Updating AD Attributes via OIM user forms

Hi,
I have configured an AD connector. Firstly, I did a trusted recon to create the OIM. Next, I did a user recon to link the AD user to the OIM user. After that I have configured to pre-populate to show the AD attributes onto the OIM user form.
Now, what I want to do is to update the AD attributes (eg. Mobile) in the OIM web interface, and has it reflect back to AD.
Appreciate a detail description as I am very new to OIM.
Cheers, SK

You may want to try this:
a. Add an entry in Lookup.USR_PROCESS_TRIGGERS
b. Add a Process Form field and a Process task in each Process where you want to push the value.
The task should have a name "<UDF label> Updated"
c. Create another one called "Change <UDF label>"
d. Make the tasks conditional, "allow multiple instances"
e. Wire the "Change <UDF label>" to copy values from the user profile to the process form
f. Wire the "<UDF Label> Updated" to the connector adapter.
--Deepak

Similar Messages

Custom Attribute in OIM user Form is not populated.

Hi Friends,
I am new to this Identity Manager Technology. I really all ur support.
I am using oracle Identity Manager 9.1.0.2 version with JBoss server. The Target System is Sun One directory.
1. I added the custom field street in Resource Object--Object Reconciliation Tab for Xellerate User and also for Iplanet Users objects.
2. In Process definition, for iplanet user provisioning Process and Xellerate Users provisioning process, in Reconciliation Field Mappings. I mapped the street field to the UDF(street) and also for UD_iplanet_Street .
3. When I run the task schedular for Iplanet User Recon, the string associated with the field in Iplanet is reflecting in resource profile of the user view/Edit. However, it is not populated in OIM User Form Field.
Can you please help me in resolving the issue. I will provide any further needed information.
Thanks and Regards,
Manjula

Thank you for your prompt reply.
Yes. I tested it.. I can see the street field in the process form is populated with the string. However, I cannot see the same in the OIM User Profile Form. That Means, When I go to User folder in Admin and User Console, Manage Users and then select the user associated with the street field, the street field for the user is not populating and is empty without any string.
Please clarify me.
Thanks and Regards,
Manjula.

How to Populate Database values in OIM user form

Hi friends,
I have created some groups in OIM and I have created a new field in OIM user form. Now i want the group values visible as new field values.
How the database table values can be made visible in OIM field ..?
please help me in doing it
Regards
sri

Just follow this document and from fig 13 select LOV type as query.
http://docs.oracle.com/cd/E21764_01/doc.1111/e14308/conf_mangmnt.htm
Regards
Shashank

Hiding Password in OIM user form

Hi All,
I am trying to Hide the userID and Password from OIM user (create user) form as I am using entity adaptor to generate these and I dont want to enter vague values. I am successful in hiding User ID field by modifying formMetaData.xml, however, I am not able to find anything for Password/Confirm Password fields.
Please suggest.

For each attribute reference, you can specify whether the field is:
Viewable—By adding the attribute reference to the relevant section
Editable—By specifying a value of TRUE or FALSE for the editable parameter
Optional—By specifying a value of TRUE or FALSE for the optional parameter

Multi Value User Defined field on OIM user form

Hi Everyone,
I have a requirement where i need to assign multiple resources to user as per access policy. These resources should be assign by virtue of some role (custom attribute as of now). The specific requirement is that one user may have multiple roles (and hence resources) and all these values should capture in any user defined field. As the requirement contains multiple Roles so we have to create multi-value user defined field for User form to capture all these role values under single attribute. Does OIM provides any such multi-value field OOTB (lookup, drop down--any customize way we can make them multivalue)?

He's right. Multi Valued attributes on the User Profile are not available in OIM. If you want to do this, and you have a finite number of possible roles, you can create UDFs for each and map a checkbox or something to it if the user has that value. Then base your acccess policies off those.
-Kevin

Problem updating metadata attribute of type "user".

