executor.iam.IAMJobExecutor.execute(IAMJobExecutor.java:121)
     at com.vaau.rbacx.scheduling.manager.providers.quartz.jobs.AbstractJob.execute(AbstractJob.java:72)
     at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
     ... 1 more
Caused by: java.lang.reflect.InvocationTargetException
     at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
     at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
     at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
     at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
     at weblogic.rmi.internal.StubGenerator.generateStub(StubGenerator.java:788)
     ... 37 more
Caused by: java.lang.ArrayIndexOutOfBoundsException: 20
     at com.thortech.xl.ejb.beans.tcUnauthenticatedOperationsSession_j7uqe_EOImpl_1032_WLStub.ensureInitialized(Unknown Source)
     at com.thortech.xl.ejb.beans.tcUnauthenticatedOperationsSession_j7uqe_EOImpl_1032_WLStub.<init>(Unknown Source)
     ... 42 more
11:27:11,203 DEBUG [QuartzJobListener] job1: job was executed
11:27:11,203 DEBUG [VaauSchedulerEventListenerImpl] Processing VaauSchedulerEvent
11:27:11,203 INFO [VaauSchedulerEventListenerImpl] Job executed: job1, IAM
11:27:11,203 INFO [VaauSchedulerEventListenerImpl] Job run time: 3s
11:27:11,203 INFO [VaauSchedulerEventListenerImpl] Next Run: null

OIM & OAM's identity system?

Hi all,
1.I want to know the main differences between OIM & OAM's identity system.
2.OAM includes identity system & access system,can i use OAM's identity system only without installing access system to handle user identity management ?
thanks.need r help.

Yes. You can install only OAM Identity System to do User/Group/Org Identity Management, without installing Access System. (Although Oracle always recommends using OIM for User Identity Management)
The difference between OIM and OAM is that OIM is used for User Provisioning, Reconciliation and Identity Management across multiple data stores, while OAM does User Provisioning and Identity management on a single data store.
From my experience, OAM Identity System takes an edge over OIM in the following ways:
1. Attribute Access Control: This function lets you specify permissions that determine who can read and modify the values for each LDAP attribute. It also lets you create a list of users or groups to be notified when an attribute is changed. The audience can be defined using a role, rule(ldap filter), person or group definition.
2. Set Searchbase: The searchbase determines the part of the directory tree that is available to a user during a search. You must set a searchbase for each structural object class configured for the Identity System before a user can view its entries. You can set multiple searchbases for each structural object class. When you set a searchbase, you determine who can search what (an object class, at a particular level of the directory tree), optionally using a search filter. The audience can be defined using a role, rule(ldap filter), person or group definition.
3. Delegated Administration: Delegating administration allows the Master Administrator and Master Identity Administrator to delegate their responsibilities to other, more local administrators. This is particularly useful in large organizations, where it may be necessary to administer thousands or millions of users. By doing this, you determine what rights you want to grant to another user.
4. Easy-to-use workflows: The workflow applet lets you create different kinds of workflows in minutes. Following are the interesting features in OAM workflows:
- Email notification: On execution of each workflow step, an email notification can be sent to the participants of the next step.
- Dynamic Participants: Instead of specifying static participants when you create a workflow, you can have a workflow plug-in or application choose dynamic participants according to runtime conditions.
- Out-Of-Office Participants: If a static or dynamic participant is going to be out of the office or otherwise unable to process workflow tickets, he or she can set an Out of Office flag in his or her user profile so that all incoming tickets are redirected to a surrogate participant for as long as the flag remains activated.
- Escalation Participant: If the participants receiving a given workflow ticket fail to process it within a specified interval, that ticket can be sent to an escalation participant, who assumes full responsibility for the ticket.
5. OAM deployment is usually faster than an OIM deployment.
One of the disadvantages of OAM Identity System is that it can manage identities in a single (LDAP only) data store. This can be overcome by the use of Oracle Virtual Directory on top of all the identity data stores being used in the enterprise.
Let me know if you have any more questions.
-shetty2k

OIA 11g Certification accounts delegation by individual accounts and roles?

