Provisioning of groups to AD using AD connector

I want to provision groups from OIM to AD. I came to know from the AD connector guide that we can provision groups to AD.
My problem is i found that connector provisions only the following attributes to AD (Group Name, Organization Name, objectGUID, Group Type, Group Display Name).
I want to provision other attributes also like Group Scope to AD apart from the one provided above by the connector. How can i achieve this??

I want to provision groups from OIM to AD. I came to know from the AD connector guide that we can provision groups to AD.
My problem is i found that connector provisions only the following attributes to AD (Group Name, Organization Name, objectGUID, Group Type, Group Display Name).
I want to provision other attributes also like Group Scope to AD apart from the one provided above by the connector. How can i achieve this??

Similar Messages

  • Bulk provisioning to LDAP using sun connector

    Hi guys,
    I am able to provision only single OIM user at time to LDAP directory using sun connector.
    Could any one please suggest me the approach of how to provision multiple users at a time.
    divya

    What Octavian has said is right have 2 it resources and then have a ItResourceLookup Field in your process form. You can either have it to default to any one of the ItResource (OID server) or you can allow the admin to select this during direct provisioning. Depends on how you are doing provisioning i.e. direct or request based or policy based.

  • Provisioning of Groups in CUP

    Hi
    I am trying to  use default roles funtionality  in CUP and I have mapped Groups  for my Portal system.
    but it error's out .
    did anyone
    1. try provsioing Groups via CUP
    2.did any one use Default role fucntionality to pick groups up for certian requests etc?
    Best Regards
    Gerry

    We tried provisioning portal groups and was able to provision, but not to delete.  We have since reverted to a manual process because there were too many issues.   You should be able to find my posts here with a search.
    thanks,
    Peggy

