[OIM11g R1] Resource Ordering in Request Template

Dear Gurus,
I want to know about ordering of Resource Object in Request Template. Where can I find the setting? For example if I have 2 resource, named A and B. If I want resource B to be positioned on top of resource A, can I move it like that? Is it possible to order resource in OIM11g R1? Or at least can I make it shown in Ascending or Descending? How to do that?
Thank you

Thanks Kevin,
But we have something like this here. Is it because the version, or maybe we need to patch it?
https://drive.google.com/file/d/0B1xvmF8kRL9_eHhrbFFKdGdPa3M/edit?usp=sharing

Similar Messages

[OIM11g R1] How to Delete Request Template Management

Dear all,
As for the intro, if we create new request template with at least 1 role in it, OIM will automatically create authorization policy (request template management) with the same name. And for my current issue, I think it is caused by fault in export/import xml. I have one request template that is not synced with the one in authorization policy. The one in request template doesn't have any role assigned onto it. But the one in authorization policy has it. As a result, when I try to add some role on the request template, there comes pop-up error. So my conclusion is, this issue should able to be fixed if I delete the request template management in authorization policy. But the situation is, we cannot delete request template management. We can only delete user/role management. Any idea how to solve this? Do you know how to force delete it via LDAP or Oracle DB?
Thank you

Thanks Kevin,
But we have something like this here. Is it because the version, or maybe we need to patch it?
https://drive.google.com/file/d/0B1xvmF8kRL9_eHhrbFFKdGdPa3M/edit?usp=sharing

Create request template in OIM11g

Hi Friends,
I have created request template in OIM11g and I created it for user creation and assigned a manager for approval.
After I finish the user creation task and as the user is approved by the manager. The user status in Approved but I m not able to find the user in the User list.
let me know how to find the user is created or not.. ?
regards
Srikanth

First of all you should verify the user USR table in OIM - Database.
If user exist in DB but still not visible in user list, there may be problem with authorization policy, So create an authorization policy so that user have access to view, edit modify etc permission.

Service Account Management through Request Templates

Hi,
I am trying to implement Service Account lifecycle use cases (Create, Modify, Delete) on 2 resources(AD User, iPlanet User) through Request templates. In this case OOTB tasks - Service Account Alert, Service Account Changed, Service Account Moved with resource specific Process definitions are not get triggered as I am initiating process through Request Templates.
I want to trigger post process EventHandler upon triggering any of these events. so, I created metadata xml file as the following and imported it into MDS.
-----------------EventHandler Metadata file------------------------
<?xml version='1.0' encoding='utf-8'?>
<eventhandlers>
<action-handler class="com.wipro.sdf.iam.oim.plugin.ServiceAccountCreationEventHandler" entity-type="Resource" operation="PROVISION" name="ServiceAccountCreateEventHandler" stage="postprocess" order="1021" sync="TRUE"/>
</eventhandlers>
----------------------------XXX----------------------------------------------
When I trigger create event of SA on any of the resources, the EventHandler is being invoked and from execute() method, Orchestration is giving the following data
{UD_IPNT_USR_LAST_NAME=TestTwo, BENEFICIARYKEY=798, UD_IPNT_USR_COMMON_NAME=SA Test Two, *ResourceKey*=12, serviceaccount=true, UD_IPNT_USR_SA_ADMIN=USER16TE, UD_IPNT_USR_USERID=SATEST2, UD_IPNT_USR_FIRST_NAME=SAccount}
My EventHandler has to do some actions on target resource(AD / iPlanet),so I would like to get resource connection details like IP, port , admin login details etc.
To fetch those details, I am using ResourceKey that is coming from Orchestration.
When I use the following code to find Resource details based on Key, its throwing resource not found exception.
-----------------------Code from execute() of EventHandler----------------------
String resKey = getParamaterValue(parameters, "ResourceKey");
tcITResourceInstanceOperationsIntf resInsObj = Platform.getService(tcITResourceInstanceOperationsIntf.class);
//Get Resource Details based on Resource Key
HashMap searchMap= new HashMap();
searchMap.put(Constants.IT_RESOURCE_KEY, resKey);
logger.debug(methodName+" - IT Resouece Search Map is : "+searchMap);
tcResultSet resultSet = resInsObj.findITResourceInstances(searchMap);
-------------------------------End of code ------------------------------------------------
I tried finding for the table which stores all IT Resource connection details. But no luck.
Now my questions are:
1. Which table stores all IT Resource Information that can be seen from Design Console -> Resource Management -> IT Resource Type Definition - > Resource?
2. Which table stores Resource Key and Name details?
3. When we do query for records from any form in Design Console, where exactly would logs get recorded? (as it queries DB to fetch information there should some file like DB Tracer Log etc)
Could somebody please answer these questions and give some hint to implement SA management through Req Templates?
Thank you in advance,
Mounika

