Monday, June 23, 2014

OIM 11g R2 , PS1 and PS2 Connector Export Order for Migration steps

Export the Connector as per the below order by using Deployment Manager in OIM

   1.Resource objects

   2.Event handlers (If you have custom handlers then only export otherwise Optional)

   3.Process forms

   4.IT resources

   5.Data object definitions

   6.Prepopulate adapters

   7.Processes

   8.IT resource type definitions

   9.Task adapters

   10.Lookups

   11.Scheduled tasks

   12.Request Data set (If you need to latest process form then only export otherwise Optional)

   13.Organization (If you have custom organizations then only export otherwise Optional)

   14.Access Policy (If you have custom organizations then only export otherwise Optional)

   15.Password Policy (If you have custom policy other than default then only export otherwise Optional) 

   16. Role (If you have custom Roles then only export otherwise Optional)

Regards,
Arihant

How to unlock xelsysadmin account in OIM 11g , PS1 and PS2


"xelsysadmin" account gets locked then we can unlock in 2 ways


  1. If you have any admin account, then login using that account and unlock the user. 
  2. Update the USR table to unlock the xelsysadm account using below commands.

 update usr set usr_login_attempts_ctr=0 where usr_login=’XELSYSADM’;
 update usr set usr_locked=0 where usr_login=’XELSYSADM’;
 Commit;
Regards,
Arihant

OIM 11g databse tables List

Below are the list of OIM tables and its description

List of Tables and Description

AAD - List To Define The Administrators For Each Organization And Their Delegated Admin Privileges

AAP - Table for storing Resource - Organization level parameter Values

ACP - ACP - Link Table That Holds Reference To ACT And PKG Tables, Table That Defines The Objects (Resources) Allowed For A Particular Organization

ACS - Link Table for Account Table(ACT) and Server Table(SVR)

ACT - Defines information about all organizations created through Xellerate

ADJ - Contains the Java API information for the constructor with parameters and method name with parameters chosen for an adapter task of type JAVA, UTILITY, TAME,REMOTE, or XLAPI.

ADL - Contains the all of the necessary parameters for an adapter task of type IF, ELSE IF,FOR, WHILE, SET, and VARIABLE tasks. These type of tasks are known as LOGICTASKS

ADM - Data mapping between parameters input/output parameters and source/sink

ADP - Defines an adapter created through the Adapter Factory

ADS - Database,schema and procedure name selections which define a stored procedure adaptertask

ADT - Defines a task attached to an adapter

ADU - Contains the web service and method chosen for a task of the Adapter Factory

ADV - Adapter variable table contains variables that have been created for specific adapters.

AFM - Links an adapter with a form

AGS - Holds the definition of organization/contact groups

AOA - Contains the OpenAdapter property file for OpenAdapter

APA - To store attestation process administrators

APD - To store attestation Process definition

APT - To store the attestation tasks

ARS - Contains custom response codes for 'Process Task' Adapters only

ATD - To store entitlement details for each attestation task

ATP - Defines input and output parameters for the constructor and method of an adapter taskof type JAVA, UTILITY, TAME, REMOTE, and XLAPI

ATR - To store attestation requests

ATS - Stores which services or can be ordered by which organizations and which rates apply

AUD - Define the Auditors

AUD_JMS -

CRT - Trusted Certificate Information

DAV - Stores the runtime data mappings for 'Entity' & 'Rule Generator' adapters. The data source being an Xellerate form or child table,or a user defined process form.

DEP - Dependencies among Tasks Within A Workflow Process

DOB - Data Resource definition consisting of the fully qualified class name of the dataobject

DVT - Defines the one to many relationship between Data Resources and Event Handlers (this includes adapters)

EIF - Export Import Files. Each row contains one single file used in export/import operation. For export there is only one file

EIH - Export Import History. Each row represents one Data Deployment Management session.

