User Task: Custom Identity Service

Hi my friends
Have anyone tried to use a custom Identity Service with BPEL User Tasks (I meam other than LDAP or JAZN)? Problems? Issues? Limitations?
I know I have to implement a set of interfaces (BPMIdentityService interface and others)...
Thanks.
Message was edited by:
mmenezes

Pablo;
I just read your post and hearing that you have the basic methods working has me very interested - I implemented all the Interfaces (BPMIdentityService, BPMProvider, BPMUser, BPMRole, BPMGroup) and changed the is_config.xml file. My realm showed up, and the connection pool I'm using seemed to work just fine, but when I tried to setup a Human Workflow using the new realm, I get an error on my searchUsers method (just hardcoded).
I read that you need to add your classes to the application.xml file and that makes sense - but when I add them, no realms show up at all - one step backward - AND the method still doesn't work.
Could you spare a desperate developer some advice on how you got yours working - a brief description of how to register your classes, if there's more than adding them to application.xml would be wonderful!
Cheers -

Similar Messages

Integration of custom identity services with JDeveloper BPEL designer

Hi,
I'd like to know if a custom user repository plugin will cause the 'Identity Lookup Dialog' (Step 6 of Human Workflow Wizard to generate a user task) to utilize the list of users and groups from a third party provider, when used as the Custom Identity Service provider.
I'd like to have the custom list of users and groups at 'design time' of the BPEL process itself, as well as process runtime. Is this possible?
This is with respect to both BPEL PM v10.2.0.2 and v 10.1.3.1.0.
Regards,
Vineet

ok, thank you for the reply.
But the installation of the Oracle BPEL Process Manger for Developers which includes the JDeveloper and the BPEL Designer doesn't come with 10.1.3.1.0?
I have to install the JDeveloper and the BPEL Process Manager seperate?
Thx

Replacement of Custom Identity Service in 11g

Hi,
I have several BPEL processes (10.1.2) with workflow and have been using Custom Identity Service (configuring is_config.xml) which talks to my database for user and groups etc. What is the mechanism for this in 11g now that is_config.xml is gone?
Any documentation will be great.
Thanks in advance.
Bipul.

I have been able to successfully implement a custom identity service (pulls users from an Oracle DB). I can select it from the SOA Worklist Application realm drop down and log in with my users.
I'm wondering, however, if there is a way to mimic this behavior from the BPEL Console and/or from a Java program that utilizes the Worklist APIs. From the BPEL Console, I can initiate my process with no problem but in the Audit trail, it complains about the task not being assigned to a user in the "jazn.com" realm. (That's because the user is defined in my Custom Realm.)
In my Java application, although I created a workflowContext by passing in the name of my custom realm, I get the same error mentioned above.
I ended up having to change the default realm in my local server's is_config.xml from jazn to my Custom Realm. Is there a way to specify what realm to use for each process without having to change the default each time?

Simple Custom Identity Service running on windows OK, but not on linux, y?

