Steps to enable Automatic provisioning in OIM 11g

Hi,
I am trying to configure my OIM 11g to automatically provision the resource into OID.
I am able to do the provisioning manually but as per my requirement, when I register the user details in OIM the record must be created in OID automatically.
Can u please mention the steps I must follow for the same.
Regards

Hi Pk
I Checked the task "System Validation" status for the Resource.It was Pending as told I selected Auto Save in the process definition of the resource in design console.
Now my resource gets provisioned but only when I attach user to the Role created by me. By default user gets attached to the All Users Role.
What configuration changes should i make so that the user on creation gets attached to custom Role created by me.
Regards

Similar Messages

Issues with offline provisioning in OIM 11G

We are facing an issue with OIM 11G where we are trying to provision few resources via offline provisioning. Ths issue is that when I do a provisioning/disable/enable on the resource the status of the resource says something like "provisioning in queue/Disable in queue/Enable in queue". This is not happenning all the time but seems to be consistent when I repeatedly disable/enable the resource. Once the status of hte resource remains "in queue" it is never changed back to the actual status which says provisioned/disabled/enabled. Can anyone provide me an insight of what is happenning here and how the offline events are processed within OIM? Is there any way to get the status of the resource back to normal? Please let me know.
Thanks!

Check
http://docs.oracle.com/cd/E14899_01/doc.9102/e14761/offline_prov.htm
Configuring the Remove Failed Off-line Messages Scheduled Task
Configure the Remove Failed Off-line Messages scheduled task to schedule deletion of failed requests from the OPS table. While configuring this scheduled task, set a value for the Remove Failed Messages Older Than (days) attribute.
Regards
Shashank

Enabling logging for ACF2 OIM 11g

Hi Experts,
I want to enable logging for ACF2 connector, I want to implement the logging in OJDL as per provided by 11g.
But in deployment guide for ACF2 i see under section of enabling logging has:
log4j.logger.COM.IDENTITYFORGE.ORACLE.INTEGRATION.IDFACF2USEROPERATIONS=INFO
The connector is the latest one 9.0.4.18 version.
seems they have still leveraged Log4j.. Does is work in OIM 11g, is there a way to implement OJDL. Please help!!

Normally we configure OJDL it will be fine for OIM
http://idmoim.blogspot.in/2011/07/enabling-logging-in-oim-11g.html
what you are pointing is about Ldap Gateway. and ldap gateway still having log4j. go through the connector doc you will get all the required steps
yes for capturing ldap gateway operations log you have to enable log4j.it is fine with 11g as well
below from connector doc:(2.9 Installing and Configuring the LDAP Gateway)
7. To enable logging for the LDAP Gateway:
a. Copy the log4j JAR file from the application server directory in which it is
placed to the LDAP_INSTALL_DIR/lib directory.
b. Extract the log4j.properties file from the
LDAP_INSTALL_DIR/dist/idfserver.jar file.
c. Enter a log level as the value of the log4j.rootLogger variable. For example:
log4j.rootLogger=ERROR, A1
d. Save and close the file.
When you use the connector, the following log files are generated in the
LDAP_INSTALL_DIR/logs directory:
■ idfserver.log.0: This is the main log file.
■ acf2-agent-recon.log: This is the real-time, incremental reconciliation log file
that stores Oracle Identity Manager reconciliation messages.

Enable SMTP debug for OIM 11g notifications

Hi,
OIM 11g here. I am trying to set up reset password notification, but no way. I would like to know how to enable the debug mode to see what SMTP commands are issued towards the mail server. I have already trying setting to TRACE:32 the logger class oracle.iam.notification, but didn't help
thanks in advance.
Alex

Rajiv,
that's exactly what I have tried, i created an IT Resource (Mail server type) with authentication=false, no user/password (the server allows unauthenticated connections) and the hostname of the SMTP server (reachable, no firewall in between). The IT Resource name is the same one that i have specified in the system properties. That's all and it didn't work. No error, only something like "mail notification not successful". That's why I am asking a way to see the SMTP commands issued by OIM.