Hi kevin,
thanks for reply.
i am thinking that, Even though OIM11G is developed in ADF,some parts of the code is in struts only,like xlWebApp.war .
i have seen source code of xlWebApp.war folder that is there in OIM11g.
it seems to be developed in struts only.
is there any ADF interaction in that?
i have written helloworld program in struts,that is working fine.
i have done that,for ADUser resource popup i added button "serviceaccount for this resource".when i click that one jsp page will come.
so i am thinking that,some other reason is there for not working.
can u please tell me the reason?

How to assign approvaal policy for a request template in OIM 11g

When I request for resource in OIM 11g, It's always going for Default approval of xelsysadm.
I want this Request level approval must go to "Beneficiary Manager approval". While requesting I am selecting request template (which I created) for Provision resource as Request type.I have already set "Beneficiary Manager approval" as request level approval for this request template.
I have created one approval policy, How can I assign this approval Policy to request template so that When i submit this request , it should go to my Manager approval.
Regards,
J

Hi Rajiv,
I do not need approval of Operational level. I want to stop the approval process after request level approval.
Here you are saying to create a new approval policy and set as AUTO Approval as true. There are some default approval policies which comes with OIM 11g and one of the approval policy is trigeering the Operaional level approval. So I think I do not need to create new approval policy and I can use exsting approval policy and modify as you suggested selecting AUTO APPROVAL and create approval rule as request template=="XYZ".
I am not sure which default approval policy trigeering the Operational approval now. Can you pls tell me that?
Can you pls confirm that, there is only way to restrict Opertional Approval by selecting "AUTO APPROVAL" true and put the approval rule as request template=="XYZ"
Thanks Rajiv for your help all the time.

How to add dynamically a role in a Request Template

Hi all,
We have created a job that reads roles from a custom table and creates them in IDM. We have also a request template of type Assign Roles that has all the allowed roles that can be assigned to a user. We have a requirement to add a role from the custom table in the IDM and also add it in allowed roles of the Request Template so that it will be available. Our problem is that we cannot find an API that we can call in order to add the roles in the request template. Does anyone know how we can do this?
Thanks in advance,
Kostas

Did you look at RequestTemplateService? I believe you can use this to modify your template pragmatically. Thus the step would be to read the custom table, create role in IDM and the modify the template pragmatically to add the newly created role in the available role which can be requested.
http://download.oracle.com/docs/cd/E14571_01/apirefs.1111/e17334/oracle/iam/request/api/RequestTemplateService.html
HTH,
BB

Create a custom Request Template

Hello,
i need to create a custom request template.
Custom Template = Create user + disable user.
The request should be creating a user and disabling them automatically.
1. What is the correct way to realize this scenario?
2. Do i need bpel processes for that?
3. Where are the default request templates stored in oim? Is it possible to modify the 'create user' template and add the 'disable user' functionality?
Many thanks in advance!