  • Provision OIM user to ADAM using own ProcessDefinationForm,lookups etc

    Hi Friends,
    I am getting problem while provision OIM user to ADAM using the AD Connector 9.1.0.1. For provision I am using my own process definition form, adapter etc (see below).
    The details are
    •     Created a new IT resource i.e. “ADAM IT” of type AD Server.
    •     Created a new Resource i.e. “ADAM User”
    •     Created a Form i.e. “UD_ADAMUSER” similar to “UD_ADUSER”
    •     Created a new “AD. PARAMETERADAM” similar to “AD.PARAMETER”
    •     Created a lookup definition AtMap.MYADAM (similar to AtMap.ADAM) containing mapping between above form field and ADAM server attribute. This lookup is used in created IT resource as AtMap ADUser value.
    •     Created an adapter i.e. adpADAMCREATEUSER. This adapter has exactly same step as it is in adapter “adpADCSCREATEUSER”. I have used “AD.PARAMETERADAM” instead of “AD.PARAMETER”. Below are the three tasks I have created for this adapter It is similar to task “adpADCSCREATEUSER”.
    o     ADAM Get Lookup Values
    o     ADAM Get Attribute Map
    o     ADAM Create User
    •     Created a process definition of type provisioning i.e. “ADAM User” just like “AD User”
    o     In this process definition I have used created “ADAM User” as object
    o     “UD_ADAMUSER” as “Table Name” and
    o     Create a task called “Create User” and used the created adapter and mapped the adapter variables.
    When I perform the provisioning operation with the above settings, then provision is not succeeded and when I checked log I found below details….
    2009-01-29 17:38:48,640 INFO [STDOUT] Running ADAM Get Lookup Values
    2009-01-29 17:38:48,640 DEBUG [OIMCP.ADCS] tcUtilADTasks::getLookupValues() Enter
    2009-01-29 17:38:48,640 DEBUG [OIMCP.ADCS] tcUtilADTasks::getLookupHashMap() Enter
    2009-01-29 17:38:48,640 DEBUG [OIMCP.ADCS] tcUtilADTasks::getLookupHashMap() Exit
    2009-01-29 17:38:48,640 DEBUG [OIMCP.ADCS] tcUtilAttributeNameMap::getIntegrationAttributes() Enter
    2009-01-29 17:38:48,640 DEBUG [OIMCP.ADCS] tcUtilAttributeNameMap::getIntegrationAttributes() Exit
    2009-01-29 17:38:48,640 DEBUG [OIMCP.ADCS] tcUtilADTasks::getLookupValues() Exit
    2009-01-29 17:38:48,640 INFO [STDOUT] Running ADAM Get Attribute Map
    2009-01-29 17:38:48,640 DEBUG [OIMCP.ADCS] tcUtilADTasks::getProcessHasHMapVoid() Enter
    2009-01-29 17:38:48,640 DEBUG [OIMCP.ADCS] tcUtilADTasks::getProcessHasHMap() Enter
    2009-01-29 17:38:48,640 DEBUG [OIMCP.ADCS] tcUtilADTasks::getProcessHasHMap() Exit
    2009-01-29 17:38:48,640 DEBUG [OIMCP.ADCS] tcUtilAttributeNameMap::getUDFIntegrationAttributes() Enter
    2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcUtilAttributeNameMap::getUDFIntegrationAttributes() Exit
    2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcUtilADTasks::getProcessHasHMapVoid() Exit
    2009-01-29 17:38:48,687 INFO [STDOUT] Running ADAM Create User
    2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcUtilADTasks::createADAMUser() Enter
    2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcUtilADTasks::checkHierarchy() Enter
    2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcUtilADTasks::checkHierarchy() Exit
    2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::getPath() Enter
    2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::getPath() Exit
    2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::connectToAvailableAD() Enter
    2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::hashTableEnvForDirContext() Enter
    2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::removePlus() Enter
    2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::removePlus() Exit
    2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::hashTableEnvForDirContext() Exit
    2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::hashTableEnvForLDAPContext() Enter