Hi
Can any one please clarify on this?
Is Oracle identity Analytics 11.1.1.5 patch1 is supporting account wise delegation or role wise delegation in certifications?
If not any other patch is going to help this?
In other words can attestor delegate some of the accounts or roles to some other person while certifying?
Is there any work around on this?
We can see proxy assingment settings but that is completely delegating certifications to some one.
Quick help is appreciated.
Thanks

You can delegate all accounts belong to certain user to someone else in "User Entitlement Certification". This is available when you check the option "Employee Verification Required" while creating the certification. You cannot selectively select certain accounts to be delegated to another certifier.

Importing Business structures from OIM to OIA

Hi All,
OIM OIA Integration Preferred Method does not list the import business structures job in the list.
When I tried to run the import job with OIM integration, It throws me unsupported operation exception.
Is there any restriction that OIA cannot read business structures from OIM and accepts only from a file?
- Can this be executed with a customized code written at any part of OIA?
Thanks in advance.
Krish.

Hi,
Did you able to resolve this issue?
Thanks,
Pallavi

OIM and OIA same box?

Looking for recommendations here. What is the best way to install OIA? in the same weblogic cluster as OIM? Any reason not to use weblogic or the same app server? Any special considerations for a cluster (2-node)?
Thank you!

I think it all depends on your hardware capabilities, the size of your environment, and your cluster configurationsEXCELLENT ADVISE!
I would recommend putting OIA on an environment that allows you to access as much heap as possible.SOMEONE GIVE THIS GUY A MEDAL!!!
You guys might as well say, 'Make sure you turn on your computer before installing' or 'Use your fingers when installing OIM/OIA... using your toes is prone to error'
OK rant over,
OOTB, you need to put OIA and OIM on separate managed domains. The conflict of .jars caused trouble when when startup and also integration. The location of the DB is fine though, Use RCA and the OIA schema file to build up the DB's. IDEALLY, use the same app server technology when talking to both products, different app server uses different protocols. I had problems with apache and glassfish when I was trying to mix and match
Regards,
Daniel

OIM 9 and Identity Analytics integration : ClassNotFoundException

Good afternoon,
I was trying to configure SoD Invocation Library using this guide:
http://docs.oracle.com/cd/E14899_01/doc.9102/e14763/segregation_duties.htm#sthref117
I implemented SoDAnalysisExecutionOper and SoDDataValidationOper, compiled my Jar file and put it into JavaTasks and ScheduledTasks folders.
While running InitiateSODCheck I get this exception:
Class/Method: SoDObjectFactory/getDataTransformationService encounter some problems: Failure in getDataTransformationService
Class/Method: SoDObjectFactory/getDataTransformationService encounter some problems: com.gis.oim.integration.OIM_adapters.transformation.IdMvsSoDDataTransformationOperOIMvsOIA
java.lang.ClassNotFoundException: com.gis.oim.integration.OIM_adapters.transformation.IdMvsSoDDataTransformationOperOIMvsOIA
     at weblogic.utils.classloaders.GenericClassLoader.findLocalClass(GenericClassLoader.java:296)
     at weblogic.utils.classloaders.GenericClassLoader.findClass(GenericClassLoader.java:269)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
     at weblogic.utils.classloaders.GenericClassLoader.loadClass(GenericClassLoader.java:177)
     at java.lang.Class.forName0(Native Method)
     at java.lang.Class.forName(Class.java:247)
     at oracle.iam.grc.sod.SoDObjectFactory.getDataTransformationService(SoDObjectFactory.java:154)
     at oracle.iam.grc.sod.SoDInvocationRuntimeEngine.getDataTransformationInput(SoDInvocationRuntimeEngine.java:115)
Can anyone tell me what should I do and where do I need to put my Jar file?

