Parallize user creation/update

I'm managing an IDM installation where I have a resource group of about 30 servers (and counting) and whenever I need ot create a new user on all of these or simply update a user, it takes forever to finish. It seems that IDM don't take advantage of an obvious chance of parallizing this task and instead sequentially logs on to server 1, makes the update, then logs in to server 2, makes update and so on...
With our 30 servers an update (or simply status on where a user has accounts) sometimes takes over 2 minutes. Many of the updates are run using shellscript adapters as there doesn't exist native adapters for these OS's (linux and freebsd) and these shelladapters seem to run slower than standard java adapters.
Is there something that can be done to make IDM work in parallel and not in seriel? (IDM 7)

Hej Thomas,
there are three things that come to my mind reading your question:
1) In the waveset.properties there is a setting provisioner.maxThreads increasing this might increase the parallel handling of accounts for you. I say might because I assume that quite a few settings in the waveset.properties don't do anything at all and remain in there for legacy reasons.
2) If you are dealing with an environment where people tend to have dozens or hundreds of accounts of a similar type(a project about Unix admins or programmers) the right answer might be to point out things like PAM LDAP.
3) If the IDM solution has to fetch 100 accounts from 100 servers deployed from azerbaijan to zimbabwe this can not be done online within reasonable time. You need to think about a way of automating this with scripts deployed on the servers.
Regards,
Patrick

Similar Messages

User Exit for New Field Creation & Updation at Sales Order Level

Hi All,
I want to create one new field in Additional Data B Tab of Sales Order.
Also when the sales order is created with reference to a Contract, that Contract number to be updated in that field.
Which user exit need to be used for this field Creation & Updation at the time of order creation? Is it MV45AFZZ?
Pls suggest.
Rgds,
Senni.B

Hi
Additional header data is on screen SAPMV45A 0309, additional item data on screen SAPMV45A 0459. These screens contain the Include screens SAPMV45A 8309 or SAPMV45A 8459 as user exits.
Regards
Madhu

Questions about PO creation / update / cancel interfaces

Hi there,
An E-Business Suite 11.5.10.2 customer wants to use the 11i PO creation / update / cancel interfaces in order to manage Purchase Orders created from a 3rd party system.
I've been through the 'Oracle Purchasing Open Interfaces' guide (115mfgapi.pdf), but it's still unclear to me whether:
1/ It is possible or not to add a new PO line to an existing PO through the interfaces ? If yes, how do one do that: what interface ? sample code ?
2/ It is possible or not to change the distribution (= accounting information) of an existing PO line ? If yes, ...
3/ It is possible or not to reject the full PO document if a single line fails during the PO creation ? Same for a batch of POs: reject the full batch if a single PO fails ?
4/ Is it possible or not to cancel a PO line even if the shipment already occured ? And even if the payment already occured ? Are there some controls here ?
Thanks for your help,
Kind regards - Hugues

