OIM11gr2 PS1 Postprocess eventhandler for GTC recon

Hi All,
I Created PostProcess eventhandler which is working fine for the user created via identity console. but it is failing for user created via GTC(Trusted resource) i don't see any error in the logs but in Eventmanagement it just say "Failed in PostProcessing". and even it is not fetching the user password in GTC recon .
i tried order FIRST,LAST,1000,1002 etc...but same issue.
<?xml version="1.0" encoding="UTF-8"?>
<eventhandlers xmlns="http://www.oracle.com/schema/oim/platform/kernel"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://www.oracle.com/schema/oim/platform/kernel orchestration-handlers.xsd">
<action-handler class="com..eventhandlers.EventHandlers" entity-type="User" operation="CREATE" name="EventHandlers" stage="postprocess" order="1008" sync="TRUE"/>
</eventhandlers>
Thank you

Now i am getting the following error:-
<02-Oct-2013 17:40:46 o'clock BST> <Warning> <oracle.iam.platform.kernel.impl> <BEA-000000> <An error occurred while executing the kernel event handler.
java.lang.RuntimeException: method not implemented
        at oracle.iam.identity.usermgmt.impl.handlers.custom.CustomPostProcessHandler.compensate(CustomPostProcessHandler.java:178)
        at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.startCompensation(OrchestrationEngineImpl.java:786)
        at oracle.iam.platform.kernel.impl.OrchProcessData.runFinalizationEvents(OrchProcessData.java:1382)
        at oracle.iam.platform.kernel.impl.OrchProcessData.runEvents(OrchProcessData.java:772)
        at oracle.iam.platform.kernel.impl.OrchProcessData.executeEvents(OrchProcessData.java:258)
        at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.resumeProcess(OrchestrationEngineImpl.java:835)
        at oracle.iam.platform.kernel.impl.OrchFailedProcessData.handleCompensate(OrchFailedProcessData.java:146)
        at oracle.iam.platform.kernel.impl.OrchFailedProcessData.handleFailedResult(OrchFailedProcessData.java:213)
        at oracle.iam.platform.kernel.impl.OrchFailedProcessData.resume(OrchFailedProcessData.java:135)
        at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.failed(OrchestrationEngineImpl.java:808)
        at oracle.iam.platform.kernel.impl.OrchProcessData.executeEvents(OrchProcessData.java:260)
        at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.resumeProcess(OrchestrationEngineImpl.java:840)
        at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.resumeProcess(OrchestrationEngineImpl.java:870)
        at oracle.iam.platform.kernel.impl.OrhestrationAsyncTask.execute(OrhestrationAsyncTask.java:131)
        at oracle.iam.platform.async.impl.TaskExecutor.executeUnmanagedTask(TaskExecutor.java:99)
        at oracle.iam.platform.async.impl.TaskExecutor.execute(TaskExecutor.java:69)
        at oracle.iam.platform.async.messaging.MessageReceiver.onMessage(MessageReceiver.java:68)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
        at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
        at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
        at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
        at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
        at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
        at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
        at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
        at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
        at com.sun.proxy.$Proxy381.onMessage(Unknown Source)
        at weblogic.ejb.container.internal.MDListener.execute(MDListener.java:583)
        at weblogic.ejb.container.internal.MDListener.transactionalOnMessage(MDListener.java:486)
        at weblogic.ejb.container.internal.MDListener.onMessage(MDListener.java:388)
        at weblogic.jms.client.JMSSession.onMessage(JMSSession.java:4659)
        at weblogic.jms.client.JMSSession.execute(JMSSession.java:4345)
        at weblogic.jms.client.JMSSession.executeMessage(JMSSession.java:3821)
        at weblogic.jms.client.JMSSession.access$000(JMSSession.java:115)
        at weblogic.jms.client.JMSSession$UseForRunnable.run(JMSSession.java:5170)
        at weblogic.work.SelfTuningWorkManagerImpl$WorkAdapterImpl.run(SelfTuningWorkManagerImpl.java:545)
        at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
        at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
>
Thank you

Similar Messages

Custom Error Report for Truested Recon in OIM 11.1.1.5

Hi,
We are planning to have a custom scheduled task to generate csv report for failed recon events. We have some 4 trusted recons (2 custom + 2 GTC) in our environement. Does a DB query would be sufficient to meet our requirement. If yes please suggest the tables that we need to consider. Please suggest whether it is a good practise and has any one implemented such before ?
We cannot go far any tool like BI publisher now so any means of generating report through custom code would be helpful.
Thanks,
DK

The RECON_EVENTS and OBJ table will be sufficient to know which resource object the recon event was for, and the status of the recon event.
-Kevin

Validation Event Handler Not working with GTC Recon???

