Self Subscription to OIM Groups

Hi All,
I have a req where in user can self subscribe to OIM Group with the manager's approval. Can it be done OOTB configuration? I have couple of solutions in my mind. Can u suggest me which is the best way to implement this?
1. Use an RO
2. Complete Customization (Menu item / Java)
Thanks & Regards
INIYA

This turns out to be quiet a complex task to achieve. Well I can tell you what steps you need to follow to do that:
1) Have a task in your approval workflow which reads the number of groups in the child form.
2) Have two hidden UDF's in the object form as follows.
count - set this to 0 initially.
groupCount - set it to the value fetched in the above task.
3) Create a task.eg findApprover. Supply the above two attributes from the Object form as input to the adapter mapped. In the adapter just return TRUE if count<groupCount, else return FASLE.
4) Create another two tasks like. UpdateCount and AssignTaskToGroup.
The first task will just update the value of count by 1.eg from 0 to 1
The next task will find the approver User/Group, either from a text file or a lookup wherever you store it. And assigns the task to that particular User/Group. Here you will need to fetch all the groups from the child object form and on the basis of the count value, you can decide upon which group needs to be processed.
5) To loop for groups individually under the same request you need to add these 3 tasks in order under the 'Tasks to Generate' section fo the task-'findApprover' defined in step-3 for the response-'TRUE'.
- UpdateCount
- findApprover
- AssignTaskToGroup
This is it. You will be able to achieve the functionality to assign tasks to different Users/Groups for different child table groups under the same request.
Thanks
Sunny
Edited by: rajsunny on Nov 26, 2009 8:49 AM

Similar Messages

Self service - request for groups - OIM

I would like to allow end-user to request groups from end-user interface?
I would appreciate your guidance...
Out of the box only resources are available for request.

I can suggest you one approach to meet this req.
1. Create a scheduler which will fetch all groups(findGroups()) in OIM and write the result to Lookup, say Lookup.OIM.Groups
2. Create a Process Form with a a field as Groups and make the field type as lookup type and attach the lookup Lookup.OIM.Groups to this field.
3. Create an adapter which would use addMemberUser() in groupOperations and adds the user to specific group.
4. Create a RO, say "Provision Groups" then create a Process Def and attach the above created adapter to process task, say "Add User to OIM group".
Have an approval process in place which allows users to select a group and request for approval. Once approval completes the task "Add User to OIM group" gets called which adds the user to specific group.
It would be better if you show Groups field in child form which allows user to add more groups.
This is one approach which i can think of as of now.
lets see what experts say..

AD Group Change, Can this be made User self requestable in oim?

Hi,
We have a typical requirement where in end user will be requesting for a group change in AD, on Approval he is made member of the group he requested.Can any one suggest how this can be achievable. Any pointers on this is highly appreciated.
Thanks in Advance.

Hi all,
I had this same requirement (Approval process for AD group assignment). So, I have implemented the process you have defined. It is working fine except one problem.
When I add the first OIM group(group A) to OIM user, it will fire an approval process(using Access policy) and after the approver approve it, RO ("AD Group Resource") will be granted to the user. Also, ad information will be updated through my custom code.
But, if I then try to add another OIM group(group B) to the same OIM user, OIM will just assign OIM group to this OIM User. other than that, OIM will not do anything. No approval process will be fired.
(Note: There is no error in the implementation. i.e. if I try to do this in the other way around, i.e. first add the group B and then add the group A, same result. Information regarding assignment of group B will be updated on AD and RO will be granted. But, assignment of group A would not do anything)
Please help me regarding this issue.
Regards,
Chaturanga

Self-Registration in OIM 10g: how to install, customize and use of SPML

Hello. Can someone point me to any documentation (Oracle or other) on self-registration in OIM 10g. Like doc on how to install it and customize it. Also a doc on how to set up self-registration on a separate server and talk to OIM server using SPML.

Refer doc below:
http://download.oracle.com/docs/cd/E14049_01/doc.9101/e14044.pdf
regards,
GP

Exporting and Importing OIM Groups

Hi
I am trying to export and import OIM Groups from one environment to another.
It looks like some of the details of the groups (such as Administrative Groups details) are missing after the import.
Any ideas?
I will assign Points. Thanks
Regards
Vijay Chinnasamy

Hi Kevin,
Thanks for the note.
I found that during my import, it asked me to provide "substitutions".
Once I click, "Cancel Substitutions", the other data is there.
I think duirng my previous import, I clicked on "Next" too soon..
Regards
Vijay Chinnasamy

Execute a Process when removing OIM Group ( Role )

Hi All,
I have a Provisioning Process for a resource object ( RO ). I have definied a Access Policy and attached it to OIM Group G1 and Resource Object RO. That means, when the OIM Group G1 is assingned to user U1 through "Group Membership" option, the provision process attach to RO will be executed.
My problem is,
I need to execute the same kind of process when I Unassingn the G1 from User U1.
Could someone pls help me to solve out this problem ?
/Br
Thirlk