EIL - DB Based lock for export operation. Used to make sure only one user can import at atime. This is currently not managed through data objects

EIO - Export Import Objects. Each row represents one object exported/imported

EIS - Substitutions used during import process

EMD - Core --Email Definition Information Table That Holds The Email Template Definitions

ERR - Error codes

ESD - Encrypted columns not within the bounds of the SDK

EVT - Defines event handlers by providing a process and class name. In addition the scheduling time of when the event handler can execute is set to pre (insert, update, delete) or post (insert, update, delete)

FUG - List to define the administrators for each user defined object in the 'StructureUtility' form or for each user defined field in the 'User Defined FieldDefinition' form

GPG - List to define the (nested) group members of User Group in the 'User Group' form.

GPP - List to define the Administrators and their delegated admin rights over a User Group

GPY - Joins Properties (PTY) and Groups (UGP).

IEI - Table where all the imports and exports are defined

LAY - Table where the layouts are defined for the various imports and exports

LIT - Import/export table.

LKU - Lookup definition entries

LKV - Lookup values

LOB - Import/export table.

LOC - Holds information about locations

MAP - XML MapSchema Information

MAV - Stores the runtime data mappings for 'Process Task' adapters. The data source being a process form, Location, User, Organization, Process, IT Resource, orLiteral data.

MEV - E-mail notification events

MIL - Holds information about tasks of a process

MSG - Defines the user groups that have permission to set the status of a process task.

MST - Task Status And Object Status Information. Holds All The Task Status To Object Status Mappings

OBA - Object Authorizer Information

OBD - Object Dependencies

OBI - Object Instance Information

OBJ - Resource Object definition information.

ODF - Holds Object To Process Form Data Flow Mappings.

ODV - Object Events/Adapters Information

OIO - Object Instance Request Target Organization Information.

OIU - Object Instance Request Target User Information.

OOD - Object Instance Request Target Organization Dependency Information.

ORC - This Entity Holds The Detail On Each Order. This Could Be Considered The Items Section Of An Invoice. This Entity Is The Instance Of A Particular Process

ORD - Holds information that is necessary to complete an order regardless of a processbeing ordered

ORF - Resource Reconciliation Fields

ORR - Object Reconciliation Action Rules

OSH - Task Instance Assignment History

OSI - Holds information about tasks that are created for an order

OST - Object Status Information

OUD - Object Instance Request Target User Dependency Information. Holds The Dependency Between Different Resource Instances Provisioned To A User.

OUG - List to define the administrators for each Resource

PCQ - Holds the challenging questions and answers for a user

PDF - Package data flow table holds the data flow relationships between packages

PHO - Holds all communication addresses for this contact -- e.g., contact telephone numbers,fax numbers, e-mail, etc.

PKD - Package dependency table holds the dependency relationships between child packages of a parent package

PKG - Consists of names and system keys of service processes, which consist of a group ofservices from the TOS table. Defines a Process in Xellerate.

PKH - Package Hierarchy Table Holds The Parent-child Relationships Between Processes

POC - Stores values for the child tables of the Object/Process form of a resource being provisioned by an access policy

POF - Policy field table holds the field value pairs that constitute the definition of apolicy

POG - Join table between Policy and User Groups, Specifies the groups to whom an access policy will apply.

POL - Policy Table Holds A Policy, Defines An Access Policy In The System

POP - Policy Package Join Table Holds The Packages That A Particular Policy Orders For User, Defines Which Resources Will Be Provisioned Or Denied For A Particular Access Policy.

PRF - Process Reconciliation Field Mappings

PRO - Defines a process name, scheduling frequency, and priority. A process is made up of oneor more tasks

PTY - Client Properties Table

PUG - List to define The Administrators And Their Delegated Admin Rights For Each Process.

PWR - Table forPassword Rule Policies

PXD - Table that holds the list of all Proxies Defined

QUE - Administrative queues definition

QUM - Administrative queue members

RAV - Stores the runtime data mappings for 'Pre-populate' adapters. The data source being an Xellerate form or child table, or a user defined form

RCA - Reconciliation Event Organizations Matched

RCB - Reconciliation Event Invalid Data

RCD - Reconciliation Event Data

RCE - Reconciliation Events

RCH - Reconciliation Event Action History

RCM - Reconciliation Event Multi-Valued Attribute Data

RCP - Reconciliation Event Processes Matched

RCU - Reconciliation Event Users Matched

REP - Table that contains all information about reports in the system

REQ - This table holds request information

RES - This table is used to stored adapter resources entered by the user.

