Removing the entitlement wher user gost disabled OIM11g R2

Question

Hi Expert,
I am trying to writing the scheduler for removing the entitlement when user got disabled.
Below is my code:
public class RemoveEntitlement extends TaskSupport {
protected OIMClient oimClient = null;
     private tcLookupOperationsIntf lookupOps;
     private tcUserOperationsIntf userOper;
     private tcObjectOperationsIntf obj;
     private tcFormInstanceOperationsIntf form;
     private UserManager userManager = null;
public void execute() throws Exception {
Connection connection = null;
try {
EntitlementService provisioningService = Platform.getService(EntitlementService.class);
connection = getConnection();
if (connection != null) {
List<Long> entitlementkeys = getEntitlementKey(connection);
if (entitlementkeys != null) {
for (Long entKey : entitlementkeys) {
boolean ent= provisioningService.deleteEntitlement( entKey );
} else {
} catch (Exception e) {
throw e;
} finally {
if (connection != null) {
connection.close();
private List<Long> getEntitlementKey(Connection connection) throws SQLException {
Statement statement = null;
ResultSet resultSet = null;
List<Long> entKeys = new ArrayList<Long>();
try {
statement = connection.createStatement();
resultSet = statement.executeQuery("select ENT_ASSIGN_KEY,USR_KEY,ENT_LIST_KEY from ENT_ASSIGN where USR_KEY IN (select USR_KEY from USR where USR_Disabled='1')");
if (resultSet != null) {
while (resultSet.next()) {
entKeys.add(resultSet.getLong("ENT_LIST_KEY"));
} catch (SQLException e) {
throw e;
} finally {
if (resultSet != null) {
try {
resultSet.close();
} catch (SQLException e) {
if (statement != null) {
try {
statement.close();
} catch (SQLException e) {
return entKeys;
@Override
public HashMap getAttributes() {
// TODO Auto-generated method stub
return null;
@Override
public void setAttributes() {
// TODO Auto-generated method stub
private Connection getConnection() {
Connection connection = null;
try {
connection = Platform.getOperationalDS().getConnection();
} catch (SQLException e) {
throw new SuperRuntimeException(e);
return connection;
when I am trying test from my local (Eclipse) ,getting below error
Mar 25, 2013 7:30:33 PM org.springframework.context.support.AbstractApplicationContext prepareRefresh
INFO: Refreshing org.springframework.context.support.ClassPathXmlApplicationContext@256ef705: display name [org.springframework.context.support.ClassPathXmlApplicationContext@256ef705]; startup date [Mon Mar 25 19:30:32 IST 2013]; root of context hierarchy
Mar 25, 2013 7:30:33 PM org.springframework.beans.factory.xml.XmlBeanDefinitionReader loadBeanDefinitions
INFO: Loading XML bean definitions from class path resource [META-INF/iam-spring-config.xml]
Mar 25, 2013 7:30:33 PM oracle.iam.platform.utils.SpringBeanFactory createBeanFactory
SEVERE: Instantiating Spring Bean Factory Failed.IOException parsing XML document from class path resource [META-INF/iam-spring-config.xml]; nested exception is java.io.FileNotFoundException: class path resource [META-INF/iam-spring-config.xml] cannot be opened because it does not exist
Exception in thread "main" java.lang.ExceptionInInitializerError
     at oracle.iam.platform.Platform.<clinit>(Platform.java:101)
     at RemoveEntitlement.execute(RemoveEntitlement.java:75)
     at RemoveEntitlement.main(RemoveEntitlement.java:66)
Caused by: org.springframework.beans.factory.BeanDefinitionStoreException: IOException parsing XML document from class path resource [META-INF/iam-spring-config.xml]; nested exception is java.io.FileNotFoundException: class path resource [META-INF/iam-spring-config.xml] cannot be opened because it does not exist
     at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.loadBeanDefinitions(XmlBeanDefinitionReader.java:349)
Any Help Appreciated...

Answer 1

Depends upon if the domains are part of the same forest. If the account moves from one domain to another in the same forest then I don't think there is any issue with cross domain entitlement assignment as long as your AD supports people in domain to have group from another domain.
-Bikash