References for developing Reconciliation Rules for OIM 11GR1

Good Day!
Hi Folks!
I would like to ask if you can share some references or any documents which tackles on the development or creation of reconciliation rules for OIM 11GR1. Currently, we are trying to pull users from a SAP system and provision them to MS AD. Currently, we want to develop reconciliation rules such that we can avoid doing manual ad-hoc link.
Aside from the documentation guide, are there any other references there available in helping us to develop recon rules from a simple definition and from there maybe we can pick it up to define a complex one?
All answers are appreciated.
Thanks in advance!
Regards,
Jeff

reconciliation rule support very limited operator. find the below link
http://docs.oracle.com/cd/E11223_01/doc.910/e11217/cnnctrcmpnts.htm#CEGJHBDC

Similar Messages

Reconciliation Rules in OIM 9.1

Hi,
I need your input in the below mentioned problem.Lets assume we call the field UserLogin in OIM and UserID in Target System ( Target Systems are Exchange and Active Directory).
A Sample UserLogin is A123456 and a sample UserID is 8123456 Both of these are fields are 7 characters long.
In the Reconciliation rule, we can compare last 6 characters of both UserLogin (OIM) and UserID (AD) by using endswith function and transforming by using substring function in Recon Rules of the Design Console, but the difficulty is with second part of the rule is, If the above condition evaluates to true,we want to add one more recon rule, which should check whether UserLogin (OIM) field in starts with number say 8.
can you please let us know, how and what is the efficient/best way of writing this recon rule.
Thanks for your help in Advance
Regards

http://download.oracle.com/docs/cd/E21764_01/doc.1111/e14309/resmgt.htm#CHDDJCAH
Check : Reconciliation Fields Tab section

Reconciliation rules

Hi all,
I'm new to OIM and need your help with 2 requirements :
1- We need to reconcile a list of users from a flat file to OIM but we don't want the newly created users to be provisioned to any resources. I was thinking to prevent provisioning using an access policy that will match all users . Is this the right approach? By the way, is it possible to delete an existing access policy?
2- After reconciliation from the flat file is completed, we need to match the AD accounts to the reconciled accounts. The reconciliation rule is OIM login matches the username portion of AD mail attribute. How can we accomplish this?
Thank you for your time

I didn't say this, I am just removing the access policies from previous group and attach that access policy with any Dummy Group if you don wanna use Access Policy at all ?It would take very long time to go through all 200 groups and remove the access policies from them. I will have to rebuild all groups with new membership rules this is why I thought deleting all groups and membership rules will prevent provisioning. Would that be OK?
Yes I agree with your point but your requirement is something special. You can go for Transformation Class. But before that explain your use case with some example, we may suggest something different.We need to use target resource reconciliation from AD to the newly created accounts that are reconciled from flat file. The user id in the flat file doesn't match AD attributes cn or sAMAccountName.
For example,
flat file userid: stewiegriffin
AD cn: stewieg
AD sAMAccountName: stewiegr
AD mail: [email protected]
so we need to match flat file userid (OIM login) with the username portion of the mail attribute
Is creating a transformation class the best way?

Reconciliation Rule for Trusted Sources

Is it possible to create a reconciliation rule for a trusted source based a user-defined field that stores a GUID? By default, OIM uses the user id in the reconciliation rule, however if the user id changes on the trusted source a recon. rule based on user id will never find a match - if I understand how the recon. rule works.
Has anyone attempted to use something other than user id in a recon. rule for a trusted source?
Thanks

I have a doubt here..please clear if i am able to sucessfully explain...in reconcilliation action we wrote that "No Match Found" --> "create User". it is working fine (for me it is Sun LDAP on other side)..but issue is that when it create a user in OIM...under resource profile no resource is coming as attached...then how can one knows that this user already had a profile in LDAP and need not created a new one and also we cannot provision the same user to LDAP as it is already there...means we cannot link these two user profiles (OIM and LDAP one)....but for feasible scenerion it should be...can anyone tell me where i am wrong and what other configuration needs to be done if it is a feasible scenerion..

Configuring reconciliation rule for AD

Hello everyone,
I have to configure Reconciliation rule for AD where i have to match user login at OIM side to Manager value at AD side. As manager is dn on AD side, how can i compare both the values. Is there any way to spilit the dn to find out the cn value before reconciliation rule will run? How does the tranform feature provided under rule element will work? If anybody came across this scenerio and got any resolution please share.
TIA

I have a doubt here..please clear if i am able to sucessfully explain...in reconcilliation action we wrote that "No Match Found" --> "create User". it is working fine (for me it is Sun LDAP on other side)..but issue is that when it create a user in OIM...under resource profile no resource is coming as attached...then how can one knows that this user already had a profile in LDAP and need not created a new one and also we cannot provision the same user to LDAP as it is already there...means we cannot link these two user profiles (OIM and LDAP one)....but for feasible scenerion it should be...can anyone tell me where i am wrong and what other configuration needs to be done if it is a feasible scenerion..

