Provision a multivalued attribute from OIM to OID

Hi,
I have a requirement to provision a new multivalued attribute from OIM to OID.
Steps followed:
Created a child form
Attached child form to the OID Parent form
Created a process task adapter.
Created a task in process definition and the attached the adapter
Adapter code.
public String addChildData(tcDataProvider ioDatabase, long procInstKey, long childDefKey){
          try{
               tcFormInstanceOperationsIntf formInstOper = (tcFormInstanceOperationsIntf)tcUtilityFactory.getUtility(ioDatabase, "Thor.API.Operations.tcFormInstanceOperationsIntf");
               HashMap testval = new HashMap();
               testval.put("UD_TESTCHIL_TESTGROUP","abcd2134");
               System.out.println("testval..."+testval);
               long formreturn = formInstOper.addProcessFormChildData(childDefKey,procInstKey,testval);
               System.out.println("formreturn" +formreturn);
          catch(Exception e){
               System.out.println("exce" +e);
          return "Success";
After attaching while provisioning I am seeing both parent and child forms. I have provided the values and its successfully provisioning.
But how I can provision the new OID multivalued attribute. We have to do any setting in the lookup?
Regards,
KK

Just create your new adapter for add and delete from this new child table just like the other triggered tasks. If it's a multi value on the user profile, use the adapter for Add Multi Value Attribute that comes with the connector. In the property name, put in your multi value attribute name, and map the value from the child table.
-Kevin

Similar Messages

  • User Provisioning not working from OIM to OID

    Hi All,
    I am trying to create new user from OIM to OID, am getting following error message on console...
    Response: INVALID_NAMING_ERROR
    Response Description: Naming exception encountered
    Notes:
    In logs files while creation am getting following message....
    INFO,09 Oct 2011 23:37:50,253,[XELLERATE.WEBAPP],retrieving object from cache key = xlCustomClienten_US
    INFO,09 Oct 2011 23:37:50,253,[XELLERATE.WEBAPP],Key not found in Custom Resource Bundle: newKey = global.udf.USR_UDF_ALIAS
    INFO,09 Oct 2011 23:37:50,253,[XELLERATE.WEBAPP],Writing Custom default resource bundle object to cache : Key = xlConnectorResourceBundleen_US
    INFO,09 Oct 2011 23:37:50,254,[XELLERATE.WEBAPP],retrieving object from cache key = xlCustomClienten_US
    INFO,09 Oct 2011 23:37:50,254,[XELLERATE.WEBAPP],Key not found in Custom Resource Bundle: newKey = global.udf.USR_UDF_CUSTID
    INFO,09 Oct 2011 23:37:50,254,[XELLERATE.WEBAPP],Writing Custom default resource bundle object to cache : Key = xlConnectorResourceBundleen_US
    INFO,09 Oct 2011 23:37:50,254,[XELLERATE.WEBAPP],retrieving object from cache key = xlCustomClienten_US
    INFO,09 Oct 2011 23:37:50,254,[XELLERATE.WEBAPP],Key not found in Custom Resource Bundle: newKey = global.udf.USR_UDF_IVRPIN
    INFO,09 Oct 2011 23:37:50,254,[XELLERATE.WEBAPP],Writing Custom default resource bundle object to cache : Key = xlConnectorResourceBundleen_US
    INFO,09 Oct 2011 23:37:50,255,[XELLERATE.WEBAPP],retrieving object from cache key = xlCustomClienten_US
    INFO,09 Oct 2011 23:37:50,255,[XELLERATE.WEBAPP],Key not found in Custom Resource Bundle: newKey = global.udf.USR_UDF_USERAPPSTATUS
    INFO,09 Oct 2011 23:37:50,255,[XELLERATE.WEBAPP],Writing Custom default resource bundle object to cache : Key = xlConnectorResourceBundleen_US
    INFO,09 Oct 2011 23:37:50,255,[XELLERATE.WEBAPP],retrieving object from cache key = xlCustomClienten_US
    INFO,09 Oct 2011 23:37:50,255,[XELLERATE.WEBAPP],Key not found in Custom Resource Bundle: newKey = global.udf.USR_UDF_CREATEDDATE
    INFO,09 Oct 2011 23:37:50,255,[XELLERATE.WEBAPP],Writing Custom default resource bundle object to cache : Key = xlConnectorResourceBundleen_US
    INFO,09 Oct 2011 23:37:50,256,[XELLERATE.WEBAPP],retrieving object from cache key = xlCustomClienten_US
    INFO,09 Oct 2011 23:37:50,256,[XELLERATE.WEBAPP],Key not found in Custom Resource Bundle: newKey = global.udf.USR_UDF_OAMLOCKTIME
    INFO,09 Oct 2011 23:37:50,256,[XELLERATE.WEBAPP],Writing Custom default resource bundle object to cache : Key = xlConnectorResourceBundleen_US
    INFO,09 Oct 2011 23:37:50,256,[XELLERATE.WEBAPP],retrieving object from cache key = xlCustomClienten_US
    INFO,09 Oct 2011 23:37:50,256,[XELLERATE.WEBAPP],Key not found in Custom Resource Bundle: newKey = global.udf.USR_UDF_PASSWORD_EXPIRE
    INFO,09 Oct 2011 23:37:50,257,[XELLERATE.WEBAPP],Writing Custom default resource bundle object to cache : Key = xlConnectorResourceBundleen_US
    Please help me on this....
    Thanks in Advance
    YJR