We have implemented a Validation Event Handler on user entity.
In the code we have implemented both the execute methods i.e. Orchestration andf Bulk Orchestration. We have created a UDF for Manager field and our validation handler checks whether the user in Manager UDF field is an Active user in OIM or not. In case the user is not an Active user, code will throw a Validation Failed Exception.
At the time of changing the Manager UDF value from the Console directly Validation Event Handler is getting triggered but with GTC Recon Validation Handler is not Working.
Previously i faced the same issue with the post process event handler but the problem get resoved when i implemented execute method with Bulk Orchestration. As per my understanding Bulk Orchestration exceute method gets called with GTC Recon and execute method with Orchestration gets called when changing the attribute value directly from the console.
In case of Validation Event Handler i have implemented both but still validation Event handler is not working with GTC.
Thanks in Advance....

Any Help????

Issue in AD connector upgrade from 9.1.1.7.0 to ICF based 11.1.1.5.0 in OIM11gR2 PS1

Hi,
I am facing issue while AD upgrade from 9.1.1.7.0 to 11.1.1.5.0(ICF) in OIM11gR2 PS1 environment in Linux environment.
In the last step where we need to select the connector objects to be upgraded, issue is for AD User ( Process form and definition) and AD Group (Process form).
The issue is related to the IT Resource Definition and it says, "Error: Could not resolve dependency. AD Server [ITResourceDef]".
In the preceding steps- for process forms field, process definition tasks and IT resource mapping, I am retaining/add everything ( all the existing tasks, fields, parameters).
Can anyone help me on this? or if anyone has peform the upgradation of AD from 9.1.1.7 to 11.1.1.5 (ICF), can they tell me the steps to do or anything about the above error?
Thanks
Piyush

That's tricky because their are usually huge changes between two connector versions if Oracle says that it cannot be upgraded.
In other words you would require study of these changes and try to simulate it by yourself in your Dev. Or identify the customizations in your past environment and then redo (as you suggested yourself). The second option is a bit difficult but clean.
Thanks
Sunny

OIM Restarting automatically during GTC Recon

Hi,
While doing a GTC recon for 100 users, the OIM Server (9102 BP12) is restarting on its own in the middle of recon work - after "event linking" around 40 users.
Is there anything incorrect with the setting? Any suggestions for troubleshooting?
Regards
Vijay Chinnasamy

Yes, just make it false and see whether you are recieving any mails.
Also, OOTB notifications can be made disabled after exporting->modifying->importing few files from MDS. You can check it with oracle support.
Regards,
J

How to use single eventhandler for all menuitems...

Hi all,
I have a tray with a popup.
Currently I have an eventhandler for every single menuitem.
Is it also possible to provide only a single eventhandler for all of the menuitems and determine the clicked entry with the event??
Tried to use parameter mapping but onAction doesn't provide any parameters... Or am i wrong?!
Additionally, is there a list populated where I can find provided parameters for mapping?!
Thanks in advance for replies.
Bastian
Message was edited by: Bastian Schnorbus

Bastian,
This is possible via parameter mapping.
1. Set same action for every menu item;
2. Add parameter, say "id" of type string to action;
3. In wdDoModifyView write the following:
if (firstTime)
IWDMenuActionItem itm;
itm = (IWDMenuActionItem)view.getElementById("<id-of-menu-item>");
itm.mappingOfOnAction.addParameter( "id", itm.getId() );
/* repeat for all items */
4. In view handler you now can dispatch by "id" parameter received;
Valery Silaev
EPAM Systems
http://www.NetWeaverTeam.com

PostProcess event handler for trusted recon -11G Release2

Hi all,
I am disabling a user in post process eventhandler bulkExecution method. When the event handler is triggered does the user is already created at OIM? Do I modify the already created user? Or all changes done to any user during the orchestration process are commited at finalization... Can anyone tell me how things goes at the db side?
Thanks in advance
BR
Aliye

Post process event handler is fired after the user is created in database. You can verify by retrieving the usr_key attribute of user profile which is generated in database. So if you are disabling a user using post-process event handler, it means user is already created in database. As far as orchestration framework is concerned user is created during orchestration period and all event handlers and access policies are evaluated after that.
regards,
GP