In <Oracle® BPEL Process Manager Developer's Guide 10g Release 2 (10.1.2)
B14448-03>,
Part III, 16<Oracle BPEL Process Manager Workflow
Services, Identity Service, Creating a Custom Identity Service Plug-in>
My pc, OS:windows 2003+BPEL PM Server10.1.2
Server, OS:linux+ias+OC4J_BPEL, i can't make sure the version, may be:10.1.2
In the Developer's Guide say:
Identity Service has 3 provider:
1, JAZN Provider
2,Third-party LDAP Directories
3,CUSTOM Repository LDAP-Based Plug-ins
so i like the third one.
1, i compile the project in Oracle_Home\integration\orabpel\samples\hw\isplugin\db.
Then it create a jar file(IS-DBPlugin.jar) in Oracle_Home\integration\orabpel\system\services\lib
2,Modify the provider config file: is_config.xml
modify the config file: application.xml
restart the Oracle BPEL server
3,run the sql files it provider int the polsql.cmd
OK, now the Identity Service work on Oracle lite database, it's my needs.
add a user into the tables
use the url:http://localhost:9700/integration/worklistapp/Login
i can login the worklist service use my custom user and password.
when the Identity Service use the JAZN Provider(XML), it's default choice.i add a user into the xml files, i mast restart my server if i want use the user login.
use the database plugin,when i insert a user name into the tables,i can login the service use the username immediately.
So i think it's easy to move it to my server(linux os). but when i copy the jar file to the folder,modify the config files,run ths sql files in the oracle database.
but when i open the url :http://server_ip:port/integration/worklistapp/Login
it can not work with a simple error message:Worklist service Identity Service error.
in the log files i find some message like this :
SOAP-ENV:Server.Exception
BPEL-10551 can not load the Custom Identity Service Class:
"IdentityServiceCustomPlugin.CustomIdentityService"
it has wasted me one week time. and i can't find the reason now.
who can help me ?
thanks
cnboy

clemens,thanks.
i'm sorry that my English is poor.so i can't understand you mean completely.
you say it might be a linux jvm reason, can the metter be resolved?
and you say extract the jar file .which files i would extract,can you say particular?
thx!

Issue in setting custom identity service for soa 11.1.1.4

Hello,
I am facing issue in setting custom identity service for soa 11.1.1.4
It is not picking up the implemented UserManager (in custom IDM) implemented via ServiceProvider and IdentityStoreService.
This is configured in jps-config.xml
The same setup was working in soa 11.1.1.2
I believe there is a change done in JpsProvider in bpm-service.jar to authenticate via default login context from oracle.security.jps.internal.jaas.module.authentication.JpsUserAuthenticationLoginModule
If my uderstanding is correct,
Please guide me in implementing custom identity store and services for bpm services for soa 11.1.1.4
Tried various work arounds but no luck.
Thanks
Bala

Hi...
Can u tell me how did u set up custom identity service for 11.1.1.2 ?
Thanks

Custom Identity Service configuration in SOA Suite 11g

Has anyone been successfull in using custom identity service (available in 10.1.3.X) as a identity store in soa suite 11g human workflow component? If yes, please guide me.

Can you make sure your helloworld is using adf bindings as mentioned in thread Re: Urgent :: 11g Invoking Composite from Java/From Webservice Proxy

Custom Identity Service for BPEL

Hi
Has anyone created a Custom Identity Service for BPEL workflow authentication.
Please reply back.
Thanks
Mudassar

Is there a document somewhere that actually describes how to add the plugin to the Process Manager Identity Service? More specifically, requirements for packaging up the plugin module, which folder to place the module in, ALL of the configuration files that need to be updated, etc.?
So far documents such as the BPEL Developers Guide, BPEL Process Manager Administrator's Guide, and various online sources have been moderately helpful but it seems like there are a lot of missing details as to actually getting a custom Identity Service plugin module working.

Custom Identity Service - E-Business Suite

Hi
Just wondering if anyone has looked into creating a custom BPEL Identity Service Plug-in for E-Business Suite?
I'm not sure if we need to do this yet for a client, but if anyone had tried it would be great to here about any issues you came across or whether you got it to work....
Any help greatly appreciated.
Chris

The easiest integration with DB repository is to use Oracle Virtual Directory ( OVD) database adapter.
You can write custom Plug-ins code using IdentityService APIs for 10.1.2 and 10.1.3 releases.
But we deprecated the approach and recommend to use OVD for customization for 11 release.
I have tested OVD with BPEL IdentityService LDAP provider. It works well even for 10.1. release.
That approach simplifies the mapping between LDAP inetOrgPerson and groupOfUnuiqueNames objectClasses and DB schema.
I can help you with OVD configuration.

How to create a user in Opensso Identity Service Webservices api?

