Request based Revoke process in OIM 11g R2 PS1 ?

Hi All,
In our scenario , we are looking for Request based Revoke process in OIM 11gR2 PS1. In OIM 10g,we have Delete User Access flow seperatly where end user can request for revoking access of user from resource. In OIM 11gR2PS1 we have catalog based request process to request access for Roles, Application Instance and Entitlements.Same way it is possible to have request based revoke access in OIM 11gR2 PS1 where we can request for revoking access for Roles,Entitlements, Application instance , send notification and follow approval process for the same.
Thanks,
RPB

Any helpful pointer on this ?

Similar Messages

OIM 11g R2 PS1 - Bugs fixed info required

Hi ,
I have OIM 11g R2 with BP 06 installed on my system and want upgrade to latest version so that majority of bug fixes are incorporated. As both BP07 and PS1 are in market.
While checking for BP7 fixes we noticed that there are certain fixes that we really require in our application like:
Bug:16315001 : GTC mapping image on migration to other environment is not displayed.
Bug:16506870 : De-provisioning of user accounts via the Set User De-provisioned Date scheduled job fails.
Bug:16347855 : Users are able to submit a request for modify account although nothing is modified on the form fields.
But while checking for release notes of PS1 (11.1.2.1) i did not notice any such fixes, rather there were some certification exception fixes ,new menu called "Certification" in Sysadmin Console and Introduced new menu called "Inbox" in Identity/Self Service Console
So my question is that to apply above fixes we need install the BP7 patch separately, considering PS1 is not a cumulative one and then install PS1
Thanks,
Puneet

Hi,
Check out: http://www.iamidm.com/2013/05/oim-11g-r2-ps1-certification-tab-in.html
Regards,
Chinni

OIM 11g R2 PS1 installtion

Hi,
It seems that OIM 11g R2 PS1 is already available. Can someone provide the download link for this setup?
-thanks

Here is everything Metalink has on R2:
Oracle Support Document 1499587.1 (Information And Bug Listing of Oracle Identity Manager Bundle Patches: 11.1.2.x (11gR2)) can be found at: https://support.oracle.com/epmos/faces/DocumentDisplay?id=1499587.1
-Kevin

Approval process in OIM 11g

Hi All,
I am newbie to OIM. I have a requirement with 2 levels of approvals in OIM 11g.
*1st level:* In the first level the Approver will be selected by the user(self service) from the drop down present in the custom UI.
*2nd level:* For the 2nd level Approval the 1st level appover should have the ability to select the next approver from a drop down list. The 2nd level approvers belong to a particular group.
All the approvers should be stored in a lookup table in OIM. When a user raises a request the custom application should get the values from the lookup table and populate the drop down for 1st level approvers. 2nd level approvers sholud be populated in the drop down during the 1st level approval process.
can any one suggest me the steps to achieve this.
Thanks

Task assignment in SOA are done via human task assignment i.e. the .task component in BPEL. Now this task assignment can use various features to compute whom to assign the task to.
1. Static: This is when you specify the group name or the user name directly into the task.
2. Dynamic : This is when you assign the approver to be a variable and in your SOA workflow before task assignment you assign value to this variable.
3. External Routing: This is when you assign a java code inside the .task to do all the assignment and escalations. When using this you can have complex implementations done.
What I meant by looping is that you will need to call this .task two times, first time of the first approver and second time (if the first approves it) for the second approver. Thus when you are inside the loop you need to get the appropriate value from the payload (payload is sent from OIM to SOA when you submit/approve the request) and set it into the appropriate variable so that .task reads that variable and assigns the task to that person.
I would recommend going through the BPEL developers guide for better understanding. Start with a simple process and see how it behaves when it runs and then pile on top of it.
-Bikash

