Some issues in OIM password generation and update OIM user profile

Hi,
I want to achieve the following
1) When user is created using recon:-- I want to generate the password for each user. As i can do this using entity adapter and by attaching it on pre insert tab.
But i need to regenerate the password in case or rehired(we are using the old profile) then this entity adapter will not work. How can i achieve it using only one adapter.
2) When user is created using recon:-- We have one field manager SAP id on form this field we need to fetch the user login and put it into OOTB manager id field on user profie. As the same thing i can do it by using entity adapter. But how can i achieve that with same adapter if manager sap id is changed to new one.
Please Help me to achieve this.
Regards,
Anil

Go for Trigger in that case. Trigger are the best solution for it else you need to use Event Handler and check old and new value and then do update. You won't be able to achieve through Entiy Adapters as in Entity Adapter you'll not get OLD value.
Enabling update for provisioned user in OIM11g

Similar Messages

My adobe account was hacked and compromised, emails were sent out on one of my accounts. I changed my adobe password, when I scan my computer, some adobe files are password protected and can not be scanned, is this normal?

my adobe account was hacked and compromised, emails were sent out on one of my accounts. I changed my adobe password, when I scan my computer, some adobe files are password protected and can not be scanned, is this normal?

I have contacted them, but apart from letting them look at it and deal with it, is there anything I can personally do myself? Or is it just a matter of waiting for me now?

Event Handlers Invoked Everytime for update on User Profile.(OIM 11g)

Hi,
We had Custom event handlers for generating some fields on user form.
Everytime there is update on user profile on any field, All the event handlers fired, (As seen from logs).
I want to fire particular event handlers on particular update. Like if first name is updated then only display name event handler should fire. (not all)
How can i achieve this???