    That is not the log output of the OID connector. Check the connector docs, and enable the OID logging only. The INVALID_NAMING_ERROR means something is wrong with the naming of your object. Most likely there is an LDAP error output somewhere, but all the output you provided is info level, nothing wrong with it.
    -Kevin

  • Bulk Load from OIM to OID

    hi,
    i am trying to figure out how to move existing user from OIM to OID in bulk.
    Is there anyway by which we can move all the existing user in OIM simultaneously rather than one by one through resource profile by provisioning.
    Regards
    Pegasus

    I don't know if I understood the question, ignore me if I'm wrong.
    If you want to provision all your users in a Resource you can do the following:
    1) Create an "Access Policy" through Admin. Console, wich provisions your OID Resource (ensure you check the "Retrofit Access Policy" Checkbox!)
    2) When creating the Policly you'll be asked to select the Users Groups that will be affected by the policy. As all OIM users belong to "ALL USERS" group, you can assign your Access Policy to this group. By the way I would consider to create a new Users Group if there is any chance that you add a user to OIM who you won't need to be provisioned in OID.
    You can have a look to chapters 10 and 11 in the Admin. Console Documentation:
    link
    Shout me if I missunderstood you ;)
    Regards,

  • Extend Provisioning (from OIM to OID) for already provisioned resources

    We use OIM 9.1.0 to provision users to several target systems, for example OID. Not all information stored for a user in OIM is also provisioned to OID (for example department or location or phone is only stored in OIM). The provisionig task automatically is created via access policys.
    This works fine.
    Now we want to provision some more data (including department and location) to OID. So I changed the oid connector configuration to also provision these fields. This works fine for new users (which are not already provisioned to oid).
    But we also need these additional fields in OID for users which have already been provisioned in the past. How can this requirement be implemented? Is there a way to resubmit these provisiong tasks oder to automatically update the process form.

    Create a schedule task which will read the data from OIM User Profile and update the process form using tcFormInstanceOperationsIntf OIM APIs.
    Also create their Label Name updated task in OID Workflow (Process Defintion)

  • Users not provisioned from OIM to OID user group child form

    I have created 3 fields in UserForm named Application1, Application2 and Application3.All are textfield. Now I have a field in Process form in child table name Applications which is a lookup type and a multivalue attribute. Now the requirement is that whenever a user gets some value in UF for any application (Application 1, 2 or 3), the field Applications in PF should get auto populated by that application value.
    Applications lookup in Process Form has already all the applications1, 2 and 3 in the lookup code and decode value.

    In your adapter, read all the values from UDF (User Form)
    If value is not equal to NULL then use tcFormInstanceOpetaionsIntf API to add values in Process Form.
    http://otndnld.oracle.co.jp/document/products/id_mgmt/idm_903/doc_cd/javadocs/operations/Thor/API/Operations/tcFormInstanceOperationsIntf.html#addProcessFormChildData%28long,%20long,%20java.util.Map%29

