Single credential for logging to OIM and integrating resources

Hello Friends,
I can have a single user account and password for the application IOM and all resources to be set (AD), for example: If a user who has access to the application of IOM with the credentials (user / password = jlk / jlkoim), and automatic provisioning is ADUs provisions the resource, and when I authenticate the team assigned to the domain, you could use the same credentials of the implementation of IOM.
What are the advantages and disadvantages might have with this scenario? What would be the best alternative in this scenario?
Thanks.

It is a common requirement of any client that maintaining password from OIM.
For sending Password to AD you need to setup SSL between OIM and AD.
Advantage:
Password will be maintained by OIM in all the resources and all passwords will be in Synch.
Cost Saving

Similar Messages

Form:The user sees on the screen a single page, for the second page (and to fill it in) he will click a button "next page"!

Hello, sorry for my english!
I am currently creating a form. This form contains 20 pages. For more comfier to fill it in, I want it to be loaded 1 page to 1 page. The user sees on the screen a single page, for the second page (and to fill it in) he will click a button "next page"!
Is it possible to do this with adobe acrobat pro?
In the case of a negative answer, can Indesign do this?
thank you.

Technically it's possible to use a script to prevent someone from going to the next page unless they click a button, but I think it's a bad idea and very user un-friendly. You can add a button that will take someone to the next page, but don't try to restrict them from doing so themselves if they so wish.

Single form for secure zone registration and web app submission?

Hi
Is it possible to setup a form where a user can simultaneously register for a secure zone and submit a web app entry? The knowledge base / tutorials describe a two step process (web form for secure zone registration and web app input form for web app submission), but I would like users to be able to do both with a single form
Thanks in advance for any suggestions
mls

In order to have a customer create a web app item they must be logged into the secure zone already. I've seen some instructions on how to let users submit web app items outside a secure zone but that requires creating a dummy anonymous user and logging them into the secure zone via javascript. You could use this method and once it's submitted you'll have to manually attach the web app item to the correct user in the BC Admin. That might not work for you but you can read more about that at http://forums.adobe.com/docs/DOC-1784
You can't use the above solution with the current user's username and password because those tags are only available when the user is logged into a secure zone already. If your signup form needs to be filled out first, the user isn't logged in.
Your best bet is to have the public signup form redirect the user after submission to an "Add item" form you have created. Maks sure that form is in a secure zone so when they add the item it is attached to their account.
If you don't want to redirect them to a secure zone and want it more seamless you could try to use some javascript/ajax to submit the form via javascript and after the form is submitted, use the javascript code in the above to log them in (be careful to use the https://yoursite.worldsecuresystems.com url if you are passing username and password info gathered from your form to log them in via javascript/ajax). Once they are logged in via the javascript you can use more ajax to fetch a page's HTML that resides in a secure zone. This HTML returned from the javascript can be your "add web app item" form and since they were logged in via javascript (securely, right?) this HTML should contain the right information. Insert this returned HTML into your form container that held the original signup form and they can continue to add a web app item without having to log in.
This is theory and might work but you'll have to start experimenting with it via javascript. I haven't actually tried to do this so hopefully some other community members who might have tried this can weigh in here as well.
Good luck!

Process single chq for Multiple Vendor Invoice and other Non-Vendor GL

Hello Experts,
Scenrio :
In most of the cases, Vendors of our client have the same Banks as that of our client. our client provides facilty to thier Vendors by depositing chqs in thier account upon due date.
Procedure :
I want to process a manual transaction (with a single chq for intra-bank transfer). the total amt on chq would be the total of selection of several invoices & some other payable GLs.
Query :
which T-Code should i use & how do i proceed.

