IOM EBS UM connector

Similar Questions

• IOM PS3 11.1.2.3.0 - EBS UM connector Resposibilities (rights) not appearing is not self-service

  We have a new installation of PS3 and I completed the installation of the EBS UM connector.

  I ran all of the planned works.

  Research are imported.

  I see that all the responsibilities listed in the Console Design.

  When in the self-service catalog, no rights do appear.

  I created a user IOM and corresponded to a EBS user then ran labor reconciliation and that put up-to-date user IOM with the responsibilities of the EBS, so I know it works, but still I can not add any payment for this user (or any other user by the way.)

  I must be missing something in this configuration.

  What should I check to find out why none of the responsibility appear on the breast of self-service?

  I don't see any errors in the log files and I'm out of ideas...

  Change it to "Full", then run.

• IOM EBS target reconciliation

  Hi all
  We have IOM 9101 with EBS UM 9043 connector. When we run the target recon, recon query target extracted 12K user records but we see only 2.5 K user records in the reconciliation Manager. Ideally, all users read by the request of the connector must be present in the reconciliation Manager. Please correct me if I'm wrong.
  
  Does anyone of you have an idea on what's the missing piece here. Any help would be appreciated.
  
  Thank you

  Have you tried to do it in batches?

  If this isn't the case, please run the recon into lots and see if it works.

• IOM PS3 on connector DBAT and Webservice

  Hi all

  I downloaded connector DBAT and WebService and place in the connector by default Directory.But is impossible to install the connectors DBAT and WebService in IOM 11gr2ps3. I am trying to install also, I am unable to see page sysadmin to Manage connector. They are supported in 11gr2ps3 IOM? Any help is appreciated.

  Thank you

  Aditya.

  Simply copy the connector to the ConnectorDefaultDirectory. --> cp - rf Webservices - 11.1.1.5.0/app/Middleware/Oracle_IDM1/server/ConnectorDefaultDirectory /.

  You can check if you copied the right root directory, with all of the artifacts of connector under him. Also, please check if you have run the script build - connector.sh to create an instance of the connector of the IOM.

  Thank you

  Swati Pandey

• Modrdn IOM ldap and connector operations.

  Hello

  I wonder if it is possible to change the behavior of the connector ldap IOM to avoid modrdn operation when, for example, moving users from one container into another container.

  Thank you and best regards,

  German.

  Hello

  If I understand correctly, you want change OR update task OR task does not get triggered?

  If so, its possible. You just need to remove the entry from the search for relaxation on ACT_KEY.

  ~ J

• IOM 10 g connector

  Hello
  
  I have IOM 10 g installed in my PC at home. I want to do a Hands-on with any of the available STANDARD connector. Please suggest any connector where I can deploy the target also in my PC. For example, if I use the connector AD, I'll be able to deploy active directory in my PC at home as a trial version? If not, please suggest some other connector where I can do a Hands-on end-to-end with commissioning and reconciliation. I want to connect to the target and create some users and check if it is created in the IOM also during the recon. Please help me. I have 2 GB of RAM on my PC.
  
  Kind regards
  JR

  And installation begins with the dcpromo command.

  It may be useful...
  http://www.Petri.co.il/how_to_install_active_directory_on_windows_2003.htm

• IOM Exchange2010-compatible connector

  Hello
  Please let me know if any OOTB Exchange Server Connector avaialble for IOM that is compatible with Exchange server 2010
  
  Thanks in advance

  http://docs.Oracle.com/CD/E11223_01/doc.910/e11198/intro.htm#CHDGDDGJ
  v9.1.1.7 of the connector supports Exchn 2010 on Windows 2003/2008

  -Marie

• IOM - EBS - employee termination request

  I have configured the IOM (9101) with EBS HR (9043) with Weblogic 10.3.
  
  I want to know how the termination of employment. Now if I manually activate/deactivate any user, the user and disable user tasks are triggered and the user is enabled in the EBS system. But I'm not able to understand the flow of the IOM which is HR system when a user ends in the HR system (I don't know how), it will trigger the user disable the IOM.
  
