OIM 11g - reconciliation of the status of resource target

Hello


We work closely with IOM 11.1.1.5.2 and DBUM 9.1.0.4 and MSAD 9.1.1.7.
Commissioning and reconciliation seem to work fine, but we found that the State of the resource is not be compared on the console of the IOM.

For example, if supply us a user with an account of Oracle database, then lock the account on the database, when we run the reconciliation, the event is generated and finished with 'update succeeded', we go to the UD_DB_ORA_U table and find that the UD_DB_ORA_U_LOCK field has a value "BLOCKED." , then if we check the newspapers, we can see that the connector is properly mapping the State of resources with purpose of IOM status:

prepareTargetUsersRecordInOIMFormat: save the value: LOCKED
prepareTargetUsersRecordInOIMFormat: map: {OPEN = enabled 1 = Disabled, YES = Disabled, 0 = active, EXPIRED & LOCKED = Disabled No. = Enabled, LOCKED = disabled}
...
prepareTargetUsersRecordInOIMFormat: roValue: TEMPORARY_TABLESPACE_QUOTA
prepareTargetUsersRecordInOIMFormat: Temp RO value: null
prepareTargetUsersRecordInOIMFormat: reconData: [{default Tablespace = 27 ~ USERS, Authentication Type = PASSWORD, password = dummy, default Tablespace = 27 ~ USERS, Authentication Type = PASSWORD, password = dummy, Quota of Tablespace default = profile_name = 27 ~ USERS, resource = Oracle, user name is USPRUEBA65, temporary Tablespace = 27 ~ TEMP, account status is LOCKED, status = Disabled, Global DN =, privilege list is [], the list of roles = [{role Admin Option = number}] [{[{, role name =}], Quota of temporary Tablespace =}]
prepareTargetUsersRecordInOIMFormat: COMPLETED

But, even if reconciliation succeeded the administration shows console account status "Enabled" and when I check the table Ouedraogo, I see that the status of an object of the IOM is always enabled.


I found a few discussions on this issue, the closest was this one: reconciliation for users deleted on the target resource accounts but all it doesn't seem to be a great help because all the tasks described are already carried out by the installation of the connector (at least in the msad and dbum connectors).

This problem occurs both Active Directory and Oracle database users, maybe we missed something but based on the documentation for both connectors, we thought it was a STANDARD feature. Is there some setting of the connector or the property of the system, that we have to configure to make it work?

Thank you.

Published by: fmc on July 26, 2012 12:53

It should work OOTB. No need to write an adapter for it.
It works for me like OOTB waited.

Don't see you not received update reconciliation task inserted into the details of the profile of the users of resources? You have changed the status of the object mapping task in this task? It must be set to NONE.

Thank you
Patricia

Tags: Fusion Middleware

Similar Questions

  • Access policy does not change the status of resource

    I have a set access policy to assign a role and a resource to anyone in a specific group. The policy work very well for those who have never had the resource before. For people who were in a disabled state resource - access policy is to add the role, but it does not change the State of the resource from disabled to enabled (or put into service).

    How can I do so it adds not only the role, but he changes the State of the handicapped resource? Thanks in advance.

    Simple!

    -Create an adapter of the entity during the prior insertion of the Members Group.Group of the user who will be called on the user being part of the group. Add custom java code that will check the resource assigned to this user and confirm if its there and in a disabled state. If its disabled and then turn it back on, otherwise just hang on and do nothing.

    Thank you

    Sunny

  • Reconciliation of trust customized creation of users with the status of "Disabale" - 11g

    Hi all

    I developed a custom for the reconciliation of confidence scheduled task, when the user is first created in IOM I want them to create the status of "disable." Mapping of the attribute of 'Status' IOM FRO reconciliation data n does not work correctly. How can I achieve that? I should create a certain Manager evnet this? Any help is greatly appreciated...


    Thanks in advance,
    BR
    Aliye

    write a post process event handler and call the disable User Manager API. Mapping status reflect the corresponding RAS

    Disable UserManagerResult (java.lang.String userID, boolean isUserLogin)

    ex: disable (useLogin, true) or disable (take, false)

  • Object of the USR UDF is not respected in oim 11g

    Hi all
    We did the upgradation of oim 9.1 IOM 11.1.1.5 and verified our functionality (Provisioing AD/Exchange). Practically, all work as planned, up to now, we have not seen all the important issues. How ever, we observed one thing to console design, there are 6 user defined field Defination IOM objects in our IOM 9.1

    SDK utility Structure - user defined fields
    Objects in OBJ - user defined fields resource
    Applications of REQ - user defined fields
    Act - user defined fields
    Roles of UGP - user defined fields
    Users of the USR - user defined fields 0

    We have 36 (UDF) fields in object USR IOM 9.1
    Later, upgradation of oim 11g, we have 5 field except USR user-defined objects.