Hi,
Thanks for your reply..
I only use "Group Membership" scenario and fire the access policy through that.
I also enable the "Revoke If no longer Apply" option as well.
Thing is, When the Group is unassigned from the user, I need to create a "Service Request" to our support system saying that "Please Remove grant for User U for Application A1" or something. I know this can be done through the adapter.
I do the same thing when adding the Group to the User. That is done through the provision process and "Process Task Adapter". In this case, the provision process attached to the Resource Object is executed when I add the Group to the User. That is working fine and problem comes when removing the Membership.
I wonder why can't we define the Revoke process through the OIM ?
As your reply, I think the only solution is this to create an Entity adapter and configure it to "Post Delete". I have tried this and problem comes when I'm going to Map the Variables to Entity adapter.
How can I map the Variables and pass the Values to my java adapter ? Specially I need to Map the ITResource. ( DB which contains credentials to our "Service Request System" ).
Edited by: thirlk on Jul 16, 2009 9:33 PM
Edited by: thirlk on Jul 16, 2009 9:33 PM

OIM Group Permissions(OIM User access rights)

Is it possible to set the permissions for an OIM group (ie AD Admins) to have access to Enable, Disable, and Revoke the resources on the Resource Profile page for a user– without giving them write access to the User Detail page.
And secondly, could it be restricted enough to only allow them to do those actions on a specific resource (ie AD User) and not other resources (ie OID, etc).
Please let me know asap if have any idea..
Thanks..

My suggestion would be request based Enable/Disable/Revoke. You can code an approval task to validate submission of the request based on a group membership and either allow the process to continue or reject the request. Once you give someone access to manage users and access to the menu item, they will have access to all the drop downs for that user. You will need to test the permissions. You can give the group update writes to specific objects, and only read only to others and see if this meets your requirements.
-Kevin

User creation in OIM group

When ever i reconcile a user from a Trsuted system, how to add that user to OIM group(ex:group1) automatically?

Go to Rule Designer and create general rule like Role==Consultant.
It can be anything.
Go to Group > Manage > Select ur gorp > Drop down > Select membership rule > Select ur Rule created.

Adding Custom HyperLink in user Self Service in OIM 11g

Hi
My task is to add a hyperlink in self service in oim 11g which can directly lead to resource form for selecting a resource for provisioning user.
Any help would be appreciated.
Regrads
Rajinder Singh

are you able to view using xelsysadm? if yes. Provide the view, edit permission for each and every attribute to User's role using Authorization policy.
If can't able to view using xelsysadm. Hope, you have migrated on other server. Take export of User.xml using Unix Export Utility from dev server and import same using Import unix utility on this server
--nayan

OIM Groups Issues - Groups migrated from OIM 9101 to 9102

Hi,
I migrated the OIM groups from the old system (9101) to the newy built OIM version 9102.
I have a user created called TESTW - it has the GROUP_System_Adminitators (custom OIM Group).
This group has SYSTEM ADMINISTRATOR (Delivered) as the member group.
Also, GROUP_System_Adminitators has menu options for Users Search.
However, this user is unable to search Users. He is able to see the User > Search menu.
Once a string is placed and click on search, no users are found (though OIM has 50k users).
Am I missing something here? Please assist.
TiA. I will assign points.
Regards
Vijay Chinnasamy

Go to Organization > Manage > Search organizations > Selct org in which 50K users have been created > Select ADMINISTRATIVE GROUP (Drop Down)
Assignyour custom group here and try to logic with auser who is part of that custom group
And what do you mean by following statement:
TiA. I will assign points.

Event subscriptions and Event Group subscriptions

Hi,
I have a set of events with subscriptions to each one of them.
Assume I create a Event group with all the events as a member in it.
I also create a subscription for the event group while the individual event subscriptions are still existing.
Will the subscription for the group be executed first or the individual subscriptions are executed first ?
Regards,
Srini.

Hi, a few more additional observations.
My subscription(S1) to the event group launches a process (P1) defined in a workflow item type(BEVLIS).
My subscription(S2) to the individual event launches another process (P2) defined in the same workflow item type BEVLIS.
Now when i raised an event... oracle.apps.per.api.person.update_person with event key 1820 following happens..
1. S1 executed and the P1 got completed successfully. The item key observed in staus monitor is *1820*
2. But on execution of S2 I got the following error notified
Event Error Name: WFENG_EVENT_NOTFOUND
Event Error Message: 3142: Process 'BEVLIS/1820' has no activities waiting to receive event 'oracle.apps.per.api.person.update_person'.
Event Error Stack:
Wf_Engine.Event(BEVLIS, 1820, NOTIFY_QUERY_RESULT2, oracle.apps.per.api.person.update_person)
So prior to execution of S2, a workflow item type BEVLIS with item type 1820 was already available and marked as completed.
And hence the S2 execution looks for a waiting activity in a process which is already competed and hence fails.
An immediate soln will be to create another item type and copy the process P2 to it. and use it for S2.
But is this the behavior expected in subscription processing?
~srini