OIM Event Handler Triggers on Manual Entry but not for Trusted Recons

Hi,
I'm having some trouble getting my plugin to trigger upon a reconciliation. I've developed a plugin to modify some Xellerate User attributes on the OIM Profile.
- I've created a custom package with some java classes that retrieve attributes being passed in, manipulates the data, and returns the data through an EventResult
- I have system.out commands in my BulkEventResult function to see when this function is triggered
- My Plugin.xml calls this java class, which has a plugin point of oracle.iam.platform.kernel.spi.EventHandler
- I've uploaded the plugin (development) by putting the plugin.zip in the /server/plugin folder
- I've created an event handler that calls the plugin class upon an operation = "MODIFY". It also contains entity-type="User", stage="postprocess", order="FIRST", sync="TRUE"
- I've imported this using the weblogic import utility, setting OIMMetadata, and loaded the file to /custom/iam-data/EventHandler.xml
Upon testing, I am able to see my system.out debug statements in the logs, and can see the data actually changing when I am logged into OIM making changes directly on the system.
I am unable to see any of this come through when I run a trusted OID reconciliation against the same user, manipulating the same fields.
From what I've read, all I needed to do was put the code in the BulkEventResult function. However, none of my debug statements are being triggered, causing me to believe that this event handler is not even being triggered upon a trusted recon.
Does anyone have any ideas why this is, or if I have a configuration somewhere that is incorrect?
Any help is very welcome!

Everyone,
Thanks for your help.
I found out the root of my issue: it was that my OPERATION was set to "MODIFY" in my EventHandler XML. It should have been "ANY". After I did this, it started to work.
As for registering plug-ins, you can actually drop the plugin zip file on the Oracle_IDM1/server/plugin directory for testing purposes, then re-import the EventHandler.XML you created.
I also found a few strange behaviors-
- If the order was too large (for example, 1000), it wouldn't trigger until the second time I updated it. I lowered the number to 50 and it kicked off every time.
- There is no purge cache needed when I re-imported the xml file after uploading the .jar again

Required fields for GTC in OIM 11.1.1.5

There is a lot of bad info out there on this topic. If you export the Create User workflow from MDS you will see one thing. The docs tell you another thing. Forum posts tell you another. So I wanted to post what worked for me with 11.1.1.5 It may not be the bare minimum you need OOB but it is close to it:
first name
last name
user login - make this your unique ID - also when you are mapping attributes in GTC make sure you checkmark "mapping only" for this field only which tells oim to use it as the unique id during recon
organization - I used "Xellerate Users" but there are other options.
role - I used "Full-Time" but there are other options. Notice that when you create a user manually in the ui dropdown it shows 'full-time employee' which adds to the confusion.
user type - I used "End-User" but there are other options.
I also hardcoded those literals in my sql with aliases. It is faster than using the gtc ui to create literals. Hopefully this info helps someone.

The documentation does not spell this out clearly enough - especially the "mapping only" requirement.
Good to know about hardcoding literals.
Thanks.

Question in Flat file GTC Recon

HI,
I wanted to know how Reconciliation works in GTC with respect to Reconciliation Key.
My requirement is ,i have a flat file with attributes firstname,lastname,empno and i would like to reconcile users from this file into OIM. OIM UserID will be generated as Firstname-lastname,for which I have written an "Pre-Insert" Event handler.
Now,when I run the GTC with a record
*#firstame,lastname,empo*
aaaa,bbb,111
recon went fie and user gets created in OIM with userid aaaa-bbb .
Now,I want to run the recon with only empno changed,like
*#firstame,lastname,empo*
aaaa,bbb,112
When i run the recon now,my event handler again get triggered and generating same userid as aaaa-bbb and user creation in OIM failled with the message duplicate userid.
I wanted to know,where and how can i mention my Recon field key ( which will be some attribute which is unique in the flat file) ?
Thanks in Advance

Hi,
You need to define recon rules for that GTC with username==userlogin.
Define it and then run the recon for update. it should work. And make sure you have the rule is valid checkbox as selected.
Thanks
Kunal Jain

OIM 11gR2 GTC recon mandatory mappings

Hi,
I am trying to create a GTC for recon with ODS. Are there certain mandatory mappings to be done between ODS and OIM data fields ?
Kindly share
Best Regards,
Varun

Definitely there are mandatory fields.
ODS --> Oracle Deployment Server -->
http://docs.oracle.com/cd/E27559_01/core.1112/e28516/meta.htm#r14c1-t2
Oracle Deployment Server
ODSSERVER
Contains metadata information for Oracle Deployment Server.