1. Answer is YES. You can add a line to an existing standard purchase order by choosing the UPDATE. This can be done through Purchase Documents Open Interface.
I can not give an example. It's quite long to write it. But You should use Open interface user guide to find nessesary columns. Just insert new row with status UPDATE and try to import
2. Think You can NOT.
3. Answer is YES. You can do it. Use "Cancel PO API". Function name is PO_Document_Control_PUB.control_document ().
For technical details read Open interface UG.
You must create exception to be avoid problems if some lines can not be canceled.
4. Answer is YES. You can do it if there's still expected quantity to recive.
boldJust from UG:*bold* :)
bold1. Purchase Order Change APIs. bold
boldThe APIs enable you to do the following*bold*:
- Record Acceptance/Rejection in Oracle Purchasing
- Update quantity, price, and promise date on standard purchase orders or releases in Oracle Purchasing
boldSo only qty, promissed date, price*bold*
boldRead next*bold*:
Line Level Validation and Update: This logic occurs when LINE_NUM is not null
and SHIPMENT_NUM is null.
1. No update occurs if the line status is FINALLY CLOSED or CANCELLED.
2. The new quantity or price value must be positive.
3. If updating quantity, the new quantity must be greater than or equal to the
greater of total quantity_received of all shipments and total quantity_billed
of all shipments for this line. After the update takes place, the new quantity
will be prorated at the shipment level and for each shipment the quantity is
prorated at the distribution level if applicable.
4. If updating price, no update occurs if a receipt has been created against one
of the line’s shipments and it's been accrued upon receipt. No update
occurs if an invoice has been created against one of the line’s shipments.
After a price update takes place, price changes are rolled down to the
shipment level for standard POs. No price update occurs for a release if the
Price Override flag on the blanket purchase agreement Line is No.
boldSummary:*bold*
boldYou can update qty if still there's a qty to receive (Expected) and if PO still is not canceled*bold*
boldEXAMPLE:*bold*
Usage Example
set serveroutput on;
-- After the API completes, do not forget to commit if the result is 1
-- and rollback if the result is 0.
DECLARE
l_result NUMBER;
l_api_errors PO_API_ERRORS_REC_TYPE;
BEGIN
-- This needs to be changed according to your environment setup.
FND_GLOBAL.apps_initialize ( user_id => 1318, resp_id => 50578, resp_appl_id => 201 );
-- Record an acceptance of Y for PO 1261.
l_result := PO_CHANGE_API1_S.record_acceptance(
x_po_number => 1261,
x_release_number => null,
x_revision_number => 0,
x_action => 'NEW',
x_action_date => null,
x_employee_id => 588,
x_accepted_flag => 'Y',
x_acceptance_lookup_code => 'On Schedule',
x_note => 'All valid',
x_interface_type => 'APITEST',
x_transaction_id => null,
version => '1.0');
IF (l_result <> 1) THEN
-- Handle the errors in the PO_INTERFACE_ERRORS table.
END IF;
-- Change the quantity to 5 on line 1, shipment 1 of PO 1263.
l_result := PO_CHANGE_API1_S.update_po (
x_po_number => 1263,
x_release_number => 1,
x_revision_number => 1,
x_line_number => 1,
x_shipment_number => 1,
new_quantity => 5,
new_price => NULL,
new_promised_date => NULL,
launch_approvals_flag =>'Y',
update_source => NULL,
version => '1.0',
x_override_date => NULL,
x_api_errors => l_api_errors,
p_buyer_name => null
IF (l_result <> 1) THEN
-- Display the errors
FOR i IN 1..l_api_errors.message_text.COUNT LOOP
dbms_output.put_line ( l_api_errors.message_text(i) );
END LOOP;
END IF;

Restricting Creation/Update of Profit Center Master Data through KE51/KE52

Hi,
I have a scenario where profit center master data is maintained in MDM which acts as central repository and the master data is syndicated from MDM to ECC through PRCMAS IDoc. Business requirement is that since MDM is acting as central repository creation/update for profit center through transactions KE51/KE52 should be restricted in ECC. I know that through roles we can restrict user to create profit centers but is there any way/configuration steps which we can perform to restrict user to create profit centers through transaction and I also want to know if that process would affect the creation/updation of master data through PRCMAS IDoc.
Thanks,
Amit

Hi,
As I told you can go forward using SetID but for that you have to create the SET than assign it to a table and also have to cutomize a standard FM.
Meanwhile I will tell you a easy way you can opt for Transaction Variant usinh SHD0 where dont give the option to save so that no user can create any Profit Centre and than assign that Tcode to the users.
Its a simple way hope it helps you.
Thanks
Arbind

User Creation at the time of Self Registration not via Admin (xelsysadm)

Hello there,
I had a question related to User Creation in OIM via Self Registration (Create Request) and via "xelsysadm" itself creating one user via the web console.
Can I do this -
When a user does self registration then how can I directly create a user in OIM?
Right now: the user's request needs to be approved by xelsysadm first and then only that user can login into OIM and then only that user can be seen in OIM - I want to remove the "xelsysadm" gateway of approving the request.
I want that user directly to be present in the OIM as soon as he/she fills out it's information in the self registration pages. How can we do this?
Also, I want an email to be sent to the user to its email ID that he/she provided at the time of self regn containing its User ID and password in it from the xelsysadm email id. How can I do that?
TIA for the help,
- oidm.

