SPML Web Service in 11g (XSD): fail to get the psoID

Hello.
Has anybody successfully used the default XSD version of the SPML web service in 11g? I was able to successfully invoke the Add User operation but I'm not seeing the psoID (this is the unique ID generated by OIM for the user) for the newly added user... The Oracle docs for 11g do not show how that is returned... I would think that in would be in the response but I do not see it there... Someone suggested using Search User to get the psoID but I do not see a Search operation in the WSDL for 11g...
I'm starting to think that the XSD version of the SPML in 11g is maybe incomplete? When I get chance, I may deploy the DSML version of the web service, and then run the Sample HTTP Client to see if that works better. I understand that this DSML version is what was used in 10g, and may be more robust.
Thoughts anybody?

Sunny,
As you have pointed out, API will work.
But regarding your statement:
"Use SPML10g along with SPML11g (this is the cleanest OOTB solution wherein you can use the older set of SPML methods to fetch the userKey and then use newer SPML methods to perform asynchronous operations). I did the same"
SPML samples that came with 10g did not work with OIM 11g for me. Because from what I know, SPML in 10g made use of DSML profile and that is not supported in 11g.
http://docs.oracle.com/cd/E14571_01/doc.1111/e14309/spmlapi.htm#CHDCBJAI
"SPML has two profiles: the XSD profile and the DSML profile. This release of Oracle Identity Manager makes use of the XSD profile."
Did you tweak something to get it working?
Thanks.

Similar Messages

Error while calling SPML web service call in OIM 11g

Hi,
While testing the SPML web service call, I am getting the "failure in security check" errors.
And I have attached the request and responce .
Request:
<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
<soap:Header xmlns:ns1="urn:names:spml:ws:header">
<ns1:ServiceHeader>
<ns1:serviceId/>
</ns1:ServiceHeader>
<wsse:Security soap:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<wsse:UsernameToken>
<wsse:Username>xelsysadm</wsse:Username>
<wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">XXXXXXXX</wsse:Password>
</wsse:UsernameToken>
</wsse:Security>
</soap:Header>
<soap:Body xmlns:ns2="http://xmlns.oracle.com/idm/identity/spmlv2custom/Username">
<ns2:validateUsernameRequest xmlns:ns3="urn:oasis:names:tc:SPML:2:0" requestID="12345" executionMode="synchronous" locale="en" policyURI="http://www.sample.com/string/string">
<ns2:capabilityData mustUnderstand="true" capabilityURI="urn:oasis:names:tc:SPML:2:0:reference"/>
<ns2:username>TCS1000</ns2:username>
</ns2:validateUsernameRequest>
</soap:Body>
</soap:Envelope
Response:
<env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/">
<env:Header/>
<env:Body>
<env:Fault xmlns:ns0="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
<faultcode>ns0:FailedCheck</faultcode>
<faultstring>FailedCheck : failure in security check</faultstring>
<faultactor/>
</env:Fault>
</env:Body>
</env:Envelope>
I have attached the log file from OIM
####<Apr 26, 2012 10:27:13 AM EDT> <Error> <oracle.wsm.resources.enforcement> <corwloimhd01> <dev-oim_oim_server01> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <214014dca901f288:-460ab67b:136eeab0662:-7ffd-0000000000000838> <1335450433058> <WSM-07501> <Failure in Oracle WSM Agent processRequest, category=security, function=agent.function.service, application=spml-xsd, composite=null, modelObj=SPMLService, policy=oracle/wss11_saml_or_username_token_with_message_protection_service_policy, policyVersion=1, assertionName={http://schemas.oracle.com/ws/2006/01/securitypolicy}wss11-username-with-certificates.>
####<Apr 26, 2012 10:27:13 AM EDT> <Notice> <Stdout> <corwloimhd01> <dev-oim_oim_server01> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <214014dca901f288:-460ab67b:136eeab0662:-7ffd-000000000000083d> <1335450433058> <BEA-000000> <<Apr 26, 2012 10:27:13 AM EDT> <Error> <oracle.wsm.resources.enforcement> <WSM-07501> <Failure in Oracle WSM Agent processRequest, category=security, function=agent.function.service, application=spml-xsd, composite=null, modelObj=SPMLService, policy=oracle/wss11_saml_or_username_token_with_message_protection_service_policy, policyVersion=1, assertionName={http://schemas.oracle.com/ws/2006/01/securitypolicy}wss11-username-with-certificates.>>
Please help me how to solve this issue.
Thanks in advance
Siva