Hi All,
I am getting struck with the creation of user in OpenSSO through the webservices api they are providing.
I used the following wsdl link to create the API's. http://localhost:8080/opensso/identityservices?WSDL
Now my requirement is, i have to create a user profile through the program which has the api create(identity,admin) created by the WSDL link.
Here identity is the com.sun.idsvcs.IdentityDetails and admin is the com.sun.idsvcs.Token. I want to append givenName,cn,sn,userPassword in that. But dont have any idea how to given these details in IdentityDetails. If anyone give any sample solution i can follow.
Any Help Greatly Appreciated.
Thanks in Advance.
With Regards,
Nithya.

Hey, I've managed to implement OpenSSO user registration through SOAP.
My code is:
package ru.vostrets.service.implementation.helper.opensso;
import ru.vostrets.model.person.Person;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.stereotype.Service;
import ru.vostrets.dao.PropertiesDao;
import ru.vostrets.exception.FatalError;
import com.sun.identity.idsvcs.opensso.*;
import java.util.HashMap;
import java.util.Map;
import org.slf4j.LoggerFactory;
import org.slf4j.Logger;
import ru.vostrets.exception.ConfigurationError;
* @author Kuchumov Nikolay
* email: [email protected]
@Service
public class OpenSsoPersonServiceHelper
     private enum AttributeName
          USER_NAME("uid"),
          PASS_WORD("userpassword"),
          GIVEN_NAME("givenname"),
          FAMILY_NAME("sn"),
          FULL_NAME("cn"),
          EMAIL("mail");
          private final String name;
          AttributeName(String name)
               this.name = name;
          public String getName()
               return name;
     private static final Logger LOG = LoggerFactory.getLogger(OpenSsoPersonServiceHelper.class);
     private PropertiesDao propertiesDao;
     public void create(Person person)
          try
               IdentityServicesImplService service = new IdentityServicesImplService();
               IdentityServicesImpl servicePort = service.getIdentityServicesImplPort();
               java.util.List<java.lang.String> attributeNames = null;
               Token subject = new Token();
               subject.setId(request.getParameter("token"));
               UserDetails results = servicePort.attributes(attributeNames, subject);
               for (Attribute attribute : results.getAttributes())
                    LOG.info("************ Attribute: Name = " + attribute.getName() + ", Values = " + attribute.getValues());
               LOG.info("Roles = " + results.getRoles());
               IdentityDetails identity = newIdentity
                         person.getCredentials().getUserName(),
                         getAttributes(person)
                * Creates an identity object with the specified attributes.
                * @param admin Token identifying the administrator to be used to authorize
                * the request.
                * @param identity object containing the attributes of the object
                * to be created.
                * @throws NeedMoreCredentials when more credentials are required for
                * authorization.
                * @throws DuplicateObject if an object matching the name, type and
                * realm already exists.
                * @throws TokenExpired when subject's token has expired.
                * @throws GeneralFailure on other errors.
               servicePort.create
                         identity,
                         authenticateAdministrator()
          catch (DuplicateObject_Exception exception)
               throw new UserAlreadyExistsError();
          catch (Exception exception)
               //GeneralFailure_Exception
               //NeedMoreCredentials_Exception
               //TokenExpired_Exception
               throw new FatalError(exception);
     private Token authenticateAdministrator()
          try
               IdentityServicesImplService service = new IdentityServicesImplService();
               IdentityServicesImpl servicePort = service.getIdentityServicesImplPort();