  Please put some light on this case. Thank you!!!

  I've always found the status of reliable source map is not working. I suggest creating a UDF called State of EBS. Create an adaptor entity and process both to do the following:

  Check the status field. Then use api enable or disable api. On the adapter of the entity, you must only put on insert after and only check if you need to disable the user.

  Create a trigger of form (explained for many times on this forum) user. Add the task to your user profile on Xellerate. Then use the adapter that you created as an adapter to process task to enable or disable the IOM user based on the new value.

  -Kevin

• The IOM for Peoplesoft connector - you can copy a user?

  PeopleSoft inside there is a function copy of user profile that allows you to make an exact duplicate of the user, including security. We use this function when we change a user name (say someone marries).
  
  Has anyone found a way to make the IOM?
  
  Thank you.

  With the help of these imports:

  Psft.pt8.joa import. *;
  PeopleSoft.Generated.CompIntfc import. *;

  Connect

  >
  public Peoplesoft (String hostname, String port, String admin, String password) {}
  log.info (CLASS_NAME + "---> entries = hostname [" + hostname + "]")
  "] [] port" + port +.
  "] admin [] ' + admin +.
  "] password [*]"); "."
  This.HostName = hostname;
  This.port = port;
  This.admin = admin;
  This.password = password;
  this.strAppServerPath = hostname + ":" + port;
  Connect boolean = false;
  try {}
  Create the object of PeopleSoft Session *.
  oSession = API.createSession ();
       
  Connect to the App Server *.
  Connect = oSession.connect (1, strAppServerPath, admin, password, null);
  log. Debug ("login:" + connect);
  If (! connect) {}
  log. Error ("unable to connect to the application server.");
  ErrorHandler();
  return;
  }
                 
  } catch (Exception e) {}
  e.printStackTrace ();
  log. Error ("an error occurred");
  ErrorHandler();
  }

  log.info (CLASS_NAME "---> connect =" + connect);
       
  }
  >

  Creating user

  >
  public String createUser (String oprid, String oprdefndesc, String useridalias, String operpswd,
  String emplid, String emailid, String emailtype, String language_cd, String multilang_cd,
  String currencycode, String prpermissionlist, String rowpermissionlist,
  String processprofilelist, String navigatorhomelist) {}
  log.info (CLASS_NAME + ". createUser()---> entries = oprid [" + oprid + "]")
  '] oprdefndesc [] "+ oprdefndesc +.
  '] useridalias [] "+ useridalias +.
  '] operpswd [] ' + ' * ' +.
  '] emplid [] "+ emplid +.
  "] [] emailid" + emailid +.
  '] emailtype [] "+ emailtype +.
  '] language_cd [] "+ language_cd +.
  '] multilang_cd [] "+ multilang_cd +.
  "] [] currencycode" + currencycode +.
  '] prpermissionlist [] "+ prpermissionlist +.
  '] rowpermissionlist [] "+ rowpermissionlist +.
  '] processprofilelist [] "+ processprofilelist +.
  "] navigatorhomelist [" "+ navigatorhomelist +"] ");"
            
  String response = "";
  Boolean then = false;
            
  try {}
  Get the component Interface *.
  IUserProfile oUserProfile;
  String ciName;
  ciName = 'USER_PROFILE ';
  oUserProfile = oSession.getCompIntfc (ciName) (IUserProfile);
  If (oUserProfile == null) {}
  log. Error ("Can't get a component Interface" + ciName);
  ErrorHandler();
  response = "UNABLE_TO_GET_CI";
  } else {}
  Next = true;
  }
                 
  Set the Interface Mode of component *.
  oUserProfile.setInteractiveMode (false);
  oUserProfile.setGetHistoryItems (false);
  oUserProfile.setEditHistoryItems (false);
                 