Good afternoon,
I was trying to configure SoD Invocation Library using this guide:
http://docs.oracle.com/cd/E14899_01/doc.9102/e14763/segregation_duties.htm#sthref117
I implemented SoDAnalysisExecutionOper and SoDDataValidationOper, compiled my Jar file and put it into JavaTasks and ScheduledTasks folders.
While running InitiateSODCheck I get this exception:
Class/Method: SoDObjectFactory/getDataTransformationService encounter some problems: Failure in getDataTransformationService
Class/Method: SoDObjectFactory/getDataTransformationService encounter some problems: com.gis.oim.integration.OIM_adapters.transformation.IdMvsSoDDataTransformationOperOIMvsOIA
java.lang.ClassNotFoundException: com.gis.oim.integration.OIM_adapters.transformation.IdMvsSoDDataTransformationOperOIMvsOIA
     at weblogic.utils.classloaders.GenericClassLoader.findLocalClass(GenericClassLoader.java:296)
     at weblogic.utils.classloaders.GenericClassLoader.findClass(GenericClassLoader.java:269)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
     at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
     at weblogic.utils.classloaders.GenericClassLoader.loadClass(GenericClassLoader.java:177)
     at java.lang.Class.forName0(Native Method)
     at java.lang.Class.forName(Class.java:247)
     at oracle.iam.grc.sod.SoDObjectFactory.getDataTransformationService(SoDObjectFactory.java:154)
     at oracle.iam.grc.sod.SoDInvocationRuntimeEngine.getDataTransformationInput(SoDInvocationRuntimeEngine.java:115)
Can anyone tell me what should I do and where do I need to put my Jar file?

OIM-OIA integration error

Hi,
I have installed OIA 11.1.1.5 on linux 64 bit system successfully and also installed OIM 11gR2.
OIM and OIA both are in different weblogic domains.
Now I am trying to integrate OIM with OIA.
But while doing the following step
Log in to Oracle Identity Analytics. -->Choose Administration > Configuration.-->Click Provisioning Servers.--> Click New Provisioning Server Connection-->From the Type of Provisioning Server Connection drop-down menu, select oracle.
I am not seeing "oracle" listed in the drop-down to create an oracle server connection.
I am sure that I have updated iam-context.xml to uncomment the entry. I have verified this file and this entry was uncommented out.
<entry key="oracle">
<ref bean="oimSolution"/>
</entry>
Please let me know where I was doing wrong.

Hi Daniel,
Thanks for your reply.
I followed all the steps given in your URL and I am getting the same issue.
More over, now I am getting the below error as well after changing iam-context.xml file.
org.springframework.beans.factory.BeanDefinitionStoreException: Unexpected exception parsing XML document from ServletContext resource [/WEB-INF/dataaccess-c
ontext.xml]; nested exception is java.lang.NoClassDefFoundError: javax/xml/namespace/QName
at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.doLoadBeanDefinitions(XmlBeanDefinitionReader.java:420)
at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.loadBeanDefinitions(XmlBeanDefinitionReader.java:342)
at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.loadBeanDefinitions(XmlBeanDefinitionReader.java:310)
at org.springframework.beans.factory.support.AbstractBeanDefinitionReader.loadBeanDefinitions(AbstractBeanDefinitionReader.java:143)
at org.springframework.beans.factory.support.AbstractBeanDefinitionReader.loadBeanDefinitions(AbstractBeanDefinitionReader.java:178)
at org.springframework.beans.factory.support.AbstractBeanDefinitionReader.loadBeanDefinitions(AbstractBeanDefinitionReader.java:149)
at org.springframework.web.context.support.XmlWebApplicationContext.loadBeanDefinitions(XmlWebApplicationContext.java:124)
at org.springframework.web.context.support.XmlWebApplicationContext.loadBeanDefinitions(XmlWebApplicationContext.java:93)