Here is my code..it is working fine for creation of the user. but when i am updating the user i am getting all null values except the updated one.
Example if there are 5 fields in that i am updating 2 .apart from those 2 fields the other 3 are coming as null which is making validation to fail.
package flatfilevalidation;
import java.io.Serializable;
import java.util.Date;
import java.util.HashMap;
import oracle.iam.platform.context.ContextAware;
import oracle.iam.platform.kernel.ValidationException;
import oracle.iam.platform.kernel.ValidationFailedException;
import oracle.iam.platform.kernel.spi.ValidationHandler;
import oracle.iam.platform.kernel.vo.BulkOrchestration;
import oracle.iam.platform.kernel.vo.Orchestration;
import oracle.iam.identity.usermgmt.api.UserManagerConstants.AttributeName;
import Thor.API.*;
import Thor.API.Exceptions.tcAPIException;
import Thor.API.Operations.*;
import java.util.Iterator;
import java.util.List;
import java.util.Set;
import oracle.iam.identity.usermgmt.api.UserManagerConstants;
import oracle.iam.identity.usermgmt.vo.User;
import oracle.iam.passwordmgmt.utils.MLSUtils;
import oracle.iam.platform.Platform;
import oracle.iam.platform.kernel.vo.OrchestrationTarget;
import oracle.iam.upgrade.changes.jaxb.Entity;
public class FFValidation implements ValidationHandler {
int count;
tcUserOperationsIntf userOperationsService;
Entity ent = null;
@Override
public void validate(long arg0, long arg1, Orchestration orchestration)
throws ValidationException, ValidationFailedException {
System.out.println("entered the Validation methode");
HashMap<String, Serializable> parameters = orchestration.getParameters();
System.out.println("****************************************************************");
User user = getUser(orchestration);
Object passwdOrchParam = parameters.get(UserManagerConstants.AttributeName.EMPLOYEE_NUMBER.getId());
System.out.println("***************************"+passwdOrchParam+"*************************************");
System.out.println("orch.getParameters() ============================ " + parameters);
String ceo="CEO";
String trainee="Trainee";
String Emp="EMP";
String Contractor="Contractor";
//int Skypecount,Empcount,phonecount;
String Role= getParameterValue(parameters, "Role");
String Designation = getParameterValue(parameters, "Designation");
Long Manager =getManagerid(parameters, "USR_MANAGER_KEY");
Date EndDate =getDate(parameters, "End Date");
String EmpNo=getParameterValue(parameters, "Employee Number");
String skypeid=getParameterValue(parameters, "SkypeId");
String Mobile=getParameterValue(parameters, "Mobile");
String skypeidDb="usr_udf_skypeid";
String MobileDb="usr_mobile";
String EmpDB="usr_emp_no";
//validating SkypeID
uniquevalidate(skypeid,skypeidDb);
//Validating Employee Number
uniquevalidate(EmpNo,EmpDB);
//Validating Employee Number
uniquevalidate(Mobile,MobileDb);
//CEO Validation
if(Designation.equals(ceo)){
if(Manager!=null){
String msg="ManagerID not required";
System.out.println("ManagerID not required ");
throw new ValidationFailedException(msg);
//Cotractor Validation
if(Role.equals(Contractor) && Designation.equals(ceo)) {
System.out.println(Designation.equals(ceo));
String msg="Contractor Cannot be CEO";
System.out.println("Contractor Cannot be CEO");
throw new ValidationFailedException(msg);
if(Role.equals(Contractor)&& EndDate==null) {
String msg="Contractor Endate is not provided";
System.out.println("Contractor Endate is not provided");
throw new ValidationFailedException(msg);
//Trainee Validation
if(Role.equals(trainee) && Designation.equals(ceo)) {
System.out.println(Designation.equals(ceo));
if(Designation.equals(ceo)) {
String msg="Trainee Cannot be CEO";
System.out.println("Trainee Cannot be CEO");
throw new ValidationFailedException(msg);
//manager validation
if(!Designation.equals(ceo)){
if(Manager==null){
String msg="ManagerID Can not be Null";
System.out.println("ManagerID Can not be Null");
throw new ValidationFailedException(msg);
//Employee Validation
if(Role.equals(Emp)){
if(EndDate!=null) {
String msg="Employee End Date Should be empty";
System.out.println("Employee End Date Should be empty");
throw new ValidationFailedException(msg);
@Override
public void validate(long arg0, long arg1, BulkOrchestration arg2)
throws ValidationException, ValidationFailedException {
System.out.println("**************Inside BulkOrchestration****************");
HashMap<String, Serializable> parameters = arg2.getParameters();
System.out.println("orch.getParameters() ============================ " + parameters);
@Override
public void initialize(HashMap<String, String> arg0) {
private String getParameterValue(HashMap<String, Serializable> parameters,
String key) {
String value = (parameters.get(key) instanceof ContextAware) ? (String) ((ContextAware) parameters
.get(key)).getObjectValue()
: (String) parameters.get(key);
System.out.println("VALUE::" + value);
return value;
private boolean isNullOrEmpty(String str) {
return str == null || str.isEmpty();
private Long getManagerid(HashMap<String, Serializable> parameters,
String key) {
System.out.println(parameters);
Long managerLogin = (parameters.get(AttributeName.MANAGER_KEY.getId()) instanceof ContextAware)
? (Long) ((ContextAware) parameters.get(AttributeName.MANAGER_KEY.getId())).getObjectValue()
: (Long) parameters.get(AttributeName.MANAGER_KEY.getId());
System.out.println("managerLogin "+managerLogin);
return managerLogin;
private Date getDate(HashMap<String, Serializable> parameters,
String key) {
System.out.println("date "+ parameters);
Date date = (parameters.get(AttributeName.ACCOUNT_END_DATE.getId()) instanceof ContextAware)
? (Date) ((ContextAware) parameters.get(AttributeName.ACCOUNT_END_DATE.getId())).getObjectValue()
: (Date) parameters.get(AttributeName.ACCOUNT_END_DATE.getId());
System.out.println("EndDate "+date);
return date;
void uniquevalidate(String idvalue,String idDbvalue){
userOperationsService = Platform.getService(tcUserOperationsIntf.class);
HashMap<String, String> UMAttr = new HashMap<String, String>();
String msg="Entered Value is not unique" + idvalue;
System.out.println("idvalue="+ idvalue);
System.out.println("idDbvalue="+ idDbvalue);
if(idvalue!=null){
try {
System.out.println("in try block");
UMAttr.put(idDbvalue, idvalue);
tcResultSet USAttr = userOperationsService.findUsers(UMAttr);
System.out.println(USAttr);
System.out.println("User set count ========================= " + USAttr.getRowCount());
count=USAttr.getRowCount();
if(count>0)
throw new ValidationFailedException(msg);
catch (tcAPIException e) {
e.printStackTrace();
private User getUser(Orchestration orchestration)
if(orchestration.getTarget() != null && orchestration.getTarget().getEntityId() != null)
return new User(orchestration.getTarget().getEntityId());
HashMap orchParams = orchestration.getParameters();
User user = new User(null);
Set orchParamNames = orchParams.keySet();
String orchParamName;
for(Iterator i$ = orchParamNames.iterator(); i$.hasNext(); user.setAttribute(orchParamName, orchParams.get(orchParamName)))
orchParamName = (String)i$.next();
MLSUtils.setStringValuesForMLSAttributes(user);
System.out.println("+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++"+user);
return user;
}