RGM - Table for Response Code Generated Milestones

RGP - Rules To Apply To A User Group, Defines The Auto-group Membership Rules Attached To AParticular Group.

RGS - Defines all known registries. These are used by Web Service tasks in an Adapter to communicate with a web service

RIO - Request Organizations Resolved Object Instances

RIU - Request Users Resolved Object Instances

RLO - This table contains directory URLs which are referenced by Adapter Factoryjar/class files.

RML - Rules To Apply To Task, Defines The Task Assignment Rules Attached To A Process Task.

ROP - Rules To Apply To An Object-process Pair, Defines The Process Determination Rules Attached To A Resource Object.

RPC - Reconciliation Event Process Child Table Matches

RPG - Link table between Group table and Report Table. Specifies which group has accessto which reports

RPP - Parameters passed to report.

RPT - Stores information related to the creation of reports

RPW - Rules To Apply To A Password Policy, Defines The Policy Determination Rules Attached To A Password Policy.

RQA - Request target organization information.

RQC - Request comment information

RQD - Contains self-registration request data for web admin.

RQE - Request administrative queues

RQH - Requeststatus history

RQO - Request object information.

RQU - Request object target user information

RQY - Request Organizations Requiring Resolution

RQZ - Request Users Requiring Resolution

RRE - Reconciliation User Matching Rule Elements

RRL - Reconciliation User Matching Rules

RRT - Reconciliation User Matching Rule Element Properties

RSC - Defines the All The Possible Response Code For A Process Task.

RUE - Defines the Elements In A Rule Definition.

RUG - List to define the administrators for each Request

RUL - Rule definitions

RVM - Holds Recovery Milestones

SCH - Holds specific information about an instance of a ask such as its status orscheduled dates

SDC - Column metadata.

SDH - Meta-Table Hierarchy.

SDK - User define data object meta data definition

SDL - SDK version labels

SDP - User defined column properties

SEL - Data Object Permissions For Groups On A Specified Data object

SIT - The SIT table contains information about sites. Sites are subsets of locations.

SPD - IT Resource parameter definition

SRE - Defines Which Pre-populate Rule Generator Will Run For A Field Of User Defined DataObject.

SRP - Should be replaced by the rate table from a billing system. Here it holdspecific rates for specific services.

SRS - IT Resource - IT Resource join

STA - Status Codes

SVD - IT Resource type definition

SVP - IT Resource property definition

SVR - IT Resource instance definition

SVS - IT Resource - Site Join

TAP - Holds parameter values for a task, which is an instantiation of Valid Task,i.e. value for parameter Company Name, etc.

TAS - Holds instances of Valid Task. Examples of Valid Tasks would be reports, imports, etc. Valid TaskParameters indicate what parameters can be assassigned to an instance of a task, i.e

TDV - Used by event manager/data objects, joins data objects, types of service, and events

TLG - Keeps logof SQL transactions.

TMP - Indicates which tasks are in a process. Tasks are defined in table; this way, one task can be in many processes.

TOD - To do list settings table.

TOS - Holds information about a process

TSA - Stores initialization params (name/value pairs) forscheduler tasks

TSK - Scheduler task definition information

UDP - User-defined field table

UGP - Defines a group of users

UHD - User Policy Profile History Details table

ULN - This table hold UHD allow / deny list

UNM - "UnDoMilestone" Feature

UPA_FIELDS - Stores changes only for user profile audit history in de-normalized format

UPA_GRP_MEMBERSHIP - Stores groups membership history in de-normalized format

UPA_RESOURCE - Stores user profile resource history in de-normalized format

UPA_USR - Stores user profile history in de-normalized format

UPD - User Policy Profile Details table

UPH - User Policy Profile History table

UPL - User-defined field table

UPP - User Policy Profile table

UPT - User-defined field table

UPY - Joins Properties (PTY) and User (USR) tables.

USG - This table stores which users are in which groups.

USR - Stores all information regarding a user.

UWP - Window sequence, nesting in CarrierBase explorer for each user group.

