User creation in OIM group

When ever i reconcile a user from a Trsuted system, how to add that user to OIM group(ex:group1) automatically?

Go to Rule Designer and create general rule like Role==Consultant.
It can be anything.
Go to Group > Manage > Select ur gorp > Drop down > Select membership rule > Select ur Rule created.

Similar Messages

How to generate username automatically while user creation in OIM.

Hi all,
Could you please send me steps for how to generate user name automatically by using adapter while creating the user in OIM.

Follow this link:
[http://download.oracle.com/docs/cd/B32479_01/doc.903/b32457/creadp.htm|http://download.oracle.com/docs/cd/B32479_01/doc.903/b32457/creadp.htm]
It will help you to make each adapter which you want but for this you'll have to create entity adapter.

Enabling Logs for tracking User Creation in OIM

Hi All,
Can anybody pls guide me how to enable logs, in order to track the database tables which are updated when user is created in OIM?
I have faint idea that -Uncommenting is required in log4j text file , But i am not sure?
nd Pls let me know if my requirement is not clear.
Thanks & Regards,
Newbie

Steps to Enable Logs
1. Navigate to c:/Oracle/Xellerate/config , open log.txt file
2. Uncomment categories below <File Appender> to edit Location or pattern
3. Uncomment categories below <Xellerate> according to ur requirement.
The job is pretty simple!!!
Cheers!!
Newbie

On User creation in OIM, create user in DB

Hi all,
Is it possible to automatically trigger a provisioning of user in DB table once the OIM user has be created?
Thanks

As long as you have a workflow that provisions a user to a database table. You can create an access policy for the object.
-Kevin

Unassign user from a OIM Group using API/Java Code

Hello OIMers,
Can you please tell me how should I Un-assign a group membership through code?
This is the case:
When the user is deleted from Active Directory, I want to Unassign the User from a group, assume the name of the group is "FullTime Employees".
Currently How I do this is Click on the User Profile in Admin Console then select Group Membership from drop down and then select unassign for that group.
Please tell me how should I do the above task programmatically, This would solve my problem.
Thanks everyone in advance.
Regards,
VSN

Hi all,
I am using the following api:
uintgroupf = (tcGroupOperationsIntf)tcUtilityFactory.getUtility(db, "Thor.API.Operations.tcGroupOperationsIntf");
uintgroupf.removeMemberUser(arg0, arg1);
arg0 - is group key............Can you tell me how should I fetch this Group Key??
Thanks.
Regards,
VSN

OIM User Creation Error After OIM and OID Intregation

Hi,
I am new in oim and i am getting popup error message for user creation from OIM application after oim and oid intregation through libovd.
Error message : LDAP create event failed : orclguid attribute has duplicate value.
please guide me for resolving error.
Thanks & Regards,
Rajeev

Hi,
Thanks for reply...i checked1307549.1 in metalink, In that link they are telling us to modify some tables in the data base.i have some question regarding the following steps please help.
=== ODM Solution / Action Plan ===
1. Use the following query to find fields with "plain text" values:
select svr.svr_name, spd.spd_field_name, svp.svp_key, svp_field_value
from svp
inner join spd on spd.spd_key = svp.spd_key
inner join svr on svr.svr_key = svp.svr_key
2. Set these plain text values to null after making backup of table.
*(kashyap:: Which fields values we have to change)*
3. Edit the Directory Server to re-set values.
*(kashyap:: could you please explain this)*
Expected error at this stage:
-- no "System Error call admin...", but that makes sense since the values in question pertained directly to the Directory Server --

User Creation at the time of Self Registration not via Admin (xelsysadm)

Hello there,
I had a question related to User Creation in OIM via Self Registration (Create Request) and via "xelsysadm" itself creating one user via the web console.
Can I do this -
When a user does self registration then how can I directly create a user in OIM?
Right now: the user's request needs to be approved by xelsysadm first and then only that user can login into OIM and then only that user can be seen in OIM - I want to remove the "xelsysadm" gateway of approving the request.
I want that user directly to be present in the OIM as soon as he/she fills out it's information in the self registration pages. How can we do this?
Also, I want an email to be sent to the user to its email ID that he/she provided at the time of self regn containing its User ID and password in it from the xelsysadm email id. How can I do that?
TIA for the help,
- oidm.

Hi oidm
User Registration is R.O. which used for User Self Registration.
But if you see it carefully, there's no Approve Task (not workflow) in it.
It has three task
1) SV
2) PI
3) AAD
And if you see the request while approval it shows Awaiting Approval Data means it stuck in AAD.
Try to modify this, I can't as I don have any extra machine with. Try to modify this. It may not allow you to update it, you'll have to change its security level in Database level.
*Awaiting Approval Data System Administrator [XELSYSADM] Pending*
I hope it helps you to start R n D.

Not able to add groups to the user ODSEE via OIM 11g R2

Hi,
I have created some groups in ODSEE and ran the recon job to sync these groups in OIM 11g R2.
Groups are populated in OIM 11g R2 and while raising the request for ODSEE Application Instance I can see these groups.
Now following are the issues I am facing :
1. ODSEE groups are not getting displayed in Catalog ( I have ran the Entittlement-List job also)
2. When I request for a group while creating the request, the group is not getting assigned to the user in ODSEE, wherein user is getting created in ODSEE successfully.
Please help.
Thanks

Please let me know what could be the reason of not adding the groups to the user in ODSEE.
I was able to add the groups successfully to user by assigning the groups while raising the request in OIM 11g R1.
But the same is not working in OIM 11g R2, if I check the OIM logs it is calling the function ADDUSERTOGROUP but the groups are not getting assigned to user.
Thanks

New user creation in AE- user group not getting assigned

Hi All,
Here is a typical case, wherein when we create a new user with AE for the production system, the user gets created and the roles are also assigned but the user group is not getting assigned. The user group is being fetched from a table from the backend and all that is working fine. Infact in order to test the configurations we even created a new user in the production instance of AE giving the development system as the target system for user creation and in this case the user was successfully created and the user group is also assigned. The problem is arising only when the target system is production system.
Connectors are all working fine, but we are unable to think of a reason. Can somebody help us on this?