  If {(next)
  Next = false;
  Boolean create = oUserProfile.create ();
  log. Debug ("Create:" + create);
  If (! create) {}
  ErrorHandler();
  response = "UNABLE_TO_CREATE";
  } else {}
  Next = true;
  }
  }
                 
  If {(next)
  Next = false;
  Define the component Interface Get/Create Keys *.
  oUserProfile.setUserID (oprid);
  oUserProfile.setUserDescription (oprdefndesc);
  oUserProfile.setUserIDAlias (useridalias);
  oUserProfile.setPrimaryPermissionList (prpermissionlist);
  oUserProfile.setRowSecurityPermissionList (rowpermissionlist);
  oUserProfile.setProcessProfilePermissionList (prpermissionlist);
  oUserProfile.setNavigatorHomePermissionList (navigatorhomelist);
  oUserProfile.setLanguageCode (language_cd);
  oUserProfile.setCurrencyCode (currencycode);
  If (multilang_cd.equals("0")) {}
  oUserProfile.setMultiLanguageEnabled (BigDecimal.valueOf (0));
  } else {}
  oUserProfile.setMultiLanguageEnabled (BigDecimal.valueOf (1));
  }
       
  If (emailid.trim () .length () == 0) {}
  If (emailtype.trim () .length () == 0) {}
  Set/Get EmailAddresses Collection field properties - Parent: PS_ROOT Collection
  IUserProfileEmailaddressesCollection oEmailAddressesCollection;
  IUserProfileEmailaddresses oEmailAddresses;
  oEmailAddressesCollection = oUserProfile.getEmailAddresses ();
  oEmailAddresses = oEmailAddressesCollection.item (0);
  oEmailAddresses.setEmailType (emailtype);
  oEmailAddresses.setEmailAddress (emailid);
  oEmailAddresses.setPrimaryEmail("Y");
  } else {}
  log. Debug ("emailtype is empty, not setting do not email address");
  }
  } else {}
  log. Debug ("emailid is empty, not setting do not email address");
  }
                      
       
  Set/Get IDTypes Collection field properties - Parent: PS_ROOT Collection
  IUserProfileIdtypesCollection oIDTypesCollection;
  IUserProfileIdtypes oIDTypes;
  oIDTypesCollection = oUserProfile.getIDTypes ();
  oIDTypes = oIDTypesCollection.item (0);
  If (emplid.trim () .length () == 0) {}
  oIDTypes.setIDType ('NO');
  } else {}
  oIDTypes.setIDType ("EMP");
  Set/Get attributes Collection field properties - Parent: IDTypes Collection
  IUserProfileIdtypesAttributesCollection oAttributesCollection;
  IUserProfileIdtypesAttributes oAttributes;
  oAttributesCollection = oIDTypes.getAttributes ();
  oAttributes = oAttributesCollection.item (0);
  oAttributes.setFieldname ("COST");
  oAttributes.setRecname ("PERSONAL_DATA");
  oAttributes.setAttributeName ("COST");
  oAttributes.setAttributeValue (emplid);
  }
                      
  oUserProfile.setSymbolicID ("SYSADM1");
  oUserProfile.setPassword (operpswd, operpswd);
  Boolean save = oUserProfile.save ();
  log. Debug ("Save:" + save);
                      
  If (! save) {}
  ErrorHandler();
  response = "UNABLE_TO_SAVE";
  } else {}
  response = "SUCCESS";
  }
  Next = true;
  }
                 
  Boolean cancel = oUserProfile.cancel ();
  log. Debug ("Cancel:" + cancel);
  If (! cancel) {}
  ErrorHandler();
  response = "UNABLE_TO_CANCEL";
  }

  } catch (JOAException e) {}
  e.printStackTrace ();
  log. Error ("an error occurred");
  ErrorHandler();
  response = "ERROR";
  }
            
  log.info (CLASS_NAME + ". createUser()---> response =" + response);
  send the response;
       