Hi folks,
I am testing updating category metadata attributs and thusfar the only attribute type that gives me trouble
is an attribute of type 'user', which really is an Item-type in Content DB.
It consistently comes up with following error:
Exception in thread "main" AxisFault
faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server.userException
faultSubcode:
faultString: org.xml.sax.SAXException: No object was found for class type class oracle.ifs.fdk.FdkSession
faultActor:
faultNode:
faultDetail:
    {http://xml.apache.org/axis/}hostname:xxxxxxx
org.xml.sax.SAXException: No object was found for class type class oracle.ifs.fdk.FdkSession
    at org.apache.axis.message.SOAPFaultBuilder.createFault(SOAPFaultBuilder.java:221)
    at org.apache.axis.message.SOAPFaultBuilder.endElement(SOAPFaultBuilder.java:128)
    at org.apache.axis.encoding.DeserializationContext.endElement(DeserializationContext.java:1087)
    at oracle.xml.parser.v2.NonValidatingParser.parseElement(NonValidatingParser.java:1306)
    at oracle.xml.parser.v2.NonValidatingParser.parseRootElement(NonValidatingParser.java:324)
    at oracle.xml.parser.v2.NonValidatingParser.parseDocument(NonValidatingParser.java:291)
    at oracle.xml.parser.v2.XMLParser.parse(XMLParser.java:207)
    at oracle.xml.jaxp.JXSAXParser.parse(JXSAXParser.java:292)
    at org.apache.axis.encoding.DeserializationContext.parse(DeserializationContext.java:227)
    at org.apache.axis.SOAPPart.getAsSOAPEnvelope(SOAPPart.java:696)
    at org.apache.axis.Message.getSOAPEnvelope(Message.java:424)
    at org.apache.axis.handlers.soap.MustUnderstandChecker.invoke(MustUnderstandChecker.java:62)
    at org.apache.axis.client.AxisClient.invoke(AxisClient.java:206)
    at org.apache.axis.client.Call.invokeEngine(Call.java:2765)
    at org.apache.axis.client.Call.invoke(Call.java:2748)
    at org.apache.axis.client.Call.invoke(Call.java:2424)
    at org.apache.axis.client.Call.invoke(Call.java:2347)
    at org.apache.axis.client.Call.invoke(Call.java:1804)
    at oracle.ifs.fdk.FileManagerSoapBindingStub.updateDocuments(FileManagerSoapBindingStub.java:1606)
    at oracle.ifs.fdk.client.impl.FileManagerProxy.updateDocuments(FileManagerProxy.java:688)
    at oracle.ifs.fdk.client.impl.FileManagerProxy.updateDocument(FileManagerProxy.java:548)
    at updatetest.updatetest.UpdateNow(updatetest.java:182)
    at updatetest.updatetest.main(updatetest.java:237)Here's what I roughly do in my code:
    <snip snip>
    UserManager Uman = session.getUserManager();
    FileManager Fman = session.getFileManager();
    long docId = Fman.resolvePath("Some/path/to/some/doc/that/exists",null).getId();
    NamedValue[] catdef = new NamedValue[] {
        new NamedValue(Options.UPDATE_CATEGORY_ID, 51655),
        new NamedValue(Options.CATEGORY_DEFINITION_ATTRIBUTES,
            new NamedValue[] {
                new NamedValue("CUSTOM_51550",Uman.getUser("pro347",null))
    Fman.updateDocument(docId,catdef,null);User pro347 exists.
System.out.println(Uman.getUser("pro347",null).getName());returns "pro347"
The document exists and has category instance id 51655 assigned to it.
Does anyone see what I am not seeing ?
Any help would be very much appreciated.
Regards,
Ragnar

Hi Ragnar,
I am facing similar issue. I am creating document definition
i.e
OPT.CATEGORY_DEFINITION (NamedValue[])=
OPT.UPDATE_CATEGORY_ID=67317 (Long)
OPT.CATEGORY_DEFINITION_ATTRIBUTES (NamedValue[])=
CUSTOM_64434=1 (String)
CUSTOM_64432 (Item)=
(Item) 49194 USER bart.simpson
CUSTOM_64430= (String)
CUSTOM_64429=1.6 (String)
CUSTOM_64426=String (String)
CUSTOM_64435=2 (String)
CUSTOM_64431=Wed Mar 21 00:00:00 GMT 2007 (Calendar)
CUSTOM_64427=13 (String)
CUSTOM_64433=str1 (String)
CUSTOM_64428=5 (String)
and performing update.Fields of all other types are updated correctly except for user type field which gets updated with empty value. No error is thrown during update.
I would appreciate any help on this one as well,
Thanks
Radek