Hi oidm
User Registration is R.O. which used for User Self Registration.
But if you see it carefully, there's no Approve Task (not workflow) in it.
It has three task
1) SV
2) PI
3) AAD
And if you see the request while approval it shows Awaiting Approval Data means it stuck in AAD.
Try to modify this, I can't as I don have any extra machine with. Try to modify this. It may not allow you to update it, you'll have to change its security level in Database level.
*Awaiting Approval Data System Administrator [XELSYSADM] Pending*
I hope it helps you to start R n D.

Fits attribute on user id during user creation (Cont)

Hi Experts,
A little time ago , we posted some doubt regarding of how can we fits the attribute userID during user creation on User Interface.
The previous discussion was posted here:
"Fits attribute on user id during user creation"
Link abou our issue "scn.sap.com/thread/3532549"
As the Correct Answer:
Alternative 2, add a To IdentityStore pass as part of the task workflow where your logic is implemented in a jscript:
MSKEYVALUE=%MSKEYVALUE%
****AD_USER_ID=$FUNCTION.GENADUSERID(%MX_FIRSTNAME%!!%MX_LASTNAME%)$$
The script is running very well, but when we create a new employee on HR System (No SAP) this this script is not running just for this new user but for all other users already exitents on IDM. The script increase in Mass an not just for new user.
Does anyone know if this can be related with delta configuration, or this kind of validation ( create just for new employe placed on HR) needs to be done inside the script?
THank you very much.
Miguel

Hello Miguel,
is the "Create Identity"-task called by the HR-update-job?
The screenshot in the old thread just shows the three inputs. I guess, there are some more in the used task. Did you check, if the other lines have the dot as a prefix, so that these attributes are only filled (and therefor the script only runs), when the entry is created, but not updated?
If yes and it's missing for those two attributes, just add it.
Regards,
Steffi.

OFA User creation

Can one of you suggest whether or not Oracle has a stored procedure of any type with which we could use to add users in Oracle Finanical Analyzer. Is it possible to automate the user creation process by using some procedure ?

Hello,
I am sure that is is possible through custom express programs, entering the necessary data in the appropriate catalogs.
(however a lot of stuff to be updated there: user dimension, user.catalog, fmsstask database, personal database creation and catalogs in it etc...)
Regards

OIM 11g , Ignore User Creation

Folks ,
I am facing a issue , hoping you guys could throw some pointers ..
I have a trusted recon set up via GTC DB connector . There is particular condition when i dont want the user to created in OIM though it will be pulled by GTC (Unfortunately i cant stop that).
So in nutshell, i want to ignore the OIM user creation when a particular reconciled attribute lets say firstName = ABC AND user is not already present in oim, then ignore the user creation ..
Any pointers how to achieve this ..
Thanks
Suren

Thanks Raghav for your response , but how ill this work .
So , when FirstName = ABC record will come , as per your recon rule .., it wont link to any existing user and it will land up in No Match Found status and as its trusted recon it will create the user .., which i dont want ..
I cant delete rest of the action rules , they are required for processing the updates etc ...
Please let me know if you need more info ..
Thanks
Suren

How to prevent multiple users from updating the same data in coherence

Hi,
I have a Java Web Application and for data cache am using coherence 3.5. The same data maybe shared by multiple users which maybe in hundreds. Now how do I prevent multiple users from updating the same data in coherence i.e. is there something in coherence that will only allow one user a time to update. If one user is in a process of updating a data in coherence and some other user also tries to update then the second user should get an error.
Thanks

I have a question on the same line. How can I restrict someone from updating a cache value when I a process is already working on it. I tried locking the cache key but it does not stop other process to update it , it only does not allow other process to get lock on it.