User Provisioning in OIM 11g to Oracle DB 11g R2

Hi All,
We have installed OIM 11.1.1.5. We have created User in OIM and wanted to provision it to database 11g R2. For this we have created a table in DB.
We are not sure about the next steps or which connectors to use....
Experts can u please guide me through steps or link or snapshots to achieve the above scenario?
Regards,
Newbie

Hi Kevin,
Thanks , that was a complete document.
However I achieved User Provisioning by creating GTC. This i found in below document-
http://tooweaktogivein.com/2010/02/16/oim-provisioning-db/
Now my query is how do i fetch the values entered in UDF by admin (User Form) to the Form which comes when we select Resource Object (probably process form as i don't see any option as Object form in 11.1.1.5).
Currently- 1. Admin creates user
2. Admin selects Resource Object (Created via GTC)
3. Admin has to re-enter the values which we created in our table (To be stored in DB).
Summary- how to populate the values entered in step 1 to step 3
Thanks & Regards,
Newbie

How to enable email notification in OIM 11g

Hello,
I am currently working in a stock 11.1.1.3.0 environment, and am trying to enable email notifications when a user requests to be provisioned to AD.
The default approver is Xelsysadm, and I have put my email address in this account's slot. However, I'm not receiving any emails during the request process.
How do I enable emails to be sent to the approvers?
Thanks!

try below
1. set the value of system property RequestNotificationLevel=1 (1=enable, 0=disable) bydefault it is 0
2. create An IT resource of name "Email Server" and type "Mail Server" must be configured for sending notifications
3. provide the server detail(IP address will be enough) in above it resource
there are the default request template "Request Creation" which will trigger in this scenario.
for configuring custom notification template and details follow below links
http://docs.oracle.com/cd/E28389_01/doc.1111/e14308/notification.htm
--nayan

AD Provisioning in OIM 11g R2

Hi everyone,
I want to provisioning to AD.
I create a Application Instance and I create form.
Then I go details of a user, and a go Accounts tab and I enter "Request Account".
Then I search catalog screent and add to cart then complete the operation ?
This is enough for provisioning ?
What is the meaning of "entitlement" ?
Do I have to execute Entitlement List scheduled job?
Do I have to do provisioning via "Entitlement"(in users detail screen)?
Thanks.
Best Regards.

I create a Application Instance and I create form.
Then I go details of a user, and a go Accounts tab and I enter "Request Account".
Then I search catalog screent and add to cart then complete the operation ?
yes this is fine. hope you have populated form data at this place
This is enough for provisioning ?
Yes this is enough for provisioning.
What is the meaning of "entitlement" ?
entitlement holds the target system multivalued attribute like role,group, responsibility. In earlier version of OIM for viewing group/role you have to go to process form->child form which was quite tedius. Now you have the entitlement tab which hold all the child table data together( ie: role, group..etc)
Do I have to execute Entitlement List scheduled job?
yes, To link entitlements to the application instance we have to run this job. after running job you can go to sysadmin->appinstance-> search appinstance->Click the Entitlements tab, and verify that the entitlements are displayed or not.Even the entitlements are available in catalog after running this job. so, you can request it from catalog directly
Do I have to do provisioning via "Entitlement"(in users detail screen)?
yes for multivalued attribute you can request via 'Entitlement' tab.

OOTB Request Based Provisioning in OIM 11g

Hi Experts,
I am new to 11g approval work flow.
I am able to do following thing:
1) User login to OIM self user page.
2) User is able to raise request for new resource XYZ Resource.
3) On succesful submission, the Request goes to approval and its assigned to XELSYSADM
4) Once the xelsysadm is approving the request, the user gets access to XYZ Resource.
The above workflow is working.
I want instead of Xelsysadm, the request should get assigned to user's manager.
Is it possible to achieve OOTB?
Please reply!!
Regards,
J

Just wanted to add
There are three levels of approvals:
Template Level -- 1st Level
Request Level -- 2nd Level
Operation Level -- 3rd Level
set the Request Level to Auto Approval by checking the box on the request templateThis will Auto Complete the Template Level Approval
In case if you want to Auto Approve the Request Level then you need to create Approval Policy.
Request Level and Operation Level are handled at APPROVAL POLICY.