Error creating a role from the process task adapter - OIM 11g R2 PS1

I have a requirement to create an OIM role dynamically when a resource account is created. Also once the role is created, I need to assign that role to the user dynamically. Following code works perfectly fine if I replace the Platform with OIMClient and run it remotely. It fails when I run it from OIM:
Exception:
An exception occurred while performing the operation.
java.lang.NullPointerException
at oracle.iam.request.impl.RequestEngine.startOrchestrationFromPreProcess(RequestEngine.java:5516)
at oracle.iam.request.impl.RequestEngine.triggerOperation(RequestEngine.java:5439)
at oracle.iam.request.impl.RequestEngine.doOperation(RequestEngine.java:5154)
at oracle.iam.impl.OIMServiceImpl.doOperation(OIMServiceImpl.java:43)
at sun.reflect.GeneratedMethodAccessor6238.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:601)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at oracle.iam.platform.utils.DMSMethodInterceptor.invoke(DMSMethodInterceptor.java:25)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at com.sun.proxy.$Proxy943.doOperation(Unknown Source)
public static User searchUserByLogin(String login) {
        List<User> users = null;
        Set<String> retAttrs = new HashSet<String>();
        retAttrs.add(UserManagerConstants.AttributeName.USER_KEY.getId());
        SearchCriteria criteria;
        criteria = new SearchCriteria(UserManagerConstants.AttributeName.USER_LOGIN.getId(), login, SearchCriteria.Operator.EQUAL);
        try {
            UserManager userManager = Platform.getService(UserManager.class);
          users = userManager.search(criteria, retAttrs, null);
        } catch (AccessDeniedException ade) {
            // handle exception
        } catch (UserSearchException use) {
            // handle exception
        if (users.size() > 0) {
            return users.get(0);
        } else {
            return null;
    public static boolean grantRole(String usrLogin, String roleKey) throws oracle.iam.platform.authz.exception.AccessDeniedException, UserMembershipException, ValidationFailedException, RoleGrantException {
        RoleManager roleMgr = (RoleManager) Platform.getService(RoleManager.class);
        adpLogger.debug("Entering grantRole(1): User - " + usrLogin + " Role - " + roleKey);
        Set userKeys = new HashSet();
        User user = searchUserByLogin(usrLogin);
        userKeys.add(user.getEntityId());
        if (!roleMgr.isRoleGranted(roleKey, user.getEntityId(), false)) {
            RoleManagerResult result = roleMgr.grantRole(roleKey, userKeys);
            adpLogger.debug("Role granted " + result.getStatus());
        } else {
            adpLogger.debug("Role is already granted");
        return true;
    public static String createOrUpdateRole(String usrLogin, String roleName) throws oracle.iam.platform.authz.exception.AccessDeniedException, RoleSearchException, ValidationFailedException, RoleAlreadyExistsException, RoleCreateException, RoleGrantException, UserMembershipException {
        adpLogger.debug("Entering createOrUpdateRole(1) Role " + roleName);
        RoleManager roleMgr = (RoleManager) Platform.getService(RoleManager.class);
        SearchCriteria criteria;
        criteria = new SearchCriteria(RoleManagerConstants.ROLE_NAME, roleName, SearchCriteria.Operator.EQUAL);
        Set<String> ret = new HashSet<String>();
        User user = searchUserByLogin(usrLogin);
        List<Role> roles = new ArrayList<Role>();
        roles = roleMgr.search(criteria, ret, null);
        String grpKey = "";
        if (roles.size() > 0) {
            adpLogger.debug("Role already exists. Role ID " + roles.get(0).getEntityId());
            grpKey = roles.get(0).getEntityId();
        } else {
            Role role = new Role(new HashMap());
            role.setName(roleName);
            RoleManagerResult result = roleMgr.create(role);
            adpLogger.debug("Role created with ID " + result.getEntityId());
            grpKey = result.getEntityId();
        return grpKey;
It fails at             RoleManagerResult result = roleMgr.create(role); line in createOrUpdateRole() method.
Has anyone ever run into this kind of issue?
Thanks