More than one trusted resource for OIM 9.1.0.2

Hi all,
I just heard that in OIM 9.1.0.2 it is possible to have more than one trusted source, as it is not necessary to configure it to Xellerate User Resource Object. Is that correct?
To configure OID Connector as Trusted Source on OIM 9.1.0.2 do I have to import its XML file?
Regards
Hossam

From what i recall, the OID connector does not come with a second object for the trusted one. I think it comes with the Xellerate User object updated.
To make a new trusted resource, create the resource object, check the trusted source box. On the recon fields, add in all your recon fields you want to use. On the recon action rules tab, set your rule for match not found to create a user, and entity match to link to user. Create a reconciliation rule for this object and the xellerate user object. Create a provisioning process defintion with no additional tasks. On the reconciliation field mappings tab, map all your recon fields to OIM user fields. You'll want to create any entity adapters/event handlers needed to provide required fields such as User Type, and User Role, and Organization and so on.
Now when you get a recon event for this object, it will be a trusted object and can create new users for you and update the OIM profile.
-Kevin

Are there any advantages to using a Data Value Reference for LabVIEW Classes?

Hi
I recently came across an example where the developer had used a data value reference for the class cluster in LabVIEW.
What are the advantages of doing this?
Doesn't the use of LV objects already avoid the creation of multiple copies of data thereby reducting memory usage?
Thanks
AD

LabVIEW's OOP is implemented as a By Value. This means, as Tst stated, branches in wires could mean copies in the object. The DVR is a way to make it By Reference.
There are only two ways to tell somebody thanks: Kudos and Marked Solutions
Unofficial Forum Rules and Guidelines

OIM Target reconciliation - Applying logic on field used in reconciliation rule

Hi All,
I am working on OIM 11g R1. We are doing target accounts reconciliation from AD using OOTB connectors. samAccountName is the field used for reconciliation matching rules. Now my requirement is to apply some logic on this field(For ex: Removing whitespaces at the end of the field value or adding 0 as prefix) before the reconciliation rules are evaluated to find the match in OIM.
Could someone help me on implementing this.
Thanks.
Rgds,
Mounika

This can be achieved creating a class for doing the data transformation and making an an entry in the ReconTransformation lookup against the field for which transformation is required. Please follow the link - http://docs.oracle.com/cd/E22999_01/doc.111/e20347/extnd_func.htm#CMSAD357

Where can I find the reference for modifying registry key for acrobat reader

I am a Web Developer and I need to limit the option the user may choose in acrobat reader plugin.
I doubt if there is option to configure in Windows Registry on HKCU\Software\Adobe\Acrobat Reader\9.0\PrefsDialog.
Anyone know where I can find the reference for those registry key?
I have downloaded sdk91_v2_win.zip file but I cannot find any reference.

Refer to this:
Direct Download Links for Adobe Software
Mylenium

Building WSDL client for OIM SPML webservice

Has any one created WSDL client for OIM SPML webservice,
Any help is appreciated.
Thanks,
Pandu
old thread -->
add udfs to spml prov. request to oim
==========================
Hi,
I am provisioning users in OIM from by sending spml requests
I used the sample client that comes in xellerate directory.
How can I update spml requests to include UDFs to create user in him with udf s.
Thanks
Pandu
Edited by: pandu345 on Aug 5, 2009 3:27 PM

Hello there,
There is a .NET web service client which is successfully able to access the weblogic application server wsdl from oim 9101 and it can see the complete user profile as a response from the same.
1.) Now, there is a situation where oim needs to send some attribute values to that .NET web service client, after the data from their side comes to OIM and updates a single attribute values for e.g. PIN. How can we do that ?
2.) and I want to add some UDFs into the existing SPML provisioning user profile. How can I do that ?
3.) Also, how will OIM know that it was able to successfully send the attribute values to the web service client.
http://download.oracle.com/docs/cd/E10391_01/doc.910/e10360/creategtc.htm#Toc153968032
I have gone through this. I didnt found this in OIM 9101.
Any ideas/references/clues/hints appreciated in this concern.
Thanks in advance,
- oidm.

Is there a reference for the flows tables/views?