Exchange 2010 Provisioning from OIM 11g

I am having trouble provisioning to Exchange 2010. The error I am receiving is "Empty Arguments Passed in either Root Context,Admin FQDN,Admin Password,Server Address,Port Number in the IT Resource." I don't recall setting any of these parameters as part of the Exchange IT Resource. Do these come from the AD IT Resource or some Lookup object that I have missed? During the request I only specified AD Server, Mail Store and Mail Alias.
Thanks,
Pete

Check the values in ADITResource. Yes these come from ADITResource.

OIM 11g ootb notification

Hi All,
I'm new to OIM 11g.I'm trying to create user using web interface and user is successfully created but no OOTB email notification are triggering..
I have configured Mail Server It Resource.
IT Resource Name           Email Server
IT Resource Type           Mail Server
Authentication                No
I'm using Toolheap software to test notifications.
Regards.
Krish.

find the steps here
Enabling The Logging in OIM 11g
Any Custom Schedule Task and Event Handlers to debug in the OIM 11g Server to enable the logging. The following way to enable the logging in Oracle Identity Manager 11g.
Pre-Requisite
Java Code Configuration
Add the following line into your java code.
Import Statement
import com.thortech.util.logging.Logger;
private Logger logger=Logger.getLogger("Logger-Name");
Configuration Of Logging
Go to the $DOMAIN_HOME/config/fmwconfig/servers/oim_server1 directory and edit the logging.xml file.
Configure The Log Handler
<log_handler name='logger Handel Name' level='FINEST' class='oracle.core.ojdl.logging.ODLHandlerFactory'>
<property name='logreader:' value='off'/>
<property name='path' value='Log File Location'/>
<property name='format' value='ODL-Text'/>
<property name='useThreadName' value='true'/>
<property name='locale' value='en'/>
<property name='maxFileSize' value='5242880'/>
<property name='maxLogSize' value='52428800'/>
<property name='encoding' value='UTF-8'/>
Include The Logger Handler Logger Configuration
<logger name="Logger-Name" level="Log Level" useParentHandlers="false">
<handler name="logger-Handel-Name"/>
<handler name="console-handler"/>
</logger>
Oracle Identity Manager 11G Log Levels
Log Level ODL Message Type:Level
SEVERE.intValue()+100 INCIDENT_ERROR:1
SEVERE ERROR:1
WARNING WARNING:1
INFO NOTIFICATION:1
CONFIG NOTIFICATION:16
FINE TRACE:1
FINER TRACE:16
FINEST TRACE:32
The FINEST log level will give the more debug info. If you want to debug your schedule task or event handlers, please use FINEST Log level.
--nayan

Approval process creation steps using JDeveloper in OIM 11g R2

Hi,
Please help me to create approval process creation using JDeveloper and how to use the approval process in OIM provision in OIM 11g R2.
Thanks in Advace,
srini

refer developer's guide to get the detailed steps. http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/request.htm#BABFFJDH
Also refer OBE tutorial http://www.oracle.com/webfolder/technetwork/tutorials/obe/fmw/oim/oim_11g/Custom_Approval_Process_for_Resource_Request/custom_approval_process_for_resource_provision.htm#t3
There will be slight changes in the steps as this OBE is for 11gR1.
High level steps:
Create a new application using the following command
ant -f <OIM_HOME>/server/workflows/new-workflow/new_project.xml.
It will be created in OIM_HOME/workflows/new-workflow/process-template/ directory
Openthe .jws file in jdeveloper and edit the default human task and add whatever logic is needed.
Then deploy the composite after which you need to create an approval policy and link the SOA composite created
Edited by: Durgaprasad on Apr 24, 2013 1:55 AM