Can you please try after making organization for a particular role and user are same ?
For new role creation publish the particular group to organization.
Regards
Shashank k

Ldap Synch Error in attribute conversion operation Issue in OIM 11g R2 PS1

Hi All,
We have enabled LDAP Synch in OIM11g R2 PS1 environment. We have requirement of users getting created through Web Services. When we create a user through Webservices, and provide all the attributes required to create user then we are getting LDAP Error in attribute conversion operation:
2014-01-03T02:31:52.249-05:00] [oim_server1] [WARNING] [] [oracle.adf.controller.faces.lifecycle.Utils] [tid: [ACTIVE].ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: xelsysadm] [ecid: 1353004b0df87234:-67081615:143517a89d1:-8000-0000000000002807,0] [APP: oracle.iam.console.identity.self-service.ear#V2.0] ADF: Adding the following JSF error message: IAM-2050243 : Orchestration process with id 9864, failed with error message IAM-3010201 : LDAP create event failed : 00000057: LdapErr: DSID-0C090C3E, comment: Error in attribute conversion operation, data 0, v1db1.[[
oracle.iam.ui.platform.exception.OIMRuntimeException: IAM-2050243 : Orchestration process with id 9864, failed with error message IAM-3010201 : LDAP create event failed : 00000057: LdapErr: DSID-0C090C3E, comment: Error in attribute conversion operation, data 0, v1db1.
at oracle.iam.ui.platform.exception.OIMErrorHandler.reportServiceException(OIMErrorHandler.java:170)
at oracle.iam.ui.platform.exception.OIMErrorHandler.reportException(OIMErrorHandler.java:65)
at oracle.adf.model.binding.DCDataControl.reportException(DCDataControl.java:411)
at oracle.adf.model.binding.DCBindingContainer.reportException(DCBindingContainer.java:416)
at oracle.adf.model.binding.DCBindingContainer.reportException(DCBindingContainer.java:471)
at oracle.adf.model.binding.DCControlBinding.reportException(DCControlBinding.java:201)
at oracle.jbo.uicli.binding.JUCtrlActionBinding.reportException(JUCtrlActionBinding.java:2016)
at oracle.jbo.uicli.binding.JUCtrlActionBinding.doIt(JUCtrlActionBinding.java:1660)
at oracle.adf.model.binding.DCDataControl.invokeOperation(DCDataControl.java:2150)
at oracle.jbo.uicli.binding.JUCtrlActionBinding.invoke(JUCtrlActionBinding.java:740)
at oracle.adf.controller.v2.lifecycle.PageLifecycleImpl.executeEvent(PageLifecycleImpl.java:402)
at oracle.adfinternal.view.faces.model.binding.FacesCtrlActionBinding._execute(FacesCtrlActionBinding.java:252)
at oracle.adfinternal.view.faces.model.binding.FacesCtrlActionBinding.execute(FacesCtrlActionBinding.java:210)
at oracle.iam.ui.platform.utils.FacesUtils.executeOperationBinding(FacesUtils.java:165)
at oracle.iam.ui.platform.utils.FacesUtils.executeOperationBindingFromActionListener(FacesUtils.java:112)
at oracle.iam.ui.catalog.view.backing.CartReqBean.submitActionListener(CartReqBean.java:848)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at com.sun.el.parser.AstValue.invoke(AstValue.java:187)
at com.sun.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:297)
at org.apache.myfaces.trinidadinternal.taglib.util.MethodExpressionMethodBinding.invoke(MethodExpressionMethodBinding.java:53)
at org.apache.myfaces.trinidad.component.UIXComponentBase.broadcastToMethodBinding(UIXComponentBase.java:1256)
at org.apache.myfaces.trinidad.component.UIXCommand.broadcast(UIXCommand.java:183)
at oracle.adf.view.rich.component.fragment.UIXRegion.broadcast(UIXRegion.java:148)
at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:102)
at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent$1.run(ContextSwitchingComponent.java:92)
at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent._processPhase(ContextSwitchingComponent.java:361)
at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent.broadcast(ContextSwitchingComponent.java:96)