    USR was missed in oim 11g, how ever we are able to see the values of all the users through IOM admin console. Everything bad thing here. Can you please think about it, the impact and work around for this (if any).

    Thank you.

    USR is moved to Console advanced IOM to 11g to the title of the item menu user Configuretion.

    Check out there.

  • Reconciliation of the EBS target does not work for the payments.

    Hi all

    I use OIM 11 g 2 and Oracle EBS user Managment 9.1.0.7.0 connector.
    I want to link the user's responsibilities in EBS your child to IOM. I tried to use the Scheduler ""eBusiness UM target user reconciliation resource ' but the execution of this work is just creating the EBS account for the user at the IOM. " I can see the user's responsibilities in the details information of the EBS account, which was created by the work of reconciliation of target, but I don't see them as the user rights

    How can I achieve this?

    Any help is appreciated.

    Thank you and best regards,

    Thank you for your help. I solved this problem with the use of assignments of rights enforcement after the work MU target resource user reconciliation eBusiness

  • E-mail notification triggered during the reconciliation of the Active directory trust

    Hello

    When we run the scheduled task of reconciliation of trust user Active Directory, the user gets created by IOM and sends a notification to the user to create . But, if there is no change in Active Directory for the same user (any attribute changes) and we run the recon work trust, will be change also trigger an email notification?

    I mean, is that the notification of the user to create triggers the user and Manager too?

    During the reconciliation of trust, generated notification is to create user... is it good?

    I searched a lot of places, but could not find any appropriate entries. Please provide some input?

    Thank you

    No, during the change won't email notification.

    Creating trusted users, suite of property gets used:

    Must send notifications in recon or not

    Determines whether the notification is sent to the user in the user login and password are generated in the event handler postprocess for the creation of the user through reconciliation of the trusted source.

    If the value is set to true, then notification is sent when the user name and password are generated in the event handler postprocess for the creation of the user through reconciliation of the trusted source.

    If the value is set to false, then notification is not sent when the user name and password are generated in the event handler postprocess for the creation of the user through reconciliation of the trusted source.

    Recon.SEND_NOTIFICATION

    true

    If you want to send messages during the recon trust (update/changes), you must write your own code to java of notification, FYI: http://www.ateam-oracle.com/oim-11g-notifications/

    ~ J

  • Error during the reconciliation of the trusted source

    Hello
    I am facing a problem using the connector (DBAT_91050) of the Table of database Applications.
    I have correctly installed the connector and created a simple table in a database diagram (first name, family name, emp_id, role (as well as varchar2)).
    Then I created a generic connector for a trusted source and mapping.
    When I try to run the task to reconcile my source I get the following error:

    Caused by: org.xml.sax.SAXParseException: cvc-minLength valid: value "with length = '0' is not facet-valid with respect to minLength 1' of type 'matchingRuleType '.
    at org.apache.xerces.util.ErrorHandlerWrapper.createSAXParseException (unknown Source)
    at org.apache.xerces.util.ErrorHandlerWrapper.error (unknown Source)
    at org.apache.xerces.impl.XMLErrorReporter.reportError (unknown Source)
    at org.apache.xerces.impl.XMLErrorReporter.reportError (unknown Source)
    at org.apache.xerces.impl.XMLErrorReporter.reportError (unknown Source)
    to org.apache.xerces.impl.xs.XMLSchemaValidator$ XSIErrorReporter.reportError (unknown Source)
    at org.apache.xerces.impl.xs.XMLSchemaValidator.reportSchemaError (unknown Source)
    at org.apache.xerces.impl.xs.XMLSchemaValidator.elementLocallyValidType (unknown Source)
    at org.apache.xerces.impl.xs.XMLSchemaValidator.processElementContent (unknown Source)
    at org.apache.xerces.impl.xs.XMLSchemaValidator.handleEndElement (unknown Source)
    at org.apache.xerces.impl.xs.XMLSchemaValidator.endElement (unknown Source)
    at org.apache.xerces.jaxp.validation.ValidatorHandlerImpl.endElement (unknown Source)
    at com.sun.xml.bind.v2.runtime.unmarshaller.ValidatingUnmarshaller.endElement(ValidatingUnmarshaller.java:106)
    at com.sun.xml.bind.v2.runtime.unmarshaller.InterningXmlVisitor.endElement(InterningXmlVisitor.java:81)
    at com.sun.xml.bind.v2.runtime.unmarshaller.SAXConnector.endElement(SAXConnector.java:158)
    at com.sun.xml.bind.unmarshaller.DOMScanner.visit(DOMScanner.java:255)
    at com.sun.xml.bind.unmarshaller.DOMScanner.visit(DOMScanner.java:281)
    at com.sun.xml.bind.unmarshaller.DOMScanner.visit(DOMScanner.java:250)
    at com.sun.xml.bind.unmarshaller.DOMScanner.visit(DOMScanner.java:281)
    at com.sun.xml.bind.unmarshaller.DOMScanner.visit(DOMScanner.java:250)
    at com.sun.xml.bind.unmarshaller.DOMScanner.scan(DOMScanner.java:127)

    I've read Re: trusted object reconciliation Mapping for act_key - 11g Realease2 source but I am not able to apply the solution in my case.

