Organization, groups in OIM

1) Can Organization, groups in OIM be mapped to Organizational Unit and groups in AD?
2) In out of box AD connector there is Provisioning functionality for Organization Creation. Does it create OU in AD.
3) Simillarly there Reconciliation functionality for Organization Creation, does it creates all the OU available in AD into OIM

Hi,
1) Can Organization, groups in OIM be mapped to Organizational Unit and groups in AD?Yes. I have done Organization. I guess groups should also work fine.
2) In out of box AD connector there is Provisioning functionality for Organization Creation. Does it create OU in AD.Yes, it does if mapped to create one.
3) Simillarly there Reconciliation functionality for Organization Creation, does it creates all the OU available in AD into OIM Yes it does, based on the reconciliation scheduled task parameters.
Rgds, Ajay

Similar Messages

Not able to create Organizations & Groups through OIM in OID.

Hi,
I am trying to create organizations and groups in OID through OIM. The steps are:
1. Organizations-->create-->name=test, parentorg=null,type=company-->create organization.
2. Drop down-->resource profile-->provision new resource-->OID organisation unit-->continue-->IT Serve=OID IT Resource-->continue
3. The create ou task is getting rejected with error as "Response: Invalid Naming Error
Response Description: Naming exception encountered "
Please help.

See the process form what it displayed. I think values are not getting populated properly in process form.

Organizational Hierarchy in OIM

Hi,
I have read in OIM intro docs that
"Oracle Identity Manager can support unlimited user organizational hierarchies and
user groups with inheritance"
Dose it mean that in OIM we can create a user-manager kind of hierarchy that is
USER               MANAGER
USER1          -
USER2          USER1
USER3          USER3
If yes, then how? Is it the same as creating Organization? Instead of org name
will it contain User name?
I have a hierarchy defined in OID using manager attribute. Can I import the
same into OIM and get assigned the user to the respcetive managers?If yes, will be
very grateful if answer will be in a bit detail. As I searched
in OID connector but didnt get organization hierarchy import or attribute based
import.
Please correct me if my understanding is wrong.
thanks in advance

Hi Kevin,
Thanks for your reply. It would be very helpful if you can help me to have an idea for followings
"Oracle Identity Manager can support unlimited user organizational hierarchies and
user groups with inheritance".
Can you please elaborate above sentence a bit more in terms of LDAP hierarchy.
Will be more helpful if with a example :
as according to my understanding this feature allows cretaion of hierarchy like Dept (as u metioned) eg.
Department ----------Parent
D1 ----------None
D2 ----------D1
D3 ----------D2
And while cretaing the users in OIM this can be assigned using organization attribute of the OIM user form.
If I am correct then can we import above kind of organization hierarchy into OIM from LDAP?
As you suggested for user-manager kind of hierarchy manager attribute of OIM user form can be used.
But according to the connector documents the manager attribute can not be reconciled using LDAP
connector. Can we map this anyhow to the LDAP manager attribut so that while recociling itself the user
should have respective managers.
Thanks in advance

Create OID Group through OIM

HI ,
i have a requirement which is when i create a Group in OIM , then the OID will create a corresonding Group as well , i run out of my idea of how to do it , can anyone give some guides on this
thx in advance
Edited by: crazyJew on 1/07/2010 22:44

Yes you need to provide an organization key to the group provisioning api - tcOrganizationOperationsIntf -> provisionObject.
One you provision the resource OID Group you can get the process instance key and set the data in process form using tcFormInstanceOperationsIntf ->setProcessFormData. setProcessFormData takes the data which needs to be set for the OID group.
Hope the helps,
Sagar

Provision a Resource Object to Organization automatically in OIM 11g

Hi All,
How to provision a resource Object to Organizations automatically in OIM 11g.
Can we use Access Policy for this , if not , is there any other way to solve this.
Regards
Edited by: 903745 on 31 May, 2012 1:40 AM

Are you referring to creating an resource object (e.g. group) on the Organization itself (as opposed to users in that Organization) ? If so this can be done from a post-process event handler on the Organization object.

Provision users Dynamically to different Organizations(group) uisng AP?