at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:96)
at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.broadcastEvents(LifecycleImpl.java:1018)
at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._executePhase(LifecycleImpl.java:386)
at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:194)
at javax.faces.webapp.FacesServlet.service(FacesServlet.java:265)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:301)
at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.adf.model.servlet.ADFBindingFilter.doFilter(ADFBindingFilter.java:205)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.adf.view.page.editor.webapp.WebCenterComposerFilter.doFilter(WebCenterComposerFilter.java:117)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.adfinternal.view.faces.webapp.rich.RegistrationFilter.doFilter(RegistrationFilter.java:106)
at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:446)
at oracle.adfinternal.view.faces.activedata.AdsFilter.doFilter(AdsFilter.java:60)
at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$FilterListChain.doFilter(TrinidadFilterImpl.java:446)
at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._doFilterImpl(TrinidadFilterImpl.java:271)
at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl.doFilter(TrinidadFilterImpl.java:177)
at org.apache.myfaces.trinidad.webapp.TrinidadFilter.doFilter(TrinidadFilter.java:92)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.help.web.rich.OHWFilter.doFilter(Unknown Source)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.iam.ui.platform.servletfilter.IdentityContextFilter.doFilter(IdentityContextFilter.java:50)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.iam.platform.servletfilter.PwdMgmtNavigationFilter.doFilter(PwdMgmtNavigationFilter.java:164)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.bpel.services.workflow.client.worklist.util.WorkflowFilter.doFilter(WorkflowFilter.java:248)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.bpel.services.workflow.client.worklist.util.DisableUrlSessionFilter.doFilter(DisableUrlSessionFilter.java:70)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.adf.library.webapp.LibraryFilter.doFilter(LibraryFilter.java:179)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:119)
at java.security.AccessController.doPrivileged(Native Method)
at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:315)
at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:442)
at oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:103)
at oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:171)
at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:139)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3730)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3696)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2273)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2179)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1490)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
In this case user is getting created in OIM but LDAP Synch is not happening we are getting the error as mentioned above.
When we create user in OIM not through Web Serives but through Identity Self Service and provide any date attribute for example Start Date,Provisoning Date, Deprovisoning Date or any other date attribute, then also we are geeting the same error of Error in attribute conversion operation Issue, in this case user is not getting created in OIM and LDAP Synch is not happening.
And when we create a user in OIM not through Web Serives but through Identity Self Service and did not give any of the date attribute then user is getting created and LDAP synch is also happening successfully.
We need to create users through Web Services and we need to resolve this issue asap, request you all to provide any helpful pointer on this.
Thanks
Varsha