    No rules none of the transformations are applied during the card.

    Thank you.

    It is ok...
    Welcome to Oracle Forum...
    Fairly good condition of the work you are considering its only your second day...

    In any case, you must open Console Design to solve this problem... Click on the subject of resource... There will be a resource object... namely TEST_GTC...
    Open the process of commissioning for the purpose of resource...
    There will be a tab "Reconciliation field mapping... Click on this... Then see if the user ID is marked as 'key to reconciliation... "
    Then go to the menu item "Reconciliation rule" at the bottom of the console of design...
    Open the rule for TEST_GTC Recon...

    Check if validates it and Active, both boxes are TRUE...

    Then go back to the subject of resource TEST_GTC... --> Rules of Action reconciliation reconciliation tab--> create a profile reconciliation...
    Then go to DEV_OIM... This time, you will be able to see a RA_TEST_GTC_1234 (1234 being OBJ_KEY for TEST_GTC)

    If you find this useful or appropriate response, please mark the helpful or appropriate. And then mark the entire thread as a response.

  • Reconciliation on the new version of the user form

    Hello guys,.

    I have some problem when I create a generic connector. When I create a new generic conector for the commissioning and of reconciliation, it automatically creates a user for the new resource form. Then create a new version of this form, so I can customize him (autoprepopulate, change the field type, etc.) When you change the version of the form, I see that accounts created with the old version of the form still use this form when I opened this account of the resource for editing.

    The other thing that worries me the most is that the reconciliation process is always connected to the first version of the user form (version created automatically when creating the generic connector). In this way, the new account created by reconiliation, using the older version of the form, and when I opened a similar account for editing (it has created reconciliation), I don't have in it the logic implemented in the new version of the form (a parameter that is populated by a combobox for ex.).

    Is it possible so that I can connect the reconciliation process with the latest version of the form rendered active user?

    Best regards
    Carole

    Work on 11G? If so, then after the creation of the new version of the form, make sure you click on the button "Create profile of reconciliation" on the resource object. Regarding the update of the form of existing users liked (with the old shape), you can use the FVCUtil to update their forms so that resources profile would show you the new shape.
    The above is true for connectors not GTC and I don't see why it should not work for GTC. Although I have not tried with GTC on 11G.

    -Marie

    Published by: Bikash Bagaria on 17 January 2012 15:11

  • Solution on how to remove always on location service in the status bar

    Think about the last apps that you use which has led to the appearance of the purpose of the location in the status bar

    The problem is most likely due to resources are still used by these applications even if you restart your iPhone, many times

    The sign of location service can keep here.

    I tried the solution without help.

    It's a chance that I remembered the last apps I used is Runkeeper

    I went to this apps and ended.

    The problem can be solved.

    Disable background refresh App

    And also go to turn OFF the location for that Service the app & confidentiality if you think that location services is not useful for the App

  • "No access to the network" problem in Windows 7 and error message "your computer seems to be correctly configured but the device or resource (DNS SERVER) is not responding."

    Hello, I have a desktop PC and a laptop (DELL Inspiron N-4050).
    I have problem with my internet connection cable which is working fine on my PC, but does not not on my laptop giving an error "no access to the network.

    When I troubleshoot it says "your computer seems to be correctly configured but the device or resource (DNS SERVER) is not responding."
    I said to many technicians of microsoft online response, but they could not solve my problem and said this is my DNS problem and advised me to contact my Internet service provider. Guess it's because of my internet so why it works on my PC not on laptop?

    Yesterday, my ethernet cable pulled out my cell phone and I couldn't connect to the internet more. But on my desktop PC, it works perfectly fine. (I do not use wifi, if this information is also required) I have studied several threads with similar situations, and I have tried different methods to solve the problem to no avail. I did a system restore, but I'm having no luck. Also, I did not of the latest changes with my anti virus software and my LAN card drivers look to date.