Mandatory Attributes in Create User Form

Hi All
i want to make the mandatory fields in create user form (ie Organization name) as optional.
For this i edited the FormMetada.xml file by making optional as true. (in the attribute reference for Organization field in User management section), as mentioned in the docs.
Now when i try creating user, it shows me 'You do not have permissions to perform this operation' error.
while when i give some value in the organization field, then it creates the user.
please provide some pointers in this regard.
Thanks.

You MUST provide an organizatation name. There is a system entity adapter on the Users data object. You cannot avoid populating this.
-Kevin

Updating Song Attributes for Multiple Users Sharing a Media Folder

I have 2 users on the same iMac, each with their own library but sharing the same media folder. If one user updates song attribute information (example - adding the song year), how does the other user update his library with those attribute changes? I tried to do File-->Add to library which is the way one user adds songs to his library that the other user added, but that didn't work. If I play the song, it updates the information. If I select File-->Get Info for a single song, it updates the information, but if I select multiple songs it does NOT update the information.

Got into the same issue today; I selected all the songs and updated the ratings. That helped to sync with the latest attributes. If you care about your song ratings.. then this might not help you.

How to Update Extended Attributes For the Users in SRM Organization?

Hi,
I am using 'BBP_UPDATE_ATTRIBUTES' function module to load the Default Attributes for the users in a custom program. I am able to update many attributes like company code, Movement type, catalog id, material usage, shop on behalf of and address ship to. But I am having problem updating extended attributes Plants(Attribute ID 'WRK') and Storage Locations (Attribute ID 'LAG').
Storage location and Plants has many values. Can anyone have experienced this problem before. I appreciate any help I get. I debugged enough and not able to find any other function module to do this.
Thanks and Regards,
Sreeni..

Hi Sreeni,
I'm stuck up in the same problem. Did you get any solution for this? If yes please provide the same.
Regards,
Gajendra
Message was edited by: Gajendra Bhatt

Displaying Session Owner Attributes on Tabbed User Form

How i can get an attribute from a session's owner inside the form?
For example, I want to display the email address of the admin who logged in and I want to display this on the Tabbed User Form.
I know, that :display.session is a session descriptor, but I can't work out how to display anything other than account ID.
Thanks in advance,
Darren.

Have a look at the javadocs for the com.waveset.ui.FormUtil class. There's some methods in there for getting user information from the repository based on the context you've got and the user ID you provide.
Something like this might work for you:
<invoke name="getObject" class="com.waveset.ui.FormUtil">
    <select>
      <ref>context</ref>
      <ref>:display.session</ref>
      <invoke name='getLighthouseContext'>
          <ref>WF_CONTEXT</ref>
      </invoke>
    </select>
    <s>User</s>
    <ref>your accountid</ref>
</invoke>That will get you back the user from the repository as a WSUser object. You should be able to extract the email attribute using the WSUser object's getAttribute method. If you need to construct a full view then there's more work to be done but that should get you the email address. (Assuming of course that you're saving it in the IDM repository.)

What is the best way update similar OID and OAM LDAP attributes via OIM?

Our environment uses OIM provisioning to an OID LDAP which is used by OAM.
For legacy purposes, we need to populate both the Oracle "orcl*" attributes and OAM "ob*" in cases where they have the same or similar usage.
Example: When a user is disabled in OIM we need to set orclisenabled="false" and obUserAccountControl="DEACTIVATED" in OID
What is the best way to accomplish this in OIM? My initial thought was to write a custom adapter, similar to the out-of-the-box OID Modify User adapter, which supports modifying multiple attributes.
Is there a better way?

You can create two tasks which will modify two attributes of OID.
On Disable user task, call task1 and on Success of task1, call Task2 (using Task to Generate Feature).
You can make use of OOTB connector only.