Hi All,
We have a reuirement like we need to Autoprovision users to differrent containers dynamically The scenario is as below
1. we create a organization "ABC" in OIM which will get created as a container in OID.
2.Say we create a user "test1"
3.Autoprovision user test1 to container ABC using rule trigger-->group--->AP
Here note that
In AP by default it will provision to cn=users, how will i dynamically change the container DN to ABC in AP whenver a container is created suing the same rule?
how can this be achieved?
Regards,
Naveen

You can't achieve this dynamic function using access policy. If anyhow you want to achieve it using AP only, though a very bad design but you can try this:
- If you have very less number of containers you can try it. Have a UDF lookup which has value of this container. And base your access policy on this UDF value.
It would be better to use custom pre-populate adapters which will prepopulate your container data in process form.
regards,
GP

Issue in creation of group in oim database through sql query.

hi guys,
i am trying to create a group in oim database through sql query:
insert into ugp(ugp_key,ugp_name,ugp_create,ugp_update,ugp_createby,ugp_updateby,)values(786,'dbrole','09-jul-12','09-jul-12',1,1);
it is inserting the group in ugp table but it is not showing in admin console.
After that i also tried with this query:
insert into gpp(ugp_key,gpp_ugp_key,gpp_write,gpp_delete,gpp_create,gpp_createby,gpp_update,gpp_updateby)values(786,1,1,1,'09-jul-12',1,'09-jul-12',1);
After that i tried with this query.but still no use.
and i also tried to assign a user to the group through query:
insert into usg(ugp_key,usr_key,usg_priority,usg_create,usg_update,usg_createby,usg_updateby)values(4,81,1,'09-jul-12','09-jul-12',1,1);
But still the same problem.it is inserting in db.but not listing in admin console.
thanks,
hanuman.

Hanuman Thota wrote:
hi vladimir,
i didn't find this 'ugp_seq'.is this a table or column?where is it?
It is a sequence.
See here for details on oracle sequences:
http://www.techonthenet.com/oracle/sequences.php
Most of the OIM database schema is created with the following script, located in the RCU distribution:
$RCU_HOME/rcu/integration/oim/sql/xell.sql
there you'll find plenty of sequence creation directives like:
create sequence UGP_SEQ
increment by 1
start with 1
cache 20
to create a sequence, and
INSERT INTO UGP (UGP_KEY, UGP_NAME, UGP_UPDATEBY, UGP_UPDATE, UGP_CREATEBY, UGP_CREATE,UGP_ROWVER, UGP_DATA_LEVEL, UGP_ROLE_CATEGORY_KEY, UGP_ROLE_OWNER_KEY, UGP_DISPLAY_NAME, UGP_ROLENAME, UGP_DESCRIPTION, UGP_NAMESPACE)
VALUES (ugp_seq.nextval,'SYSTEM ADMINISTRATORS', sysadmUsrKey , SYSDATE,sysadmUsrKey , SYSDATE, hextoraw('0000000000000000'), 1, roleCategoryKey, sysadmUsrKey, 'SYSTEM ADMINISTRATORS', 'SYSTEM ADMINISTRATORS', 'System Administrator role for OIM', 'Default');
as a sequence usage example.
Regards,
Vladimir

Migrating OID groups to OIM

We have been given the task of migrating our existing identity management systems to OIM (Oracle Identity Manager).
Part of our existing system uses OID (Oracle Internet Directory). All users have an entry in OID. Some of our systems use OID for authentication.
We also use OID to hold users' entitlements/privileges that control access to our applications. We use OID groups (represented by entries based on groupOfUniqueNames and orclGroup objects) to do this. For example we might have an application called 'Finance' with three levels of access represented by OID groups e.g. 'finance_enquiry', 'finance_updater', 'finance_superuser'. Those groups would all belong to a parent group called 'finance_application'. To access the application the user needs to be a member of 'finance_application' group or one of its child groups. Access to features of the application are controlled by membership of the 3 child groups. We have an application that maintains groups, group membership, and user entitlements in OID.
As part of the migration project we want to move maintenance of groups and group membership from our own application into OIM. The above scenario seems quite basic.
My main question is how would this be done in OIM? Do our current OID groups become OIM Groups? Do they become entries in some lookup table in OIM? Are there any case studies or other documentation that describes this kind of requirement?
I've looked at the OIM Connector for OID documentation but it doesn't describe typical scenarios. It assumes that you know what you are doing.
We also want to give users the ability to request entitlements, and to provide an approval process. So we could have a user who approves/rejects entitlement requests to access to the applications they control. But that's a another topic.
Cheers,
Eric