    When I remove my cable from the laptop and again connect my cable then it works but only after the PC sat for awhile.
    1.I did flush DNS by typing "ipconfig/flushdns" in the command prompt.
    2. my IP address, DNS, subnet mask etc are set to automatic.
    3.I also added physical address taken from command line giving "ipconfig/all". for the properties of the network driver settings.
    4.I ' installed the drivers to date of 2014 on my laptop.
    5.I did a lot of searching the web, but they do not solve my problem.

    Please help me to solve it.
    I appreciate your help.
    Thank you.

    Hello Hall,

    Please keep us updated on the status of the issue.

    I suggest you to follow the steps in this Microsoft article troubleshooting and check if it helps:

    Error message "your computer seems to be configured correctly, but the device or resource (DNS server) is not responding" in Windows 7

    http://support.Microsoft.com/kb/2779064/en-us

    Hope the helps of information.

    Please reply with the results, in order to help you solve the problem.

    Thank you

  • OIM 11G PS2 R2 Notification service

    Hello

    I'm trying to use Notifications of OIM 11G.

    I am trying to create a resolver of notification. I'm trying to implement: NotificationEventResolver in the code below:

    public class DemoNotificationEventResolver implements {NotificationEventResolver}

    }

    But I'm not able to find the class file or a jar that contains the class NotificationEventResolver.

    It is not available in oimclient.jar.

    Any idea where I can find the related jar?

    Thank you

    Sash

    in OIMServer.jar

  • Create a Simple VM without the list of resources

    Hi all

    I try to use create workflows simple virtual machine but always error because I'm not insert resource pool parameter because in our data center, we have no resource pool... I read CreateVM_Task is always the list of resources to use, no chance I can create new virtual machine without using resource pool?... Thank you

    In fact, you have a pool of resources as Joerg escapes to... However, regardless of the status of the DRS, your clusters and stand-alone hosts even have a root resource pool "Resources" that the vCO client can see through the vSphere API. This pool of resources of root is NOT visible in the vSphere Web client or vSphere Client:

    As you can see above, the stand-alone host 'esx - 03 a .vcoteam .lab' has a pool of resources 'Resources', like the "Standby" cluster that has no active DRS

  • I ordered a student member, discount prepaid option yesterday and in the status of the order, it is said that they are waiting for the documentation. How do I provide this?

    I ordered a student member, discount prepaid option yesterday and in the status of the order, it is said that they are waiting for the documentation. How do I provide this?

    For more information about the provisions of the student/teacher, you can refer to the following information page:

    http://helpx.Adobe.com/x-productkb/policy-pricing/Education-FAQ.html#main_submit_poe

    Another good resource for information is the student and teacher edition information forum:

    http://forums.Adobe.com/community/download_install_setup/student_and_teacher_edition_infor mation_? view = discussions

    Here are some links about the Adobe student discount:
    http://www.Adobe.com/education/students.edu.html?showEduReq=Yes

    http://www.Adobe.com/education/student-eligibility-Guide.edu.html

    http://www.Adobe.com/education/students/how-to-buy-eligibility.edu.html

  • Reconciliation of the IOM is not updating after adding custom fields

    In Oracle Identity Manager 11.1.2 with connector

    Connector for Oracle Internet Directory version 11.1.1

    I close the IOM LDAP users, and after I add custom fields for the reconciliation of the target, and I try to update these users with the new event of reconciliation return of custom fields, this new custom fields poster in case page of reconciliation and not in the form user to LDAP.

    I already create the new form with the news of the custom fields associated with the application Instance.

    Solution:

    CVF (form Version Control Utility) comes with IOM that updates the form associated with existing users.

    With the help of the form Version control utility - 11g Release 2 (11.1.2)

    OR


    Update PROCESS_FORM_TABLE set PROCESS_FORM_TABLE_VERSION =(select SDK_ACTIVE_VERSION of the SDK where SDK_NAME = 'PROCESS_FORM_TABLE'); COMMIT; NOTE: Replace PROCESS_FORM_TABLE with process form real that is 'UD_XXX '.

  • Change the status account without providing

    Hello

    my situation is as follows:

    I am an account for a resource supply.

    In the "create an account" task I check if there is already an account corresponding to the resource.

    If this account does not exist, I create a new account in the off State and return a 'C' status that mapped to the State of object "Disabled" in the "task of object state Mapping.

    If this account already exists in the resource, I need 'link' this account rather than create a new one.

    The problem is now I need to define the status of IOM account in accordance with the State of account, that is, if the existing account is enabled, I need to change the status of IOM "Enabled" account also.

    What are my options?

    Kind regards

    Vladimir

    You can return just a reaction called "Active linked account" and "Linked account Disabled" that triggers a separate task for each.  Create an adapter that returns a string value.  Make sure that the value of a response code.  Set the task to the status of the object mapping enabled or disabled for answer C.  Just make sure you check the box to end.

    -Kevin

Maybe you are looking for