Data Owner Certification in Oracle identity analytics

Hi all,
I am trying to do data owner certification in OIA.
Certification is getting completed 100%. But, the remediation is not working.
I have applied the BP4 patch also.
Steps followed for the data owner certification:*
1)In identity certification, selected new certification--> Type:Data Owner.
2)Selection Strategy: By Data Owner
3)Added the data owners and clicked next.
4)Selected the certifier as data owner and created the certificate.
5)I logged in as the certifier and opened the certificate.
6)Chose 'does not belong to me' and completed the certificate.
When i checked the status in remediation tracking, it shows that the certificate is complete.
But, the attribute is not revoked.
Please let me know if something is missing in my procedure.
Regards,
Narmadha.

Hi Narmadha,
The first screen of the certification will show all the 'attributes' that belong to the Data owner. Accordingly you can 'claim' them.After claiming them, you can examine the users who have the attributes that you claimed for. Over here you can perform certify/revoke/ etc.. for the users. Once the certification is complete, you can view the result from two places. you can view the report from clicking the completed certification and from the Reports Tab. Once you are in reports Tab, go to sign-off reports and navigate to completed reports sub-tab. There you will see all the reports generated for completed certifications.

OIA 11.1.1.5 - OIM 11.1.1.5 Integration Cannot see the Provisioning Server

Hi Everyone,
I'm trying to integrate OIM and OIA, I followed the steps that appear on http://docs.oracle.com/cd/E24179_01/doc.1111/e23377/integratingwithoimpreferred.htm#BABBEBFC but when I need to create the provisioning server I don't see the oracle provisioning server.
I modified all the required files and double checked they where saved and restarted the OIA server but no changes.
I deployed OIA and OIM on the same WL domain 10.3.5, also they are on Windows 2003 Server.
Please I'll appreciate all the help you can give me.
Regards,
Camila

Hi Camila
In order to view the Oracle Provisioning Server, you need to uncomment some lines in iam-context.xml file in $RBACX_HOME/WEB-INF:
<import resource="oim-commons-context.xml"/>
<import resource="oim-11g-context.xml"/> 
and you need enable the nex element
<entry key="oracle">
<ref bean="oimSolution"/>
</entry>
after that ypou need to restart your App Server.
Alex Fonts

OIA-OIM Integration.

Hello everyone,
I have worked with OIM for quite a while now. Recently I have started working on OIA and my end goal is to integrate OIM with OIA. Having said that I would like to know what are the typical activities that are performed when such a integration takes place. I think the activities can be divided into the following categories:
1. Initial Activities
2. On-going activities
I understand that the activities will change depending on if OIM already exists or not.
Scenario 1: Existing OIM deployment which needs to be integrated with OIA
Scenario 2: New deployment with OIM and OIA
I also see that OIA offers features like Attestation and SoD. Attestation I guess can be done since OIA is always in synch with OIM, but can we enforce preventive mechanism using OIA for SoD?
Can everyone please contribute based on their experience with OIM-OIA integration.
Thanks in advance.

Hi user90210,
The key thing to point out about OIM and OIA is that they have different repositories
* OIM - Being online with the target systems and the information gets updated constantly
* OIA - Is an offline database repository for the role management and attestation aspects (OIA does not touch the target systems)
Yes attestation can be done by both products though OIA has the capabilities of attribute attestation with the option of drilling further into detail (RACF would be a good example here). The product also has additional audit benefits included OOTB
Regarding the scenarios, the only initial factor to take into account would be the role management aspect
Initial activities would include populating the identity warehouse in OIA, building up the globalusers, accounts, businessunits etc. You can either get this information from OIM or from a flat file repository feed (so OIM would need to be populated first). If the information is already in OIM then GREAT, lets pull all the information out of OIM into OIA.
When you go through an approval process within OIM for a role for a user for example, it will push the request to OIA to determine whether this approval process should take place. This is where the SoD preventative violation gets involved. If there is a policy in place that states expressions that the action should not take place then the user-role would not be finalised. If there are no SoD violations then it goes into the approval process with the role and policy owners associated to that role. If all is good then it pushes the request back to OIM and assigns that person to that role.
You have 2 options regarding roles, either bring them in from OIM and manage the existing developed roles within the environment, or start from scratch an build the roles based on the information you have within OIA.
OIA doesn't necessary need to be in sync with OIM, when you have roles implemented its always best to keep the information up to date, though you may decide to bring the information of accounts, globalusers etc and start the role engineering - which may take weeks. While this is taking place the old roles may be implemented within OIM still. If you decide to bring in accounts and globaluser constantly you may never be able to complete your initial task on creating roles.
OIA only needs to be in sync with OIM when
1) You have roles active and SoD violations in place
2) You want to start a new attestation
If you haven't figured it out already, roles within OIA are authorative over OIM
Let me know if this helps
Regards,
Daniel