1) Use these templates. Create and Disable User.
3)__Default Request Template in OIM:__
1-Assign Roles:Default template for assigning roles to users
2-Create User:Default template for creating users
3-De-Provision Resource:Default template for deprovisioning resources
4-Delete User:Default template for deleting users
5-Disable Provisioned Resource:Default template for disabling provisioned resources
6-Disable User:Default template for disabling users
7-Enable Provisioned Resource:Default template for enabling provisioned resources
8-Enable User:Default template for enabling users
9-Modify Provisioned Resource:Default template for modifying provisioned resources
10-Modify Self Profile:Default template for modifying self profile
11-Modify User Profile:Default template for modifying user profiles
12-Provision Resource:Default template for provisioning resources
13-Remove from Roles:Default template for removing users from roles
14-Self-Register User:Default template for self registering users
15-Self-Request Resource: Default template for requesting resources for self
Default template are:
Go to Advanced Administration-->left pane of the Request Templates -->Advanced Search
To modify:
Select a template name in the search results table.--> Actions menu, select Open.
Template Details section-->the details of the template are displayed in the fields
I hope this helps,
Thiago Leoncio

Request template tab customization

In OIM11g R1 - Request Templates, we wanted to insert tab in-between. For example, after select the template, we need to add new tab and display 'Terms & Conditions' and then the existing pages (Select Role, Additional Information & Justification) should appear. Can anyone let us know how to achieve it.
- Kalyan.

There are some Oracle By Examples (http://apex.oracle.com/pls/apex/f?p=9830:37:3789900036911568::NO:RIR:IR_PRODUCT,IR_PRODUCT_SUITE,IR_PRODUCT_COMPONENT,IR_RELEASE,IR_TYPE,IRC_ROWFILTER,IR_FUNCTIONAL_CATEGORY:,,OIM,OIM_11g,,,). However, with OIM it's always been learn while learning. It's a very large product, an even more with 11g. Most everyone will tell you the way to learn it is from usage and the headaches it causes. I would suggest you start with a simple connector and working to implement the request data set associated with it. Then try and tweak the dataset to be something different, and get a feel for modifications to the approval side of it, and build on it from there.
Others who have used 11g might be able to provide some insight, you'll just have to wait for their responses.
-Kevin

Request Template LookupQuery Option

Has anyone tried using the lookupQuery option in a request template? I tried adding it for a country field and instead of getting a drop-down box I simply got a textbox. I primarily want to use the query option so that I can sort the list of countries instead of leaving it up to the random map sequence that you currently get.
Thanks,
Pete

Dude
Here are the answers for your query:
<AttributeReference name="Country of Origin" attr-ref="Country of Origin" available-in-bulk="false" type="String" length="50" widget="dropdown" required="false">
<lookupQuery lookup-query="select lkv.lkv_decoded as CODE, lkv.lkv_encoded as COUNTRY from lku, lkv where lku.LKU_TYPE_STRING_KEY = 'Lookup.Locations.Country' and >lku.LKU_KEY = lkv.LKU_KEY order by COUNTRY ASC" display-field="COUNTRY" save-field="CODE"/>
</AttributeReference>+In addition if I then delete the "Country of Origin" attribute from the User Configuration then the Self-Register template fails to load because it can't find the attribute.+
Answer: You are using "*attr-ref="Country of Origin*" in your dataset. If you delete that field from OIM then how will it load ?
Regardless of what I put in the query, even **** data, the form still displays the contents of the "Country of Origin" based on the User Configuration settings
order by COUNTRY ASC
Most of the things don't work in Request Dataset. here you are using order by. I am not sure whether it works properly or not. Use some other query and test that.