Display some constant in the input field and allow the user to change it.

Dear All,
I have a requirement in WDA to display inputfield with some constant initially and allow
the user to change that value according to his wish.Currently I am using UI Element
InputField for this,but I am not able to show the constant initially.
How can I achieve this pls suggest.
Thanks,
Reddy.

Hi sudhir,
To display with default values, you need to write your code in wddointi method.
Check this code..
* navigate from <CONTEXT> to <INPUT> via lead selection
lo_nd_input = wd_context->get_child_node( name = wd_this->wdctx_input ).
* get element via lead selection
lo_el_input = lo_nd_input->get_element( ).
lv_ship_point = '1001'.
* set single attribute
lo_el_input->set_attribute(
name = `SHIP_POINT`
value = lv_ship_point ). // Now ship_point have initial value 1001.
Cheers,
Kris.

How can I update all user profile entries at once?

I test web applications with Firefox and use the -P (user) -no-remote options on the command line to keep the sessions independent. In other words, I have created many dozens of desktop shortcuts with specific users and within each instance of Firefox for each user, the default home page is set. This all works fine...I click on as many shortcuts as I want, they all open up different sites I'm testing, and they're all independent of each other.
The problem is when Firefox updates itself. It's annoying to have to answer the update question, and to be routed to the update page 50 times (the first time I use that shortcut after the update). This is also true for plug-ins.
So is there any way for me to prevent having the update messages appear in each separate user's first run after update?

You posted here with Firefox 9.0.1, is that the version you are using on that test PC? <br />If so, update to Firefox 10.0.1 and see the new ''(as of 10.0)'' first start after a program update routine. Mozilla changed the add-on compatibility check that kicks in when the Firefox version number has changed. It's probably going to make your issue worse, time wise, after a Firefox program update.
As far as updating all the Profiles at the same time, '''LastVersion''' data is kept in the '''compatibility.ini''' file in each Profile - ''LastVersion=10.0.1_20120208060813/20120208060813'' - Firefox checks that file each time the Profile is used. When the version number currently being launched doesn't match the saved pref, it triggers the "updated" routine (but it works for the version used being older or newer than the pref).
The only thing I can think of is to run a '''batch''' file to update the '''LastVersion''' value change in all the Profiles that weren't used for receiving the Firefox update, to match the new LastVersion.

Windows 8.1 Update 1 (Spring update KB2919355) - User Profile Service failed the sign-in

After installing Windows 8.1 Update 1 (Spring update KB2919355), our enterprise Windows 8.1 image began getting User Profile Service failed the sign-in. Uninstalling the update fixes the issue. The update somehow modifies the default user
profile causing write access issues which is evident in the event viewer.
Things I tried:
1) Re-applying parent permissions to Default profile folder
2) Disable CopyProfile before sysprep
3) Creating a new image with Windows 8.1 Update 1 ISO from Microsoft
None of them seem to work. I believe update 2919355 will be needed to continue getting future Windows 8.1 update. I might try looking at the specific files that the User Profile Service is complaining about but it seems to be random.
Anyone else experience this?