VTK - Defines automation task types such as reports, imports, and exports.

VTP - Valid Task Parameters. Indicates which parameters can be defined for an instance of a task.

WIN - Windows table: Windows keys, descriptions, and class names.

XSD - This table holds Xellerate System Data

What is adapters in OIM 11g? How it works?

Adapter:

An Adapter is a Java class that is created by an OIM user through the Adapter Factory.

Advantage:

Adapters are reusable components which is the biggest advantage.

Types:

Here are five types of Adapters in OIM:

1. Process Task Adapter
2. Task Assignment Adapter
3. Pre populate Adapter
4. Entity Adapter
5. Rule Generator Adapter

Process Task Adapter: As the name suggests, it can be attached only in task.

Example: Suppose in your provisioning workflow you have one task which is used for creating user then you can attach one Process task Adapter in this workflow which will create user.

Task Assignment Adapter: It is used for assigning the task to any particular user/group. Task assignment adapter is used when you want to perform some operation to find the user to whom you want to assign task.

Example: If you want to assign the request to some user based on target user’s attributes then we need task Assignment Adapter. In my OIM implementation user has an attribute Country. Client wants that if user is from Brazil the request should be approved by AMD01, if user is from INDIA then request should be approved by AMD02.. so .. on… In this case we’ll have to use Task Assignment Adapter.

Pre Populate Adapter: This adapter is used for populating any field on forms (Process/Object) with some data.

Example: I have a process form which has fields like First Name, Last Name, User ID. I want to fill these fields from User Data. Then we use Pre Populate Adapter which populates the value from user Profile to Process form Field. In general terms, it copies the User ID, First Name etc from user profile and paste it on the process form fields.

Entity Adapters: When you want to perform any operation on any Entity like user/group then we use Entity Adapters. It can be attached only with forms. These adapters can be used

1. Before inserting data into Database (Pre Insert)
2. After inserting data into Database (Post Insert)
3. Before updating data into database (Pre Update)
4. After updating data into database (Post Update)
5. Before deleting data into database (Pre Delete)
6. After deleting data into database (Post Delete)

Example: Client wants to generate default password say ‘User777’ while creating user. You will create entity adapter which will return a string “User777”. You’ll attach that adapter in Design Console > Data Object Manager > Users form on Pre-Insert i.e. before inserting data into Database of OIM.

Rule Generator Adapter - can populate fields automatically on an OIM form or a user-created form and save to the OIM database based on business rules


Regards,
Arihant

OIM 11g xelsysadm password reset

If 11G is using workflows, there is another location where the password needs to be changed.

1) Using Enterprise Manager (eg http://localhost:7001/em)

2) under farm_base_domain, click WebLogic Domain

3) Click your base_domain.

4) This will open up the base_domain in the main window. On top left hand corner drop down WebLogic Domain, select Security, then select Credentials.

5)This will open up the Credential Store Provider window. Open the Credential called "oracle.oim.sysadminMap". Select the entry called Sysadmin. Use the Edit option to open the editor window. This should pop-up Edit Key. This should have a user name of the system admin (xelsysadm). Change the password here.

Tuesday, June 17, 2014

Oracle OIM R2, PS1 and PS2 Documents


(1) Oracle Identity Mananger 11gR2 Release 2 (11.1.2.0.0)

      URL=http://docs.oracle.com/cd/E27559_01/index.htm

(2) Oracle Identity Mananger 11gR2 Release 2 PS1 (11.1.2.1.0)

      URL=http://docs.oracle.com/cd/E37115_01/index.htm

(3) Oracle Identity Mananger 11gR2 Release 2 PS2 (11.1.2.2.0)

     URL=http://docs.oracle.com/cd/E40329_01/index.htm

(4) Oracle Identity Mananger 11gR2 PS2 White paper

    URL=http://www.oracle.com/technetwork/middleware/id-mgmt/overview/oim-11gr2-whats-new-1709505.pdf

Creating a wlfullclient.jar and Design console configuration

Follow the below steps to generate the wlfullclient.jar for OIM Design Console

1) Go to this directory =/app/oracle/wlserver_10.3/server/lib

2) User the below command to generate the wlfullclient.jar file

     java -jar wljarbuilder.jar


4) Now you should be able to see the generated wljarbuilder.jar in lib folder



5) Copy  the wlfullclient.jar from lib folder and paste in this location
     /app/oracle/Oracle_IDM1/designconsole/lib



Thank you.
Ari

Saturday, June 14, 2014

How to start the Weblogic ,SOA and OIM managed servers without being prompted for UserID and password.

