Proxy Assignment in OIM

Hi,
Does anybody know what events or tasks occur when a User assigns a Proxy. We have a requirement as below:
A Manager can have two type of tasks assigned to him.
1. Manager Approvals
2. Application approvals.
Our requirement is to when Manager assigns himself a proxy, Only Manager Approvals need to be transferred to Proxy and not Application Approvals
Is it possible in OIM to filter approval tasks based on name when a Proxy is assigned.
Thanks
GK
Edited by: user9967939 on Oct 27, 2009 1:59 AM

let me give it a shot one more time:
Do not need an approval process for setting up the proxy.
We had modified the JSP for My Proxy to suit the requirements. for ex: get peers and subordinates only in the organization. working perfect.
for ex: we have a User who is a Manager and an Approver for an application. What we wanted to do it if he assigns a user as a Proxy. OIM should not assign all the pending approval tasks to the proxy user. It should only assign tasks that are named as "Manager Approval" to the proxy user. The User will manually reassign the other pending approval tasks to another approver if needed.
Is there any way we can modify OIM so that we can filter the tasks that can be assigned to the proxy user.
Thanks
GK
Edited by: ramesh.gk on Oct 27, 2009 7:18 PM

Similar Messages

OIM limit proxy to certain users

Hi.
I have two types of users in OIM,
- External Users, members of an organization called "External Employees"
- Internal Users, members of an organization called "Internal Employees"
How can I limit the proxy assignment to be done only between users from the same organization? ie: External employees can only set another external employee as a proxy.
Thanks.

Hi,
I've already had this kind of requirement and I have not seen any support to that in OIM.
So I thought I could assign to the Users.Proxy data object an adapter on the preinsert and preupdate events and perform the required validations but it was not posible because the Users.Proxy does not have any entity field available.
To implement the requirement, I've created a custom JSP that calls the methods below:
tcUserOperationsIntf.setProxyForUser(long userKey,
long proxyUserKey,
java.util.Date startDate,
java.util.Date endDate)
throws Thor.API.Exceptions.tcAPIException,
Thor.API.Exceptions.tcUserNotFoundException,
Thor.API.Exceptions.tcRecursiveProxyException,
tcAPIException
tcUserOperationsIntf.updateProxyForUser(long pxdKey,
java.util.Map attribute)
throws Thor.API.Exceptions.tcAPIException,
Thor.API.Exceptions.tcUserNotFoundException,
Thor.API.Exceptions.tcRecursiveProxyException,
tcAPIException
I think you can implement something like that and perform all validations you'll need. Also, you have to remove the menu My Proxy and assign the menu to your My Proxy customization
Thanks,
Renato.

Help required in OIM - user proxy

Hi,
I have set up an approval workflow for provisioning users into OID.
Here I am trying to delegate the approval task to another user in the absence of the approver.
For this, I have defined the proxy user for the approver.
But, once the request has been raised for approval, it is still with the approver, its not reflecting under pending actions for the proxy user.
Am I missing something ??
Any help is appreciated...
Thanks in advance.

The proxy concept in OIM is not entirely well implemented or well defined and in many cases it turns out that you have to supplement with custom functionality and/or replace it entirely.
The easiest way to implement your desired functionality is likely to write a scheduled task that moves the approval between the approvers as needed.
Best regards
/Martin

Customizing Popup in OIM 11gR2

Can we customize the popups in OIM using the Managed Beans and ELs? We have a requirement to customize the proxy assignment under 'my information' to add only managers as proxy and there is also one another requirement to do some validation on the number of days.(Max days should be 30)
Thans in advance,

Can we customize the popups in OIM using the Managed Beans and ELs? We have a requirement to customize the proxy assignment under 'my information' to add only managers as proxy and there is also one another requirement to do some validation on the number of days.(Max days should be 30)
Thans in advance,

Modify Calendar Dialog in OIM 9.1.0

Hi everyone,
When I do a request for role assigning in OIM 10g, I see a Calendar Dialog.
This calendar dialog is a general calendar dialog.
But I want to modify this calendar or I want to create a new calendar dialog.
Because I want to do a calendar which has a date which is after six months from this time.
under ......./xlWebApp.war/cabo/jsps
calendarDialog.jsp
a.jsp
frameRedirect.jsp
fred.jsp
How can I modify this calendar dialog ?
How can I reach this standart calendar dialog?
Thanks.
Regards.
Edited by: Huseyin Igde on Jul 25, 2012 1:53 AM

Can you check whether path variables is set in your system under System Variables like Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;

Configuring settings for proxy scenario.