Hi Vani,
If you are provisioning the user group using user defaults, check that production system is selected in the user defaults configured. Configuration -> user defaults. You can define any user default system, but for perticuticular user defaults that is applicable define all the systems, in which you want user defaults to be provisioned.
Kind Regards,
Srinivasan

User Creation in ORM from OIM

Hi,
I am trying to Integrate ORM and OIM in order to do the rolemanagement and provisioning. In my enviornment I am able to move the roles from ORM over to OIM as groups.
But when I creating the users in the OIM, it does move over to the ORM but insted of getting created in the Organization that I had choosed on the OIM side, it gets created in the "Unassigned Organization" on the ORM. Has any one come across this issue, please let me know, what I need to do in order to fix this issue.
Thanks&Regards
Debi

Go to Rule Designer and create general rule like Role==Consultant.
It can be anything.
Go to Group > Manage > Select ur gorp > Drop down > Select membership rule > Select ur Rule created.

OIM 11g , Ignore User Creation

Folks ,
I am facing a issue , hoping you guys could throw some pointers ..
I have a trusted recon set up via GTC DB connector . There is particular condition when i dont want the user to created in OIM though it will be pulled by GTC (Unfortunately i cant stop that).
So in nutshell, i want to ignore the OIM user creation when a particular reconciled attribute lets say firstName = ABC AND user is not already present in oim, then ignore the user creation ..
Any pointers how to achieve this ..
Thanks
Suren

Thanks Raghav for your response , but how ill this work .
So , when FirstName = ABC record will come , as per your recon rule .., it wont link to any existing user and it will land up in No Match Found status and as its trusted recon it will create the user .., which i dont want ..
I cant delete rest of the action rules , they are required for processing the updates etc ...
Please let me know if you need more info ..
Thanks
Suren

LC Rights Management End User can not find groups or users during policy creation process

hello,
I'm using LC8.0.1 turnkey install on win2003 box.
Problem is LC Rights Management End User can not find groups or users (search result is empty) during policy creation process, thus can not apply specific restriction to certain groups or users.
I have create a user in the DefaultDom and assigned the following roles:
Live Cycle Rights Management Invite User
Live Cycle Rights Management End User
How can I allow the above created user to search for groups and user during policy creation? Thanks.

Good catch Phuc. Make sure you do this for each Policy Set as well as My Policies.
Here's an overview of Policy Sets:
http://blogs.adobe.com/security/2008/04/delegating_control_over_policy.html
Cut and paste the URL.

OIM Group Permissions(OIM User access rights)

Is it possible to set the permissions for an OIM group (ie AD Admins) to have access to Enable, Disable, and Revoke the resources on the Resource Profile page for a user– without giving them write access to the User Detail page.
And secondly, could it be restricted enough to only allow them to do those actions on a specific resource (ie AD User) and not other resources (ie OID, etc).
Please let me know asap if have any idea..
Thanks..

My suggestion would be request based Enable/Disable/Revoke. You can code an approval task to validate submission of the request based on a group membership and either allow the process to continue or reject the request. Once you give someone access to manage users and access to the menu item, they will have access to all the drop downs for that user. You will need to test the permissions. You can give the group update writes to specific objects, and only read only to others and see if this meets your requirements.
-Kevin

OIM 11g Sending Notification on OIM User creation

Hi Gurus!
I have the following requirement: Whenever a user is created in OIM (through the Administration Console, through Request or through trusted reconciliation) an email notification is to be sent to the user's manager, informing him/her that his/hers collaborator has a given user login (autogenerated) and a password (also autogenerated) and which has to be changed the first time the recently created user logs into OIM.
I saw that in OIM we have Email Definitions (in the Design Console) and Notification Templates (in the Administration Console).
I tried to use the Email Definitions but I am not able to select the usr_password field in the variables section so I could not use this solution which seemed to be very easy to use since one can directly use the email definition in the Notification tab in the process tasks.
Afterwards I analysed the Notification Templates solution. I defined the xml of the Event Type and in the Notification Template (in the Administration Console) I was able to select usr_password as a variable of the notification. However, when I tried to develop the Java code (class implementing NotificationEventResolver), although I was able to extract most of the fields of the OIM user profile, I could not extract the usr_password field... It seems the usr_password field (which is encrypted) cannot be obtained from the UserManager service.
How can I get the user password and inject it into the email notification?
Many Thanks!

Check this: Re: Xellerate User Password decrypt and look at the code posted there by me. Since you are using the notification resolver, you can use the PasswordManager to get the password for the user in your code.
-Bikash

Delete oimGroup membership of the oim user using Script (oim 9.1).

Hi All,
I want to remove oim users' particular oim group membership, Is there any problem, if I use the following script to delete user group information from USg table?
delete from usg where usr_key in (select usr_key from usr where usr_login in ('xxx','yyy')) and ugp_key=31
Note: In our case, No policies,membershiprules are assigned to this oim group (we defined gruops only) and env is oim 9.1.
Can any one confirm this. Or if there is nay problem, please let us know.
Thanks.
Edited by: user13285646 on Jul 28, 2011 11:01 PM

Thanks Rajiv.

User creation in OIM group

Similar Messages

Maybe you are looking for