       
  }
  >

  Add a role

  >
  public String addRole (String oprid, String role) {}
  log.info (CLASS_NAME + ". addRole()---> entries = oprid [" + oprid + "]")
  "] role [" + role + "']"); "
  String response = "";
  Boolean then = false;
            
  try {}
  Get the component Interface *.
  IUserProfile oUserProfile;
  String ciName;
  ciName = 'USER_PROFILE ';
  oUserProfile = oSession.getCompIntfc (ciName) (IUserProfile);
  If (oUserProfile == null) {}
  log. Error ("Can't get a component Interface" + ciName);
  ErrorHandler();
  response = "UNABLE_TO_GET_CI";
  } else {}
  Next = true;
  }
                 
                 
                 
  If {(next)
  Next = false;
  oUserProfile.setUserID (oprid);
  Run Get *.
  Boolean get = oUserProfile.get ();
  log. Debug ("Get:" + get);
  If (! to) {}
  log. Error ("no line does exist for the specified keys. Unable to get the component Interface. ») ;
  ErrorHandler();
  response = "UNABLE_TO_GET_USER";
  } else {}
  Next = true;
  }
  }

  If {(next)
  Next = false;
  Set the Interface Mode of component *.
  oUserProfile.setInteractiveMode (false);
  oUserProfile.setGetHistoryItems (false);
  oUserProfile.setEditHistoryItems (false);
                      
  IUserProfileRolesCollection oRolesCollection;
  IUserProfileRoles oRoles.
  oRolesCollection = oUserProfile.getRoles ();
  oRoles = oRolesCollection.insertItem (oRolesCollection.getCount () - 1);
  for (int l = 0; l)< orolescollection.getcount();="" l++)="">
  If (role.equalsIgnoreCase (oRolesCollection.item (l) .getRoleName ())) {}
  response = "ROLE_ALREADY_EXISTS";
  break;
  }
  If (l == oRolesCollection.getCount () - 1) {}
  oRoles.setRoleName (role);
  Next = true;
  }
  }
  }
                 
  If {(next)
  Next = false;
  Boolean save = oUserProfile.save ();
  log. Debug ("Save:" + save);
                      
  If (! save) {}
  ErrorHandler();
  response = "UNABLE_TO_SAVE";
  } else {}
  response = "SUCCESS";
  }
  Next = true;
  }
                      
                 
  Boolean cancel = oUserProfile.cancel ();
  log. Debug ("Cancel:" + cancel);
  If (! cancel) {}
  ErrorHandler();
  response = "UNABLE_TO_CANCEL";
  }
                           
                 
  } catch (JOAException e) {}
  e.printStackTrace ();
  log. Error ("an error occurred");
  ErrorHandler();
  response = "ERROR";
  }
            
  log.info (CLASS_NAME + ". addRole()---> response =" + response);
  send the response;
  }
  >

  There are a few examples from.

  -Kevin

• AD IOM connector install and reconciliation does not trust

  I'm new to IOM and installation and put in place the first time. SO I have my done basic installation now and now try to AD, install and run "Active Directory user Trusted Reconcilation". When I run the reconciliation I get the following error
  oracle.iam.connectors.icfcommon.exceptions.IntegrationException: connector ConnectorKey (connectorName bundleName = ActiveDirectory.Connector bundleVersion = 1.1.0.6380 = Org.IdentityConnectors.ActiveDirectory.ActiveDirectoryConnector) not found
  
  
  I have my setup envirnoment in the following way:
  Server: IOM
  Server b: connector
  Server C: AD domain controller
  
  I did the following.
  1. install and configure the connector on the server B Server
  2. turn the key to the connector server
  2. install the connector in IOM
  3. copy the ActiveDirectory.Connector - 1.1.0.6380.zip in Server Connector Home-> Identity Server Connectors\Connector
  4. run PurgeCache.sh All
  
  Please let me know what I can do to fix the error I get.
  
  Thanks in advance.
  Neha

  1. stop the connector server.

  2. from the installation media, copy and extract the contents of the bundle/ActiveDirectory.Connector-1.1.0.6380.zip file in the CONNECTOR_SERVER_HOME directory.