               if (propertiesDao.get().getAuthentication().getOpenSso().getAdministrator().getUserName() == null
                         || propertiesDao.get().getAuthentication().getOpenSso().getAdministrator().getPassWord() == null)
                    throw new ConfigurationError("OpenSSO administration properties not initialized");
                * Attempt to authenticate using simple user/password credentials.
                * @param username Subject's user name.
                * @param password Subject's password
                * @param uri Subject's context such as module, organization, etc.
                * @return Subject's token if authenticated.
                * @throws UserNotFound if user not found.
                * @throws InvalidPassword if password is invalid.
                * @throws NeedMoreCredentials if additional credentials are needed for
                * authentication.
                * @throws InvalidCredentials if credentials are invalid.
                * @throws GeneralFailure on other errors.
               Token token = servicePort.authenticate
                         propertiesDao.get().getAuthentication().getOpenSso().getAdministrator().getUserName(),
                         propertiesDao.get().getAuthentication().getOpenSso().getAdministrator().getPassWord(),
               LOG.info("******************************** Admin token: " + token.getId());
               return token;
          catch (Exception exception)
               throw new FatalError(exception);
          com.sun.identity.idsvcs.opensso.IdentityServicesImplService service = new com.sun.identity.idsvcs.opensso.IdentityServicesImplService();
          QName portQName = new QName("http://opensso.idsvcs.identity.sun.com/" , "IdentityServicesImplPort");
          String request = "<authenticate xmlns=\"http://opensso.idsvcs.identity.sun.com/\"><username>ENTER VALUE</username><password>ENTER VALUE</password><uri>ENTER VALUE</uri></authenticate>";
          try
               // Call Web Service Operation
               Dispatch<Source> sourceDispatch = null;
               sourceDispatch = service.createDispatch(portQName, Source.class, Service.Mode.PAYLOAD);
               Source result = sourceDispatch.invoke(new StreamSource(new StringReader(request)));
          catch (Exception exception)
               // TODO handle custom exceptions here
     private Attribute newAttribute(AttributeName name, Object value)
          Attribute attribute = new Attribute();
          attribute.setName(name.getName());
          attribute.getValues().add(value.toString());
          return attribute;
     private Map<AttributeName, Object> fillAttributes(Map<AttributeName, Object> attributes, Person person)
          attributes.put(AttributeName.USER_NAME, person.getCredentials().getUserName());
          attributes.put(AttributeName.PASS_WORD, person.getCredentials().getPassWord());
          attributes.put(AttributeName.GIVEN_NAME, person.getPersonal().getGivenName());
          attributes.put(AttributeName.FAMILY_NAME, person.getPersonal().getFamilyName());
          attributes.put(AttributeName.FULL_NAME, person);
          attributes.put(AttributeName.EMAIL, person.getContacts().getEmail());
          return attributes;
     private Map<AttributeName, Object> getAttributes(Person person)
          return fillAttributes(new HashMap<AttributeName, Object>(), person);
     private IdentityDetails newIdentity(Object name, Map<AttributeName, Object> attributes)
          IdentityDetails identity = new IdentityDetails();
          identity.setName(name.toString());
          return fillAttributes(identity, attributes);
     private IdentityDetails fillAttributes(IdentityDetails identity, Map<AttributeName, Object> rawAttributes)
          for (Map.Entry<AttributeName, Object> rawAttribute : rawAttributes.entrySet())
               identity.getAttributes().add(
                         newAttribute(rawAttribute.getKey(), rawAttribute.getValue()));
          return identity;
     @Autowired
     public void setPropertiesDao(PropertiesDao propertiesDao)
          this.propertiesDao = propertiesDao;
}

