Self-registration user assigned to anonymous group auto

hi experts,
how can i make the user self-registration user belong to anonymous group,not everyone group
best regards
zlf

Normally self registered users automatically assigned to everyone group. If client needs they should automatically assign to someother group , it is the only possibility in my point.
Ulitimately when modifying standard groups, this consultant should think about it whether modification really needed ?
It is just an idea
Koti Reddy
Edited by: Koti Reddy Chimalamarri on Feb 8, 2009 12:03 PM

Similar Messages

Query to get which user assign to what group in OID

Hi All,
Can you please help me out to get the details of users assigned to which groups in OID.
I required sql query for the same.
Please suggest for such query.
Thanks-
P

You will use LDAP queries, not SQL. You can query the objectclass of the group and the attribute with the multi value entry for the user. Example:
(&(objectclass=groupofuniquenames)(memberof=*)) -> This will show you all groups that have members.
(&(objectclass=groupofuniquenames)(memberof=cn=Joe Schmoe,cn=Users,dc=location,dc=com)) -> Will show you all the memberships a specific user has.
-Kevin

No user assigned to virtual group ....

Hi experts,
I am configuring UME to create virtual groups in Portal:
     ume.virtual_groups.user_attribute=department
     ume.vitrual_groups.user_attribute.namespace=com.sap.security.core
     ume.virtual_groups.names=Marketing;Production;Distribution
     ume.virtual_groups.name_prefix=VG_
And virtual groups can be found in the useradmin application. But no users are assigned to virtual groups, although there are users with the attributes department = Marketing or Production or Distribution in the portal.
where is mistake?
Best regards,
Andrei

problem solved.
in SAP Note 1372126 encountered a new value for namespace, different from help.sap.com (http://help.sap.com/saphelp_nw70/helpdata/en/43/fcfa2942ed7067e10000000a1553f6/content.htm).
after changing the namespace, the problem resolved
ume.virtual_groups.user_attribute.namespace = com.sap.security.core.usermanagement
Best regards,
Andrei
Edited by: Andrei Liashkevich on Oct 13, 2009 4:00 PM

Assign Self Registration Role...

Hi Experts,
I configured Self Registration User and is working fine. My problem comes when I assign roles for only new users automatically. I created one role "X" and I want to assign it as default for all new users only. This role is assigned with "Everyone" group and for this reason appears for all users and not only for the new ones.... How can I assign only my role "X" to the new ones??? I assigned the action "ume.selfregister_user"; to this role and the Groups "Everyone" and "Anonymous" and the problem again is that appear for all users... if I take out the group "Every one" is not showing anything the new users.... What else Could I do???? If I only assign the anonymous group to my role is still not working.... I will be appreciated.....
Regards

David,
You should assign the self-registration role to the group for anonymous users. When users come to the logon screen then the self-registration option should appear for everyone (assuming there is no SSO). That is because they have not authenticated yet and are therefore anonymous.
-Michael

Roles for user in supplier self-registration

Hello everyone,
I was checking the configuration guide for Strategic Sourcing and for Servece Procurement and I have a doubt.
For supplier self-registration is needed an anonymous user, but in the guide for Strategic Sourcing says that the roles for this user are SAP_EC_BBP_CREATEUSER and SAP_EC_BBP_CREATEVENDOR, however, in the guide for Service Procurement says that the roles are SAP_BC_BASIS_MONITORING and SAP_EC_SUS_ADMIN_VENDOR
What are the right ones?
Thanks,
Ivá

Hi,
The user should have the roles: SAP_EC_BBP_CREATEUSER & SAP_EC_BBP_CREATEVENDOR.
This user is maintainted in ROS client BSP service ROS_SELF_REG in Log on Data
with ROS client, user ID and password.
BR,
Disha.
Do reward points for useful answers.

Self Register User Auto Approval Scenario in OIM 11g

Hello,
I was working on scenario of suppressing approval while Self-Registrating user, following steps were performed
1) Export SelfCreateUserDataSet.xml using weblogicExportMetadata.sh
2) Modified SelfCreateUserDataSet.xml [removed approver-only tag from organization attribuite]
3) Imported SelfCreateUserDataSet.xml using weblogicImportMetadata.sh
4) Restarted OIM & SOA server.
5) Created approval policies i.e. Request Level & Operational Level bote with Auto Approve condition.
6) Made a clone of Self-Register User template & added organization restriction & added Self Operator role.
7) When tested above scenario then xelsysadm had to approve for request & operational level,organization was already selected ,so shouldnt it get approved
automatically as i have mentioned Auto-Approve in approval policy ?
Tested using following link:
http://hostname:port/oim/faces/pages/USelf.jspx?E_TYPE=USELF&OP_TYPE=SELF_REGISTRATION&T_ID=Clone of Self-Register User
Thanks,
Rahul