Prevent multiple users from updating coherence cache data at the same time

Hi,
I have a web application which have a huge amount of data instead of storing the data in Http Session are storing it in coherence. Now multiple groups of users can use or update the same data in coherence. There are 100's of groups with several thousand users in each group. How do I prevent multiple users from updating the cache data. Here is the scenario. User logs-in checks in coherence if the data there and gets it from coherence and displays it on the ui if not get it from backend i.e. mainframe systems and store it in coherence before displaying it on the screen. Now some other user at the same time can also perform the same function and if don't find the data in coherence can get it from backend and start saving it in coherence while the other user is also in the process of saving or updating. How do I prevent this in coherence. As have to use the same key when storing in coherence because the same data is shared across users and don't want to keep multiple copies of the same data. Is there something coherence provides out-of-the-box or what is best approach to handle this scenario.
Thanks

Hi,
actually I believe, that if we are speaking about multiple users each with its own HttpSession, in case of two users accessing the same session attribute in their own session, the actually used cache keys will not be the same.
On the other hand, this is probably not what you would really like, you would possibly like to share that data among sessions.
You should probably consider using either read-through caching with the CacheLoader implementor doing the expensive data retrieval (if the data to be cached can be obtained outside of an HTTP container), or side caching with using Coherence locks or entry-processors for concurrency control on the data retrieval operations for the same key (take care of retries in this case).
Best regards,
Robert

How to allow CS users to update metadata on several items? (UCM 10gR3)

In the UCM 10gR3 portal user interface:
It is convenient for us to allow users to update metadata fields on a group of items in one action. We want to allow users to select any number of files from a CS search result.
After selecting the items, we want to users to be able to set new values for some fields (e.g. Security Group and Document Type) without touching the values of the other metadata fields (such as Author).
This seems to be pretty basic functionality, but we cannot seem to find it in the CS user interface. What is the easiest way to do this in the CS user interface?
Thanks!

Unfortunately freezing the metadata model is not an option in practice. While we may make a model that serves us well for the time being, we are likely to end up in a situation where the outside world invalidates our metadata model.
A hypothetical case
From the UCM Administration Manual:
"Choose only static information as a security group. For example, department names change infrequently, so they can be considered static; projects come and go, so they might not be considered static."
Although department names may change infrequently, they are likely to change sometimes. Sometimes departments are split up or merged.
A real case
In our concrete case, a project will generate a large amount of content distributed over many content items. After the production of this content within the project the responsibility will be transferred to a number of different departments. It is thus impossible to know in advance which metadata model will be suitable and it seems that the archiver is inefficient in solving the problem of delegating the content to different security groups.
Obviously, we are not interested in making heavy customization that we need to maintain. And reassigning the security group of many content items individually is not a feasible solution.
Has anyone had similar needs? What solutions have you used?

How do I get a user to update to the Flash Player Version to 10.1

I would like to find out if there is a way for a message to pop up on my website if the user has Flash Player version lower than 10.1. If the version 10.1 or higher (in the future) no message should come up. The message should prompt a user to update to the Flash Player version 10.1.
My entire site is in Flash and I am using AS3. So I am guessing I should implement an AS3 code on the first frame of the script layer. Does anyone know what would be this code?