PeachEye wrote:
We have been given the task of migrating our existing identity management systems to OIM (Oracle Identity Manager).
As part of the migration project we want to move maintenance of groups and group membership from our own application into OIM. The above > scenario seems quite basic.You're about to find out otherwise.
>
My main question is how would this be done in OIM? Do our current OID groups become OIM Groups? Do they become entries in some lookup table > in OIM? Are there any case studies or other documentation that describes this kind of requirement?You'll need a custom connector and lots of OIM tweaks. Your groups will stay in OID, OIM will replace the current application you use to maintain them. That's one way of doing it, no impact to OID schema is the benefit of this way, there are other ways.

Routing according to Organizational groups

Hi all,
In the current process which I am building, I have just one role. The role has just three activities.
But the routing is based on groups and sub-groups and on call type and sub call type. For example:-
If role is Support Center
If groups are Lan Services, Database Admin, Network Services.
If sub groups are Lan Services - Data, Network Services- Data, Network Services - Voice.
And if the call type and sub-call type is Connectivity and Access VPN respectively, then I should be able to route to the sub group Network Services-Data.
Can this be done using Organizational Groups and having only one role defined?
All groups and sub-groups perform the same task.
Can this be done?

No Sujay, please read my question again - I've not assigned any ringtone directly to the contact.
I have a contact that is a member of TWO groups. each of the groups have been assigned a different ringtone. ...... So which ringtine will be played when that contact calls in?
Or are you saying that both the ringtones for the 2 groups will be IGNORED and instead the default ringtone will be played?
There ought to be laws out there on the use of the term 'smartphone'

Reconcile user groups to OIM (11g)

I would appreciate it if someone may let me know how to reconcile the organization and leadership structure information from an Oracle DB based identity vault into OIM (11g) to create organizational roles, for example, into the user group and user group membership tables, i.e. the UGP and USG table series. Many thanks.

yesy, I have defines correct search value but its again and again throwing error. I change the search values too. But its not working.

How can I organize groups in Address Book while running iCloud under Lion?

I am frustrated with the new Address Book for many reasons:
It is no longer possible to view groups, list, and cards at the same time, just groups and list or list and cards. This means it is very cumbersome to organize cards to multiple groups, something that wa relatively easy before. Why not allow us to see all three at once and conveniently drag and delete?
The individual cards do not list what groups each card belongs to. Why didn't Apple include a list and a way to change the group when editing cards? Do any of the Apple programmers actually use their own programs to make them useful and convenient?
While running iCloud addresses are duplicated (one set "On My Mac" and another "iCloud"). While it is possible to view only one set or the other, I found that it is best to backup and then delete the "On My Mac" cards and groups. Even then it is confusing to navigate and move cards around.
The iCloud synch with my iPod is working well, but I have to synch my older iPhone 3G with a cable. (will not run OS X v 10.7 Lion).
The iCloud address book is not synching properly with Yahoo, but rather the Yahoo address are being pulled over to the "On My Mac" set that had been removed. Why can't we set controls of pushing or pulling data vs synching, as well as whether whether this is with the iCloud or "On My Mac" addresses?
The new address book format, while cute is too bright, hard to read and wastes a lot of space with white nothingness. Why can't we have a more attractive, easier to read, and functional address book format, with more ability to customize format for advanced users?
I suppose I may have answered my own question: basically it is possible to manage the groups as long is willing to put up with inefficiency and backs up manually by exporting the address book regularly as a backup (because so much can and does go wrong). Does anybody have more insight?

If you want to send a message to Apple, please submit it at:
http://www.apple.com/feedback/

How to find history of changes of organization attributes in OIM 11G?