Hi experts,
I have SAP R/3 and XI system, need to execute a proxy scenario.
What all configuration settings have to be done for the proxy part in both XI and SAP system.
Please help with links to some good blogs.
Thanks,
Younus

Hi,
There are two Types of proxies which can be done by ABAP or JAVA
client proxy is used by an application to send messages outside of the system it resides in (normally to the IS in this context).
server proxy is used by an application to receive messages from sources outside itself (again, normally the IS in this context).
/people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy - ABAP Proxy to File
ABAP Proxy
How do you activate ABAP Proxies?
/people/vijaya.kumari2/blog/2006/01/26/how-do-you-activate-abap-proxies
ABAP Proxy Runtime
http://help.sap.com/saphelp_nw04/helpdata/en/02/265c3cf311070ae10000000a114084/frameset.htm
ABAP CLIENT PROXY
/people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
ABAP SERVER PROXY
/people/siva.maranani/blog/2005/04/03/abap-server-proxies. [original link is broken]
To test a connection - /people/vijaya.kumari2/blog/2006/01/26/how-do-you-activate-abap-proxies
Client Proxy - /people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
Server Proxy - /people/siva.maranani/blog/2005/04/03/abap-server-proxies
XI: Debug your inbound ABAP Proxy implementation
Testing proxy - /people/stefan.grube/blog/2006/07/28/xi-debug-your-inbound-abap-proxy-implementation
JAVA Proxies:
Asynchronous inbpund java Proxies
/people/prasad.ulagappan2/blog/2005/06/27/asynchronous-inbound-java-proxy
Hi,
Proxy Generation- For ABAP and Java proxy, create a Message Interface and then generate a proxy for that message interface.
http://help.sap.com/saphelp_nw2004s/helpdata/en/86/58cd3b11571962e10000000a11402f/content.htm
More on Java Proxy-
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/7d4db211-0d01-0010-1e8e-9b07fc2113ab
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/a068cf2f-0401-0010-2aa9-f5ae4b2096f9
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/f272165e-0401-0010-b4a1-e7eb8903501d
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a068cf2f-0401-0010-2aa9-f5ae4b2096f9
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/f272165e-0401-0010-b4a1-e7eb8903501d
ABAP Proxies:
Integration Builders through proxy server (Part - 2)
/people/sap.user72/blog/2005/12/13/integration-builders-through-proxy-server-part--2
/people/ravikumar.allampallam/blog/2005/03/14/abap-proxies-in-xiclient-proxy
***Assign points if you found helpful
Regards.,
V.Rangarajan

Approval Process for Role in OIM

Experts,
When a role is approved for a user in OIM, can we stop the user without getting assigned to the role immediately.
We would like this scenario, user requests for role, the role owner approves it in OIM and then the role assignment happens in OIA.(or)
User requests for the role, the approval workflow sends the request to OIA for approval from role owner , once approved it can be assigned in OIA and then automatically reflected in OIM as well.
Which option is more feasible...and recommended?
Thanks,
Krish

Thanks Kevin for the reply.
Approval process code will be initiated in OIM and approving happens in OIA. Once approved, the role can as well be assigned in OIA. This can update OIM automatically by assigning the user with the requested role.
(Or)
Approval process code will be initiated in OIM, approving also happens in OIM, the role also gets assigned in OIM and an OIA updates this change accordingly.
Which one would be recommended?
Krish.

How to get the group key, which an approval task assign to

Hi,
When a user is assign to OIM Group (i.e. from User Detail >> Group Membership form), I will call an approval process (using Access Policy).
In that approval process, I have defined two tasks.
1) Assign Approval to Group -> NOT conditional
2) Remove OIM Group From User -> conditional
So, from the 1) task, I will assign this approval to a OIM Group.
If the user click "Approva", a provisioning process will be fired.
If the user click "Deny" (Reject), 2) task will be run.
What I want is this.
From this 2) task, I need to get the "OIM Approval group" key or name (which this approval is assigned to)......
Note: I need to get this group info in the "Approval Process Task" -> "Integration" -> "Map"
Regards,
Chaturanga

Hi,
Yes. I have done that.
Now what I want is this. If the approver "Deny" (Reject) the approval task, I will call another task in the approval process. From that task, I need to run a code, which remove the user from OIM Group.
So, to do it, I have written a java code and created a adapter. So, as a input parameter for that code, I need to give the approval group name(i.e. the OIM group, above approval task is assign to).
How can I get the OIM approval group, which the person who Deny the approval belongs to, from this new approval process task???
Regards,
Chaturanga

Notification on ADD Proxy

Folks,
We have a requirement to send notifictaion to the user when he is made a proxy for some one . I could see that there is an OOTB template which is fired when ever proxy assignment operation happens .
I couldnt succeed in adding a new variable which can dump an attribute value from user profile to the template and also wasnt able to email the modify the template (changed some text) .
Any ideas ?
Thanks
Sid