O.K. I see,
HTML code is automatically generated by Flash program.
I am unable to give you a short answer on this and thus attaching the code I
see in DreamWeaver:
0) {
versionRevision = versionRevision.substring(0,
versionRevision.indexOf("d"));
var flashVer = versionMajor + "." + versionMinor + "." + versionRevision;
// MSN/WebTV 2.6 supports Flash 4
else if (navigator.userAgent.toLowerCase().indexOf("webtv/2.6") != -1)
flashVer = 4;
// WebTV 2.5 supports Flash 3
else if (navigator.userAgent.toLowerCase().indexOf("webtv/2.5") != -1)
flashVer = 3;
// older WebTV supports Flash 2
else if (navigator.userAgent.toLowerCase().indexOf("webtv") != -1) flashVer
= 2;
else if ( isIE && isWin && !isOpera ) {
flashVer = ControlVersion();
return flashVer;
// When called with reqMajorVer, reqMinorVer, reqRevision returns true if
that version or greater is available
function DetectFlashVer(reqMajorVer, reqMinorVer, reqRevision)
versionStr = GetSwfVer();
if (versionStr == -1 ) {
return false;
} else if (versionStr != 0) {
if(isIE && isWin && !isOpera) {
// Given "WIN 2,0,0,11"
tempArray         = versionStr.split(" "); // ["WIN", "2,0,0,11"]
tempString        = tempArray[1]; // "2,0,0,11"
versionArray      = tempString.split(","); //
} else {
versionArray      = versionStr.split(".");
var versionMajor      = versionArray[0];
var versionMinor      = versionArray[1];
var versionRevision   = versionArray[2];
         // is the major.revision >= requested major.revision AND the minor
version >= requested minor
if (versionMajor > parseFloat(reqMajorVer)) {
return true;
} else if (versionMajor == parseFloat(reqMajorVer)) {
if (versionMinor > parseFloat(reqMinorVer))
return true;
else if (versionMinor == parseFloat(reqMinorVer)) {
if (versionRevision >= parseFloat(reqRevision))
return true;
return false;
function AC_AddExtension(src, ext)
if (src.indexOf('?') != -1)
    return src.replace(/\?/, ext+'?');
else
    return src + ext;
function AC_Generateobj(objAttrs, params, embedAttrs)
var str = '';
if (isIE && isWin && !isOpera)
    str += '';
document.write(str);
function AC_FL_RunContent(){
var ret =
    AC_GetArgs
    ( arguments, ".swf", "movie",
"clsid:d27cdb6e-ae6d-11cf-96b8-444553540000"
     , "application/x-shockwave-flash"
AC_Generateobj(ret.objAttrs, ret.params, ret.embedAttrs);
function AC_SW_RunContent(){
var ret =
    AC_GetArgs
    ( arguments, ".dcr", "src",
"clsid:166B1BCA-3F9C-11CF-8075-444553540000"
     , null
AC_Generateobj(ret.objAttrs, ret.params, ret.embedAttrs);
function AC_GetArgs(args, ext, srcParamName, classid, mimeType){
var ret = new Object();
ret.embedAttrs = new Object();
ret.params = new Object();
ret.objAttrs = new Object();
for (var i=0; i < args.length; i=i+2){
    var currArg = args[i].toLowerCase();
    switch (currArg){
      case "classid":
        break;
      case "pluginspage":
        ret.embedAttrs[args[i]] = args[i+1];
        break;
      case "src":
      case "movie":
        args[i1] = AC_AddExtension(args[i1], ext);
        ret.embedAttrs["src"] = args[i+1];
        ret.params[srcParamName] = args[i+1];
        break;
      case "onafterupdate":
      case "onbeforeupdate":
      case "onblur":
      case "oncellchange":
      case "onclick":
      case "ondblclick":
      case "ondrag":
      case "ondragend":
      case "ondragenter":
      case "ondragleave":
      case "ondragover":
      case "ondrop":
      case "onfinish":
      case "onfocus":
      case "onhelp":
      case "onmousedown":
      case "onmouseup":
      case "onmouseover":
      case "onmousemove":
      case "onmouseout":
      case "onkeypress":
      case "onkeydown":
      case "onkeyup":
      case "onload":
      case "onlosecapture":
      case "onpropertychange":
      case "onreadystatechange":
      case "onrowsdelete":
      case "onrowenter":
      case "onrowexit":
      case "onrowsinserted":
      case "onstart":
      case "onscroll":
      case "onbeforeeditfocus":
      case "onactivate":
      case "onbeforedeactivate":
      case "ondeactivate":
      case "type":
      case "codebase":
      case "id":
        ret.objAttrs[args[i]] = args[i+1];
        break;
      case "width":
      case "height":
      case "align":
      case "vspace":
      case "hspace":
      case "class":
      case "title":
      case "accesskey":
      case "name":
      case "tabindex":
        ret.embedAttrs[args[i]] = ret.objAttrs[args[i]] = args[i+1];
        break;
      default:
        ret.embedAttrs[args[i]] = ret.params[args[i]] = args[i+1];
ret.objAttrs["classid"] = classid;
if (mimeType) ret.embedAttrs["type"] = mimeType;
return ret;
// -->
<!url's used in the movie>
<!text used in the movie>
</html