Issue with deleting a group using Request APIs in OIM 11g R1

Hi,
I am facing an issue with Request Based provisioning in OIM 11g R1.
I am currently testing a scenario where i have imported a data set for 'Modify Provisioned Resource' and am able to add a group/entitlement to an already provisioned resource by using the following code :
        RequestBeneficiaryEntityAttribute childEntityAttribute= new RequestBeneficiaryEntityAttribute();
        childEntityAttribute.setName("AD User Group Details");
        childEntityAttribute.setType(TYPE.String);
        List<RequestBeneficiaryEntityAttribute> childEntityAttributeList=new ArrayList<RequestBeneficiaryEntityAttribute>();
        RequestBeneficiaryEntityAttribute attr = new RequestBeneficiaryEntityAttribute("Group Name", <group>,                                                                       RequestBeneficiaryEntityAttribute.TYPE.String);
        childEntityAttributeList.add(attr);
        childEntityAttribute.setChildAttributes(childEntityAttributeList);
        childEntityAttribute.setAction(RequestBeneficiaryEntityAttribute.ACTION.Add);
        beneficiaryEntityAttributeList = new ArrayList<RequestBeneficiaryEntityAttribute>();
        beneficiaryEntityAttributeList.add(childEntityAttribute);
        beneficiarytEntity.setEntityData(beneficiaryEntityAttributeList);
This works fine for adding a group but if i try to remove a group by changing the action to Delete in the same code, the request fails. The only change made is in the following line:
childEntityAttribute.setAction(RequestBeneficiaryEntityAttribute.ACTION.Delete);
Could you please suggest where can this possibly be wrong.
Thanks for your time and help

Hi BB,
I am trying to follow up your response.
You are suggestng to use prepopulate adapter for to populate respource object name, that means We have to just use an sql query from obj tabke to get the resource object name. right ?? it could be like below, what should I have entity-type value here ??
<AttributeReference name="Field1" attr-ref="act_key"
available-in-bulk="false" type="Long" length="20" widget="ENTITY" required="true"
entity-type="????"/>
<PrePopulationAdapter name="prepopulateResurceObject"
classname="my.sample.package.prepopulateResurceObject" />
</AttributeReference>
<AttributeReference name="Field2" attr-ref="Field2" type="String" length="256" widget="lookup-query"
available-in-bulk="true" required="true">
<lookupQuery lookup-query="select lkv_encoded as Value,lkv_decoded as Description from lkv lkv,lku lku
where lkv.lku_key=lku.lku_key and lku_type_string_key='Lookup.xxx.BO.Field2'
and instr(lkv_encoded,concat('$Form data.Field1', '~'))>0" display-field="Description" save-field="Value" />
</AttributeReference>
Then I need think about the 'Lookup.xxx.BO.Field2' format.
Could you please let me know if my understanding is correct?? What is the entity-type value of the first attribute reference value?
Thanks for your all help.

Password mail after automatic provisioning in CUP

Hi Team,
I have enable automatic provisioning.
This results in creating a desire user with the stated role in the backend SAP System.
I am also receiving the mails for each stage.
However the mail which is recived as a notification to the user Says:
Your Account is created in System XYZ, your ID is ABC.
Click here to View password.
Now whe the user clicks on the link for pasword it takes to a screen which only has Password written in Header but the actual value is missing and the entire screen is blank.
Can anybody please help me to identify and resolve the problem.
Thanks!
Bets regards,
Charu

Please go to Configuration - Workflow - Reminders and look at the "Closing" tab.
There you'll find a setting to display the password for a longer time, or send it in the closing email.
Frank.

Provision a Resource Object to Organization automatically in OIM 11g

Hi All,
How to provision a resource Object to Organizations automatically in OIM 11g.
Can we use Access Policy for this , if not , is there any other way to solve this.
Regards
Edited by: 903745 on 31 May, 2012 1:40 AM

Are you referring to creating an resource object (e.g. group) on the Organization itself (as opposed to users in that Organization) ? If so this can be done from a post-process event handler on the Organization object.