Your business logic has to be implemented by using OIM APIS. oimclient.jar..
you can then expose these business functions accordingly using a webservice or rest ...
for business logic refer:-
http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/apis.htm#OMDEV734
You will basicsally have to deal with UserManager class for managing users.
java API:
http://docs.oracle.com/cd/E27559_01/apirefs.1112/e28159/toc.htm

SPML Web Service - custom Add Response

Hi,
Each time an Add Request is requested to OIM's SPML Web Services, there is a standard SPML Add Response received where in PSO ID is returned.
We in our project are looking to customise this format and return additional parameters (which OIM would generate based on some logic) to the requesting consumer.
Can I achieve this in OIM. Is this an Out-of-the-box feature OR some thing which I would need to do. If so, kindly eloborate and brief me the steps to proceed.
Edited by: bond8135 on 11-Apr-2010 18:37

Sunny,
As you have pointed out, API will work.
But regarding your statement:
"Use SPML10g along with SPML11g (this is the cleanest OOTB solution wherein you can use the older set of SPML methods to fetch the userKey and then use newer SPML methods to perform asynchronous operations). I did the same"
SPML samples that came with 10g did not work with OIM 11g for me. Because from what I know, SPML in 10g made use of DSML profile and that is not supported in 11g.
http://docs.oracle.com/cd/E14571_01/doc.1111/e14309/spmlapi.htm#CHDCBJAI
"SPML has two profiles: the XSD profile and the DSML profile. This release of Oracle Identity Manager makes use of the XSD profile."
Did you tweak something to get it working?
Thanks.

Questions about SPML Web Service ( OIM 9.1 )

I need to launch a provisioning process on a target by using a generic connector (Web Service).
Scenario:
==========
Host A is where the OIM server is installed. A generic connector is defined here.
Host B is the target where users must be created. A webservice (axis) is installed here.
Requirements:
===========
OIM server (Host A) sends a request to WebService (Host B). The Web service receives, process and sends a response with the result to the OIM server.
Version 9.0.3
==============
On Version 9.0.3 I got the expected results but a problem appeared: there wasn't feedback error control because the web service response could'nt be processed.
I followed the next steps:
1º deploy axis on application server
2º write SendWSResponse.jws including public method "doProvisioning". Copy this file to ..\server\default\deploy\axis.war\
3º compile SendWSResponse.jws (from a browser)
4º Create generic connector (for reconciliation and provisioning). Definition of parameters and mappings.
Note: In 9.0.3 version only three parameters were required for Web Service Definition:
Web Service URL=http://host:8080/axis/SendWSResponse.jws
Operation Name = doProvisioning
SPML-->Target ID=4201
Version 9.1
==============
On the new version, the connector definition is more complicated. Also they have added an ear-application or web service (OIMSpmlWS) related to this connector .
The first question is:
Is this ear-application addressed to process the reponses that are sent by the target?
The second question is:
Must I install the OIMSpmlWS on Host B? and if the answer is affirmative, how can I include the logic to my provisioning process.
And the most important?
How might the connector be configured and the webServices in this usual scenario?
Many thanks in advance

There is no "sample" WSDL file, there is THE WSDL file. It is located in the OIMSpmlWS.ear EAR file, in spmlws.war WAR file in the directory WEB-INF/wsdl.

Can "SPML Web Service Complex Data Type field" take multiple values ?