Java.sql.SQLException: Closed Connection from Custom Identity Service

Hi,
Here is an issue I am trying to resolve:
Platform: Oracle BPEL 10.1.2
OS: Red Hat Enterprise Linux ES release 4 (Nahant Update 4)
Please note that the whole thing has been working in other same type of installations (e.g. RedHat, Windows, Developer BPEL on Windows & Linux) but this seems to be something special on this server. Any help will be appreciated:
This actually work for sometime (2-3 hours) and then suddenly stops working even if we don't do any transaction on it.
Thanks,
Bipul Dutta.
Error stack:
09/08/17 12:45:25 CustomIdentityService::authenticateUser():: begin
############# inside authenticateUser
09/08/17 12:45:25 CustomIdentityService::user authenticated
############# inside getUser()
09/08/17 12:45:25 java.sql.SQLException: Closed Connection
09/08/17 12:45:25      at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:137)
09/08/17 12:45:25      at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:174)
09/08/17 12:45:25      at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:239)
09/08/17 12:45:25      at oracle.jdbc.driver.PhysicalConnection.prepareStatement(PhysicalConnection.java:930)
09/08/17 12:45:25      at oracle.jdbc.driver.PhysicalConnection.prepareStatement(PhysicalConnection.java:826)
09/08/17 12:45:25      at oracle.tip.pc.services.identity.FAMDBProvider.getUser(FAMDBProvider.java:418)
09/08/17 12:45:25      at oracle.tip.pc.services.identity.FAMCustomIdentityService.lookupUser(FAMCustomIdentityService.java:101)
09/08/17 12:45:25      at oracle.tip.pc.services.hw.worklist.WorklistService.authenticateUser(WorklistService.java:333)
09/08/17 12:45:25      at com.famis.web.service.core.humanworkflow.service.AbstractTaskWebService.getBpelContext(AbstractTaskWebService.java:20)
09/08/17 12:45:25      at com.famis.web.service.core.humanworkflow.service.GetTasksWebServiceImpl.process(GetTasksWebServiceImpl.java:51)
09/08/17 12:45:25      at com.famis.web.service.core.humanworkflow.service.TaskWebServiceImpl.process(TaskWebServiceImpl.java:68)
09/08/17 12:45:25      at sun.reflect.GeneratedMethodAccessor9.invoke(Unknown Source)
09/08/17 12:45:25      at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
09/08/17 12:45:25      at java.lang.reflect.Method.invoke(Method.java:324)
09/08/17 12:45:25      at org.apache.axis.providers.java.MsgProvider.processMessage(MsgProvider.java:141)
09/08/17 12:45:25      at org.apache.axis.providers.java.JavaProvider.invoke(JavaProvider.java:323)
09/08/17 12:45:25      at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
09/08/17 12:45:25      at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
09/08/17 12:45:25      at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
09/08/17 12:45:25      at org.apache.axis.handlers.soap.SOAPService.invoke(SOAPService.java:454)
09/08/17 12:45:25      at org.apache.axis.server.AxisServer.invoke(AxisServer.java:281)
09/08/17 12:45:25      at org.apache.axis.transport.http.AxisServlet.doPost(AxisServlet.java:699)
09/08/17 12:45:25      at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
09/08/17 12:45:25      at org.apache.axis.transport.http.AxisServletBase.service(AxisServletBase.java:327)
09/08/17 12:45:25      at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
09/08/17 12:45:25      at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:835)
09/08/17 12:45:25      at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:341)
09/08/17 12:45:25      at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:816)
09/08/17 12:45:25      at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:231)
09/08/17 12:45:25      at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:136)
09/08/17 12:45:25      at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:192)
09/08/17 12:45:25      at java.lang.Thread.run(Thread.java:534)
<2009-08-17 12:45:25,877> <ERROR> <tmobilet.collaxa.cube.services> <PCException::<init>> User is not found.
<2009-08-17 12:45:25,877> <ERROR> <tmobilet.collaxa.cube.services> <PCException::<init>> User "BSAUNDE4" is not found in realm "tmobilet".
<2009-08-17 12:45:25,877> <ERROR> <tmobilet.collaxa.cube.services> <PCException::<init>> Check the error stack and fix the cause of the error. Contact
Edited by: user11798418 on Aug 17, 2009 10:30 AM

>
I have my application jar on the server, and launch this JFrame application from the browser. ><zen question>
Which particular 'the browser'? What version of what browser running on what OS?
</zen question>
The reason I ask is that it is up to the browser to call an applet's stop()/destroy() methods and if they do not do so - there is almost nothing we as developers can do about it.
If you need such reliable shut down behaviour, it would be best to launch the applet or frame using Java Web Start.

