OIM 11G R2 PS3 Lab 11: Three ways to export OIM Metadata (MDS)

We can export complete OIM MDS in 3 different ways.

1) MDS Export  from Weblogic EM Console

2) MDS Export  from wlst.sh script

3) MDS Export  from weblogicExportMetadata.sh

---------------------------------------------------------------------------------------------------------------

1) MDS Export  from Weblogic EM Console

* Login to Weblogic EM console > Expand Identity and Access > OIM > oim

* Expand  Application Defined Mbean > oracle.mds.lcm > server :oim_server1

* Expand Application : OIMAPPMetadata > MDSAppRuntime > MDSAppRuntime  on right hand      side click on Operations tab >> Click on exportMetadata

* In to Location give path where you want to export (No need to create directory manually, It will automatically create the directory) > Click on docs

* Click on Add

* In this lab we are exporting complete MDS that we enter /**. If you want to export any specific file you can do that. Ex -/file/User.xml ( For export User.xml)

* After setting the to location and docs, click on Invoke

* Check the status after clicking Invoke. It should be operation executed successfully.

* Check the export in to location.

2) MDS Export  from wlst.sh script

 * Go to /app/oracle/middleware/oracle_common/common/bin/ location and run wlst.sh conmand
     Enter the below Parameters manually.

•  connect()
•  Weblogic 
•  Weblogic user password
• t3://localhost:7001 (Server URL with admin port)
• exportMetadata(application='OIMMetadata', server='oim_server1', toLocation='/tmp/mds1') (If you want to export the MDS in specific location you can set that in toLocation)   
• If you want to export any specific file run below command
• exportMetadata(application='OIMAppMetadata',server='oim_server1',toLocation='/tmp/export',docs='/db/oim-config.xml',applicationVersion='*')

* Check the successfully transferred messages at the end.

*  Check the export in to location.

3) MDS Export  from weblogicExportMetadata.sh

* Go to /app/oracle/middleware/Oracle_IDM1/server/bin location and edit weblogic.properties

* Enter below Parameter

application_name=OIMMetadata

metadata_to_loc=/tmp/mds2 

metadata_files=/**  

* From the same location set the OIM_ORACLE_HOME ,run weblogicExportMetadata.sh command and enter below parameters manually.

     export OIM_ORACLE_HOME=/app/oracle/middleware/Oracle_IDM1

•  connect()
•  Weblogic 
•  Weblogic user password
• t3://localhost:7001 (Server URL with admin port)

* Check the export in to location.

Regards,
Arihant Baid

OIM 11G R2 PS3 Lab 10: How to hide Application Instance, Entitlement and Role from Catalog in OIM PS3 ?

High Level Steps

* First Identify what are Application Instance, Entitlement and Role require to hide.

* Login to Identity console and get the Entity Display name. (We can check that from database also in catalog table)

* Run the update query 

* Check the Catalog.

In this Lab I am Hiding below Application Instance, Role and Entitlement from catalog.

 Application Instance

* Login to Identity Console and Request Access in that select Request for self

* Select Application, search with Application Name and Click on (i) symbol to get the Display name

* Copy the Display name in Notepad

Entitlement

* Select type as Entitlement, search with Entitlement Name and Click on (i) symbol to get the Display name

* Copy the Display name in Notepad

Role

* Select type as Role, search with Role Name and Click on (i) symbol to get the Display name

* Copy the Display name in Notepad

* Run  the below SQL in Database for hiding Application Instance, Entitlement and Role from catalog.

update catalog set IS_REQUESTABLE = 0 where ENTITY_DISPLAY_NAME in ('ActiveDirectory','CN=Account Operators,CN=Builtin,DC=ad,DC=com','Test_Role');

Note - ENTITY_DISPLAY_NAME  is Display name which we copied above.

IS_REQUESTABLE = 1 ( Show in catalog) 

IS_REQUESTABLE = 0  ( Hide in Catalog)

* After running the SQL Application Instance is hide from Catalog.

* After running the SQL Entitlement is hide from Catalog.

* After running the SQL Role is hide from Catalog.

If you want to get back all those hide Application Instance, Entitlement and Role run the below SQL.

update catalog set IS_REQUESTABLE = 1 where ENTITY_DISPLAY_NAME in ('ActiveDirectory','CN=Account Operators,CN=Builtin,DC=ad,DC=com','Test_Role');

COMMIT;

Thank you.

Arihant Baid