Hello,
No i cannot see organization field as i have restricted organization to 'xyz' .
My Issue is resolved & problem was that i had changed password of OIM,weblogic also updated boot.properties file in oim & soa,but for some reason my SOA was not working although SOA server was running,so changed password of SOAADMIN from EM,restarted all 3 servers & now my scenario of Self Register Auto Approve works.
Now only thing i am curious is that when i self register user,it shows Request failed,but when checked in OIM user is created .
Thank-You
Rahul

Unable to fetch task assigned to particular group from user

Hi,
     I am usinf BPEL 10.1.3.0. The BPEL is configured to use the Oracle Infra as directory server for providing identity service.
     I have a two group created in oid by name AdminRole and TestRole.Have a one user assigned to each group.
     If i create a new user and assigned to both the role, so any task created for both the group will be visible to new user.
     But this is not happening the new user is not able to view any task assigned to AdminRole or TestRole.
     Any Help Apprecited.
Regards,
Bhavik

Hi Dasaradh,
If earlier issue (Pop message with 60) is not resolved, then it means your Service Constructor is old one. You will see this pop error message when you have more than 60 records to be fetched. The service solution component tables's maximum capacity was 60 only. We fixed the issue later.
So if you still see this issue, I would suggest you to update your service constructor.
For later issue [(Unknown Source)Error: Extension ID oracle.aia.codegen.codegenwizard in extension.xml does not match jar filename oracle.aia.aiaserviceconstructor], it looks like your Service Constructor install is not successful.
Thanks
Vikas
Edited by: user10866611 on Nov 24, 2010 3:15 AM
Edited by: user10866611 on Nov 24, 2010 3:16 AM

Self registration - automatic login into the product

Per requirement, after self registration request is complete (last button pushed) the user should be automatically logged in into OIM.
Out of the box user is redirected to the login screen.
How this could be implemented?
Thank you for your help.

Hi,
As per my understanding in OIM, as you submit the Self Registration request it goes to Admin as open Prov task as many some mandatory fields are not there like Organizaiton. After putting all required atts values and submit the request then only user gets created in OIM then only you he will be login in OIM.
So just after self registration user wont able to login in OIM.
Regards
Alabhya Goel

ISE and Self Registration

Ciao,
is it possible to send user and password credentials, created by self registration, via mail or SMS ?
For example:
- user connect open ssid,
- open browser and ISE, after redirect, present http guest portal with self-registration,
- user compile form of self registration with email or phone fields,
- credentials are send via email (not displayed as default).
Thanks,
Regards,

AD User self-registration request workflow

Hi Experts,
I Am working on oracle 11G 11.1.1.5
I have installed AD connector and things are working as expected.
I have enabled the AD User RO for self request.
And the self registration request is working as expected.
In the workflow however the DefaultResource Approval and DefaultOperational Approval are getting called and teh tasks are assigned to the admin user (xelsysadm)
Where in the system is this workflow defined?
Is it possible to remove these approval steps completely (not auto approve)?
I want the approval to be assigned to a New Group that i have created as AD_ADMINSITRATORS in OIM Roels.
Will i have to write a completely new custom workflow?
Do i have to create a new request template because right now i see the default AD User Form that the user needs to fill in for self request (with default pre-pop) and i am ok with this form for request.
Is self -registration different from request based provisioning?
It woulod be very helpful if someone can explain the complete process.
Thanks and Regards,
Kungo

Kungo wrote:
Hi Experts,
I Am working on oracle 11G 11.1.1.5
I have installed AD connector and things are working as expected.
I have enabled the AD User RO for self request.
And the self registration request is working as expected.
In the workflow however the DefaultResource Approval and DefaultOperational Approval are getting called and teh tasks are assigned to the admin user (xelsysadm)
Where in the system is this workflow defined?
Is it possible to remove these approval steps completely (not auto approve)?NO, You need to go through these stages and auto approve is the only way.
>
I want the approval to be assigned to a New Group that i have created as AD_ADMINSITRATORS in OIM Roels.
Will i have to write a completely new custom workflow?Not necessarily, modify you AD resource object and assign AD_ADMINISTRATORS as the Object Authorizer and then attach the OOTB Resource Autorizer Approval process to the template or request level or operation level policy as you want.
Do i have to create a new request template because right now i see the default AD User Form that the user needs to fill in for self request (with default pre-pop) and i am ok with this form for request.Request template is different then the dataset (dataset is something which you see when creating a request). Template is created for permissions around attributes you want on that request and also who can create the request.
>
Is self -registration different from request based provisioning?Yes self registration is different than provisioning.
>
It woulod be very helpful if someone can explain the complete process.
Thanks and Regards,
Kungo