LDAP Identity Service

Hi
Another question. Is an LDAP version of the Identity service on the way? Is it possible to integrate a custom Identity service into the BPEL Designer/PM?
Best wishes
John Prince

Hi John,
Yes the BPEL PM 10.1.2 does support LDAP for Human Workflow as well as Engine. The documentation for the same is under construction. Please Send me a mail on collaxa_support_us.oracle.com, and I will reply as soon as the documentation is available.
Dhaval

How to assign Tasks to other users using Exchange Web Service.

How to assign Tasks to other users using Exchange Web Service.
Any workaround also would help

Hi Glen,
I am trying to use ExtendedPropertyType and put in UpdaterItemType as in this code as below. Although it is not updating the Owner
field.
I have tried it both by Propertyname and PropertyID. Although new custom property's canbe
added but to change an existing one like 'Owner' ? Would this be the right method.
2. And Is ProprertyID a fixed value as 0x811f or does it need to be calculated.
3. Is 'Owner' the right propertname for assigning a task ?
Thanks a lot.
Please see code below for reference.
PathToExtendedFieldType pathExtended = new PathToExtendedFieldType();
//pathExtended.DistinguishedPropertySetId = DistinguishedPropertySetType.PublicStrings;
pathExtended.DistinguishedPropertySetId = DistinguishedPropertySetType.Task;
pathExtended.DistinguishedPropertySetIdSpecified = true;
pathExtended.PropertyId = 0x811f;
pathExtended.PropertyIdSpecified = true;
//pathExtended.PropertyName = "Owner";
pathExtended.PropertyType = MapiPropertyTypeType.String;
ciSetAT.ExtendedProperty = new ExtendedPropertyType[1];
ciSetAT.ExtendedProperty[0] = new ExtendedPropertyType();
ciSetAT.ExtendedProperty[0].ExtendedFieldURI = pathExtended;
ciSetAT.ExtendedProperty[0].Item = "[email protected]";
SetItemFieldType set1 = new SetItemFieldType();
set1.Item = pathExtended;
set1.Item1 = ciSetAT;
UpdateItemType request = new UpdateItemType();
request.ItemChanges = new ItemChangeType[1] { new ItemChangeType() };
request.ItemChanges[0].Item = itemId;
request.ItemChanges[0].Updates = new ItemChangeDescriptionType[2];
request.ItemChanges[0].Updates[0] = setstart;
request.ItemChanges[0].Updates[1] = set1;

Help:Invoke web service after receiving a user task response

Hi, All:
We encountered a problem while developing user task. The detail is as follows:
We need to invoke a web service after a user task's response, that is to say, the web service needs some data from the response of the user task.
Take the loan flow tuturial as a example, what we need to do is to invoke a web service after the BPEL process get the start loan APR. the web service needs the APR for its input message. how can I handle this situation?
Thank you very much for your help!

Thanks for your immediate response Jan Vervecken.
I have created the Data Control from web Service proxy and I am able to recieve the output from the web Service.
But, Currently I am invoking the webservice process method by a command button which populates my SelectOneChoice.
My requirement is to invoke the web service 'process' method by value change event in the SelectOnechoice control.
So, Can you pls. let me know how do I bind the web Service method 'process' to value change event of SelectOnechoice control?
Thanks and Regards,
Sandeep T

