Friday, February 6, 2015

How to check OIM build version and schema version of OIM 11g R1, 11gR2,11gR2 PS1, and 11gR2 PS2


To check the OIM build version run the below query in database

SELECT XSD_VALUE FROM XSD WHERE XSD_CODE='XL_BUILD_NUMBER';

To check the OIM Schema version run the below query in database

SELECT OWNER, VERSION, STATUS, UPGRADED FROM SCHEMA_VERSION_REGISTRY;

Thank you
Arihant Baid

Enabling the reset password,change password email notification in OIM PS2

OIM Email notifications for Request Creation, Request Status Change or Password Reset are not being sent out as by default  the system Property for  RequestNotificationLevel was set to 0

To make those notification active perform the below steps.

1. In OIM Admin Console log in as xelsysadm.
2. Click on Advanced tab.
3. Click on System Management tab.
4. Click on System Configuration sub menu.
5. Search on RequestNotificationLevel or request*
6. Click on Request Notification
7. Change value to 1
8. Click Save.
9. Click OK on modification confirmed dialog box.


Thank you
Arihant Baid


How to allow OIM with duplicate email address in OIM 11g PS2

By default oim 11.1.2.2.0 doest allow duplicate email address for users but as your business requirement if you have to allow duplicate email address perfrom the below steps

1) Login to identity console I have user testuser 2 with his email address.


2) Now when I am updating the same email address as testuser5 it's not allowing me as this email address is already exits


3) Login to sysadmin console ,click on systemc onfiguration  and click on create


4) Add the below Property and click on perform

   Property Name =  Email uniqueness
   Keyword           = OIM.EmailUniqueCheck
   Value                 = FALSE


5)  After clicking perform it should show property has been added message


6) I have updated the same email address for testuser5 as testuser2



Thank you
Arihant Baid

How to hide Administration Tab in OIM Admin console from End Users (Role Base UI Access)

Below are the steps for hiding Administration Tab in OIM Admin console

1) Login to Identity console and create a sandbox


2) Click on Customize,Click on View than select Source
3) If prompted of warning about customization say Edit
4) From bottom panel scroll down to Administration.
5) click on Administration , Make sure complete Administration box is selected.
6) Click on Edit at top panel. it will open up a POP up window.


7) Go at the bottom of the page and select Show Component



8) At Type a Value or expression remove true and put below EL expression  and click on test it should show true then click on OK
#{oimcontext.currentUser.roles['SYSTEM ADMINISTRATORS'] != null}


9)  Click on apply then OK


10) Publish the active sandox to make the changes available

 
11) Before making EL changes as end user(testuser5)  


    After making EL changes as end user(testuser5)
    As a xelsysadm user

Below are some other options that you can use as per your requirement.

To show a UI component if the logged-in user has the System Administrators admin role:
#{oimcontext.currentUser.roles['SYSTEM ADMINISTRATORS'] != null}

Multipal condition
#{(oimcontext.currentUser.roles['SYSTEM ADMINISTRATORS'] != null) || oimcontext.currentUser.roles['HelpDesk'] != null}

To show a UI component if the user's UDF attribute called UDF_NAME equals to UDF_VALUE:
#{oimcontext.currentUser['UDF_NAME'] == 'UDF_VALUE'}

Similarly, the EL expression can be modified to check if the logged-in user has any other admin role.
To show a UI component if the usr_key attribute of the logged-in user is 1:
#{oimcontext.currentUser['usr_key'] == 1}

To show a UI component if the logged-in user belongs to the Xellerate Users organization:
#{oimcontext.currentUser['Organization Name'] == 'Xellerate Users'}

To show a UI component if the logged-in user's last name is Smith:
#{oimcontext.currentUser['Last Name'] == 'Smith'}

Thank you
Arihant Baid