Check this {thread:id=2276230} and Notification Sample
-Bikash

Form tracking - same form, same user, multiple times

Is there anyway to track the same form from the same user if they fill it out and submit it more than once. I get an error when I try to add the response, that says the form data has already been submitted.

user11957197 wrote:
Actually, this issue happened in production. And around 4000 users have got extra GTC resources provisioned to their accounts. Tomorrow when clinet comes and looks in any of the user, then he may ask to delete or revoke the extra GTC's . So, I thought to remove the GTC's from their accounts from OIM DB.
I was thinking to revoke all RO for the same GTC's and then run schedule task again. This time, schedule task will provision the GTC RO only once.
Please let me know the your comments.
Thanks,
Kalpana.If you revoke the RO from OIM, then user record will be deleted in target resource as well. Now if you run Target Recon the user doesnot exists in target and the resource will not be assigned to OIM.

Is there the equivalent of apache's ! in ProxyPass?

So that one can choose not to proxypass a subdirectory ( ProxyPass /images ! )

Yes. In the examples in the Web Server 6.1 Reverse Proxy Plugin release notes, assign-name is used to select which URIs will be reverse proxied. assign-name's from parameter accepts a wildcard pattern, so you could do the following:NameTrans fn="assign-name" from="*~(/images|/images/*)" name="passthrough"

What is the use of "Organization" and "UserGroup" in Oracle Identity Mgr

Hi
I have created an user and provisioned it with an EBS instance.
Can anyone explain what is the use of "Organization" or "User Group" in Oracle Identity Manager?
What are the basic concepts of having them?
It seems that "Organization" is simply used for categorization of Users in OIM into various orgs and sub-orgs with the aim to create a logical hierarchy of users.
Anything more?
The use of "UserGroups" i find is only for the application of Access Policies and nothing else.
Please modify/add to the concepts.
Thanks
debashis

You can use Organizations to seperate groups of users and limit which resources are available to the users in that organization. You can also create administrative groups over those organizations.
Groups can contain membership rules to automatically place users into them based on attributes from their profile. You can also create access policies to apply to those groups to provision and restrict provisioning of resources. Groups can also be beneficial if you have department groups and such to be able to quickly view all the users who are part of it. Groups are also used during attestation and can be made process owners of the attestation tasks. And Groups can also be used for assignment of tasks such as approvals and provisioning tasks. Groups are also how permissions are assigned throughout OIM.
I'm sure there are many more uses, but this is a few of them.
-Kevin

Modify/Suppress default Authorization policy

We have a requirement to restrict Proxy assignment only to a restricted set of users. There is a default authorization policy 'Self Service User Management All Users Policy' which grant proxy assignment permission to all users. Since this policy exist we are not able to restrict the permission to assing proxy to a limited set of users.
1.Is it possible to modify or delete default authorization policy ,Self Service User Management All Users Policy,
2. If not, is there a way to override the default policy
Thnx

Hi Siddarth
Please follow the instructions here to accomplish ur requirement:
http://docs.oracle.com/cd/E14571_01/doc.1111/e14309/appoimcust.htm#BCFIAGCD [27.4 Creating Custom Proxy Plug-in]
Regards
user12841694

OIM: Help Required --Assigning proxy user

Hi OIM Experts,
I have a requirement where, a user have to select another user in the organization as the proxy user.
But when I try to search for other users in the organization, the search result is null. Because of this, I cannot assign a proxy user other than manager??
Why is this happening. Are there any permissions to be granted ?? What are the limitations for this ??
Thanks in advance

See the posts of this thread Re: Approval reassignment to non-admin user in OIM? I think you can get more informations about the users listed when you search for...
Renato.

[OIM] Proxy User with groups

Dear people,
I have a scenario where there is a resource with an approval workflow, with 2 steps: in the first the Manager of the requester is the one who must approve. In the second step, a group is assigned as the one who has to make the approve.
I give a proxy to the Manager and another proxy to one of the group members.
When the workflow reaches the Manager approval step, it is automatically assigned to the proxy (what I expected).
The problem arises when the workflow reaches the group approval step, the assignment is still made to the user that is member of the group, not to his proxy user. Is this an OIM limitation? Some workaround?
Thanks!

Hi,
when we assign the task to a group then if the proxy user is the part of that particular group then he has that task automatically why to duplicate the task and if proxy user is not the memeber of the group then he is not authorize to have that task because he is not the member of that group. As user set him as proxy user for him not for group.
I hope this answer your query....
Regards
Alabhya Goel

Proxy Assignment in OIM

Similar Messages

Maybe you are looking for