Java.lang.IllegalArgumentException OIM OIA integration

Hi,
I am trying to connect OIM and OIA which are on same server. On importing data, I am getting the below error. The below eroor is when I imported Resource Metadata.
13:26:46,164 ERROR [IamDbNamespaceImporterHelperImpl] Error connecting to OIM
java.lang.IllegalArgumentException: No Configuration was registered that can handle the configuration named xellerate
     at com.bea.common.security.jdkutils.JAASConfiguration.getAppConfigurationEntry(JAASConfiguration.java:130)
     at javax.security.auth.login.LoginContext.init(LoginContext.java:269)
     at javax.security.auth.login.LoginContext.<init>(LoginContext.java:427)
     at Thor.API.Security.LoginHandler.weblogicLoginHandler.login(weblogicLoginHandler.java:58)
     at oracle.iam.platform.OIMClient.login(OIMClient.java:213)
     at oracle.iam.platform.OIMClient.login(OIMClient.java:184)
     at Thor.API.tcUtilityFactory.<init>(tcUtilityFactory.java:155)
     at com.vaau.rbacx.iam.util.oracle.oimapi.OimUtilityFactory.getUtilityFactory(OimUtilityFactory.java:67)
     at com.vaau.rbacx.iam.db.helpers.IamDbNamespaceImporterHelperImpl.readNamespaces(IamDbNamespaceImporterHelperImpl.java:85)
     at com.vaau.rbacx.iam.db.DBIAMSolution.readResourceMetadata(DBIAMSolution.java:746)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:88)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
     at java.lang.reflect.Method.invoke(Method.java:613)
     at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
     at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:198)
     at com.sun.proxy.$Proxy127.readResourceMetadata(Unknown Source)
     at com.vaau.rbacx.iam.service.impl.RbacxIAMServiceImpl.importResourceMetadata(RbacxIAMServiceImpl.java:474)
     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
     at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:88)
     at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:55)
     at java.lang.reflect.Method.invoke(Method.java:613)
     at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
     at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
     at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
     at org.springframework.transaction.interceptor.TransactionInterceptor.invoke(TransactionInterceptor.java:106)
     at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
     at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
     at com.sun.proxy.$Proxy130.importResourceMetadata(Unknown Source)
     at com.vaau.rbacx.scheduling.executor.iam.IAMJobExecutor.execute(IAMJobExecutor.java:111)
     at com.vaau.rbacx.scheduling.manager.providers.quartz.jobs.AbstractJob.execute(AbstractJob.java:72)
     at org.quartz.core.JobRunShell.run(JobRunShell.java:202)
     at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:534)
13:26:46,167 ERROR [DBIAMSolution] Error Importing Namespaces : No Configuration was registered that can handle the configuration named xellerate
Please suggest me on the error.

This issue is because you have deployed OIM and OIA on same server
refer below doc
http://docs.oracle.com/cd/E27119_01/doc.11113/e23129/glbvw.html

OIM vs OIA : Identity Certification

Similar Messages

Maybe you are looking for