GL Account Report for a Recon Account

I am trying to find a report for a asset recon account that will give balances by profit center and by cost center (with descriptions). We are usibg business areas so need to break it up by business area and period.
Is there any standard report available for this purpose or what other options are available to get this type of information out of SAP?
Edited by: Pete on Oct 10, 2008 4:27 PM
Edited by: Pete on Oct 10, 2008 4:51 PM

Please try with the followings report. They are in drilldown format
S_PL0_86000030
S_PL0_86000031
Hopes its help

F9N1 Postprocessing required for Bank statement creation

Hello,
We have now case that after Mass creation of Bank statements in F9N1 not everything was finished ok. It means that in F9N13 you can check that for one account Status is 'Postprocessing Required'. The issue is that this is now blocking creation of new Mass runs for the same IHC current account showin message that 'IHC xxxx account being edited by run XXXXX from date xxxxx'.
Do you know which transaction to use to postprocess this ? F9I8 didn't help.
Thanks and best regards,
Tomek
Edited by: Tomasz Karwacki on Jan 30, 2009 11:57 AM

Hi,
In F9N8 you can see the account that are locked and the report/program that locked these accounts. You can go to SM37 and check if there are any update jobs in the initial status. These job must be completed (Choose record & Execute it). Once the corresponding jobs are completed the account would be unlocked and futher F9N1 does not give any issues.
Best Regards,
Hari.
Edited by: HariKrishna K on Mar 2, 2009 12:18 PM

How to handle timestamp in custom scheduled task written for Target Recon

Hi,
I have wriiten a Custom scheduled task to reconciile users from target system..but whenever I run the Target Recon Scheduled task .. it generates the Recon. events for all users.
How to handle this.. how to pass Timestamp value to custom Target Recon scheduled task.
Thanks,
Pallavi

To add to Kevin's point -
You will have to have a attribute either in the IT Resource or the Schedule Task. At the begining of the reconciliation searches, get the timestamp of the target system and store it in a variable. Fectch the timestamp attribute value from the IT Resource/Schedule Task and use that value as one of the search criteria of user profiles on the target.
Once all the user profiles from the target are queried and reconciliation is completed then update either the IT Resource or Schedule Task attribute using OIM API.
Hope this helps :)