Hi Hussein Merchant ,
For your requirement you have to do single payment at F-53.There you need to select Other account check box at open item selection.Give the all open item vendor codes and get a cleared document number.
Go to FCH5 and assign manual single check here
May be this information is useful to you
If you have any doubt feel free to ask
Regards
Surya

SIngle reference for PXI 6509 Input and Output

Hi ,
I am using 96 channel PXI 6509 as a DIO, In this 96 channels i need to assign 1st port for input, 2nd port for output and 4th and 5th for input so on. its is not a big deal using labview but labview creates seperate reference( Task in) for input and ouput.
I need to have a single reference for both input and output ( like we have in NI DCpower for SMU)
Can any one suggest me how i can achive this?
Thanks and best regards,

I would accomplish this with an Action Engine that handles all of your tasks. Alternatively, make a class that handles all of the tasks.
There are only two ways to tell somebody thanks: Kudos and Marked Solutions
Unofficial Forum Rules and Guidelines

IA07 : Key for Task List Group and Production resource tool number link

HI abapers,
In IA07 TCODE , i want to retrieve Key for Task List Group( PLNNR ) and Production resource tool number ( FHMNR) .
In technical settings for both the feilds, structure names are mentioned.
Is there any function module or table link to retrieve both .
thansk & regards
Raghul

Hi Raghul,
i am also facing the same issue. Kindly let me know if u get any solution for this.
Thanks in advance.
-AruN.

The process could not execute 'sp_repldone/sp_replcounters' error for Log Reader Agent and SQL Server Assertion 17066 & 3624 errors in SQL Logs

One of our SQL Server started creating SQLDUMP file and and on investigation I found the error longs are filled with Errors 3624 & 17066. There is transnational replication configured on one of the databases is the LogReader Agent is failing error "The
process could not execute 'sp_repldone/sp_replcounters' on XXXXX".
Not sure if both these Assertion & Logreader Agent errors are related. Before I remove and put the replication, I wanted to check if anyone has experienced the same issues or aware of what the cause.
***********Error messages from SQL Logs******
**Dump thread - spid = 0, EC = 0x0000000111534460
Message
A system assertion check has failed. Check the SQL Server error log for details. Typically, an assertion failure is caused by a software bug or data corruption. To check for database corruption, consider running DBCC CHECKDB. If you agreed to send dumps to
Microsoft during setup, a mini dump will be sent to Microsoft. An update might be available from Microsoft in the latest Service Pack or in a QFE from Technical Support.
Error: 3624, Severity: 20, State: 1.
SQL Server Assertion: File: <logscan.cpp>, line=2123 Failed Assertion = 'UtilDbccIsInsideDbcc () || (m_ProxyLogMgr->GetPru ()->GetStartupState () < RecoveryUnit::Recovered)'. This error may be timing-related. If the error persists after rerunning
the statement, use DBCC CHECKDB to check the database for structural integrity, or restart the server to ensure in-memory data structures are not corrupted.
Error: 17066, Severity: 16, State: 1.
External dump process return code 0x20000001.
External dump process returned no errors.
Thank you in advance.

You need to determine if this error is a transient one or a show stopper one.
It sounds like your log reader agent has crashed and can't continue.
If so your best bet is to call Microsoft CSS and open a support incident.
It also sounds like DBCC CHECKDB was running while the log reader agent crashed.
If you need to get up and running again run sp_replrestart, but then you might find that replicated commands are not picked up. You will need to run a validation to determine if you need to reinitialize the entire publication or a single article.
I have run into errors like this, but they tend to be transient, ie the log reader agent crashes, and on restart it works fine.
looking for a book on SQL Server 2008 Administration?
http://www.amazon.com/Microsoft-Server-2008-Management-Administration/dp/067233044X looking for a book on SQL Server 2008 Full-Text Search?
http://www.amazon.com/Pro-Full-Text-Search-Server-2008/dp/1430215941

How to create a single action for adding a border and signature for portrait AND landscape images???

i would love to be able to create a single photoshop action for adding a border, plus a signature in the bottom right corner, that works for both portrait and landscape images.
need i say more?!
i already have an action that adds a signature in the centre of the border at the bottom of the image e.g. the image below. what i want though is for that signature to be on the RHS and for the same action to work for portrait images as well.
supplementary info: reason for this is that I want to be able to export 300 wedding images (mix of landscape and portrait images) from lightroom in my pre-selected order (meaning the files are labelled from 001 to 300, ordered according to how the wedding day unfolded) and then use PS to add the border and the signature, in the same place, and for it to work for both orientations.
i need this to work for full sized exported jpeg images, i.e. i want the files that i give on CD to my clients to include my signature in this manner. so I don't want to copy the initial layer and then reduce the second layer size to leave a border around the second layer.
i hope i've been clear and that someone can help me here. I think that this sort of presentation makes such a difference to final printed image, and I DONT want to have to go to all 300 images picking out the landscape from portrait ones (although this may be what I have to do and wouldn't really take that long but surely there's a better way!!!!).
Thanks in advance photoshoppers ...