"Place your rig specifics into your signature like I have, makes it 100x easier to understand!"
I should have included this. It does it on all of our machine builds (we have a few) including VMs.
"try this http://support.microsoft.com/kb/2919355
if
a fresh manual install does not work use
the tools here"
Did all of this already at the request of MS and also ran a trace utility they sent me and submitted the results. The Trace revealed nothing remarkable to the analysts that gave any indication of what is causing this.
MS has acknowledged that there is a problem and for me it has to be an enterprise fix, not an individual run around to every computer. I have tried removing everything non-Microsoft and will try removing APP-V 5. If it works I will let them know, but
we can't operate the enterprise without APP-V so this wouldn't be a solution. The trouble is that it is so random that we thought we had it fixed by removing AV and were going to start looking in that direction and it turned out that if you just kept hammering
it with the logins that it would still manifest, as it has done with everything I have tried so far.

The User portlet and the Portal User Profile portlet

Im trying to create a sub administrator home page on version
309, however the 'create user' portlet has been split into
a 'create user' and a 'update user profile' portlet (as seen on
the new default portal30 homepage).
However the only portlet that seems to be available in the
portlet list is 'update user profile' portlet.
So how do I add the create user portlet to my homepage?

I found the wwsec_api and wwsso_api_user_admin packages. I now know I can build my own user profile screen and use these APIs to add, update, and remove users.
However, do I need to use the wwsec_person$ table, or can I create my own? Or can I add additional fields to the wwsec_person$ table? I have 7 additional pieces of information that need to be captured. I could just use some of the database fields in the table that we don't currently have use for, but then the name of the field will not accurately represent the contents of the data (i.e. store our "Organization" data in the "Department" field, our "DSN Phone Number" in the "Work Phone Number" field, etc.) and it would make for difficult maintenance.
Can anyone offer suggestions as to how they implemented a customized User Profile, easily?

I am having a serious issue with all my apps disappearing/not working- user profiles

i will list the things i have done in the past 24 hours, hopefully one of you knows what happened...thank you in advance
first off, my situation- was that i bought a macbook pro(about a year ago) with lion or snow leopord it is software 10.7.5 i dont know what the guy did but when he sent me the computer the username was off and so was the home folder, i changed the username with ease but the home folder stayed tbd and i couldnt figure out how to change it. well it finally got on my nerves enough from looking at it that i wanted to change it today that put me into the situation i am in. Here is what i have changed:
-I added a second profile as to see if i could change the home emblem file named tbd to what i wanted. This worked or so i thought.
- then shared and permissions showed tbd(me) so i wanted to change that also so i went into systempreferences>users and groups>login options>network account server and clicked join/open directory utility. this is where i believe i went wrong i read in a forum that this is what you needed to change to make it look how i wanted it to. under active directory it still had this guys name gtmb04_evan so i changed it to my name like the forum said, well his name is back up even though i changed it. and this is when everything stopped working.
symptoms: all my applications act like they are newly downloaded and make me set them up.
- my home screen is nothing like it was before, no apps are on the desktop and the bar along the bottom only has the basic ones
- i tried to take the second username off of administrater which made me restart my cp(all my stuff looked normal until this, but didnt work)
-my launchpad wasnt showing any apps they simply looked blank
- my firefox along with many other apps wouldnt even start prior to reseting and gave me a message with something like couldnt find or access user profile( i forget the entire message)
please please help me, i hate this right now and have no idea what to do, all my files are still under my name, that when i thought i changed tbd- it apparently just made a new folder under users which didnt show up until the restart, i do not have a time machine set up on this computer because i hated the lion setup and couldn't get it to operate correctly