User Self Registration in OIM 11.1.1.3

Hi all,
Iam trying to register user using self registration process,the request is sent to admin(xelsysadm), i tried to accept request in admin(xelsysadm account) but the request status is showing as "Request Failed".And showing error as
IAM-2050014:An error occurred while initiating approvals for request oracle.iam.platform.workflowservice.exception.IAMWorkflowException: Tasklist mapping failed for workflowdefinition:
Error:default/DefaultRequestApproval!1.0 due to unable to process due to null. The corresponding error message is {1}.
Can any help to solve the issue.
Thanks & Regards,
Satish
Edited by: satish on Sep 8, 2010 3:58 PM
Edited by: satish on Sep 11, 2010 7:16 PM

Did you set the organization, before approving the Task. The Approver needs to specify an OIM organization in which to create a user.
Regards,
Sanjay Sadarangani

Self Registration in OIM 11g

Hi,
Can some one guide me on how to add User defined fields to self Registration page.My requirement is : In self registration form(at the login page),I have to add some UDFs and delete some existing fields.
2.User should be created immediately - no approval process for user creation
3.User email address should be the userid/username. All the oim-username properties should apply to user email address.(No duplicate user email address).Please help.
Thanks.

Regarding Question 1, Chapter 8 ( managing profile) of OIM 11g user guide should help you here. In summary, You will need to use self service related authorization policies to add udfs to self profile page.
http://download.oracle.com/docs/cd/E14571_01/doc.1111/e14316/my_profile.htm#CACICCFD
Regarding Question 3, Please check out 11.5.2 Configuring the Username Policy of OIM 11g user guide.
http://download.oracle.com/docs/cd/E14571_01/doc.1111/e14316/usr_mangmnt.htm#CHDJGJJA
You will need to configure EmailIdPolicy as the username generation policy. OIM11g has OOTB validations to enforce email uniqueness.

Email Notification after User Self Registers in OIM

Hello there,
Can you please tell me how can send an email notification to users as soon as they register themselves in OIM using the OOTB OIM Self Registration.
Actually I am generating a unique User ID as a Post Insert in Create User Event Handler. By real question is to actually send this particular generated User ID to the user in an email - how can I do that?
Thanks.

The exact scenario is an end-user directly self registers himself providing all the necessary values of User ID, First Name, Last Name, Email, Password (mandatory fields). But I want this request to be directly completed/approved. I don't want any kind of administrator intervention in creating these users in OIM such as providing approval details, etc. So I have added the remaining necessary fields on self registration page itself for users to be filled out - Organization Name, User-Type, Employee Role. The user provides all these details on OIM self registration and it directly gets created in OIM.
I have made an email definition of type "provisioning related" and included the necessary UDF's in it. And I have added this email defn to the "Email Notify" task of "Xellerate User" process. I have already checked the "Assignee", "Requester", "User" option box in the "Notification" tab. So now the problem is after user creation - the administrator is receiving an email containing the UDF values but the user is not receiving that. But the user is receiving the "Self Registration" email definition email which I don't want to send.
So really speaking I want to send an email on User creation containing the UDF values - but it is not sending it. I have integrated the "Email Notify" task with "tcCompleteTask" system adapter. Am I missing anything?
Please let me know as this func. needs to be in place asap.
Thanks.

Branding the confirmation message after Self Registration in OIM

Hi All
Can you please let me know how can I brand (change) the confirmation message I am getting after the user having the Self registration .
I want to change the following message
Congratulations, testuser
Your registration request has been sent.
Your registration tracking request number is: 38
You can use this tracking number to check the status of your registration in the Track Request section.
Registration Summary:
Name: testuser
Email Address: [email protected]
User Login: testuser
Thanks

Change the two line in two file Agent.properties & Agent_en.properties on each node if it is cluster.
find these wo line and change.
Note[REGISTRATION_REQUEST_SUCCESS].text = Your registration request has been sent. Your registration tracking request number is: {0}
 
Note[REGISTRATION_CONFIRMATION_TEXT].text = Congratulations, {0} Your registration request has been sent. Your registration tracking request number is: {1} You can use this tracking number to check the status of your registration in the Track Request section. Registration Summary: 
Take a back up of oim.ear. Also you have to know packing and unpacking of jar and war
These file you can find under
$OIM_ORACLE_HOME/server/apps/oim.ear/iam-consoles-faces.war/WEB-INF/lib/OIMUI.jar//oracle/iam/selfservice/uself/agentry/resources/
Restart your OIM manage server.
HTH.

Self Subscription to OIM Groups

Similar Messages

Maybe you are looking for