In Generic Technology Connector's -SPML design parameters section, Can we give multiple values in SPML Web Service Complex Data Type field?
If not, how can i call methods directly instead of calling them through a values of the "name" attribute of the "complexType" element in SPML Web Service Complex Data Type?
I need 'SPML Web Service Complex Data Type' to hold multiple values.And based on the request it has to initiate appropriate method of action.
Presently i have three methods add,modify and delete which i am calling through a single value of the "name" attribute of the "complexType" element in SPML Web Service Complex Data Type.
I want to replace this single value with multiple menthods , so that a direct interaction between the method,OIM and target can be established.
Edited by: 821054 on 16/02/2011 04:23

Thanks Robert.
You'll need to create your own interface to the webapp database for those kind of data operations
by this, are you speaking of the internal BC database which stores web app schema data? That would be great if it were possible to update that programmatically because I need to use the List (Checkbox List) field type (for the search functionality), but I need to supply the checkbox options from a web app rather than by manually updating the list entered in the Fields view of the web app settings (shown below).
I'm curious if anyone else has tried this?
Again, my reason for needing to use the List (Checkbox List) field type is that the page which processes searches knows to expect a comma separated list for this field type and then appears to be parsing out the individual values for searching out web app items with 1 or more matching values. You're right that text fields (string and multiline) just check for 'string contains' matches, and this would be ok if I was only ever needing to search just one value at a time. Here's an example of what I might do:
Web App item field value (as recorded against the List (Checkbox List) field type:
8294877,8294878
Web App Search value (for this same field):
8294879,8294877,8294885
The search would return this web app item because the field contains 2 (1 or more) individual values even though they were entered into the search field in a different order. If this web app item were just a Text (string or multiline) field, the searched value is not a substring of the web app item's stored value, so it would not find a match. Hence the need to use Checkbox List field type.
The web app will have thousands if not 10s of thousands of records, so dumping them all into one big array or object and searching on the front-end won't be practical (though it works great on smaller datasets).

What web service & xml will be used for deleting the packged epub/pdf file from Admin Console

What web service & xml will be used for deleting the packged epub/pdf file from Admin Console?
I am able to delete the files from Admin console directy but not able to get which web service is calling on deleting the file from admin console:
Mangal

Hi Jim,
I tired following web service and xml to delete the packaged ebook but it is giving me error instead of response:
Web Service & XML
http://myserver_url/admin/ManageResourceKey
<request action="delete" auth="builtin" xmlns="http://ns.adobe.com/adept">
<nonce>" . $nonce . "</nonce>
<expiration>'. $expiration .'</expiration>
<resourceKey>
<resource>resource_id</resource>
<resourceItem>1</resourceItem>
</resourceKey>
</request>
Error Message
<error xmlns="http://ns.adobe.com/adept"
data="E_ADEPT_DATABASE http://myserver_url/admin/ManageResourceKey
Cannot%20delete%20or%20update%20a%20parent%20row:%20a%20foreign%20key%20constraint%20fails %20(`adept`.`distributionrights`,%20CONSTRAINT%20`distributionrights_ibfk_2`%20FOREIGN%20K EY%20(`resourceid`)%20REFERENCES%20`resourcekey`%20(`resourceid`))"/>
Magal Varshney

BO XI 3.1 : Active Directory Authentication failed to get the Active Directory groups

Dear all
        In our environment, there are 2 domain (domain A and B); it works well all the time. Today, all the user belong to domain A are not logi n; for user in domain B, all of them can log in but BO server response is very slowly. and there is error message popup when opening Webi report for domain B user. Below are the error message:
       " Active Directory Authentication failed to get the Active Directory groups for the account with ID:XXXX; pls make sure this account is valid and belongs to an accessible domain"
      Anyone has encountered similar issue?
   BO version: BO XI 3.1 SP5
   Authenticate: Windows AD
Thanks and Regards

Please get in touch with your AD team and verify if there are any changes applied to the domain controller and there are no network issues.
Also since this is a multi domain, make sure you have 2 way transitive forest trust as mentioned in SAP Note : 1323391 and FQDN for Directory servers are maintained in registry as per 1199995
http://service.sap.com/sap/support/notes/1323391
http://service.sap.com/sap/support/notes/1199995
-Ambarish-

Cannot access external data , Failed to get the document information.