Error while creating Contractors using Request Template

Hi,
Logged in as "xelsysadm". I have created "Contractor Request Template".
Logged in as "ContractorAdministrator" for him "ContractorRole"(Request Administrators) and "Contractor Authorization Policy"(create user) assigned.
When Contractor Administrator tries to create a contractor using "Contractor Request Template" getting the below errors...
oracle.iam.request.exception.AccessDeniedException: IAM-2050059:User OIMINTERNAL does not have access to create the request using Contractor Create User request template.
     at oracle.iam.request.repository.RequestTemplateManager.checkRoleAuthorization(RequestTemplateManager.java:165)
     at oracle.iam.request.repository.RequestTemplateManager.getTemplateForRequestCreation(RequestTemplateManager.java:218)
oracle.iam.request.exception.InvalidRequestDataException: IAM-2040049:UserManager Access Denied.:
     at oracle.iam.requestactions.plugins.datavalidator.CreateUserDataValidator.validate(CreateUserDataValidator.java:651)
     at oracle.iam.request.impl.RequestEngine.validateRequest(RequestEngine.java:1695)
Please help me..
Thanks,
Madhavi

If you are not using Template level approval you must associate approval policy( for Request level and operational level). I suggest, you change it to Template level .
To verify this follow below link
http://docs.oracle.com/cd/E14571_01/doc.1111/e14309/request.htm#OMDEV2873
create request template
http://docs.oracle.com/cd/E14571_01/doc.1111/e14316/req.htm

Error when creating a request Template In OIM

Hello all,
I have a very strange issue with OIM, it is when I try to create a request template, and put a restriction in Organization field, it creates the template and everything is fine. Suddenly, when I try to edit this template, the OIM shows a window with the next error:
ADF_FACES-60096:Server Exception during PPR, #5 oracle.iam.platform.utils.MinLimitException: size < minimum limit
I have found in other posts the "solution", It is to change in the database -> RequestTemplate Table -> Template Data Column, the restriction Organization from "the name of the organization" to "the Id of the organization", and restart the OIM, so after that, I can edit the template.
Here is the issue that I don't understand,... few hours after, I want to edit the same template, and the OIM again shows the same error:
ADF_FACES-60096:Server Exception during PPR, #5 oracle.iam.platform.utils.MinLimitException: size < minimum limit
And if I review in the database the table, in the Template Data Column, the restriction of Organization has AGAIN the "Name of the organization".
And I can again change that to the "Id of the organization", but it's time lost restarting the OIM. Time that I don't have, because Its more than one template.
Please somebody could help me with this issue.

Hello,
I already found the solution to this issue.
I had to restart the OIM server but also the DataBase and after that, this problem was solved.
Thanks anyway.

OIM 11g R1 Request Template issue

Hi All,
We are facing an issue with implementing the Request Management of OIM 11g R1 11.1.1.5 for Create User.
OIM already provides OOTB CreateUserDataSet.xml and a ‘Create User’ Request Template.
We have changed(customized) the OOTB CreateUserDataSet.xml at the same location in MDS and have created one our own Request Template – ‘Create Custom’.
We have also added Attribute Restrictions in the ‘Create Custom’ request template for mandatory fields like – ‘Organization’, ‘User Type’ & ’Design Console Access’.
The issue we are facing is –“After some time(not immediately) the Request Template gets corrupt and does not open thus rendering the Request Process for Create User inoperable.”
Below is the the log error of the OIM Web console error after we are trying to open ‘Create Custom’ by clicking on the Request Template.
<ADF_FACES-60096:Server Exception during PPR, #8
oracle.iam.platform.utils.MinLimitException: size < minimum limit
                at oracle.iam.platform.canonic.model.Values.setMinLimit(Values.java:187)
                at oracle.iam.requesttemplate.agentry.operations.OpenActor.renderAttributeRestrictionsTab(OpenActor.java:829)
                at oracle.iam.requesttemplate.agentry.operations.OpenActor.prepare(OpenActor.java:198)
                at oracle.iam.consoles.faces.utils.CanonicUtils.prepareOperation(CanonicUtils.java:169)
                at oracle.iam.consoles.faces.utils.CanonicUtils.prepareOperation(CanonicUtils.java:179)
                at oracle.iam.consoles.faces.render.canonic.UICursor$TableActionListener.processAction(UICursor.java:855)
                at javax.faces.event.ActionEvent.processListener(ActionEvent.java:88)
Any help in solving above issue, workarounds or knowing that is it an OIM bug will be greatly helpful.
Note* I have noticed(through Export) that in a corrupted Request Template the Organization Name that I have restricted to a Constant, has the- Organization Name's Text as value in exported xml. If I change it back to ACT KEY and import it back in OIM the Template is again restored until next corruption
Thanks already
Regards,
Nitin Tewari