    2009-01-29 17:38:48,687 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::hashTableEnvForLDAPContext() Exit
    2009-01-29 17:38:48,687 INFO [OIMCP.ADCS] SSL option is not selected in ITResource
    2009-01-29 17:38:48,750 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::connectToAvailableAD() Exit
    2009-01-29 17:38:48,750 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::getAttributesObject() Enter
    2009-01-29 17:38:48,750 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::getAttributesObject() Exit
    2009-01-29 17:38:48,750 ERROR [OIMCP.ADCS] AD User Creation Failed:null
    2009-01-29 17:38:48,750 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::disconnect() Enter
    2009-01-29 17:38:48,750 DEBUG [OIMCP.ADCS] tcADUtilLDAPController::disconnect() Exit
    2009-01-29 17:38:48,750 DEBUG [OIMCP.ADCS] tcUtilADTasks::createADAMUser() Exit
    Any thought on why the provisioning operation failed, am I missing something? One more thing where I can find the java doc for the AD Connector 9.1.0.1?
    Any help would be greatly appreciated!
    Regards,
    Hardew

    The AD connector is built to provision one object and doesn't really do complex OU structures very well so if you need to create multiple objects your best bet is probably a custom connector using JNDI.
    Good luck
    /M

  • Provision a group

    Hi,
    How to provision a resource with process information using a java program?
    Resource does not have a resource form.
    Thanks

    To directly provision a group in OID you need to use following oim api's
    1. Get the factory instance
    tcUtilityFactory oimUtilityFactory =new tcUtilityFactory(env, moSig);
    1. Get the organization key
    tcOrganizationOperationsIntf orgOpInterface =(tcOrganizationOperationsIntf) oimUtilityFactory.getUtility("Thor.API.Operations.tcOrganizationOperationsIntf");
    HashMap orgReq = new HashMap();
    orgReq.put("Organizations.Organization Name", "Name of the Organization");
    tcResultSet tcResultDetails = orgOpInterface.findOrganizations(orgReq);
    organizationKey = tcResultDetails.getLongValue("Organizations.Key" );
    2. Get the Resource object key
    tcObjectOperationsIntf oimObjectInterface == (tcObjectOperationsIntf)oimUtilityFactory.getUtility("Thor.API.Operations.tcObjectOperationsIntf");
    long [] arr = new long[1];
    arr[0] = organizationKey;
    tcResultDetails = oimObjectInterface.findProvisionableObjectsForOrganizations(arr);
    long provisionObjectKey = -1;
    +//Get the key of the resource object to be provisioned+
    for (int i=0; i<tcResultDetails.getRowCount(); i+){+
    tcResultDetails.goToRow(i);
    if("OID Group".equalsIgnoreCase(tcResultDetails.getStringValue("Objects.Name")))
    +{+
    provisionObjectKey = tcResultDetails.getLongValue("Objects.Key");
    break;
    +}+
    +}+
    3. Provision the resource
    long objectInstanceKey = orgOpInterface.provisionObject(organizationKey,provisionObjectKey);
    4. Get the process instance key
    tcResultDetails = orgOpInterface.getObjects(organizationKey);
    long processInstanceKey = -1;
    for (int i=0; i<tcResultDetails.getRowCount(); i+){+
    tcResultDetails.goToRow(i);
    if(objectInstanceKey == tcResultDetails.getLongValue("Organization-Object Instance-Process Instance.Key"))
    +{+
    processInstanceKey = tcResultDetails.getLongValue("Process Instance.Key");
    +}+
    +}+
    5. Set the process form
    tcFormInstanceOperationsIntf oimFormUtility =(tcFormInstanceOperationsIntf) oimUtilityFactory.getUtility("Thor.API.Operations.tcFormInstanceOperationsIntf");
    HashMap groupDetails = new HashMap();
    +//fill up hashmap with all the required values from process form of OID group+
    oimFormUtility.setProcessFormData(processInstanceKey,groupDetails );
    Hope this helps,
    Sagar