i had one mac and spilt water on it, the motherboard fried so i had to buy a used one...being in school and all. it is a MC375lla
Model Name:
MacBook Pro
Model Identifier:
MacBookPro7,1
Processor Name:
Intel Core 2 Duo
Processor Speed:
2.66 GHz
Number of Processors:
1
Total Number of Cores:
2
L2 Cache:
3 MB
Memory:
8 GB
Bus Speed:
1.07 GHz
Boot ROM Version:
MBP71.0039.B0E
SMC Version (system):
1.62f7
Hardware UUID:
A802DE22-1E57-5509-93C5-27CEF01377B7
Sudden Motion Sensor:
State:
Enabled
i do not have a backup of it, so i am thinking about replacing my old hard drive from the water damaged into this one, not even sure if that would work, but it did not seem to be damaged, as i recovered all the files i wanted off of it to put onto this mbp
the previous owner didnt have it set to boot, they had all their settings left on it and tried to edit all the names on it, had a bunch of server info and printers etc crap on it. i do not believe he edited the terminal system though--he doesnt seem to terribly bright(if thats possible)
tbh i hate lion compared to the old one i had, this one has so many more issues-overheating,fan noise, cd dvd noise
if you need screenshots or data of anything else as away
[problem is i do not want to start from scratch if there is a chance of fixing it, this one did not come with disks or anything like my first. so i dont even know if i could, and how it sets now i am basically starting from scratch, because now all my apps are reset but working, i am hoping to get my data back somehow though, i lost all of my bookmarks and editing all my apps and setting again would be a pain

OIM Problem Adding UDF fields to User Profile

Hi all, I defined some UDF's and I want them to be seen on end-user account profile. And also in edit page. I tried to edit  section and ProfileModificationUserForm section of FormMetaData.xml. But it does not work. Any ideas?

I don't know how come this is not working for you. Just confirm the steps once again as following:
- Your UDF is USR_UDF_CUSTOMERID (let's assume)
- You have made an entry is the section ** of FormMetaData.xml like below:
*<Attribute name="USR_UDF_CUSTOMERID" label="global.label.customerid" displayComponentType="TextField" dataLength="30" map="USR_UDF_CUSTOMERID"/>*
- In addition to it you have also made an entry like following in section ** of the same xml:
*<AttributeReference editable="true" optional="false">USR_UDF_CUSTOMERID</AttributeReference>*
This should work perfectly.
Thanks
Sunny

Deleting and making new user profiles

How to manage user profiles.. Create and delete

http://support.apple.com/kb/PH11468 - Creating/Adding a user
http://support.apple.com/kb/PH6596 - Deleting a user
The user removal link is for Snow Leopard but the process is virtually identical, just couldn't find my Mt. Lion KBase link.

I have an ipod that i changed my ID on it and my computer had some issues so I reset it and not my ipod reset when I updated the software and I cant find my purchases of movies and music please help

I changed my email awhile back and have been using it fine until the other day i had to wipe my computer clean and when I downloaded the Itunes and pluged in my ipod I lost all my purchased items. where can i find them and get them back

They would only be where you put them.
Use your backup copy to put everything back.
If or some reason you failed to do the basics and maintain a backup, then you can redownload purchased music in some countries:
Downloading past purchases from the App Store, iBookstore, and iTunes Store
You only get one download of movies. It is your responsibility to backup your purchases.

I have some issues since I download the safari update

I have some problem with the safari update. When I open my computer (MacBook pro), safari open but I can't see the web page. the only thing that make the web page open is when I do this: I go in (french) Preference system / réseau / assistant / diagnostique.
My internet connection work fine.