Go to the below location

/app/oracle/user_domain/domain/base_domain/bin

vi startweblogic.sh

set the user name and password in the below Parameter.

set WLS_USER=weblogic (User Name)

set WLS_PW=Oracle123(Password)

Repeat the above steps for  startManagedWebLogic.sh

If you add the weblogic  UserID to “WLS_USER=” and the password to “WLS_PW=”, It will not prompted to enter those values when the server is  starting up.

Wednesday, June 11, 2014

Oracle Linux 5.6 Installation


1) Download the Oracle Linux 5.6 ISO Image from the below URL
 (URL=https://edelivery.oracle.com/EPD/Download/get_form?egroup_aru_number=13392058)

2) Open VMware Workstation

3) Click on File and select "New Virtual Machine"



4) Select Typical and click on Next



5) Select Installer disc image, browse the ISO image and click on Next


6) Select the Operating System as Linux and Version as Red Hat Enterprise Linux 5


7) Give the Machine name and location for VM



8) Allocate the Disk space for the VM and select Store virtual disk as a single file


9)Click on Finish


10) In First Screen Press Enter


11) Click on Skip



12) Click on next



13) Click on next



14) Click on next



15) Click on Yes then next



16) Select Create custom layout form the dropdown and assign below parameters


Boot=2000MB
/tmp/=5000MB
/usr/=10000MB
/swap/=10000MB
/var/=10000MB
/usr/local=10000MB
/opt/=10000MB
/home/=10000MB
/=Allocate all available space



17) Click on next



18) Click on next



19) Create the root user password and click on next



20) Click on next



21) Click on Reboot



22) Click on Forward



23) Select Yes check-box and press forward



24) Disabled the firewall and press forward



25) Click on No



26) Disabled the SELinux setting and press forward



27) Click on No



28) Click on forward



29) Click on forward



30) Create the oracle account and password 



31) Click on forward



32) Click on Finish


33) Click on OK


Thank you.
Arihant Baid

Microsoft Exchange 9.1.1.7.0 connector Installation Steps


Note -Make sure before you install exchange connector you have AD connector installed.

1) Download the connector and place in the ConnectorDefaultDirectory folder
    (/app/oracle/Oracle_IDM1/server/ConnectorDefaultDirectory)


2) Go to Sysadmin console and click on Manage connector




3) Drop down the connector list and select the Exchange connector and click on Continue


4) Click on continue



5) Check the Installation Status and Click on Exit








Wednesday, May 14, 2014

OIM Connector Uninstallation Steps

1)      Locate to Oracle_IDM1/server/bin
2)      Update the connecterUninstall.properties with following details
a.       DatabaseURL=jdbc:oracle:thin:@arihant.tdc.com:1521:IAMDB/
b.      DBUserName=DEV_OIM
c.       DBType=ORACLE
d.      Location: Place where you want the log files of this process to be.
e.      ConnectorName=ActiveDirectory
f.        Release=11.1.1.6.0

3)  Run ./uninstallConnector.sh from /app/oracle/Oracle_IDM1/server/bin              
a.       Before running the above command set all the below env variables
b.      export DOMAIN_HOME=/app/oracle/user_projects/domains/base_domain
c.       export WL_HOME=/app/oracle/wlserver_10.3
d.      export ORACLE_HOME=/app/oracle/Oracle_IDM1
e.      export OIM_ORACLE_HOME=/app/oracle/Oracle_IDM1
f.        export JAVA_HOME=/app/java6u31
g.       export MW_HOME=/app/oracle
h.      export APP_SERVER=weblogic   

              4) Enter the below inputs
f
a.       DB Password
b.      OIM Administrator User
c.       OIM Administrator Password
d.      Context Factory




5) Restart the complete Domain