  • Auto provision different groups in oim 11g

    Hi,
    While provisioning a user to AD, I need to add few different different groups based on the user's dept code.
    We have around 250 dept codes and I dont want to create 250 access policies to provision different groups based on the dept code.
    Is there any other way to resovle my issue?
    I am using OIM11g. Please let me know.

    Adding more to Bikash Reply...
    Create a Lookup with codekey as Dept Code and Decode as Groups like
    Dept1->Group1
    Dept1->Group2
    Dept1->Group3
    Write a code which retrieves the groups for corresponding dept code from the lookp, and in the same code call addProcessFormChildData(under tcFormInstanceOperationsIntf) for each group retrieved from lookup. Attach this adpater to new process task and call this task on success of create user task.
    Reference:
    JavaTask to be called after AD User provisioning succeeds
    HTH

  • Reg: Recon using sun connector

    Hi guys,
    I am trying to recon users using sun connector from LDAP directory to OIM.
    I got the error below when i scheduled the recon task
    10:26:00,265 INFO [SJSDS] tcTskIPlanetUserReconciliation[RO=iPlanet User] --> R
    econciliation Starts
    10:26:00,265 INFO [SJSDS] Proceeding to perform the reconciliation task
    10:26:00,265 INFO [SJSDS] Please wait..........................................
    10:26:00,281 INFO [SJSDS] Inside constructSearchFilterForReconcilingUsers metho
    d
    10:26:15,484 INFO [SJSDS]
    10:26:15,500 ERROR [STDERR] javax.naming.ServiceUnavailableException: dfo
    rcedmz.mu.intra.net:636; socket closed
    10:26:15,500 ERROR [STDERR] at com.sun.jndi.ldap.Connection.readReply(Connec
    tion.java:416)
    10:26:15,500 ERROR [STDERR] at com.sun.jndi.ldap.LdapClient.ldapBind(LdapCli
    ent.java:340)
    10:26:15,500 ERROR [STDERR] at com.sun.jndi.ldap.LdapClient.authenticate(Lda
    pClient.java:192)
    10:26:15,500 ERROR [STDERR] at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.jav
    a:2658)
    10:26:15,500 ERROR [STDERR] at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java
    :287)
    10:26:15,500 ERROR [STDERR] at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(
    LdapCtxFactory.java:175)
    10:26:15,500 ERROR [STDERR] at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs
    (LdapCtxFactory.java:193)
    10:26:15,500 ERROR [STDERR] at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxIn
    stance(LdapCtxFactory.java:136)
    10:26:15,500 ERROR [STDERR] at com.sun.jndi.ldap.LdapCtxFactory.getInitialCo
    ntext(LdapCtxFactory.java:66)
    10:26:15,500 ERROR [STDERR] at javax.naming.spi.NamingManager.getInitialCont
    ext(NamingManager.java:667)
    10:26:15,500 ERROR [STDERR] at javax.naming.InitialContext.getDefaultInitCtx
    (InitialContext.java:288)
    10:26:15,500 ERROR [STDERR] at javax.naming.InitialContext.init(InitialConte
    xt.java:223)
    10:26:15,500 ERROR [STDERR] at javax.naming.ldap.InitialLdapContext.<init>(I
    nitialLdapContext.java:134)
    10:26:15,500 ERROR [STDERR] at com.thortech.xl.integration.iplanet.recon.sch
    edule.tasks.tcTskIPlanetUserReconciliation.countRecord(Unknown Source)
    10:26:15,500 ERROR [STDERR] at com.thortech.xl.integration.iplanet.recon.sch
    edule.tasks.tcTskIPlanetUserReconciliation.analyzeTypeOfReconciliation(Unknown S
    ource)
    10:26:15,500 ERROR [STDERR] at com.thortech.xl.integration.iplanet.recon.sch
    edule.tasks.tcTskIPlanetUserReconciliation.processChange(Unknown Source)
    10:26:15,515 ERROR [STDERR] at com.thortech.xl.integration.iplanet.recon.sch
    edule.tasks.tcTskIPlanetUserReconciliation.execute(Unknown Source)
    10:26:15,515 ERROR [STDERR] at com.thortech.xl.scheduler.tasks.SchedulerBase
    Task.run(Unknown Source)
    10:26:15,515 ERROR [STDERR] at com.thortech.xl.scheduler.core.quartz.QuartzW
    rapper$TaskExecutionAction.run(Unknown Source)
    10:26:15,515 ERROR [STDERR] at Thor.API.Security.LoginHandler.jbossLoginSess
    ion.runAs(Unknown Source)
    10:26:15,515 ERROR [STDERR] at com.thortech.xl.scheduler.core.quartz.QuartzW
    rapper.execute(Unknown Source)
    10:26:15,515 ERROR [STDERR] at org.quartz.core.JobRunShell.run(JobRunShell.j
    ava:203)
    10:26:15,515 ERROR [STDERR] at org.quartz.simpl.SimpleThreadPool$WorkerThrea
    d.run(SimpleThreadPool.java:520)
    10:26:15,515 ERROR [SJSDS] tcTskIPlanetUserReconciliation[RO=iPlanet User] -->
    execute(): failed. Exception in execute() method.
    Any suggestions please.....
    could any please respond at the earliest.
    Thanks,
    divya