It is actually quite easy to do if you have a good understanding of how Photoshop works. To be able to handle any size Landscape and Portrait you need to scale the document to a known width or height. Once the document is resized to the width or height it easy. When yot resize the document you use Image size with resample NOT checked. Not a single image pixels is changed all the happens is the documents DPI is set to the proper DPI resolution to print that size. This lets you add a border sized for and document. You can use Canvas Size check relative and leatve the anchor point centered and set width and height to 2" this will add 1"on all sides. Use Canvas size a second time move the anchor point to the top center check relative and set height 1" the will add an additional 1" border on the bottom. You then record a text layer with your Name title or what ever to the top left of the image. Select all ant the align the text layer to the selection to move it to the bottom right.
Adding a couple of scripts to the action you can make sure there is a background layer so the added canvas will be filled with pixels. You can restore the document to its original DPI resolution to retain the images print size. Down load my crafting actions package it contains a dozen scripts to be used within actions. There are text file with tips and guidelines additionaly there is one on dealing with document size and includes a sample action set with a watermarking action the can watermark and size image. The Action set is also saved as a text file with additional comments I added my downloads can be found here http://mouseprints.net/Photoshop.html

Single app for iPhone, BlackBerry, Android and windows

Hi,
will there be single
SharePoint app common to all type of phone (iPhone, Android, BlackBerry, windows)
or unique for each.
Thanks in advance

As this is a browser app and accessed using Crome, Firefox, Internet explorer, etc
You need to make sure you have tested your app on all such browser and then it can be same.
Normally the features and functionality on all browser are different so some people keep different apps.
If this helped you resolve your issue, please mark it Answered

Will ECC 4.X is enough for Auto ID RTI and Integrated Scenarios or ECC6.0 ?

Hi Friends,
Will all Auto ID Scenarios work with < ECC 6.0 or we need only ECC 6.0 ? Please clarify
Thanks & Regards
V.Rangarajan

For SAP AII RTI Scenario you dont need SAP ECC at all.
Except for Product tracking and authentication which requires SAP ECC 6.0 all other scenario's in SAP AII is supported by lower versions of SAP back end. R/3 4.6C is the minimum requirement.
Regards,
Vivek

How do i stop workstation users from saving their network password or credentials for logging into a 2008 R2 Server workgroup?

I have a small workgroup of about 30 users that are a mix of XP Pro, 7 Pro and 8.1 desktop / laptop users that connect to a Windows 2008 R2 Server to use Quickbooks Enterprise, share files and printers. I dont want the users to be able to save their password
on their workstations, I want them to have to log in every time they connect to the server. How do I turn that off?Is the something on the server in Group Policy or a secruity setting that will not allow a saved credential for logging onto the server?

Hi,
I have a small workgroup of about 30 users that are a mix of XP Pro, 7 Pro and 8.1 desktop / laptop users that connect to a Windows 2008 R2 Server to use Quickbooks Enterprise
By connecting to the server, do you mean users log on locally or through remote desktop services, or just through network to access network resources instead of log on to the server directly?
If it’s log on locally, please disable auto logon feature by configure the registry entry
AutoLogonCount to 0, it is under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon.
If it’s remote desktop connection, please clear Logon Credentials for corresponding remote desktop sessions.
If it’s network access, then it is by design because network logon has a single-sign-on feature.
More information for you:
How to disable Auto Login?
https://social.technet.microsoft.com/Forums/windowsserver/en-US/705b0cf8-53f1-45f9-b6bf-2ba61c8d10bf/how-to-disable-auto-login?forum=winservergen
How Interactive Logon Works
http://technet.microsoft.com/en-us/library/cc780332(v=WS.10).aspx
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Define a single scope for two Custom Lists

Hi,
I have ran into a requirement where i have to create a single scope for two lists 'Employee' and 'Department' .
I tried creating individual scopes and they came up in the scope drop down . For this i gave the scope rule as below :
Both lists are based on Item content type . There are other lists that are based on same content type,Hence I cant create a rule based on CT .How can I create a single scope for both lists .
Thanks,
Grigory