This can happen due to OIM-LDAP wrong attribute mapping/value getting passed.
Can you please first try with OOTB attributes and see how it behaves?
J

Error in OIM 11g R2 PS1 configuration

Hi Gurus
I am getting the following error while running the OIM configuration wizard. This is urgent as I am not able to proceed. Please help
Log file:
[2013-06-05T15:26:49.107-07:00] [as] [NOTIFICATION] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JwMSicA1j^Uay5Na6G1HfvaS000003,0] [[
updating SOA mbean oracle.as.soainfra.config:Location=WLS_SOA,WorkflowIdentityConfig.ConfigurationType=jazn.com,WorkflowIdentityConfig=human-workflow,type=WorkflowIdentityConfig.ConfigurationType.ProviderType.PropertyType,Application=soa-infra,name=jpsContextName,WorkflowIdentityConfig.ConfigurationType.ProviderType=JpsProvider JPSProvider attribute Value to oim
[2013-06-05T15:26:49.134-07:00] [as] [ERROR] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JwMSicA1j^Uay5Na6G1HfvaS000003,0] Exception[[
javax.management.InstanceNotFoundException: oracle.as.soainfra.config:WorkflowIdentityConfig.ConfigurationType=jazn.com,type=WorkflowIdentityConfig.ConfigurationType.ProviderType.PropertyType,WorkflowIdentityConfig.ConfigurationType.ProviderType=JpsProvider,WorkflowIdentityConfig=human-workflow,Application=soa-infra,name=jpsContextName
     at weblogic.rjvm.ResponseImpl.unmarshalReturn(ResponseImpl.java:237)
     at weblogic.rmi.internal.BasicRemoteRef.invoke(BasicRemoteRef.java:223)
     at javax.management.remote.rmi.RMIConnectionImpl_1036_WLStub.setAttribute(Unknown Source)
Caused by: javax.management.InstanceNotFoundException: oracle.as.soainfra.config:WorkflowIdentityConfig.ConfigurationType=jazn.com,type=WorkflowIdentityConfig.ConfigurationType.ProviderType.PropertyType,WorkflowIdentityConfig.ConfigurationType.ProviderType=JpsProvider,WorkflowIdentityConfig=human-workflow,Application=soa-infra,name=jpsContextName
     at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.getMBean(DefaultMBeanServerInterceptor.java:1094)
     at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.getClassLoaderFor(DefaultMBeanServerInterceptor.java:1438)
     at com.sun.jmx.mbeanserver.JmxMBeanServer.getClassLoaderFor(JmxMBeanServer.java:1276)
     at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase$1.run(WLSMBeanServerInterceptorBase.java:58)
[2013-06-05T15:26:49.139-07:00] [as] [NOTIFICATION] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JwMSicA1j^Uay5Na6G1HfvaS000003,0] [OIM_CONFIG] Update the SOA Mbean with OIM JPS-CONTEXT Failed.
[2013-06-05T15:28:28.348-07:00] [as] [NOTIFICATION] [] [oracle.as.install.engine.config] [tid: 11] [ecid: 0000JwMRL1V1j^Uay5Na6G1HfvaS000002,0] Initating rollback of the Action Instance : OIM Configuration
[2013-06-05T15:28:28.348-07:00] [as] [NOTIFICATION] [] [oracle.as.install.engine.config] [tid: 11] [ecid: 0000JwMRL1V1j^Uay5Na6G1HfvaS000002,0] Finishing rollback of the Action Instance : OIM Configuration
[2013-06-05T15:28:28.374-07:00] [as] [NOTIFICATION] [] [oracle.as.install.engine.modules.statistics] [tid: 11] [ecid: 0000JwMRL1V1j^Uay5Na6G1HfvaS000002,0] Writing profile to file:/u01/oraInventory
out file:
fileToAdd=soaconfigplan.xml
fileToAdd=CertificationProcess_cfgplan.xml
trying to move the updated composite jar /tmp/13704712040052755924967116283055.tmp to /u01/oracle/config/domains/idm_domain/idm_domain/soa/autodeploy/sca_CertificationProcess_rev1.0.jar
commandStr:/bin/mv /tmp/13704712040052755924967116283055.tmp /u01/oracle/config/domains/idm_domain/idm_domain/soa/autodeploy/sca_CertificationProcess_rev1.0.jar
Modify JAR :true
updated the soaconfigplan.xml & CertificationProcess_cfgplan.xml files in the composite jar sca_CertificationProcess_rev1.0.jar
javax.management.InstanceNotFoundException: oracle.as.soainfra.config:WorkflowIdentityConfig.ConfigurationType=jazn.com,type=WorkflowIdentityConfig.ConfigurationType.ProviderType.PropertyType,WorkflowIdentityConfig.ConfigurationType.ProviderType=JpsProvider,WorkflowIdentityConfig=human-workflow,Application=soa-infra,name=jpsContextName
     at weblogic.rjvm.ResponseImpl.unmarshalReturn(ResponseImpl.java:237)
     at weblogic.rmi.internal.BasicRemoteRef.invoke(BasicRemoteRef.java:223)
     at javax.management.remote.rmi.RMIConnectionImpl_1036_WLStub.setAttribute(Unknown Source)
Caused by: javax.management.InstanceNotFoundException: oracle.as.soainfra.config:WorkflowIdentityConfig.ConfigurationType=jazn.com,type=WorkflowIdentityConfig.ConfigurationType.ProviderType.PropertyType,WorkflowIdentityConfig.ConfigurationType.ProviderType=JpsProvider,WorkflowIdentityConfig=human-workflow,Application=soa-infra,name=jpsContextName
     at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.getMBean(DefaultMBeanServerInterceptor.java:1094)
     at com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.getClassLoaderFor(DefaultMBeanServerInterceptor.java:1438)
     at com.sun.jmx.mbeanserver.JmxMBeanServer.getClassLoaderFor(JmxMBeanServer.java:1276)
     at weblogic.management.jmx.mbeanserver.WLSMBeanServerInterceptorBase$1.run(WLSMBeanS
In doCancel method ...
Yes option....
inventoryLocation: /u01/oraInventory
outputFile:/u01/oraInventory/logs/installProfile2013-06-05_03-20-09PM.log
in writeProfile method..
[ENGINE] Adding /tmp/OraInstall2013-06-05_03-20-09PM for deletion.
java.lang.NullPointerException
     at oracle.as.install.engine.modules.configuration.standard.StandardConfigActionManager.shutdown(StandardConfigActionManager.java:211)
     at oracle.as.install.engine.modules.con