OIM 11g configuration failed. Create domain step failed

Hi,
I'am facing problem in OIM installation. Here is the description of error :
Create Domain step failed
Bootstrap Domain Configuration
Log
Config Action Bootstrap Domain Configuration started
Create Domain
Error
Error while starting the domain.
Cause:
An error occurred while starting the domain.
Action:
See logs for more details.
Step Create Domain failed
Log
Create Domain
Step Create Domain started
Error while starting the domain.
Cause:
An error occurred while starting the domain.
Action:
See logs for more details.
Step Create Domain failed
The log file (C:\Program Files (x86)\Oracle\Inventory\logs\install2012-06-07_03-49-05PM.log) showed the following message :
[2012-06-07T16:10:46.953+05:30] [as] [TRACE] [] [oracle.as.provisioning] [tid: 19] [ecid: 0000JV6Xsj8Fs1WFLz7U8A1Fo80i00000A,0] [SRC_CLASS: oracle.as.idm.install.config.event.IdMProvisionEventListener] [SRC_METHOD: onConfigurationStatus] [OOB IDM CONFIG EVENT] onConfigurationStatus ->24938fb1-a72a-427a-b318-a098773c53f6 StatusMsg:Starting Domain.
[2012-06-07T16:10:46.953+05:30] [as] [NOTIFICATION] [] [oracle.as.provisioning] [tid: 19] [ecid: 0000JV6Xsj8Fs1WFLz7U8A1Fo80i00000A,0] reportStartConfigAction: EXIT........
[2012-06-07T17:49:23.328+05:30] [as] [ERROR] [] [oracle.as.provisioning] [tid: 19] [ecid: 0000JV6Xsj8Fs1WFLz7U8A1Fo80i00000A,0]
[2012-06-07T17:49:23.328+05:30] [as] [ERROR] [] [oracle.as.provisioning] [tid: 19] [ecid: 0000JV6Xsj8Fs1WFLz7U8A1Fo80i00000A,0] [[
oracle.as.provisioning.util.ConfigException:
Error while starting the domain.
Cause:
Starting the Admin_Server timed out.
Action:
See logs for more details.
     at oracle.as.provisioning.util.ConfigException.createConfigException(ConfigException.java:123)
     at oracle.as.provisioning.weblogic.ASDomain.startDomain(ASDomain.java:3150)
     at oracle.as.provisioning.weblogic.ASDomain.startDomain(ASDomain.java:3040)
     at oracle.as.provisioning.engine.WorkFlowExecutor._startAdminServer(WorkFlowExecutor.java:1645)
     at oracle.as.provisioning.engine.WorkFlowExecutor._createDomain(WorkFlowExecutor.java:635)
     at oracle.as.provisioning.engine.WorkFlowExecutor.executeWLSWorkFlow(WorkFlowExecutor.java:391)
     at oracle.as.provisioning.engine.Config.executeConfigWorkflow_WLS(Config.java:866)
     at oracle.as.idm.install.config.BootstrapConfigManager.doExecute(BootstrapConfigManager.java:690)
     at oracle.as.install.engine.modules.configuration.client.ConfigAction.execute(ConfigAction.java:371)
     at oracle.as.install.engine.modules.configuration.action.TaskPerformer.run(TaskPerformer.java:88)
     at oracle.as.install.engine.modules.configuration.action.TaskPerformer.startConfigAction(TaskPerformer.java:105)
     at oracle.as.install.engine.modules.configuration.action.ActionRequest.perform(ActionRequest.java:15)
     at oracle.as.install.engine.modules.configuration.action.RequestQueue.perform(RequestQueue.java:64)
     at oracle.as.install.engine.modules.configuration.standard.StandardConfigActionManager.start(StandardConfigActionManager.java:160)
     at oracle.as.install.engine.modules.configuration.boot.ConfigurationExtension.kickstart(ConfigurationExtension.java:81)
     at oracle.as.install.engine.modules.configuration.ConfigurationModule.run(ConfigurationModule.java:86)
     at java.lang.Thread.run(Thread.java:662)
[2012-06-07T17:49:23.328+05:30] [as] [TRACE:16] [] [oracle.as.provisioning] [tid: 19] [ecid: 0000JV6Xsj8Fs1WFLz7U8A1Fo80i00000A,0] [SRC_CLASS: IdMProvisioningEventListener] [SRC_METHOD: onConfigurationError] ENTRY 24938fb1-a72a-427a-b318-a098773c53f6