Excellent! Thank you very much!
Edited by: 958794 on May 22, 2013 10:37 AM

I cannot log into facebook. I get the following message: 404 Error - Not Found The resource you have requested could not be found on the server. There are many possible reasons for this. Either the file does not exist, there is an error in your request,

I am not able to go to the facebook site. www.facebook.com is not working. I get the following error message. 404 Error - Not Found
The resource you have requested could not be found on the server. There are many possible reasons for this. Either the file does not exist, there is an error in your request, or the file is not accessible in the requested directory. Please verify that:
* You have used the proper case; requests ARE case-sensitive!
* You have entered the URL correctly. (i.e. proper directory/filename)
* You used the FULL URL. (i.e. proper file type: .html, .gif , .jpg, etc.)
* You use a tilde (~) before user directories. (i.e. www.furcen.org/~jurann/ )
* The user/file still exists on this server.
I also get redirected to "Busca Google" when typing www.facebook.com in the address bar.
== URL of affected sites ==
http://facebook.com; buscagoogle.com

I have the same problem and it does not have to do with firefox. Do you have any idea how to fix it through?

"insufficient existing resources to complete requested service" IO problem?

Hi, my application reads from a repository of 1 million documents and then do some processing (very simple and requires little memory or computation) then outputs to another repository, where output files are placed in a flat structure, i.e., 1 million files in a single folder, not organised into any subfolders. I know this is a bad design and Im about to change it, but not sure if this is the cause of my problem (see following).
My program haulted and threw exception *"insufficent existing resources to complete requested service"* every time it reached about 800k documents. And after I got this exception, my WinXP OS starts to misbehave, like sometimes I cannot open applications properly, and sometimes memory reference address issues, and once I tried to run JAVA IDE (intellij 7.0) again and I got this message:
"ERROR: transport error 202: recv failed during handshake: No buffer space available (maximum connections reached?)"
Also I tried to list all open files in a console, but the command hangs and without responding, looks like there are too many things to list or too little resources available to complete the operation.
All these problems go away if I restart system.
I have confirmed the following possible causes and they do not apply:
- unclosed IO's , I checked the code and all IO operations properly instantiated and closed;
- memory leak, java profiler shows memory consumption well below allocated max, and very stable (test on 100k documents, not whole of 1million though)
I do not have any clue now as how this problem happend and how I can solve it. I wonder if placing all 800k documetns in a single folder causes problem? I know that if I try to call File.listFiles() on a folder with too many files that will cause memory problem. But I didnt have this kind of method call at all, but simply writing a particular file to that folder. Does this cause problem too? I am about to change this and to organise the output folder to subfolders, but is this the right dirrection to take?
I am sorry that my description may be insufficient to truely debug the problem, but that is all I can get and it does look strange to myself too. Please could you throw in your ideas - any thoughts about the exception message, even any guess on what would be causes to this etc...
Any thoughts are very much appreciated!
Thanks so much inadvance!