Hello.
I need to find fistory of all changings in organization attributes, chould you help me to find, what table can i use for it?
I use OIM 11G and oracle database 11.2.0.

Hello, Thank you for your answer.
I mean modification of an organization such as changing of the organization name, status, etc. As i understand your previous answer, there is no table that keeps such information. Is it right?
If it is right, how can I find it?
Should I make any triggers or can i find informations in another way?

Identify Different Groups in the Organization (Group the Same data together)

Version : Oracle Database 11g Enterprise Edition Release 11.2.0.3.0 - 64bit Production
Help me in Identifying the groups(different Sectors) in the Organization
Each Group will have the same Group id if We_org_id , We_addr_id or We_org_id , Ein Matches
In the below Example Row 1 and 2 Are linked with We_org_id , We_addr_id
and row 2 and 3 are linked with We_org_id , Ein so all the three rows has the same groupid
Included Output Required.
Example
311    563          72-1500000    2
311    563          72-1500001    2
311    565          72-1500001    2
-- Table and inserts
CREATE TABLE ORG_MISMATCH
WE_ORG_ID   NUMBER,
WE_ADDR_ID NUMBER,
EIN         VARCHAR2(30 BYTE)
SET DEFINE OFF;
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (311, 24303142, '31-1700059');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (311, 56381251, '39-1675361');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (311, 56381251, '31-1700059');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (311, 56381251, '26-0060245');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (311, 56381251, '72-1284709');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (311, 121786868, '31-1700059');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (311, 21053495, '72-1355929');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (311, 56381251, '73-1317052');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (311, 56381251, '56-2525845');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (311, 56381251, '72-1355929');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (311, 56381251, '84-1535762');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (311, 56381251, '91-2031795');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (311, 56381251, '84-1487943');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (311, 56381251, '91-2035844');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (311, 56381251, '84-1535753');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (311, 56381251, '72-1501788');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (311, 56381251, '30-0137738');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (311, 563, '72-1500001');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (311, 565, '72-1500001');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (999, 56381251, '72-1355929');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (999, 24303142, '31-1700059');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (999, 56381251, '31-1700059');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (999, 121786868, '31-1700059');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (999, 56381251, '84-1535762');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (999, 56381251, '72-1501788');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (999, 56381251, '91-2031795');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (999, 56381251, '30-0137738');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (999, 56381251, '72-1284709');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (999, 56381251, '56-2525845');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (999, 56381251, '91-2035844');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (999, 21053495, '72-1355929');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (999, 56381251, '39-1675361');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (999, 56381251, '84-1487943');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (999, 56381251, '84-1535753');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (999, 56381251, '26-0060245');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (999, 56381251, '73-1317052');
Insert into ORG_MISMATCH
   (WE_ORG_ID, WE_ADDR_ID, EIN)
Values
   (311, 563, '72-1500000');
COMMIT;
WE_ORG_ID
WE_ADDR_ID
EIN
GROUPID
OUTPUT REQUIRED    --> Create Groupid Column
311
24303142
31-1700059
1
311
56381251
39-1675361
1
311
56381251
31-1700059
1
311
56381251
26-0060245
1
311
56381251
72-1284709
1
311
121786868
31-1700059
1
311
21053495
72-1355929
1
311
56381251
73-1317052
1
311
56381251
56-2525845
1
311
56381251
72-1355929
1
311
56381251
84-1535762
1
311
56381251
91-2031795
1
311
56381251
84-1487943
1
311
56381251
91-2035844
1
311
56381251
84-1535753
1
311
56381251
72-1501788
1
311
56381251
30-0137738
1
311
563
72-1500001
2
311
565
72-1500001
2
311
563
72-1500000
2