Hi All,
In my dashboard there are live office connections which has optional prompts defined in SAP BI. I have bound the cells to these prompts in live office object properties.
There are no errors while refreshing the LO connections from excel sheet.
But when i run that dashboard and give BLANK value for that prompt then it throws the error :
Cannot access external data , Failed to get the document information. (LO 26315).
Reply highly appreciated.
Thanks & Regards,
DJ

Hi Hardik,
I am building a similar solution as yours connecting webi reports to Bex queries and reading the webi data through live office into the dashboards. I am using almost similar versions as yours - BW 7.1 SP5, BO 4.1 SP4, Dashboards and Live Office SP4 versions. I am facing issues setting up the live office connections itself. I create the Live office connections within an excel and when I try to import this excel spreadsheet into my dashboard designer, it runs forever and crashes.
Could you please list out the steps you performed to get the Dashboard to preview live office data? Do you have OLAP connections for BW cubes and created WebI reports using these connections or You created a Universe on top of the Bex Queries?
It would be great if you could share the steps performed.
With respect to your issue, check if the report engine service is running. Do you have any error message details apart from this error?
Thanks.
Regards,
Rohini.

Failed to get the document information (LO 26315)

Hi,
I have to create an Xcelsius dashboard where I use a Live Office connection based on a WebI-report. The WebI is created on top of a BEx Query.
I need to pass 12 parameters to the WebI-report in orde to get the correct data.
Everything works fine in design-time, but when I want to preview the dashboard, I get the error: Failed to get the document information (LO 26315).
After investigating the issue, I've noticed that everything works fine when the parameters I have to pass, are only created in the WebI-report. But in my case it is a BEx variable that causes the error.
There is no possible way that I can recreate the BEx variable in the Universe (There are restricted key figures, calculated key figures and cell restrictions in the BEx query).
My question: is there a way to pass a parameter from an Xcelsius dashboard to a WebI-report via a Live Office connection to a BEx variable?
Lieven

Fred,
on the SAP Notes Search page on sdn.sap.com, you can enter the note number in a text field at the right side of the page, just above the Search Option part.
Just enter Note 1357924 in that text field and press the blue icon with the arrows next to it. Thiw ill show the corresponding note.
Lieven

HT1338 Hello, i currently acquired a Mac Book Pro and running Mac Os X 10.8.3, but i have failed to get the driver for my canon inkjet printer. could anyone help me out please? Thank you

Hello, i currently acquired a Mac Book Pro and running Mac Os X 10.8.3, but i have failed to get the driver for my canon inkjet printer. could anyone help me out please? Thank you

You may be able to download it fom here:
Printer and Scanner software available for download:
http://support.apple.com/kb/HT3669?viewlocale=en_US

Failed to get the Availability State on server Distriubtionpoint1 for role SMS Distribution Point