Hi Grigory,
when you create a scope, then add two rules, as the image below shows:
I hope this help.
Thanks,
Victoria
Victoria Xia
TechNet Community Support

Require Information for Log Archiving

Hi,
I have ECC 6 system with MAXDB 7.6.5.015,
i want to know the step for LOG Archiving.
And also when we have to restore the system what data should we have,
like a complete backup, incremental back and logs .
Can you explain the scenario.
Thanks in Advance.
Regards,
Ritesh Bhatia,

Duplicate due to connection problem

Facing issue when LDAPSync is enabled for OIM-AD integration with SSL enabled

Hi
We are performing LDAPSync for OIM AD real time sync.We have done all configuration as per oracle documentation on LDAPSync for OIM 11gR2 : http://docs.oracle.com/cd/E27559_01/integration.1112/e27123/oid_oim.htm The OIM environment we tested is the latest OIM version OIM 11gR2 PS1 (11.1.2.1.0).
WE have performed LDAPSync enablement on postinstallation of OIM .So we dont have OVD , we have configured libOVD as mentioned in this doc.
We have performed following steps mentioned in this document in our OIM environment.
3.1 Enabling Post installation LDAP Synchronization
3.3 Creating Identity Virtualization Library (libOVD) Adapters and Integrating With Oracle Identity Manager
As attribute like password might be not getting updated in AD from OIM , we have configured SSL enabled integration in LDAP sync as mentioned in above document.
We implemented this step 3.4.1 Enabling SSL Between Identity Virtualization Library (libOVD) and Microsoft Active Directory,
but here it is not properly mentioned that about how to import public key certificate of AD into OIM envirioment for SSL.
We are getting following error message in logs : Looking at logs it looks like the import of AD SSL certificate did not happen properly in OIM environment. But ,we have imported it using keytool and OVD keystore ...please let us know if we are missing any configuration in this process.Above oracle document is not pretty clear on this.
<Dec 7, 2013 12:22:53 AM IST> <Warning> <oracle.ods.virtualization.engine.backend.jndi.LDAP2.BackendJNDI> <OVD-40118> <Could not automatically detect binary attribute list: simple bind failed: 10.88.164.231:636.>
<Dec 7, 2013 12:22:53 AM IST> <Warning> <oracle.ods.virtualization.engine.backend.jndi.LDAP2.JNDIConnectionPool> <OVD-60024> <Connection error: simple bind failed: 10.88.164.231:636.>
<Dec 7, 2013 12:22:53 AM IST> <Error> <oracle.ods.virtualization.engine.backend.jndi.LDAP2.BackendJNDI> <OVD-60143> <[#LDAP2] Unable to create connection to ldap://[10.88.164.231]:636 as null.
javax.naming.CommunicationException: simple bind failed: 10.88.164.231:636 [Root exception is javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty]
at com.sun.jndi.ldap.LdapClient.authenticate(LdapClient.java:195)
at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2720)
at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:296)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:175)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:193)
at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:136)
at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:66)
at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:667)
at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:288)
at javax.naming.InitialContext.init(InitialContext.java:223)
at javax.naming.ldap.InitialLdapContext.<init>(InitialLdapContext.java:134)
at oracle.ods.virtualization.engine.backend.jndi.JNDIConnectionPool.createCtx(JNDIConnectionPool.java:463)
at oracle.ods.virtualization.engine.backend.jndi.JNDIConnectionPool.create(JNDIConnectionPool.java:494)
at oracle.ods.virtualization.engine.backend.jndi.JNDIConnectionPool.<init>(JNDIConnectionPool.java:156)
at oracle.ods.virtualization.engine.backend.jndi.RemoteServer.getJNDIConnectionPool(RemoteServer.java:163)
at oracle.ods.virtualization.engine.backend.jndi.BackendJNDI.getLDAPContext(BackendJNDI.java:984)
at oracle.ods.virtualization.engine.backend.jndi.BackendJNDI.getConnection(BackendJNDI.java:927)
at oracle.ods.virtualization.engine.backend.jndi.ConnectionHandle.getHolder(ConnectionHandle.java:415)
at oracle.ods.virtualization.engine.backend.jndi.ConnectionHandle.search(ConnectionHandle.java:250)
at oracle.ods.virtualization.engine.backend.jndi.JNDIEntrySet.initialize(JNDIEntrySet.java:219)
at oracle.ods.virtualization.engine.backend.jndi.BackendJNDI.get(BackendJNDI.java:728)
at oracle.ods.virtualization.engine.chain.Chain.nextGet(Chain.java:303)
at oracle.ods.virtualization.engine.chain.BasePlugin.get(BasePlugin.java:89)
at oracle.ods.virtualization.engine.chain.Chain.nextGet(Chain.java:314)