  Please note that the files in the zip file must directly go into the connector home server, not in another directory like ' ActiveDirectory.Connector - 1.1.0.6380' under Server Connector home.»

  3. start the connector for the bundle of connector server to be picked up by the server of the connector.

  Kind regards
  Sunny

• Installation of the IOM before OIM Design Console connector

  Is OIM Design console installation and Configuration required for IOM beginning of connector?

  No, because as long as you do not plan to do any customizations and will stick with the STANDARD connector.

  -Marie

• IOM 11 GR 2 Exchange PostCreate action scripts and put an end to the user

  Hi all
  
  I have the following requirement
  
  1. I need to call a powershell script of IOM, once I created the user.
  I have the script on my server connector, where the exchange management tools are installed. And I am able to run the powershell script.
  
  I also wrapped the powershell in a bat placed on the connectr server file
  @pushd "c:\myscripts".
  PrimarySmtpAddress % PowerShell.\PostUserCreation.ps1
  @popd
  
  And in my configuration of exchange, I have the following
  
  After the Action create a file c:\postcreateuser.bat
  After you create the Action command language
  Create after Action target connector
  
  When I try to create a user, it gives me an error invalid action

  There is error in the documentation.
  You should install "Shell" instead of "cmd" in the language settings.
  And the script file must be placed in the server of the IOM, not the connector.

• Help required with political relaxation user access allow IOM 11.1.1.5

  Hi Experts,
  
  My scenario is:
  
  I have configured the SIEBEL OOTB connector with my 11.1.1.5.0 IOM
  
  Note:
  Siebel connector does not support the toggle feature to target siebel. He just create or delete the account. There not also "allow the user' and 'Disable user' of the tasks of the PD of the SIEBEL process.
  
  My requirement:
  (1) assumes that if I disable the user in the profile of the IOM, it should revoke account SIEBEL
  (2) after that if I do user will allow IOM profile, it should again available SIEBEL RO.
  
  What I did:
  
  I created a user 'disable' in the definition of process of SIEBEL and the success of this I have called 'delete user '. So my revoke that happens after disabling the user profile of the IOM.
  
  But once I do activate in IOM, the Siebel user profile only is not provsioned because Enable is triggering not available Siebel access strategy.
  
  Can you please suggest what is the best way to implement "on Enable in the user profile IOM, how to set up a resource '?
  
  Kind regards
  J

  Well as long as you're not worried about the projected state wrong on the profile or as part of the audit; He would give you the hook to turn tasks.

  -Marie

• Primary attributes of AD account synchronization with orchestration

  Hi all

  Here's what could be another newbie question.

  I spin IOM 11.2.2.0 with EBS as connector trust and AD as a target.

  For some reason any for a number of users, currently unknown, orchestration does not seem to have worked and the work that is supposed to retry failed orchestrations has no apparent effect. For example, we have an event handler that is supposed to assign an office and the region on the basis of the unit in which a user is located, but for some users, the devices have not been resolved.

  Or worse, for some users, these attributes are correctly defined in the identity of the IOM, but are not defined in the ad, so apparently orchestration has failed or has not happened. Retry failed orchestrations again has no effect.

  So is there a way I can force synchronization? I thought about studying the orc table to see if I can start the orchestration by creating 'failed' type records there, but that doesn't seem the kind of thing that oracle is recommended. So is it possible to do official synchronization forced for a given user - IE the orchestration on each attribute of each target connected?

  Thanks in advance!

  -Mark

  So I found a way to do this. And I also understand why it was happening.

  Basically some users had had changes to their data before the AD account has been linked. So naturally the changes had not been provisioned.