Hi,
for my own htmldb-forum I want to find the last login time of somebody, so I could determine which will be new forum messages for this user.
Where can I find these informations? Is there a reference for the Flows tables and views?
Bye,
Jens

heheh for learning purpose I been thinking of developing an app like what you have there.
Is yours done ?
Can we get have a look ?
thanks

Enable XA support in Oracle DB version 10.2.0.1 in prep for OIM installatio

Trying to setup a development environment for OIM. One of the pre-reqs is to install an Oracle DB and prepare it for use by OIM.
I installed Oracle DB 10.2.0.1 on Windows 2003 R2 server and I have run the prepare_xl_db.bat script to prep the DB. However when I run the OIM diagnostic
dashboard to test the database. It fails and says that XA support is not enabled on Oracle DB. I ran the initxa.sql script , in order to manually enable XA
support and I got a message saying the procedure executed successfully. However I also get a message saying that "Package created with compilation errors".
Has anyone encountered the above problem before? How did you resolve it so that XA sypport is enabled which would result in the successful result for the OIM
diagnostic dashboard test on the DB?

Ankit - where can I find this compilation error? I used SQLPlus to run the initxa.sql+ script. Prior to running the initxa.sql script I had granted access to the user account(oimdevuser01) I created for the DB and by running the following query grant javauserpriv to oimdevuser01+;

ORA-00001: unique constraint during "Configure Database Security Store for OIM Domain"

Hi Guru's,
I am following the below steps for OIM 11.1.2.1 with SOA 11.1.1.7 Installation and facing below error during step "Configure Database Security Store for OIM Domain".
Installed Database 11.2.0.3
Installed RCU (Here I used two versions.
RCU 11.1.2 - Used IDAM prefix for (Metadata Services, OPSS, OIM)
RCU 11.1.1.7 - Used SOA prefix for(Metadata Services,SOA Infrastructure, User Messaging service)
Installed JDK 7 (Java 1.7)
Installed WL 10.3.6 (MW_HOME-/u01/Middleware/fmw, WL_HOME=/u01/Middleware/fmw/wlserver_10.3)
Installed FMW 11.1.2.1 for OIM. (ORACLE_HOME=Oracle_IDM1)
Installed FMW 11.1.1.7 for SOA (ORACLE_HOME=Oracle_SOA1)
WL Domain creation. (Domain Name – idam_domain1)
Configure Database Security Store for OIM Domain.
Internal Exception: java.sql.SQLIntegrityConstraintViolationException: ORA-00001: unique constraint (IDAM_OPSS.IDX_JPS_RDN_PDN) violated
Also followed the below bug solution, but issue still occurs.
Bug 16690836 : CONFIGURE DATABASE SECURITY STORE (CONFIGURESECURITYSTORE.PY) SCRIPT IS FAILING
@ 1. Delete the Schemas using RCU.
@ 2. Recreate the OAM schemas.
@ 3. Reinstall the WLS and OAM software.
@ 4. Run config.sh to create a new domain.
@ 5. Run setDomainEnv.sh from user_projects/domains/<Domain_name>/bin
@ 6. Run the configureSecurityStore.py from same window.
Not sure if anyone tried with different steps that fixed the issue? Could you please help.
Thanks
VG

Hi Gurus, I got the solution from Oracle. SOA 11.1.1.7.0 shouldn't be used with Identity Management 11.1.2.1.0(11GR1-PS1) version. Identity Management 11.1.2.1.0(11GR1-PS1) is bundled with SOA 11.1.1.6.0. When used this SOA version, Installation went smooth. Thanks VG

SIngle reference for PXI 6509 Input and Output

Hi ,
I am using 96 channel PXI 6509 as a DIO, In this 96 channels i need to assign 1st port for input, 2nd port for output and 4th and 5th for input so on. its is not a big deal using labview but labview creates seperate reference( Task in) for input and ouput.
I need to have a single reference for both input and output ( like we have in NI DCpower for SMU)
Can any one suggest me how i can achive this?
Thanks and best regards,

I would accomplish this with an Action Engine that handles all of your tasks. Alternatively, make a class that handles all of the tasks.
There are only two ways to tell somebody thanks: Kudos and Marked Solutions
Unofficial Forum Rules and Guidelines

OCCI API Reference for XMLDB

Hello everyone...
I'm a beginner with Oracle & OCCI. I'm trying to develop an application that uses XMLDB as back-end. Can anyone please give me the API reference for OCCI to access XMLDB.
I just want to store & retrive data from a XMLType table. I has tried little bit with relational tables, now i want to go for XMLType tables / columns.
Thanks in advance,
With regards,
R Kaja Mohideen

http://otn.oracle.com/docs/products/ias/doc_library/90200doc_otn/web.902/q20224/index.html
you can also find it in your ORACLE_HOME/jdbc/doc/javadoc.zip or jar
Elango.

References for developing Reconciliation Rules for OIM 11GR1

Similar Messages

Maybe you are looking for