Hi Paul, thanks. I have did as you suggested, implemented a standalone program to test the issue. What I did is, I wrote a simple program which extends Thread, and creates 1 million files and write empty content and store to disk. Then I tested with 4 instances of such class, i.e., 4 threads writing 4 milllion files in total to disk - but to different locations, so there's no writing-to-same-file issues. And the system crashes at certain point.
I then did another test to make the problem clearer. instead of running the 4 threads in parallel, I only create a new thread after previous one has completed. and this time still it crashes for the same reason, and at about 2.5million files have been created.
The crash looks severe, as it simply crashes the system and I cannot do anything but to force shut down my pc. Then a restart asks to check disk integrity, and reported alot messages like :
"deleting orphaned file xyx.xml ......" from drive X where X is the drive that the files are written to.
Here I attach my testing code:
public class TestClass extends Thread{
public void process (String inputPath, String outputRootPath){
FileStoreProxy p=new FileStoreProxy(outputRootPath);   // a FileStoreProxy keeps record of a root directory where files are created and
// written to. It also creates subfolder (File.mkdirs()) such that every 10000 files
//are stored in a subfolder under the root directory. The class doesnt do any IO
List<File> folders = FileLoader.getFolderRecursive(new File(inputPath)); // this method loads all folders from inputPath. InputPath is a disk
// directory that contains more than 1million xml files
for (File folder : folders) {
File[] files = folder.listFiles();
    for (File f : files) {
      if (f.isFile()) {
         FileOutputStream stream = null;
         try {
              File newFile = new File(p.nextBestLocation()+"/"+f.getName()); //basically this line creates a new file whose path is composed by
//the directory returned by FileStoreProxy, plus the filename as the input filename.
              stream = new FileOutputStream(newFile, false);          // create an outputstream
              stream.write("test".getBytes());                                  //write to the file
         catch (IOException ioe) {
            e.printStackTrace()
         finally {
            if (stream != null) {
               try {
                  stream.close();
                  stream = null;
               } catch (IOException ioe) {
                 e.printStackTrace();
}And here is the class which creates four threads
TestClass tc1 = new TesetClass;
tc1.process("input_file_repository","f:/temp/outputpath1");
while (!tc1.isFinished()){        // isFinished() is a method in TestClass, which tells whehter the thread has finished running.
TestClass tc2 = new TesetClass;
tc2.process("input_file_repository","f:/temp/outputpath2");
while (!tc2.isFinished()){        // isFinished() is a method in TestClass, which tells whehter the thread has finished running.
TestClass tc3 = new TesetClass;
tc3.process("input_file_repository","f:/temp/outputpath3");
while (!tc3.isFinished()){        // isFinished() is a method in TestClass, which tells whehter the thread has finished running.
TestClass tc4 = new TesetClass;
tc4.process("input_file_repository","f:/temp/outputpath4");
while (!tc4.isFinished()){        // isFinished() is a method in TestClass, which tells whehter the thread has finished running.
}Hope this helps... I had a feeling that the cause of the problem is that File IO is doing too fast such that some resources (file handle for example?) are not released in time and are floating somewhere, as a result, after some point it crashes. And later on the OS disk check reports that there are orphan files which are created by the program.
Any ideas much appreciated! thanks!

Need to add one extra field in to Purchase Order XSL-FO Template

Hi All,
I am working on Purchase order XSL-FO template. I need to Customize it. I want to add few more fields in XSL-FO template which are getting the values from database. May be these columns are not present in XML data file , which the printing purchase order concurrent program is using.
Suggest me, what should i do?
regards
Ravi

Hi Paul,
I need to customise the standard PO XSL-FO template but my problem is, this xsl-fo template has to be used by the seeded Oracle rdf report for display purpose.
As far as i know, the xsl-fo template for PO is called by a java conc program
and the Printed PO report(portrait) program uses the normal rdf layout.
I think the xml data structure/tags produced by the rdf is not similar to the one produced by the java conc program.So, the XSL-FO template can't use the rdf report for displaying.
If you have any info on this please let me know.
Thanks,
Satrajit

[OIM11g R1] Resource Ordering in Request Template

Similar Messages

Maybe you are looking for