Anonymous Self Registration

Hi, does anyone have any examples for an anonymous self registration workflow? I have been trying to figure out how one would implement it, and I keep running into roadblocks, and have a feeling I'm missing something obvious. I am able to create workflows that are anonymously accessible via anonProcessLaunch.jsp, but I am always first redirected to anonLogin.jsp and prompted for a user. Is there no way to be truly anonymous when kicking off a workflow?
Thanks

Normally self registered users automatically assigned to everyone group. If client needs they should automatically assign to someother group , it is the only possibility in my point.
Ulitimately when modifying standard groups, this consultant should think about it whether modification really needed ?
It is just an idea
Koti Reddy
Edited by: Koti Reddy Chimalamarri on Feb 8, 2009 12:03 PM

Cisco ISE users self-registration Time Zone

Hello, everyone!
I'm configuring ISE Guest portal and I wonder why I need to choose time zone while in self-registration? Where is it used? And how can I disable this parameter from the self-registration page?

Time profiles provide a way to give different levels of time access to different guest accounts. Sponsors must assign a time profile to a guest when creating an account, but they cannot make changes to the time profiles. However, you can customize them and specify which time profiles can be used by particular sponsor groups. Beginning with Cisco ISE 1.2 time profiles are referred to as the account duration in the Sponsor portal.
Cisco ISE 1.2 includes these default time profiles, which replace the profiles available previously:
DefaultFirstLoginEight—the account is available for 8 hours starting when the guest user first successfully connects to the Guest portal. This replaces the DefaultFirstLogin time profile.
DefaultEightHours—the account is available for 8 hours starting when sponsors first create the account. This replaces the DefaultOneHour time profile.
DefaultStartEnd—sponsors can specify dates and times on which to start and stop network access.

Good Model for Web Self-service User registration ?

Trying to build a web self-service user registration module.
9iAS documentation says 9iAS uses JAZNUserManager that uses jazn-data.xml.
I like jazn-data.xml because the password is encrypted and works with j_security_check with minimal coding, just need to make entries in web.xml.
Is this a good model, ie storing web users in jazn-data.xml ?
Thanks in advance

You should have a kind of auto-enrollment feature on Sharepoint side where, based on a menu selection, the user will be able to enroll himself and his account will be moved to an OU or added to groups based on the provided details. The problem with this
is that this is usually the source of duplicated user accounts in AD and it is not easy to apply a kind of control on how users should enroll themselves only one time and also hard to manage and cleanup later.
You can ask them in Sharepoint forums for more details:
http://social.technet.microsoft.com/Forums/en-US/category/sharepoint
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Auto approval for self registration request in OIM 11G R2

Hi all,
We have a requirement where we want end users to be able to self-register without needing any sort of approval. We are using OIM 11G R2 with the latest patchset.
The way to do it in 11G R1 is explained in the following document:
[http://docs.oracle.com/cd/E21764_01/doc.1111/e14316/unauth_selfservice.htm#BABFEIBF]
But now that R2 does not have any request templates, we are not sure how to do this. Any help will be greatly appreciated. Thanks for your time.
-sandeepc

refer this.
Configuring Auto-Approval for Self-Registration - Fails due to Organisation

Self-registration auto populate/save approver values

Hi,
From OOTB scenario for Self Registration in OIM 9.1.x, after submitting the user registration request, approver needs to provide ‘Organization Name’ (i.e., Xellerate Users) before approving.
We created an ‘Organizations.Organization Name’ field in Self registration form itself (i.e., in Form name="SelfRegistrationUserForm"> tag in FormMetaData.XML). Now in self-registration, this value is getting auto-populated into approver user profile page (<Form name="SelfRegistrationApprovalForm"> in FormMetaData.xml). But still approver needs to submit the values (i.e.,click on ‘update’ button) before approving. I think we need to set some task to complete, we checked in all provisioning/approval process tasks for self-registration, but not working.
Can anyone help us in suppressing the submit process (i.e.,click on ‘update’ button). Our requirement is the approver should only ‘approve/deny’, no other step is required?
- Kalyan Mutya.

did you try updating the request with the organization name and the role after the request is submitted.
updateRegistrationUserDetails(long pnRequestKey, java.util.Map poAttributes)
Updates the request's data with the values passed.
you mentioned that you had added the org name and role name to the self reg form, and it didnt work with that. Was the org name and role getting displayed in the table when you went to the requestDetails Screen for that request? If yes, then all you need to do is, attach to the "Approve" task the adapter tcCompleteTask and you should no longer be prompted for any approval for self reg requests.

Self-registration user assigned to anonymous group auto

Similar Messages

Maybe you are looking for