StackOverflow when executing Retry Failed Recon Events task for AD recon

Hello,
I'm encountering a strange problem and I'm not really sure how to solve it. What happens is that the "Retry Failed Reconciliation Events" starts, it never completes, its periodic schedule kicks in, it starts a second time, it still never completes, the periodic schedule kicks in, it starts a third time, etc. It does this until there is about 20 parallel instance of the task running and the OIM crashes with a stack overflow. Then, the logs are filled with about 50k of this kind of error :
[2013-03-28T14:31:16.972-04:00] [oim_server1] [NOTIFICATION] [] [oracle.iam.reconciliation.utils] [tid: OIMQuartzScheduler_Worker-10] [userId: oiminternal] [ecid: 412f90a39805a348:-223a0fa4:13db22c985e:-8000-0000000000000004,1:21295] [APP: oim#11.1.2.0.0] Generic Information: select min(RECON_EVENTS.RE_KEY) from RECON_EVENTS, RECON_BATCHES where RECON_EVENTS.RB_KEY = RECON_BATCHES.RB_KEY and RECON_EVENTS.RE_CURR_RETRY_CNT > 0 and RECON_EVENTS.RE_CHANGE_TYPE != 'DELETE' and (RECON_EVENTS.RE_STATUS IN ('Creation Failed','Update Failed') or (RECON_EVENTS.RE_ENTITY_TYPE = 'Account' and RECON_EVENTS.RE_STATUS IN ('No User Match Found','No Org Match Found')) or (RECON_EVENTS.RE_ENTITY_TYPE = 'User' and RECON_EVENTS.RE_STATUS IN 'Data Validation Failed') or (RECON_EVENTS.RE_ENTITY_TYPE = 'Role' and RECON_EVENTS.RE_STATUS = 'Data Validation Failed' and RECON_EVENTS.RE_NOTE like 'Invalid Role Category%') or (RECON_EVENTS.RE_ENTITY_TYPE = 'RoleRole' and RECON_EVENTS.RE_STATUS IN ('No Role Parent Found','No Role Match Found')) or (recon_events.RE_ENTITY_TYPE = 'RoleUser' and recon_events.RE_STATUS IN ('No Role Member Found','No Role Match Found')) or (RECON_EVENTS.RE_ENTITY_TYPE = 'Organization' and RECON_EVENTS.RE_STATUS IN 'Data Validation Failed')) and re_key>146942
[2013-03-28T14:31:17.027-04:00] [oim_server1] [NOTIFICATION] [] [oracle.iam.reconciliation.utils] [tid: OIMQuartzScheduler_Worker-10] [userId: oiminternal] [ecid: 412f90a39805a348:-223a0fa4:13db22c985e:-8000-0000000000000004,1:21295] [APP: oim#11.1.2.0.0] User 4 is granted access to operation PROCESS_EVENT
[2013-03-28T14:31:17.030-04:00] [oim_server1] [ERROR] [] [oracle.iam.reconciliation.dao] [tid: OIMQuartzScheduler_Worker-10] [userId: oiminternal] [ecid: 412f90a39805a348:-223a0fa4:13db22c985e:-8000-0000000000000004,1:21295] [APP: oim#11.1.2.0.0] Calling stored procedure - XL_SP_RECONEVALUATEACCOUNT[[
intUserKey_in = 4
intEventKey_in = 146943
strRequiredAttributesList_in = RA_ITRESOURCENAME70C9F928,RA_UNIQUEID575B37CA,RA_OIMORGNAME265C2A54
strMappedTableName_in = UD_ADGRP
strTargetTableName_in = RA_ADGROUPA80D3C22
strEntityTableName_in = ACT
strAccountMatchingRule_in = (UD_ADGRP.UD_ADGRP_SERVER=RA_ADGROUPA80D3C22.RA_ITRESOURCENAME70C9F928 and UD_ADGRP.UD_ADGRP_OBJECTGUID=RA_ADGROUPA80D3C22.RA_UNIQUEID575B37CA)
strEntityMatchingRule_in = ((UPPER(ACT.act_name)=UPPER(RA_ADGROUPA80D3C22.RA_OIMORGNAME265C2A54)))
strChildTargetTableName_in =
strChildReqAttributesList_in =
strStagingITResColName_in = RA_ITRESOURCENAME70C9F928
[2013-03-28T14:31:17.094-04:00] [oim_server1] [NOTIFICATION] [] [oracle.iam.reconciliation.impl] [tid: OIMQuartzScheduler_Worker-10] [userId: oiminternal] [ecid: 412f90a39805a348:-223a0fa4:13db22c985e:-8000-0000000000000004,1:21295] [APP: oim#11.1.2.0.0] No action is performed for event 146,943 with status No Org Match Found
Inspecting the event 146,943 in the event manager shows that it is about the reconciliation of an AD group and it has failed with "No Organization Match Found". However, the organization name mentioned in the "Reconciliation Data" section does show up in Lookup.ActiveDirectory.OrganizationalUnits. In fact, the group name also shows up in Lookup.ActiveDirectory.Groups. However, the OIM Organization Name mentioned in the Reconciliation Data points to an organizations that doesn't exist in OIM. I don't think that it is a problem since the Maintain Hierarchy parameter in my AD Recon task is set to "no".
I've also taken a look at the tables mentioned in the logs. The UD_ADGRP table is completely empty, but RA_ADGROUPA80D3C22 is filled with all the groups contained in my AD.
So I'm not really sure what what's happening. AD Group lookup recon seems to work but not AD Group recon because I don't have the necessary OIM organizations, even though Maintain Hierarchy is set to "no". Does that make sense? I yes, is there a way to bypass this requirement?
Thanks,
--jtellier

Hey Nayan,
Now i am came to the issue is not with user login, when i am trying to revaluate i getting create new entity option when i click on that page got stucks there.
the issue is with password, bcz when i am creating user without password its not working it got stuck there and when i gave password i am able to create user.
same thing is happening when reconciliation also. Password Auto-generation is not working i think.
so how can i resolve it?
Regards
user7609

OIM11gr2 PS1 Postprocess eventhandler for GTC recon

Similar Messages

Maybe you are looking for