Identity service cannot find user

Installed BPEL 10.1.2
added user using jazn.jar
Now trying to log into worklist sample application
and I get identity service cannot find user. Do I need to assign any role(s) to new user.
Let me know.
I am seeing simple questions not getting answers. Is this an Active Forum?
Thanks
Raghu

closed
for OAS 10.1.2.0.2. & BPEL PM 10.1.2.0.2
I Install BPEL in MiddleTire
1. ./runInstaller
2. home = OAS home
3. tea
4. emctl stop em
emctl start em
5. Oracle_Home\opmn\bin\opmnctl stopproc ias-component=OraBPEL
Oracle_Home\opmn\bin\opmnctl startproc ias-component=OraBPEL
6. if OID working throw SSL, then 7,8 else 9
7. edit file Oracle_Home\j2ee\OC4J_BPEL\config\jazn.xml
     <jazn provider="LDAP" location="ldap://host:636" default-realm="us">
          <property name="ldap.user" value="cn=orcladmin"/>
          <property name="ldap.password" value="!welcome1"/>
          <property name="ldap.protocol" value="ssl"/>
     </jazn>
8. edit file Oracle_Home\integration\orabpel\system\services\config\is_config.xml
     <BPMIdentityServiceConfig
     xmlns="http://www.oracle.com/pcbpel/identityservice/isconfig">
          <provider providerType="JAZN" name="oid" >
               <connection url="ldap://host:636" binddn="cn=orcladmin"
                    password="welcome1" encrypted="false">
                    <property name="securityProtocol" value="ssl" />
               </connection>
          </provider>
     </BPMIdentityServiceConfig>
then 11
9. edit file Oracle_Home\j2ee\OC4J_BPEL\config\jazn.xml
     <jazn provider="LDAP" location="ldap://host:389" default-realm="us">
          <property name="ldap.user" value="cn=orcladmin"/>
          <property name="ldap.password" value="!welcome1"/>
     </jazn>
10. edit file Oracle_Home\integration\orabpel\system\services\config\is_config.xml
     <provider providerType="JAZN" name="oid" >
          <connection url="ldap://host:389" binddn="cn=orcladmin"
               password="welcome1" encrypted="false"/>
          </connection>
     </provider>
11. edit file Oracle_Home\j2ee\OC4J_BPEL\application-deployments\hw_services\orion-application.xml
     <jazn provider="LDAP" location="ldap://host:389" default-realm="us" >
          <jazn-web-app auth-method="SSO"/>
     </jazn>
12. Oracle_Home\opmn\bin\opmnctl stopproc ias-component=OraBPEL
Oracle_Home\opmn\bin\opmnctl startproc ias-component=OraBPEL
II Deploy BPEL portlets
1. throw EM add EAR to OC4J_BPEL:
     fie: $ORACLE_HOME/integration/orabpel/system/services/lib/bpelportlet.ear
     а. Parent app = orabpel
     б. User Manager = Use JAZN LDAP User Manager
2. edit file Oracle_Home\j2ee\OC4J_BPEL\application-deployments\bpelPortlet\orion-application.xml
     <jazn provider="LDAP" location="ldap://host:port" default-realm="us" >
          <jazn-web-app auth-method="SSO"/>
     </jazn>
3.Oracle_Home\opmn\bin\opmnctl stopproc ias-component=OraBPEL
Oracle_Home\opmn\bin\opmnctl startproc ias-component=OraBPEL
4. Register BPEL provider
     http://bpel_host:bpel_port/BPELPortlet/providers
     а. Login Frequency = Once Per User Session
636 - OID SSL port
389 - OID non SSL port

What role needs to be assigned to the user to access existing custom OData services?

Hi all,
What role needs to be assigned to the user to access existing custom OData services?
With SAP ALL its working. But cannot assign that to all users. Whats the specific role for this?
I tried with /IWFND/RT_GW_USER. But it says the role does not exist.
Thank you,
Achu

Hi,
As usual you need to build a role by yourself based on your requirements. In case of Odata services there are two different TADIR services that needs to be added. One corresponds to authorization to execute logic on backend server and the other one to access service on front end server. You can get specific services by tracing one call using ST01. For Fiori apps from SAP you get role templates. You can use them for inspiration.
Cheers

User Task: Custom Identity Service

Similar Messages

Maybe you are looking for