It would be nice to know the roots. I did assume two with
start with we_addr_id in (
select min(we_addr_id)
from org_mismatch group by we_org_id
Otherwise it could taken a while ...
That below doesnt really work ..
select
WE_ORG_ID
,WE_ADDR_ID
,EIN
,dense_rank() over (partition by WE_ORG_ID order by r) grp
from (
select
WE_ORG_ID
,WE_ADDR_ID
,EIN
,connect_by_root WE_ADDR_ID r
from ORG_MISMATCH
connect by nocycle
prior we_org_id = we_org_id
and (
(prior we_addr_id = we_addr_id and prior ein < ein)
or
(prior ein = ein and prior we_addr_id < we_addr_id)
start with we_addr_id in (
select min(we_addr_id)
from org_mismatch group by we_org_id
group by
WE_ORG_ID
,WE_ADDR_ID
,EIN
,r
order by
WE_ORG_ID
,WE_ADDR_ID
,EIN
,R
WE_ORG_ID
WE_ADDR_ID
EIN
GRP
311
563
72-1500000
1
311
563
72-1500001
1
311
565
72-1500001
1
311
21053495
72-1355929
2
311
56381251
72-1355929
2
311
56381251
72-1501788
2
311
56381251
73-1317052
2
311
56381251
84-1487943
2
311
56381251
84-1535753
2
311
56381251
84-1535762
2
311
56381251
91-2031795
2
311
56381251
91-2035844
2
999
21053495
72-1355929
1
999
56381251
72-1355929
1
999
56381251
72-1501788
1
999
56381251
73-1317052
1
999
56381251
84-1487943
1
999
56381251
84-1535753
1
999
56381251
84-1535762
1
999
56381251
91-2031795
1
999
56381251
91-2035844
1
Message was edited by: chris227 comment

How to organize / group fonts in Photoshop

When I open fonts drop down menu inside of Photoshop, I have over 300 fonts listed in alphabetical order, most of which I don't use.
I installed about 20 fonts that I like. But how do I group them together? After typing and selecting text in Photoshop, I want to quickly flip through my 20 best fonts collection (with up and down arrow) to see which font looks better. Is there a way to do it?
I tried deleting all fonts from Library, and leaving only my 20 fonts there, but that didn't work out, because text in other applications started looking funny.
Please let me know if there is a better solution.

Can't offer you much help but can only mention how bad the font technology is in this respect. In my opinion the font usage interfaces available nowadays are the most primitive and undeveloped than any other software solutions.
Initially, decades ago, the primary goal of the font managers was system performance. In the early desktop computers even a few dozen fonts would slow down considerably the system performance. Nowadays the computers are so much faster that I can have thousands of fonts installed without any problem. So, the major advantage of font managers is lost and I have to use them for organization purposes only. However because they are external means to a problem that needs to be solved internally on a system and program level, they are very inefficient. You have to organize your fonts externally and load or unload with another program all the time in order to have manageable font menu. However this doesn't affect the system fonts and many program fonts which are a number large enough to clutter and interfere with any external arrangement. Basically a font manager allows you to organize your fonts externally where you can choose which fonts you want or don't want to use, then the font manager automates the installing and uninstalling of these fonts in the system fonts folder and thus limits the number of fonts that appear in the font menus. Font managers don't have access to and can't sort the font menu in anyway.
Ideally, this problem should be solved on a system level. The perfect interface I imagine would be user created sub-folders in the system Fonts folder where a font or its alias can be put and this would be the way the fonts should appear in the Fonts panels and menus of the programs with collapsible sub-menus.

Provisioning users to AD groups in OIM 11gR2

I could use some advice on how to resolve this issue I am having.
Using the Active Directory connector (11.1.1.5) in our OIM 11gR2 development environment I can successfully provision OIM users to our AD resource. I have successfully run the org and group lookup recons, and provisioned users do go into the correction ou in AD.
However when I select which groups a user should be a member of in the ADUSERC child form (via the lookup), the user is not provisioned with the correct group membership in AD.
A separate issue is how to map the objectClass in AD in the ProvAttrMap; could anyone point me in the direction of how to go about that?
Thanks

The ObjectClass should be configured in this lookup Lookup.Configuration.ActiveDirectory
Check below
http://docs.oracle.com/cd/E22999_01/doc.111/e20347/extnd_func.htm#sthref221
4.6 Configuring the Connector for User-Defined Object Classes

Organization, groups in OIM

Similar Messages

Maybe you are looking for