  • How to update attributes from OIM to AD in case of LDAPSync

    Hi All,
    In our scenario, we have LDAPSync configured for OIM AD Integration. OIM version is OIM 11gR2 PS1 (11.1.2.1.0.0)
    It is working fine and On user creation in OIM ,RealTime user creation under specified container in AD is happening.It is SSL enabled,so password is also getting updated from OIM to AD.
    But we have following conflicting scenario --
    -   As per our requirement we have to generate random password for User in OIM. For that we have PostProcess event handler implemented in OIM.
    - We have tested LDAPSync by creating user manually through OIM console. While creating user manually, we have provided value for password attribute along with other attributes.
        So, password attribute in AD will get updated for User along with all other attributes values mapped for AD from OIM.
    - But, in our scenario random password is generated for User through OIM post process event handler and it will be updated again in user profile of user created manually in OIM. This password is sent to User through mail.
      As this password event handler will get triggered after LDAPSnyc only, this password will not be update in AD for manually created user in OIM. So he can log into OIM with this new password but not to AD system.
      He will be able to login to AD system with same User ID but with password which was set at time of manual User Creation in OIM and not with the password updated in OIM user profile by PostProcess event handler.
    Is it possible to set password for user through PreProcess even handler implementation for Random Password generation. In this case also , the default OIM post process
    password generator will override the PreProcess event handler.How to resolve this issue.
    Also,when AD connector is in place in OIM environment we would be having change/update tasks for any attribute update to be send from OIM to AD.
    How this update scenario will be implemented from OIM to AD in case of LDAPSync ?
    Please provide any helpful pointer on this.
    Thanks,
    RPB

    Password :
    Increase order of calling for custom password event handler than OOTB handler.
    Update:
    you wanted to update custom fields?
    Did you check default update tasks comes with connector?

  • Provisoning users from OIM to OID having org other than xellerate users

    Hi,
    when i provision a user belonging to default Xellerate Users organization in OIM to OID, it is done.
    what changes do i need to do if a want to provision a user in any other organization say 'MyCompany' to OID user
    (it gives naming exception error when i try doing so)

    let me explain what I am trying to acheive.
    I create a user using flat file reconciliation such that the user is created in organization say 'XYZ'. Also I've created a group say XYZmember (membership rule is organization name=XYZ)
    I created an access policy such that whenever a user who is a member of XYZmember group(means organization name is XYZ)is created in OIM the user gets provisioned to OID and will be assigned an OID role say role1.
    Now when i create a user with XYZ as organization,he becomes a member of XYZmember group.... according to access policy he should be provisioned to OID user and assigned role1
    But it gives naming exception error.
    i want to know if i create a user in some org other than xellerate users will it get provisioned to OID? and HOW?

  • Provisioned user in exchange from OIM created as Mail Enabled User

    Hi,
    I have provisioned a user from OIM to exchange and the user is created as MAIL ENABLED RECEPIENT in the exchange instead of MAIL BOX ENABLED RECEPIENT .The difference between both is like the MAIL BOX ENABLED user will be having a seperate button(MAILBOX RIGHTS) in the exchange advanced tab and also he has exchange features tab.
    Is there any field in OIM which differentiates both MAIL ENABLED and MAIL BOX Enabled user.
    When i see the tabs of the MAIL ENABLED USER in the exchange i'm able to see just alias fields in one of the tabs but the MAIL BOX ENABLED user is having even the mail store field.
    When i googled for the difference between MAIL BOX enabled and MAIL Enabled i could see like the user created directly with exchange is getting MAIL BOX enabled and any third party user or different domain user wont get this MAIL BOX enabled instead he will be MAIL ENABLED
    I want the user to be MAIL BOX enabled when he is provisioned from OIM.
    Please update if any one has come across this type of issue.

    hi Rajiv,
    thanks...
    i have run the AD Organisation lookup Recon and have given the following parameters
    Lookup Search Filter:     (|(objectclass=OrganizationalUnit)(objectclass=container))
    Search Base:     DC=<domain_name2>,DC=<domain_name1>,DC=com
    Recon Type:     Update
    IT Resource Name:     ADITResource
    AttrName For Decode Value In Lookup:     distinguishedName
    AttrName For Code Value In Lookup:     distinguishedName
    Lookup Code Name:     Lookup.ADReconciliation.Organization
    Configuration Lookup:     Lookup.AD.Configuration
    But still theres no value for Organisation Lookup in process form for provisioning the user. what could be the cause for the same?
    Also i was testing if the connector is installed properly by using the testing utility. i used the following command to run it : . runADtest.sh 2
    But i got the following error.
    Exception in thread "Main Thread" java.lang.NoClassDefFoundError: com/thortech/xl/integration/ActiveDirectory/test/ADTestClient
    Caused by: java.lang.ClassNotFoundException: com.thortech.xl.integration.ActiveDirectory.test.ADTestClient
    at java.net.URLClassLoader$1.run(URLClassLoader.java:202)
    at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
    at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
    at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
    at java.lang.ClassLoader.loadClass(ClassLoader.java:248)
    Could not find the main class: com.thortech.xl.integration.ActiveDirectory.test.ADTestClient. Program will exit.
    Please help me for this also.
    Edited by: 827805 on Feb 9, 2011 4:11 AM