Hi,
Please check if you have followed the below steps to install PS1
1) Install Database
2) Run RCU and create Schema for PS1
3) Install Weblogic Server 10.3.6
4) Install SOA Server 11.1.1.6 and Install SOA patches
5) Install IDM Server 11.1.1.2.1
6) Create Domains
7) Configure Security Store Python Script
8) Start both Admin server and SOA server (in 11g R2 SOA server is not required ) but in PS1 it is required to start SOA server before configuring domain.
9) Configure OIM and Design Console
10) Start OIM managed servers
HTH

OIM 11g R2 PS1 - custom challenge question by user

Hello.. we have a requirement to let end user create their own challenge question? OOTB I don't see any option to let users enter thier own password challenge question during the time of challenge question registration.
While I was going through the OIM documentation I came across this property PCQ.USE_DEF_QUES for which the documentations says:
http://docs.oracle.com/cd/E21764_01/doc.1111/e14308/system_props.htm
For customers who have customized their UI to allow end-users to set their own challenge questions, this property determines whether the user must select challenge questions from a predefined list in the Web Application, or if users are required to provide their own questions.
Note: Functionality that allows end-users to set their own challenge questions is not supported in the standard out-of-the-box user interface.
Any ideas or suggestions on how or where to do the customization for this requirement?

Check the for duplicacy in OBJ_KEY column of the process defination. If duplicate values exit then set them to 'null' and commit. Restart OIM if required

OIM 11g R2 PS1 error in App instances page due to multiple prcoess forms for a single RO

By mistake I attached two process definitions to a single resource object (RO) and it in turn mapped two process forms to the single resource object.
Now when I go to application instances page and do a searc, it shows the below error in the UI
IAM-4067027 : An error occurred in findAppInstances and the cause of error is An error occurred in getParentFormInfo and the cause of error is Multiple process forms exist for Test_Emp_RO..
I tried to assign a different RO and Form to the second process def in teh design console, but it throws SDK update failure error. How to resolve this error? Any inputs are appreciated.