Please test after taking each of the following steps that you haven't already tried. Stop when the problem is resolved. Back up all data before making any changes.
Step 1
Take the applicable steps in this support article. The Wireless Diagnostics program generates a large file of information about your system, which would be used by Apple Engineering in case of a support incident. Don't post the contents here.
Be sure to test on more than one Wi-Fi network, if at all possible. A desktop computer can be tested with a mobile hotspot, such as the hotspot created by a cell phone. If the problem only exists on one network, then the access point of that network should be the focus of your attention, not the computer.
Step 2
Disconnect all USB 3 devices. If you don't know which are USB 3, disconnect all USB devices except keyboard and mouse.
Step 3
If you're not using a wireless keyboard or trackpad, disable Bluetooth by selecting Turn Bluetooth Off from the menu with the Bluetooth icon. If you don't have that menu, open the Bluetooth preference pane in System Preferences and check the box marked Show Bluetooth in menu bar. Test. If you find that Wi-Fi works better with Bluetooth disabled, you should use the 5 GHz Wi-Fi band. Your router may not support it; in that case, you need a new router.
Step 4
Open the Energy Saver pane in System Preferences and unlock the settings, if necessary. Select the Power Adapter tab, if there is one. Uncheck the box marked
Wake for Wi-Fi network access
if it's checked.
Step 5
Open the Network pane in System Preferences and make a note of your settings in the Wi-Fi service. It may be helpful to take screenshots of the various tabs in the preference pane. If the preference pane is locked, unlock it by clicking the padlock icon and entering your administrator password. Delete Wi-Fi from the service list on the left by selecting it and clicking the minus-sign button at the bottom. Then recreate the service by clicking the plus-sign button and following the prompts.
Step 6
In the Wi-Fi settings, select
Advanced... ▹ TCP/IP ▹ Configure IPv6: Link-local
Click OK and then Apply.
Step 7
Reset the System Management Controller.
Step 8
Reset the PRAM.
Step 9
Launch the Keychain Access application. Search for and delete all AirPort network password items that refer to the network. Make a note of the password first. Turn Wi-Fi off and then back on. You'll be prompted for the password when you reconnect. Save it in the keychain.
Step 10
Make a "Genius" appointment at an Apple Store, or go to another authorized service center.

Need some help regarding Client Proxy generation and test via SOAMANAGER

Hello,
we are integrating a 3rd party Java client via webservices.
For that matter I generated a client proxy (consumer proxy) in se80 using the existing WSDL.
This worked fine.
The I wanted to create a logical port.
Since this is only possible in SOAMANAGER I tried it there.
Trying to do this automatically by the given WSDL file didn't work. The system dumps.
So, I tried the manual approach by entering the server name and path in the 'Transport settings' tab.
Now I wanted to test this.
Unfortunately the test function in se80 (Proxy->Test) doesn't show a positive result.
I always get an error
SOAP:1.023 SRT: Processing error in Internet Communication Framework: ("ICF Error when receiving the response:
ICM_HTTP_CONNECTION_FAILED")
So, I am kind of stuck here.
Do you guys have any idea what's wrong (approach, settings, bugs)?.
I tested the webservices with a test application (soapUI), and they work fine.
So it seems to be a problem in the proxy framework or a network problem?
I really appreciate any kind of help.
Thanks,
Michael

i created the port in soamanager.Do i need to create in lpconfig also?
yes i have loaded the certificate in strust.
i am getting the response also from the web service. as Security requirements are not satisfied because the security header is not present in the incoming message.
i need to pass the user name and password while using the method.wsse security.wld u have any clue?

Diable Password Generation while creating Portal users..

Is there a way you can disable the passworg generation fields while an Admin creates a user.
Well, I would like to disable all the 3 optionsfor the Admin (Define Pwd/Generate Pwd/Disable Pwd)
The users are going to be authenticated by Site Minder Agent.
Thanks

Hi Ritu,
>>please guide me as to how can I set mandatory fields in my code??
In ur jsp file or in the controls code add the following attribute
<hbj:label id="userIdLabel"
           text="User ID"
           labelFor="userIdInput"
           design="HEADER3"
           required="true"/>
and to check the mandatory entry for that field do this in the submit button
<hbj:button id="insert"
            text="Submit"
            design="emphasized"
            onClick="save"
            onClientClick="if(!isMandatory()) htmlbevent.cancelSubmit=true;;"/>
and in the javascript write the client validation code.
Hope this helps.
Regards,
Joshua Kiran

Trying to log in and message reads: User Profile Service failed the logon. Profile Cannot be loaded

When I try to log on by clicking my user icon, I'm getting a message that reads: The User Profile Service service faied the logon. User Profile cannot be loaded.

Hi,
Check the guide on the link below to see if any of the options ( particularly using windows System Restore ) helps.
http://www.vistax64.com/tutorials/130095-user-profile-service-failed-logon-user-profile-cannot-loade...
Regards,
DP-K
****Click the White thumb to say thanks****
****Please mark Accept As Solution if it solves your problem****
****I don't work for HP****
Microsoft MVP - Windows Experience

Some issues in OIM password generation and update OIM user profile

Similar Messages

Maybe you are looking for