Multiple user creation in R12 and migration of users

I would like to know how we can automate a process of user creation in R12, or is there a way to create multiple users in Ebiz with respective responsibilities.
Second case is, migration of users from one instance to another. The problem out here is selective users not all?
Regards

Pl search the forums for FND_USER package - you will find several hits that show how this package can be used in a programmatic fashion to bulk create new users and assign responsibilities. Examples are also available on My Oracle Support.
To migrate user, use FNDLOAD. See this doc - you will also find hits in these forums if you search.
376469.1 - Can FNDLOAD Migrate User Accounts Without Forcing Users To Change Their Passwords?
HTH
Srini

No active writeable datasource found for user creation, check your Persiste

HI SAP Guru's
Suddenly when I am login in Portal with J2EE_ADMIN or any user , I am getting error
You are not authorized to access this application; contact your system administrator
and when I am going to create user in identity management I am getting below error
Current user has user creation permissions in the UME, but cannot create users in the back-end system (data source). The original and possibly untranslated message was: "No active writeable datasource found for user creation, check your Persistence Configuration.".
I have searched all related treads in SDN but no success
Please help.
Thanks & Regards
Vinay Patel

Dear all,
I was searching the community because I had this same error and there was no answer of how it was fixed. So I'm sending how I fixed today in a customer environment.
1. Go to portal http://<portal>/webdynpro/dispatcher/sap.com/tcsecumewdumeadmin/UmeAdminApp
- select configuration
- folder "sap system based in abap"
- do the conection test
If the test fails, log on in client 001 and change user SAPJSF:
- assign role SAP_BC_JSF_COMMUNICATION (only this one) and one profile that has permission to RFC logon
- you can change the password too
STOP/START ABAP+JAVA
Go again to the portal above and test connection again. The tests should now be OK.
2. Go to portal http://<portal>/irj
- Log on with administrator user
Now you should be able to create an user.

New sap user creation

Hi All SAP experts,
My company has implemented 2 Systems SAP Landscape with one development and one production server which are running on R/3 Enterprise 4.7 (Kernel Release 6.20) with Microsoft SQL 2000 as database server.
I have the following questions regarding new sap user creation by using user copy function.
1.When I request to create new SAP User by using user copy function ,should I just create the user acct in DEV and transport it to PROD System? If yes, how could I do that?
2.When I request to create new SAP User by using user copy function, can I just create it on PROD System only? If yes, what is the impact?
3.When using User copy function to create new user acct, should I select all parts (like adress ,defaults,reference user, user groups.....) of the existing user to be cloned to new user acct?
Thanks.
Leon

Hi Leon,
Answer to your questions in their respective order:
1. You can create user in DEV and then make remote client copy to PRD system using scc9 t-code. Here you can choose user accounts and authorizations for the copy. ( Rem: Data will be overwritten in target system when copied).
You can also use client export/import(scc8/scc7)
But, When you do the client import from the exported files using STMS,you will have to select only one of the transport requests and then STMS automatically selects the other requests for you.
Then it will show you the different transport requests that you have created during your export, the client copy profile and the target system and client. The customizing and application data is deleted in the target client before copying for all profiles except SAP_USER. This is technically unavoidable (and hence the data will be overwritten).
So if you can afford overwritting of user data in target client , you can go with the above procedure.
2. Using user copy in su01, you can copy one user to another user only in that client and is confined to that system only. So yes, If you want 2 or more users to have same authorizations, profiles ,etc etc.. you can choose this in PROD system.
3. It depends.. If you want user to be in same group, then you can choose user groups. If you want them to have same authorizations , you can choose roles and profiles... If you want them to have same company address and others,... you can select address.. and so on.
Also below link provides required steps in case you choose local/ remote client copy:
http://www.sap-basis-abap.com/bc/client-copy-by-using-scc8-and-scc7.htm
Hope this helps...
Thanks,
Ajith
Edited by: Ajith Kamath on Oct 20, 2009 8:28 AM

Parallize user creation/update

Similar Messages

Maybe you are looking for