  • Users not provisioned from OIM to OID groups

    I've created an Access policy such that when i create a user with role as consultant he is automatically provisioned to OID resource and OID group( cn=group1,cn=groups,dc=ad,dc=company,dc=com ).
    The user is provisioned to OID users(cn=users) but not to cn=group1,cn=group....
    What could be wrong?
    i have run the OID group lookup tasks to generate freshly added group lookups. Theses lookups are populated in process form when i create an access policy.
    For ex the lookup generated is cn=group1,cn=group,dc=ad,dc=company,dc=com and the decode value is group1
    The user profile and process form are not linked. That means changes in process form are not reflected to user profile. Can this be possible reason for the hassle defined above
    please help me resolve this issue.
    Edited by: Chhavi Saluja on Feb 15, 2010 1:30 AM

    Hi,
    Today I have also done the same thing of auto provisioning of OID through access policy. Only difference is that for selecting "Container DN" and "User group" we have created two user defined fields(lookup)in the user form which will refer to the lookups "Lookup.OID.Organization" and "Lookup.OID.Group" for inputs.These lookups are already reconciled once from OID.
    As far as "container DN" iam successful but while selecting "user group" iam able to select and when i click on "create user" user is getting provisioned to OID into Container DN i specified.But user is not going into that particular group i specified.Iam assuming the reason is that as User Group is a mutivalued attribute and if we observe the process form of group selection we will see the add button. But on user form we dont have the option of child form to ADD/REMOVE the groups.
    Someone pls suggest how to proceed further on this.How do i push the user into particular group/groups from the create user form itself?

  • Error While Provisioning User from OIM to OID

    This is the Error I'm getting While Creating a user and provisioning.
    DOBJ.THROWABLE_IN_SAVE
    Unhandled throwable java.lang.NoClassDefFoundError in com.thortech.xl.dataobj.tcScheduleItem's save
    This error happens when i try to provision the user with OID.
    Regards,
    sudhan

    Could you please write down what you have given in ITResource?
    May be you are giving some wrong value in IT Resource.
    Have you made chnages to OID Prov Lookup. If no check this link :
    Re: Problem with OID Connector
    And give a try !

  • How do i reconcile users from OIM to OID

    I have configured the OIM with the connector for OID. But the user created in OIM is not stored in the OID. How should i proceed with it?

    You are trying to do Provisioning with OID.
    You have logged in with XELSYSADM.
    You have searched for user and went to his Resource Profile.
    Clicked Provision New Resource and selected OID.
    Resource form must be populated and you have filled the information and clicked continue and subitt that.
    Now go to Process Form attached with it and see whether values for OID Server has come and check for other attributes also.
    Also uncheck Auto Save button and start provisioning for some user again and give proper values in all the fields of Process as well as Object forms.

  • Importing User attributes from OIM 9101 to 11g

    hi all,
    I need to import/create all the User attributes(UDFs) present in the OIM 9101 version to OIM 11g. Is there any way this can be achieved using deployment manager? Looking to avoid creating all of them manually again,as that would be a time consuming/error prone task.
    Looking forward to your replies.
    Thanks,
    Anuj.

    Hi,
    I think, you better create it manually in OIM11g and higher environments. The UDF import in 11g is unstable..some times it works..and some times it disappears..and when you try to create UDF after import, It will make your life hell.
    I really had very bad experience with OIM 11g UDF export/import.
    Regards,
    J

  • Integrate a EBS, OIM ,and OID with orclGUID

    Hi expert,
    I already connect OID and EBS with OIM.
    My scenario is when I provisions user from OIM to OID, OID will generate orclGUID and I want this parameter to get back to OIM.
    Next, I want to provisions user to EBS and insert orclGUID to SSO GUID field to EBS provisioning form.
    My question is "How I get orclGUID from OID to EBS via OIM ?" .
    Noraset,

    Hi Bikash,
    I don't know the way to create task.
    Can you briefly explain to me or provide some document ?
    Thank,
    Noraset
    PS. I found something in EBS IT resource (SSO Enabled, SSO IT Resource, SSO Identifier, SSO Login Attribute) <<< Can it solve my problem ?
    Edited by: Noraset on May 3, 2013 3:51 PM

  • Using AD connector to populate multi-valued attributes  to OIM

    Could anybody share the expirience of provisioning multi-valued attributes from AD to OIM 11.1.15?
    What is the best approach?
    Thanks.