  However, it is really easy to solve. First, I wrote a query to search for users,

  -- Users needing End Date syncrhonization
  select usr_login, usr.USR_END_DATE, ad.UD_ADUSER_EXPIRATIONDATE
  from usr
    join oiu on oiu.usr_key = usr.usr_key
      and oiu.ACCOUNT_TYPE = 'primary'
    join ud_aduser ad on oiu.orc_key = ad.orc_key
  where usr.usr_end_date != ad.UD_ADUSER_EXPIRATIONDATE
  and usr.usr_status != 'Deleted'
  order by usr_end_date desc
  ;
  

  Then, I wrote this API code.

   public void processCSV() {
          UserManager userService = oimClient.getService(UserManager.class);
          Calendar cal = GregorianCalendar.getInstance();
          try {
              CSVReader reader = new CSVReader(new FileReader(filename));
              String [] line;
              reader.readNext();
              while ((line = reader.readNext()) != null) {
                  if (line.length == 0 ) {
                      return;
                  }
                  String oimLogin = line[0];
                  System.out.println("OIM Username: " + oimLogin);
                  User user = this.getUserByLogin(oimLogin);
                  if (user == null) continue;
                  System.out.println(user.toString());
                  System.out.println(user.getLogin());
                  if (dryrun) continue;
                  User updates = new User(user.getEntityId());
                  cal.setTime(user.getEndDate());
                  cal.add(GregorianCalendar.DATE, 1);
                  updates.setEndDate(cal.getTime());
                  userService.modify(updates);
                  updates.setEndDate(user.getEndDate());
                  userService.modify(updates);
              }
          } catch (Exception e) {
              e.printStackTrace();
          }
      }
  

  The trick is to change to something else - in this case, I moved it one day - and then put this back.

  All event handlers function and data are supplied to AD.

• WSConnector - SOAPFaultException: the <>value is invalid

  Hello

  I'm trying to integrate our Application WS by IOM using WS connector. I followed the documentation of Webservices - 11.1.1.5.0.zip and everything must be properly configured, but I have a bug somewhere because an exception is produced so that the provision of a user.

  This is the error message:

  [2014 11-14 T 14: 13:07.320 + 01:00] [wls_oim1] [ERROR] [] [ORG. IDENTITYCONNECTORS. GENERICWS. GENERICWSCONNECTOR] [tid: [ASSETS].] [ExecuteThread: '5' for the queue: "(self-adjusting) weblogic.kernel.Default"] [username: xelsysadm] [ecid: 37aaca732af85bed:-13286 d 96: 149adf1ff39 :-8000-0000000000000413,0] [APP: IOM #11.1.2.0.0] [IDDM: 0000KaiNsqS4iow6wF2jMG1KPTyy00000J] org.identityconnectors.genericws.GenericWSConnector: create: error creating []

  javax.xml.ws.soap.SOAPFaultException: the <>value is invalid.

  The result of-spec is null.

  The value of node or the xpath query in the node value was not valid.

  According to BPEL4WS 1.1 spec section 14.3, the node value must not be empty. Check the value of the node to the line number 137 in the BPEL source.

  at com.sun.xml.ws.fault.SOAP11Fault.getProtocolException(SOAP11Fault.java:197)

  at com.sun.xml.ws.fault.SOAPFaultBuilder.createException(SOAPFaultBuilder.java:130)

  at com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:125)

  at com.sun.xml.ws.client.sei.SyncMethodHandler.invoke(SyncMethodHandler.java:95)

  at com.sun.xml.ws.client.sei.SEIStub.invoke(SEIStub.java:136)

  to com.sun.proxy. $Proxy539.create (unknown Source)

  I've provided the revision of my maps in the WSConnector.bpel several times, but I don't see a problem here. But I don't know that it is mapping issue or any other configuration problem.

  Please, see WSConnector.bpel for more details map (https://dl.dropboxusercontent.com/u/10809948/WSConnector.bpel)

  Do you have any idea what can be wrong? Or how can I debug this problem? How can I see the data that are used in this process?

  Thank you.

  Milan

  You should be able to see what parameters are passed in composite SOA

  While calling for "create" operation. You can then activate the "development."

  mode for debugging of the assignment in the composite and composite SOA operations

  to find a default one.

  Friday, November 14, 2014 at 08:01, community-admin