[2012-06-07T17:49:23.328+05:30] [as] [TRACE] [] [oracle.as.provisioning] [tid: 19] [ecid: 0000JV6Xsj8Fs1WFLz7U8A1Fo80i00000A,0] [SRC_CLASS: oracle.as.idm.install.config.event.IdMProvisionEventListener] [SRC_METHOD: onConfigurationError] ________________________________________________________________________________
[2012-06-07T17:49:23.328+05:30] [as] [TRACE] [] [oracle.as.provisioning] [tid: 19] [ecid: 0000JV6Xsj8Fs1WFLz7U8A1Fo80i00000A,0] [SRC_CLASS: oracle.as.idm.install.config.event.IdMProvisionEventListener] [SRC_METHOD: onConfigurationError] [OOB IDM CONFIG EVENT] onConfigurationError -> configGUID 24938fb1-a72a-427a-b318-a098773c53f6
[2012-06-07T17:49:23.328+05:30] [as] [TRACE] [] [oracle.as.provisioning] [tid: 19] [ecid: 0000JV6Xsj8Fs1WFLz7U8A1Fo80i00000A,0] [SRC_CLASS: oracle.as.idm.install.config.event.IdMProvisionEventListener] [SRC_METHOD: onConfigurationError] [OOB IDM CONFIG EVENT] ErrorID: 35091
[2012-06-07T17:49:23.328+05:30] [as] [TRACE] [] [oracle.as.provisioning] [tid: 19] [ecid: 0000JV6Xsj8Fs1WFLz7U8A1Fo80i00000A,0] [SRC_CLASS: oracle.as.idm.install.config.event.IdMProvisionEventListener] [SRC_METHOD: onConfigurationError] [OOB IDM CONFIG EVENT] Description: [[
Error while starting the domain.
Cause:
An error occurred while starting the domain.
Action:
See logs for more details.
[2012-06-07T17:49:23.328+05:30] [as] [TRACE] [] [oracle.as.provisioning] [tid: 19] [ecid: 0000JV6Xsj8Fs1WFLz7U8A1Fo80i00000A,0] [SRC_CLASS: oracle.as.idm.install.config.event.IdMProvisionEventListener] [SRC_METHOD: onConfigurationError] ________________________________________________________________________________
[2012-06-07T17:49:23.328+05:30] [as] [TRACE] [] [oracle.as.provisioning] [tid: 19] [ecid: 0000JV6Xsj8Fs1WFLz7U8A1Fo80i00000A,0] [SRC_CLASS: oracle.as.idm.install.config.event.IdMProvisionEventListener] [SRC_METHOD: onConfigurationError] [OOB IDM CONFIG EVENT] onConfigurationError -> eventResponse ==oracle.as.provisioning.engine.ConfigEventResponse@8ae380
[2012-06-07T17:49:23.328+05:30] [as] [NOTIFICATION] [] [oracle.as.provisioning] [tid: 19] [ecid: 0000JV6Xsj8Fs1WFLz7U8A1Fo80i00000A,0] [OOB IDM CONFIG EVENT] onConfigurationError -> Configuration Status: -1
[2012-06-07T17:49:23.328+05:30] [as] [NOTIFICATION] [] [oracle.as.provisioning] [tid: 19] [ecid: 0000JV6Xsj8Fs1WFLz7U8A1Fo80i00000A,0] [OOB IDM CONFIG EVENT] onConfigurationError -> Asking User for RETRY or ABORT
[2012-06-07T17:49:23.328+05:30] [as] [NOTIFICATION] [] [oracle.as.provisioning] [tid: 19] [ecid: 0000JV6Xsj8Fs1WFLz7U8A1Fo80i00000A,0] [OOB IDM CONFIG EVENT] onConfigurationError -> ActionStep:Create_Domain
[2012-06-07T17:49:23.328+05:30] [as] [TRACE] [] [oracle.as.provisioning] [tid: 19] [ecid: 0000JV6Xsj8Fs1WFLz7U8A1Fo80i00000A,0] [SRC_CLASS: oracle.as.idm.install.config.event.IdMProvisionEventListener] [SRC_METHOD: onConfigurationError] [OOB IDM CONFIG EVENT] onConfigurationError -> wait for User Input ....
Thanks in advance for help.
Thanks and Regards,
Prasad
Edited by: 938380 on Jun 7, 2012 5:52 AM

actually when i restarted the configuration the test passed for create domain but it went on to fail in the apply java required file step
here is the link to the thread : OIM 11g configuration failed. Apply java required files step failed
Hoping for your help.. and thanks for the suggestions..
Regards,
Prasad

Steps to enable Automatic provisioning in OIM 11g

Similar Messages

Maybe you are looking for