Update "rendered" attribute via ajax

Is there a workaround to update the "rendered" attribute of a commandLink via AJAX? I'm getting an error 'malformedXML: During update: j_idt12:prevCmd not found'.
code snippet:
<h:commandLink action="#{controller.previous}"
                                   value="Previous"
                                   rendered="#{controller.hasPreviousPage}"
                                   id="prevCmd">
     <f:ajax render="table prevCmd nextCmd" immediate="true"/>
</h:commandLink>
<h:commandLink action="#{controller.next}"
                                   value="Next"
                                   rendered="#{controller.hasNextPage}"
                                   id="nextCmd">
     <f:ajax render="table prevCmd nextCmd" immediate="true"/>
</h:commandLink>

Try adding the form name to the components names:
<f:ajax render="form1:table form1:prevCmd form1:nextCmd" immediate="true"/>

Updating Document Attributes via XML

I found an article in Metalink which gives the following example:
<?xml version = '1.0' standalone = 'yes'?>
<CustomDoc>
<UPDATE reftype="path">/public/MyiFS/MyDoc.myextension</UPDATE>
<MyCustomAttribute>NewValue</MyCustomAttribute>
</CustomDoc>
This updates the custom attribute "MyCustomAttribute" for document
"MyDoc.myextension" stored in the "/public/MyiFS" folder, which is an
instance of the subclassed document type with the registered
extension of "myextension".
Source Article: http://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=125517.1
Has anyone gotten this to work? If so could you give a real example? I don't believe we created a custom document type, but we have added some custom attributes which show up for every document we put in iFS.
null

I found an article in Metalink which gives the following example:
<?xml version = '1.0' standalone = 'yes'?>
<CustomDoc>
<UPDATE reftype="path">/public/MyiFS/MyDoc.myextension</UPDATE>
<MyCustomAttribute>NewValue</MyCustomAttribute>
</CustomDoc>
This updates the custom attribute "MyCustomAttribute" for document
"MyDoc.myextension" stored in the "/public/MyiFS" folder, which is an
instance of the subclassed document type with the registered
extension of "myextension".
Source Article: http://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=125517.1
Has anyone gotten this to work? If so could you give a real example? I don't believe we created a custom document type, but we have added some custom attributes which show up for every document we put in iFS.
null

Adding custom attributes in iPlanet User resource

I have a custom attribute in LDAP called "CustomAttr1" created. I would like to add this attributes into iPlanet User RO so that I can update that attribute via OIM. What is the process of adding that attribute to the iPlanet User process and forms?

Have you checked the Connector Document and specifically the section where it says "Extending the Connector"?
This: http://docs.oracle.com/cd/E11223_01/doc.904/e10446/custom.htm#CDEGCCEB
-Bikash

PeopleSoft attribute wipe out target attributes in OIM

Hi Folks,
i am working as oracle identity management developer
PeopleSoft is out source of truth. all the data come from PeopleSoft to OIM and data provision in different target resources which is AD and eDirectory.
my problem is when some body update the firstname or lastname in PeopleSoft user it is update in OIM process defination but this updates wipeout my sn= & givenName= wipe out on target side both attributes are delete from target site.
but same thing is working fine when i update the peoplesoft record in OIM it update properly on target and show me the all the attributes.
but when i update record on PeopleSoft it wipe out my sn & givenName on AD.
please guys suggest me something for this problem because am unable to figure it out this problem.
Thank you

HI Martin,
ya the normal process you mention is right
when i update the record at Peoplesoft that time target record is wiped out.
like if change FirstName or LastName on PeopleSoft which is mapped with givenName and sn in AD.
at first time record creation it is coming all the attribute properly on AD and display also.
but if i modify firstName or LastName that time on AD givenName and sn is wiped out. (Only on AD otherwise it update the record on OIM user form --> process form wiped out on Target AD.)
But the strange thing is that if i update peopleSoft record in OIM by manually that time all attribute update properly and it remain there working good.
please give me some solution for this strange issue.
Thank you

Updating AD Attributes via OIM user forms

Similar Messages

Maybe you are looking for