    mc2,
    you can use http://docs.oracle.com/cd/E23104_01/download_readme_ps4/download_readme_ps4.htm#BABDABDA and http://docs.oracle.com/cd/E21764_01/install.1111/e12002/install.htm#CIHGAEFI as a staring point. This gives you pointers to all software needed and steps to follow.
    Kevin was referring in fact to BP1 11.1.1.5.1, Patch# [12748351|https://updates.oracle.com/download/12748351.html] , not PS1. PS1 is in fact 11.1.1.5.
    Florin

  • Cannot provision Exchange 2003 account in OIM 11gR2

    Hello,
    I'm trying to provision Exchange 2003 accounts from OIM 11gR2 but I keep getting errors. My AD connector works and is able to reconcile and provision account and my Exchange connector is linked to it. I've understood that the only mandatory fields in the Exchange 2003 provisioning form are "mail store name" and "alias", so I've tested by only filling those. However, the provisioning does not complete and the logs show this error :
    [2013-01-25T11:46:19.292-05:00] [oim_server1] [ERROR] [] [XELLERATE.ADAPTERS] [tid: [ACTIVE].ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: b70c24a5215a6ee3:-625a909b:13c6d3ae4c5:-8000-0000000000002b50,0] [APP: oim#11.1.2.0.0] Class/Method: tcAdpEvent/getITAttrVal encounter some problems: Could not find attibute value for IT Resource Key = 0 and attribute = Server Address
    [2013-01-25T11:46:19.293-05:00] [oim_server1] [ERROR] [] [XELLERATE.ADAPTERS] [tid: [ACTIVE].ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: b70c24a5215a6ee3:-625a909b:13c6d3ae4c5:-8000-0000000000002b50,0] [APP: oim#11.1.2.0.0] Class/Method: tcAdpEvent/getITAttrVal encounter some problems: Could not find IT asset value for Svr_key = 0 and attribute = Server Address
    [2013-01-25T11:46:19.293-05:00] [oim_server1] [ERROR] [] [XELLERATE.ADAPTERS] [tid: [ACTIVE].ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: b70c24a5215a6ee3:-625a909b:13c6d3ae4c5:-8000-0000000000002b50,0] [APP: oim#11.1.2.0.0] Class/Method: tcAdpEvent/getITAttrVal encounter some problems: DATA_ERROR[[
    com.thortech.xl.dataobj.util.tcAdapterTaskException: DATA_ERROR
    at com.thortech.xl.adapterfactory.events.tcAdpEvent.getITAttrVal(tcAdpEvent.java:2023)
    at com.thortech.xl.adapterGlue.ScheduleItemEvents.adpMEXCCREATEMAILBOX.implementation(adpMEXCCREATEMAILBOX.java:90)
    at com.thortech.xl.client.events.tcBaseEvent.run(tcBaseEvent.java:196)
    That's the only error I see and I'm not really sure about what it means. Any ideas?
    Thanks,
    --jtellier                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   

    Are you using the version 9 or 11 of the connector? I've done more investigations with version 9 and realized that the DB is not correctly updated by the connector. I've reported the problem with Oracle and a bug has been open. Here are the details :
    When reconciling or provisioning a mailbox, a new row is added in the OIU table. This row has "null" as its APP_INSTANCE_KEY. Manually setting the Exchange's app instance key as the value of this column solves the problem.
    Hope this helps!
    --jtellier                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       

Maybe you are looking for

  • How to Install Coldfusion 8 64-bit on Small Business Server 2008 64-bit

    How to Install Coldfusion 8 64-bit on Small Business Server 2008 64-bit I ran Coldfusion 8 on SBS 2003 Premium for 6 months with no problems.  When we finally decided to cut over to SBS 2008, that’s when everything went to hell.  I tried for weeks to

  • Apple ID Login Issue

    I am using iTunes on my MacBook Pro, and when purchasing a song I'm asked to enter my password to my Apple ID (as usual) and when I do this, it doesn't seem to accept it. It however does not display an error message... It simply re-displays the box t

  • Can I use home sharing (on my mac using my other computers library) even if I'm not in a WiFi zone?

    I have used Home-Sharing on my Dell Laptop and now my Mac. My mac uses the Dell's library and I was wondering whether I would have to be using the same WiFi code or whether I could be on a different WiFi or even have none and still use it?

  • Append:File adapter

    Hi, My requirement : to append to an existing file ,created through file adapter. Use case : Let's say, we are polling for a DB table for new entries and writing it to file through file adapter. now in the second poll we have 2 new records, I want th

  • Share Operation DVD Has Failed

    I have a project on Final Cut Pro X that is close to 90 minutes long. It consists of several 5 minute video clips. When I try to share the project to DVD it gets about 33% done when I get this error - The share operation "DVD" has failed. The operati