at oracle.ods.virtualization.engine.chain.BasePlugin.get(BasePlugin.java:89)
at oracle.ods.virtualization.engine.chain.plugins.usermanagement.UserManagement.get(UserManagement.java:742)
at oracle.ods.virtualization.engine.chain.Chain.nextGet(Chain.java:314)
at oracle.ods.virtualization.engine.chain.PluginChain.runGet(PluginChain.java:211)
at oracle.ods.virtualization.engine.chain.PluginManager.runGet(PluginManager.java:351)
at oracle.ods.virtualization.engine.chain.PluginManager.runGet(PluginManager.java:316)
...more
Caused By: javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:190)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1731)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1692)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1675)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.handleException(SSLSocketImpl.java:1601)
at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:94)
at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65)
at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:123)
at com.sun.jndi.ldap.Connection.writeRequest(Connection.java:414)
at com.sun.jndi.ldap.Connection.writeRequest(Connection.java:387)
at com.sun.jndi.ldap.LdapClient.ldapBind(LdapClient.java:332)
at com.sun.jndi.ldap.LdapClient.authenticate(LdapClient.java:190)
at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2720)
at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:296)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:175)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:193)
at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:136)
at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:66)
at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:667)
at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:288)
at javax.naming.InitialContext.init(InitialContext.java:223)
at javax.naming.ldap.InitialLdapContext.<init>(InitialLdapContext.java:134)
at oracle.ods.virtualization.engine.backend.jndi.JNDIConnectionPool.createCtx(JNDIConnectionPool.java:463)
at oracle.ods.virtualization.engine.backend.jndi.JNDIConnectionPool.create(JNDIConnectionPool.java:494)
at oracle.ods.virtualization.engine.backend.jndi.JNDIConnectionPool.<init>(JNDIConnectionPool.java:156)
at oracle.ods.virtualization.engine.backend.jndi.RemoteServer.getJNDIConnectionPool(RemoteServer.java:163)
at oracle.ods.virtualization.engine.backend.jndi.BackendJNDI.getLDAPContext(BackendJNDI.java:984)
at oracle.ods.virtualization.engine.backend.jndi.BackendJNDI.getConnection(BackendJNDI.java:927)
...more
Caused By: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
at sun.security.validator.PKIXValidator.<init>(PKIXValidator.java:57)
at sun.security.validator.Validator.getInstance(Validator.java:161)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.getValidator(X509TrustManagerImpl.java:108)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:204)
at oracle.ods.virtualization.engine.util.OVDTrustManager.checkServerTrusted(OVDTrustManager.java:99)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1198)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:136)
at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:593)
at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:529)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:925)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1170)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:637)
at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:89)
at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65)
Let us know for any helpful pointers on this
Thanks in advance,
RPB25

Use the steps given below to perform import public key certificate of AD into OIM envirioment for SSL
Obtain the AD Certificates from the AD Administrator.
Copy the AD Certificates to the directory /jrockit-jdk1.6.0_20/jre/lib/security
Run the following command to import all the certificates
/jrockit-jdk1.6.0_20/bin/keytool -import -alias <provide_alias> -file <file-name> -keystorecacerts -storepasschangeit
4. The CA certificates are now present in the trust store.

Info about OIM and WebCenter integration

Any info or doc/url for OIM and WebCenter integration would be helpful. Any experiences etc please provide some links.

Follow the link -
http://docs.oracle.com/cd/E21764_01/core.1111/e12037/oam.htm#WCEDG345
Follow the below points -
*"Credential and Policy Store Configuration"*
*"Oracle Access Manager 10g Integration"*
*"Oracle Access Manager 11g Integration"*
*"Configuring WebCenter Applications"*
*"Configuring WebCenter and BPEL Authentication"*
*"Backing Up the Installation"*

Single credential for logging to OIM and integrating resources

Similar Messages

Maybe you are looking for