    Hi Kelvin,
    I am able to connect through LDAP browser.
    I am able to do provisioning also.
    I followed the following steps to do recon
    1. i imported iPlanetXLResourceObject.xml using Depolyment manager.
    2.In Task scheduler, stop execution and disable check boxes are not checked ,XLDeleteUsersAllowed is set to true, user container is set to one of the LDAP branch,
    Trusted source to true, rest of the values are default values.
    3.In ITResorce, in the Recon Attribute Lookup Code is set to AttrName.Recon.Map
    I scheduled a recon task and deleted a user in LDAP.
    I am getting the above said error,should i set any other values other than these.
    Kindly suggest me the approach,
    Thanks,
    divya

  • Not able to get group name by using memberof class, getting Total groups as 0 even I am member of that group.

    Not able to get group name by using memberof class, getting Total groups as 0 even I am member of that group. Through this memberof class I am trying to find full qualified name(DN) of my group.
    code I have used:
    //specify the LDAP search filter
                   String searchFilter = "(&(objectClass=user)(CN=Username))";
                   //Specify the Base for the search
                   String searchBase = "";
    Also I have used,
                 String searchFilter = "(&(objectClass=user)(CN=Username))";
                   //Specify the Base for the search
                   String searchBase = "ou=ibmgroups,o=ibm.com";
    But in both cases I am getting value for Total groups as 0.
    Code Reference:
    * memberof.java
    * December 2004
    * Sample JNDI application to determine what groups a user belongs to
    import java.util.Hashtable;
    import javax.naming.*;
    import javax.naming.ldap.*;
    import javax.naming.directory.*;
    public class memberof     {
         public static void main (String[] args)     {
              Hashtable env = new Hashtable();
              String adminName = "CN=Administrator,CN=Users,DC=ANTIPODES,DC=COM";
              String adminPassword = "XXXXXXX";
              String ldapURL = "ldap://mydc.antipodes.com:389";
              env.put(Context.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory");
              //set security credentials, note using simple cleartext authentication
              env.put(Context.SECURITY_AUTHENTICATION,"simple");
              env.put(Context.SECURITY_PRINCIPAL,adminName);
              env.put(Context.SECURITY_CREDENTIALS,adminPassword);
              //connect to my domain controller
              env.put(Context.PROVIDER_URL,ldapURL);
              try {
                   //Create the initial directory context
                   LdapContext ctx = new InitialLdapContext(env,null);
                   //Create the search controls          
                   SearchControls searchCtls = new SearchControls();
                   //Specify the search scope
                   searchCtls.setSearchScope(SearchControls.SUBTREE_SCOPE);
                   //specify the LDAP search filter
                   String searchFilter = "(&(objectClass=user)(CN=Andrew Anderson))";
                   //Specify the Base for the search
                   String searchBase = "DC=antipodes,DC=com";
                   //initialize counter to total the group members
                   int totalResults = 0;
                   //Specify the attributes to return
                   String returnedAtts[]={"memberOf"};
                   searchCtls.setReturningAttributes(returnedAtts);
                   //Search for objects using the filter
                   NamingEnumeration answer = ctx.search(searchBase, searchFilter, searchCtls);
                   //Loop through the search results
                   while (answer.hasMoreElements()) {
                        SearchResult sr = (SearchResult)answer.next();
                        System.out.println(">>>" + sr.getName());
                        //Print out the groups
                        Attributes attrs = sr.getAttributes();
                        if (attrs != null) {
                             try {
                                  for (NamingEnumeration ae = attrs.getAll();ae.hasMore();) {
                                       Attribute attr = (Attribute)ae.next();
                                       System.out.println("Attribute: " + attr.getID());
                                       for (NamingEnumeration e = attr.getAll();e.hasMore();totalResults++) {
                                            System.out.println(" " +  totalResults + ". " +  e.next());
                             catch (NamingException e)     {
                                  System.err.println("Problem listing membership: " + e);
                   System.out.println("Total groups: " + totalResults);
                   ctx.close();
              catch (NamingException e) {
                   System.err.println("Problem searching directory: " + e);
    Any help will be highly appreciated.

    Not able to get group name by using memberof class, getting Total groups as 0 even I am member of that group. Through this memberof class I am trying to find full qualified name(DN) of my group.
    code I have used:
    //specify the LDAP search filter
                   String searchFilter = "(&(objectClass=user)(CN=Username))";
                   //Specify the Base for the search
                   String searchBase = "";
    Also I have used,
                 String searchFilter = "(&(objectClass=user)(CN=Username))";
                   //Specify the Base for the search
                   String searchBase = "ou=ibmgroups,o=ibm.com";
    But in both cases I am getting value for Total groups as 0.
    Code Reference:
    * memberof.java
    * December 2004
    * Sample JNDI application to determine what groups a user belongs to
    import java.util.Hashtable;
    import javax.naming.*;
    import javax.naming.ldap.*;
    import javax.naming.directory.*;
    public class memberof     {
         public static void main (String[] args)     {
              Hashtable env = new Hashtable();
              String adminName = "CN=Administrator,CN=Users,DC=ANTIPODES,DC=COM";
              String adminPassword = "XXXXXXX";
              String ldapURL = "ldap://mydc.antipodes.com:389";
              env.put(Context.INITIAL_CONTEXT_FACTORY,"com.sun.jndi.ldap.LdapCtxFactory");
              //set security credentials, note using simple cleartext authentication
              env.put(Context.SECURITY_AUTHENTICATION,"simple");
              env.put(Context.SECURITY_PRINCIPAL,adminName);
              env.put(Context.SECURITY_CREDENTIALS,adminPassword);
              //connect to my domain controller
              env.put(Context.PROVIDER_URL,ldapURL);
              try {
                   //Create the initial directory context
                   LdapContext ctx = new InitialLdapContext(env,null);
                   //Create the search controls          
                   SearchControls searchCtls = new SearchControls();
                   //Specify the search scope
                   searchCtls.setSearchScope(SearchControls.SUBTREE_SCOPE);
                   //specify the LDAP search filter
                   String searchFilter = "(&(objectClass=user)(CN=Andrew Anderson))";
                   //Specify the Base for the search
                   String searchBase = "DC=antipodes,DC=com";
                   //initialize counter to total the group members
                   int totalResults = 0;
                   //Specify the attributes to return
                   String returnedAtts[]={"memberOf"};
                   searchCtls.setReturningAttributes(returnedAtts);
                   //Search for objects using the filter
                   NamingEnumeration answer = ctx.search(searchBase, searchFilter, searchCtls);
                   //Loop through the search results
                   while (answer.hasMoreElements()) {
                        SearchResult sr = (SearchResult)answer.next();
                        System.out.println(">>>" + sr.getName());
                        //Print out the groups
                        Attributes attrs = sr.getAttributes();
                        if (attrs != null) {
                             try {
                                  for (NamingEnumeration ae = attrs.getAll();ae.hasMore();) {
                                       Attribute attr = (Attribute)ae.next();
                                       System.out.println("Attribute: " + attr.getID());
                                       for (NamingEnumeration e = attr.getAll();e.hasMore();totalResults++) {
                                            System.out.println(" " +  totalResults + ". " +  e.next());
                             catch (NamingException e)     {
                                  System.err.println("Problem listing membership: " + e);
                   System.out.println("Total groups: " + totalResults);
                   ctx.close();
              catch (NamingException e) {
                   System.err.println("Problem searching directory: " + e);
    Any help will be highly appreciated.