Check the for duplicacy in OBJ_KEY column of the process defination. If duplicate values exit then set them to 'null' and commit. Restart OIM if required

OIM 11g R2 PS1 Installation - DBUM provisioning issue

Hi,
I am facing issue in DBUM connector provisioning. I have installed connector server and connector on OIM side successfully.
BUt, when i try to check for Direct Provisioning i get exception log as :
Thread Id: 20 Time: 2013-06-07 18:18:30.886 Class: org.identityconnectors.framework.server.impl.ConnectionListener Method: processOperationRequest Level: ERROR Message: org.identityconnectors.framework.common.objects.AttributeInfoBuilder.buildCurrentAttributes(Ljava/lang/String;)Lorg/identityconnectors/framework/common/objects/AttributeInfo;
java.lang.NoSuchMethodError: org.identityconnectors.framework.common.objects.AttributeInfoBuilder.buildCurrentAttributes(Ljava/lang/String;)Lorg/identityconnectors/framework/common/objects/AttributeInfo;
at org.identityconnectors.dbum.DBSchemaOp.schema(DBSchemaOp.java:80)
at org.identityconnectors.dbum.DBUMConnector.schema(DBUMConnector.java:310)
at org.identityconnectors.framework.impl.api.local.operations.SchemaImpl.schema(SchemaImpl.java:45)
at sun.reflect.GeneratedMethodAccessor25.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.identityconnectors.framework.impl.api.local.operations.ConnectorAPIOperationRunnerProxy.invoke(ConnectorAPIOperationRunnerProxy.java:93)
at $Proxy5.schema(Unknown Source)
at sun.reflect.GeneratedMethodAccessor25.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.identityconnectors.framework.impl.api.local.operations.ThreadClassLoaderManagerProxy.invoke(ThreadClassLoaderManagerProxy.java:107)
at $Proxy5.schema(Unknown Source)
at sun.reflect.GeneratedMethodAccessor25.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.identityconnectors.framework.impl.api.DelegatingTimeoutProxy.invoke(DelegatingTimeoutProxy.java:107)
at $Proxy5.schema(Unknown Source)
at sun.reflect.GeneratedMethodAccessor25.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.identityconnectors.framework.impl.api.LoggingProxy.invoke(LoggingProxy.java:76)
at $Proxy5.schema(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.identityconnectors.framework.server.impl.ConnectionProcessor.processOperationRequest(ConnectionProcessor.java:287)
at org.identityconnectors.framework.server.impl.ConnectionProcessor.processRequest(ConnectionProcessor.java:191)
at org.identityconnectors.framework.server.impl.ConnectionProcessor.run(ConnectionProcessor.java:121)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
at java.lang.Thread.run(Thread.java:662)
Please provide input to resolve this issue.
Thanks,
RPB

If anyone is faced this issue...please provide helpful pointer on this
Is it from OIM side or problem with Connector Server installed on DB side ?
Thanks,
RPB

Getting error while installing OIM 11g r2 PS1

Hi All,
I Tried to install PS1,
Earlier i got error (SOA(applied 11.1.1.7) and OWSM schemas got failed to create) while configuring schemas on weblogic domain configuration.
For this i uninstalled 11.1.1.7 and i installed 11.1.1.6 on that i applied some patches.
Then SOA is working fine but i am unable to configure OWSM Schema .
Can anybody please help me out of this, which patch i have to apply to get resolve this issue.
I applied following patches.
p13973356_111160_Generic
p14196234_111160_Generic
p16385074_111160_Generic
p16366204_111160_Generic
Regards,
idmr2
Edited by: idmr2 on Apr 30, 2013 3:01 PM

Hi Chinni,
Thanks for reply,
Here is the error :
Component Schema=OWSM MDS Schema
Driver=oracle.jdbc.OracleDriver
URL=jdbc:oracle:thin:@ps1db.tdc.com:1521/orcl.tdc.com
User=DEV_MDS
Password=*********
SQL Test=select 1 from schema_version_registry where
                    owner=(select user from
                    dual) and mr_type='MDS' and
                    version='11.1.1.7.0'
CFGFWK-60850: Test Failed!
CFGFWK-60853: A connection was established to the database but no rows were returned from the test SQL statement.
Regards,
idmr2