Distriubtionpoint1-- Server share distribution point
Distriubtionpoint1-- Acting as site system role (DP)
Distriubtionpoint1--attached under the primary PR0 (Primary server0)
Primary server0-- reporting to CS0 (central site 0)
Distriubtionpoint1-- Windows 2008 sp1 r2 standard
Infrastructure details:-
=============
Distriubtionpoint1 located in different domain with one way trust.
1) Check ping status with FQDN from both domain and it is success.
2) Check port 135, 445, 80,443 through telnet from both domain and success.
3) Primary Server0 account is member of the local admin group on Distriubtionpoint1.
4) Check the PR0-SCCM-DP$ folder NTFS & Share permission
Share permission
a) everyone & local admin group has full control
Security permission
a) System has full permission
b) user has read & exec
4) Local admin full
Sitestat.log error message:
---->: Failed to get the Availability State on server
Distriubtionpoint1 for role SMS Distribution Point. SMS_SITE_SYSTEM_STATUS_SUMMARIZER 4/22/2014 9:00:15 PM 952 (0x03B8)
---->: Now polling via NAL for SiteObject "["Display=\\Distriubtionpoint1\PR0-SCCM-DP$\"]MSWNET:["SMS_SITE=PR0"]\\Distriubtionpoint1\PR0-SCCM-DP$\" SMS_SITE_SYSTEM_STATUS_SUMMARIZER
4/22/2014 9:00:15 PM 952 (0x03B8)
for ["Display=\\Distriubtionpoint1\PR0-SCCM-DP$\"]MSWNET:["SMS_SITE=PR0"]\\Distriubtionpoint1\PR0-SCCM-DP$\, no connection account is available SMS_SITE_SYSTEM_STATUS_SUMMARIZER
4/22/2014 9:00:15 PM 952 (0x03B8)
---->: The NAL path ["Display=\\Distriubtionpoint1\PR0-SCCM-DP$\"]MSWNET:["SMS_SITE=PR0"]\\Distriubtionpoint1\PR0-SCCM-DP$\ is currently not accessible. SMS_SITE_SYSTEM_STATUS_SUMMARIZER
4/22/2014 9:00:18 PM 952 (0x03B8)
Info>: Unable to get available space for the Site Object ["Display=\\Distriubtionpoint1\PR0-SCCM-DP$\"]MSWNET:["SMS_SITE=PR0"]\\Distriubtionpoint1\PR0-SCCM-DP$\ SMS_SITE_SYSTEM_STATUS_SUMMARIZER
4/22/2014 9:00:18 PM 952 (0x03B8)
STATMSG: ID=4701 SEV=I LEV=M SOURCE="SMS Server" COMP="SMS_SITE_SYSTEM_STATUS_SUMMARIZER" SYS=Distriubtionpoint1 SITE=PR0 PID=4112 TID=952 GMTDATE=Wed Apr 23 01:00:18.002
2014 ISTR0="\\Distriubtionpoint1\PR0-SCCM-DP$" ISTR1="\\Distriubtionpoint1\PR0-SCCM-DP$" ISTR2="2014 04 4 17 04 31 31 000" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8=""
ISTR9="" NUMATTRS=0 SMS_SITE_SYSTEM_STATUS_SUMMARIZER 4/22/2014 9:00:18 PM 952 (0x03B8)
for ["Display=\\Distriubtionpoint1\PR0-SCCM-DP$\"]MSWNET:["SMS_SITE=PR0"]\\Distriubtionpoint1\PR0-SCCM-DP$\, no connection account is available SMS_SITE_SYSTEM_STATUS_SUMMARIZER
4/22/2014 9:00:18 PM 952 (0x03B8)
---->: GetOperationsManagementData failed to connect to ["Display=\\Distriubtionpoint1\PR0-SCCM-DP$\"]MSWNET:["SMS_SITE=PR0"]\\Distriubtionpoint1\PR0-SCCM-DP$\; error
= 5. SMS_SITE_SYSTEM_STATUS_SUMMARIZER 4/22/2014 9:00:20 PM 952 (0x03B8)

I have tried to access the server share DP from the primary server by using my user
credential. Yes I can able to access the share.
But when I use the system credential to access the share received an error message as shown in below screenshot
Hence i have provided the share and ntfs permission administrators, system, everyone,
primary server account with full control on both tab. but still i am receiving error message.
:\temp>whoami
US\prasath
c:\temp>dir \\PrimaryServer1\SCCM-DP$
Volume in drive \\PrimaryServer1\SCCM-DP$ is Data
Volume Serial Number is 22F0-661B
Directory of \\PrimaryServer1\SCCM-DP$03/17/2014
03:33 PM <DIR> .03/17/2014 03:33 PM <DIR> .
04/01/2014 08:04 AM <DIR> SMSPKG
0 File(s) 0 bytes
3 Dir(s) 514,625,064,960 bytes free
===========================================
C:\Windows\system32>whoami
nt authority\system
C:\Windows\system32>dir
\\PrimaryServer1\SCCM-DP$
Access is denied.

Getting "Failed to Get the user Token" error during running the WHQL Cretification test on Windows 8.1

I am running WHQL Certificating test on the Windows 8.1 host and during the run I am running into error like,
Cause : Failed to Start the Task
Cause : Failed to Get the user Token
Failure : Failed to Start the Task "Detour Logging"
Cause : Failed to Get User Token ""\"" For Task "Detour Logging"
Cause : Session Option Not Supported by the Operating System.
Cause : WinPE Does not Support this Session Option
Anybody has any thoughts on this?
Thanks in advance.