  • Starting just today, when I send an e-mail to a group of friend using BCC, Thunderbird tacks on [Bulk] to my subject. How do I prevent that?

    Starting just today, when I send an e-mail to a group of friend using BCC, Thunderbird tacks on [Bulk] to my subject. How do I prevent that?
    Bill Gray
    [email protected]

    Thunderbird does not modify subject lines. Check your antivirus software or email providers spam filters.

  • Creating a new group in LDAP using JLDAP

    Can anybody tell me how to creat a new group in LDAP using JLDAP

    Hi,
    Have a look at the following link. It will surely help you.
    <a href="http://help.sap.com/saphelp_crm50/helpdata/en/20/a4ffee7e0fcc4ebb7e5466d3903d38/frameset.htm">http://help.sap.com/saphelp_crm50/helpdata/en/20/a4ffee7e0fcc4ebb7e5466d3903d38/frameset.htm</a>
    <b>Please reward points if it helps.</b>
    Regards,
    Amit Mishra

  • How to create groups in AD using AD group process definition

    Hello,
    I want to create group in AD when i create group in OIM & i had achieved this using JNDI & was able to create groups in AD
    successfully,now i want to create groups in AD using AD Group process definition which contains create AD Group task.
    Can anyone suggest what flow should be followed to achieve this ?
    Thanks & Regards,
    Rahul Shah

    I think you can do R & D to acheive this via Event Handler.
    1. Apply Event Handler on Group Object Form.
    In Event handler class.
    2. get the parameter from ADITresource.
    3. Make JNDI call.
    4. Create the same group name in AD.
    There may be easy approach.
    Which version of OIM you are using?
    Thanks,
    Kuldeep

  • "Group  cannot be used" in cj40 tx

    Dear all,
    Need your help in to resolve this issue.
    I am trying to do cost planning using the tcode CJ40 and am following the steps mentioned below,
    1) I created a cost element group in KAH1. All the cost elements have been created in the same controlling area and i have checked the validity of these cost elements.
    2) I assigned this cost element group in transaction OPSB.
    3) Now ,when i am executing transaction CJ40 and clicking on the Primary Costs button i am getting following error
    "Group  cannot be used
    Message no. K8001
    Diagnosis
    Group  has not been created in controlling area  for the characteristic used, neither does it exist as a node within the group.
    System Response
    The SAP System rejects the row/column structure for group .
    Procedure
    1. Create group  with the group maintenance transaction.
    2. Or, correct the name of the group in planning layout  or in the initial screen for planning."
    Request you to kindly correct me and help me in solving this issue. I have checked everything from my side.
    Thanks & Best Regards,
    sri

    Hi Srikanth,
    Please check the notes mentioned below. Hope you find them useful.
    99728, 121055, 99934
    Regards,
    Gokul