OIM 11G, DSML integration failing with null pointer exception

Hi,
we are facing the similar probelm while sending a request from TIBCO BW to OIM 11G (Which is weblogic)
The below request from TIBCO is not working and thowing a NULL POINTER EXCEPTION
<?xml version="1.0" encoding="UTF-8"?>
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
<SOAP-ENV:Header>
<ns:OIMUser xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:ns="http://xmlns.oracle.com/OIM/provisioning" xmlns:ns0="http://schemas.xmlsoap.org/soap/envelope/">
<ns:OIMUserId>xelsysadm</ns:OIMUserId>
<ns:OIMUserPassword>Welcome123</ns:OIMUserPassword>
</ns:OIMUser>
</SOAP-ENV:Header>
<SOAP-ENV:Body>
<ns0:processRequest xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:ns0="http://xmlns.oracle.com/OIM/provisioning">
<sOAPElement xmlns="">
<ns:modifyRequest xmlns:ns="urn:oasis:names:tc:SPML:2:0" xmlns:ns0="http://schemas.xmlsoap.org/soap/envelope/" returnData="data">
<ns:psoID ID="Users:21"/>
<ns:modification name="Users.User ID" operation="add">
<ns:value>Richard1</ns:value>
</ns:modification>
</ns:modifyRequest>
</sOAPElement>
</ns0:processRequest>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>
But if we change the <sOAPElement xmlns=""> to <sOAPElement> (removing the empty namespace) we can able to fire this soap.
Could you please let me know are there any patch, workaround for this issue.
Thanks
Madhu

I don't think OIM 11g supports DSML profile and may be that's the reason you are getting NPE.
See: http://docs.oracle.com/cd/E14571_01/doc.1111/e14309/spmlapi.htm#CHDCBJAI
It states:
"SPML has two profiles: the XSD profile and the DSML profile. This release of Oracle Identity Manager makes use of the XSD profile."

Reconcile user groups to OIM (11g)

I would appreciate it if someone may let me know how to reconcile the organization and leadership structure information from an Oracle DB based identity vault into OIM (11g) to create organizational roles, for example, into the user group and user group membership tables, i.e. the UGP and USG table series. Many thanks.

yesy, I have defines correct search value but its again and again throwing error. I change the search values too. But its not working.

How to delete Justification field in OIM 11g screen

Hi,
I have one requirement to remove the Justification field in last screen while submitting the request for a resource in OIM 11g
any idea how to do it?
Thanks for your help.

Please try this:
OIM Advanced -> System Management -> System Configuration -> Search: *just*
"Indicator to skip the justification page" -> Value: true -> SAVE
Managed object: Deployment Manager/System Property/SkipRequestJustificationStep
NOTE: I'm checking on 11.1.1.5.5, but I wouldn't expect it to be different
Yash

Retrieving Last used User Login Name in OIM 11g R2

In my scenario, i want to retrieve the last used user login in OIM for user profile, to create next User Login based on last one retrieved ?
Is there any API method available in User Management to get this value or Any customized DB query that will help ?
Setup used is OIM 11g R2 PS1.

Thanks Rajiv for Input !
Still i have some doubts in my scenario. Actually i have to create new User Login in sequence based on last User Login of Last user created . This is no based on User ID. Also, whatever already existing users with user login are present , they will be uploaded in OIM for first time through trusted reconcilation.
After reconcilation is done, then hereafter while creating next user i have to update its user login attribute in sequence of latest user login used and check for its uniqueness.Suppose, in case while bulk data import in OIM for first time , the users are not in sequence of User Login attribute, then it will be difficult to get the latest user login. Is there any way to get last user created based on User Login and not on User Id ?
Hope i have given clear picture of my scenario.

Request based Revoke process in OIM 11g R2 PS1 ?

Similar Messages

Maybe you are looking for