I am running WHCK for my file system minifilter driver. I suffer the same thing with you. have you got any idea?

HT1904 I have failed to get the gift code for my iPad. So how can I go about that?

I have failed to get the gift code for my iPad. So how can I get it?

What gift code?

Failed to get the linked token information

Greetings,
I have run command line that executes a vbscript that is giving the following error:
failed to get the linked token information. It may not be available. Error 1312
The script works perfectly and returns a code of zero. The script is running under another account but all that works fine too. I could just ignore that error but I'm curious as to why it is being generated.
Thanks
David Z

Error 1312:
C:\DeploymentShare\Scripts>err 1312
# for decimal 1312 / hex 0x520 :
ERROR_NO_SUCH_LOGON_SESSION winerror.h
# A specified logon session does not exist. It may already
# have been terminated.
Are you accessing any network resources that require credentials?
(I find it funny/suspicious when scripters claim upfront: "The script works perfectly..." :^)
Keith Garner - Principal Consultant [owner] -
http://DeploymentLive.com

Invoking Imaging Web Service from BPEL is failing

Hi,
My Env is on latest 11g 11.1.1.8.
I am trying to invoke the Imaging Web Services (http://host:port/imaging/ws/ApplicationService?wsdl)deployed in another Weblogic Server from Bpel. When I tried to invoke this web service with out security credentials it was failing due to access issue.
I tried invoking the imaging web service by following below steps.
Added oracle/wss_http_token_client_policy for Imaging Web service Reference.
Added these properties in Composite for the reference binding as below.
<wsp:PolicyReference URI="oracle/wss_http_token_client_policy"
                           orawsp:category="security" orawsp:status="enabled"/>
      <property name="weblogic.wsee.wsat.transaction.flowOption"
                type="xs:string" many="false">SUPPORTS</property>
      <property name="weblogic.wsee.wsat.transaction.version" type="xs:string"
                many="false">DEFAULT</property>
     <property name="oracle.webservices.auth.username" type="xs:string"
                many="false" override="may">weblogicxz</property>
      <property name="oracle.webservices.auth.password" type="xs:string"
                many="false" override="may">welcome111</property>
      <property name="httpBasicUsername">weblogicxz</property>
      <property name="httpBasicPassword">welcome111</property>
But now While testing my Bpel Flow my reference is failing with below erro. Can you please help me resolving this issue.
<messages>
<input>
<Invoke1_getApplication_InputVariable>
<part name="parameters">
<getApplication>
<appNameId>
<id>2</id>
<name>CaptureImageApplication</name>
</appNameId>
<sectionFlags/>
</getApplication>
</part>
</Invoke1_getApplication_InputVariable>
</input>
<fault>
<bpelFault>
<faultType>0</faultType>
<remoteFault>
<part name="summary">
<summary>MustUnderstand headers:[{http://schemas.xmlsoap.org/ws/2004/10/wscoor}CoordinationContext] are not understood</summary>
</part>
<part name="detail">
<detail>oracle.j2ee.ws.client.jaxws.JRFSOAPFaultException: Client received SOAP Fault from server : MustUnderstand headers:[{http://schemas.xmlsoap.org/ws/2004/10/wscoor}CoordinationContext] are not understood</detail>
</part>
<part name="code">
<code>{http://schemas.xmlsoap.org/soap/envelope/}MustUnderstand</code>
</part>
</remoteFault>
</bpelFault>

Hi,
I don't think it is failing due to access issue, I think it is failing because one of the parts is NOT configured to use WS-AT (WS-Atomic Transactions)...
MustUnderstand headers:[{http://schemas.xmlsoap.org/ws/2004/10/wscoor}CoordinationContext] are not understood
Why did you add this?
      <property name="weblogic.wsee.wsat.transaction.flowOption"
                type="xs:string" many="false">SUPPORTS</property>
      <property name="weblogic.wsee.wsat.transaction.version" type="xs:string"
                many="false">DEFAULT</property>
Cheers,
Vlad

SPML Web Service in 11g (XSD): fail to get the psoID

Similar Messages

Maybe you are looking for