  • How to get pdf file from sap presentation server using java connector

    Hi Friends,
    with the below code i am able to get po details in pdf in presentation server.
    DATA : w_url TYPE string
           VALUE 'C:\Documents and Settings\1011\Solutions\web\files\podet.pdf'.
    CALL FUNCTION 'ECP_PDF_DISPLAY'
            EXPORTING
              purchase_order       = i_ponum
           IMPORTING
      PDF_BYTECOUNT        =
             pdf                  = file  " data in Xsting format
    *Converting Xstring to binary_tab
          CALL FUNCTION 'SCMS_XSTRING_TO_BINARY'
            EXPORTING
              buffer                = file
      APPEND_TO_TABLE       = ' '
    IMPORTING
      OUTPUT_LENGTH         =
            TABLES
              binary_tab            = it_bin " data in binary format
    **Downloading into PDF file
          CALL FUNCTION 'GUI_DOWNLOAD'
            EXPORTING
      BIN_FILESIZE                    =
              filename                        = w_url
              filetype                        = 'BIN'
             TABLES
              data_tab                        = it_bin
    when i am using java connector , to retirve the file from presentation server , the follwoing error i am getting...
    init:
    deps-jar:
    compile-single:
    run-single:
    com.sap.mw.jco.JCO$Exception: (104) RFC_ERROR_SYSTEM_FAILURE: Error in Control Framework
            at com.sap.mw.jco.rfc.MiddlewareRFC$Client.nativeExecute(Native Method)
            at com.sap.mw.jco.rfc.MiddlewareRFC$Client.execute(MiddlewareRFC.java:1244)
            at com.sap.mw.jco.JCO$Client.execute(JCO.java:3842)
            at com.sap.mw.jco.JCO$Client.execute(JCO.java:3287)
            at PdfGen.<init>(PdfGen.java:35)
            at PdfGen.main(PdfGen.java:78)
    Java Result: 1
    BUILD SUCCESSFUL (total time: 1 second)
    i debugged too, problem with <b>gui_download......</b>
    I am very glad to all with your suggestions!!
    Regards,
    Madhu..!!

    Hi
    You can try to create an external command (transaction SM69).......sorry I've forgotten,,,,they works on application
    How do you call CL_GUI_FRONTEND_SERVICES=>EXECUTE?
    Max
    Edited by: max bianchi on Oct 13, 2011 10:27 AM

  • ISE Not Identifying AD Group Attributes when using Multiple ISE Servers

    So we have multiple ISE Servers with differing personas. I was having an issue with our new ISE setup not identifying AD Group Attributes when using them in Authorization rules.
    We have 2- 3395 appliances running Admin and Monitoring/Troubleshooting Personas and 2- 3395 appliances running as Policy server personas. We are running  v1.1.1.268 with the latest two patches.
    I was unable to pull Active Directory Group Attributes in any of my Authorization rules. After Resyncing all the boxes with the Primary Administration box I was able to do this. There is no bug listings for this occurance nor do we have Smartnet to call support for other reasons. I thought this might be useful to someone who is having the same issue and is unable to figure it out with TAC
    -CC

    Absolutely. All units said in-sync after setting their personas.
    Here is our layout:
    ISE-ADM-01  Admin-Primary, Monitoring-Secondary
    ISE-ADM-02  Admin-Secondary, Monitoring-Primary
    ISE-PDP-01  Policy Only
    ISE-PDP-02  Policy Only
    I synced one at a time starting with ADM-02. After completing the other two boxes. Active Directory Attribs were pulled down when using them in the Ext Group within my Authz rules.
    -CC

  • Using Business Connector to convert a file to XML

    Hi, I have been asked to see if a flat file created by an abap program can be converted to XML format using Business Connector (4.7). I have looked in the tutorial and the pdf documents but can not see how this is done. Please could someone give me some advice?
    - Is this possible using built-in Business Connector services - or is it more complicated?
    - Should I even bother to try to do this when it it easy for me to create an XML format file from ABAP?
    - Is there a good course, book, documentation that would help me?
    Thanks, Andy

    Hi Andy!
    Our customers have this requirement to convert some "flat-file" into some XML format via Business Connector quite often. The best way (as the last post sugessted) is indeed to use the "EDI-Adapter" which is free of charge (service.sap.com/connectors).
    With that module you can convert all flat-files (delimiter based, offset based, mixed, even classical EDI formats, ...) based on some definition ( = template). Be careful the EDI-Adapter Module download page states that it is supported for BC version 4.6 . However it is absolutely no problem to use it in BC 4.7 versions as well. Remember that you will NOT get any official support by SAP when using the EDI-Adapter module.
    Simply import the EDI-Module as general BC package (server/replicate/inbound directory).
    Generally it is very powerful, stable and well documented ...
    Best regards, Andy

Maybe you are looking for