Query -To set status to Revoked for any resource for any user

update oiu set ost_key=(select ost_key from ost where obj_key=(select obj_key from obj where obj.obj_name = 'AD User') and ost_status='Revoked') where   oiu.orc_key in (
SELECT orc_key  FROM ud_aduser WHERE  ud_aduser_uid in ('test1')) ;
commit;

Query to find the rejected task in a package(Resource) for a particular task

select usr.usr_login, pkg.pkg_name, mil.mil_name, oti.sta_bucket
from oti, orc, oiu, usr, mil, tos, pkg
where oti.orc_key = orc.orc_key
and   orc.orc_key = oiu.orc_key
and   oiu.usr_key = usr.usr_key
and   oti.mil_key = mil.mil_key
and   mil.tos_key = tos.tos_key
and   tos.pkg_key = pkg.pkg_key
and   pkg.pkg_name = 'AD User'
and   mil.mil_name = 'Create User';

Courtesy : Amitabh Gangwar

How to Disable Change Password At Next Logon in OIM 11g

In OIM 9.1.0.2 there was a parameter that could be set to disable forced password changes:

System prop XL.ForcePasswordChangeAtFirstLogin

This parameter is no longer implemented in OIM 11g.

Steps

1. Go to WebLogic Domain ->
2. Right click and open 'System MBean Browser'
3. In the 'System MBean Browser' left panel, go to 'servername' -> Server: --> Application:oim --> XML Config --> Config --> XMLConfig.SSOConfig --> SSOConfig
4. Set the SsoEnabled flag to 'true' and apply

Then restart OIM server.

How to change the status in the Response Tab from R to C (Rejected/Completed)

How to change the status in the Response Tab from R to C

1. First find the mil key for the task

select * from mil;

2. Find the sta key from sta table (R=1 and C=2)

3. Update the RSC Table

update rsc set sta_key = 1 where mil_key = 1300 and rsc_data = 'FAILURE';

Thanks

Table is missing in Form Desginer after editing GTC.

Hi All,

I noticed this few times. While making changes in GTC - say from Full recon to incremental recon - UD_TABLE in form designer is missing in design console and we can see the table in The database.

Solution for this is check the FUG table and check the sdk entry for that table and if it is missing add it.

->select * from fug where sdk_key ='1';  - here whatever your sdk_key is for that table.

-> If not there , Add that entry - It goes out sometime.

-> update fug set fug_rowver= '0000000000000000' where sdk_key='1';

-> Also check for

select unique SDL_CURRENT_VERSION,SDL_LABEL, test.sdl.sdk_key
from test.sdk, test.sdl where sdk.sdk_name = 'UD_TEST' and sdk.sdk_key = sdl.sdk_key;     (Here test. - where test is schema name)

->update ud_test set ud_test_version = 3;

select unique ud_test_version from test.ud_test;

This will update all the users to the new version - ud_test_version.





Thanks

Installation of Oracle Identity Analytics 11g

1.      What is OIA?

http://idm-oracle.blogspot.com/2010/07/oracle-identity-analytics.html

2.      Oracle  Identity Analytics  Download Links :

http://www.oracle.com/technetwork/middleware/downloads/oid-11g-161194.html

3.      For Oracle Identity Analytics Installation :

Details:

a.      Java JDK 1.6.0_21 (http://java.sun.com/javase/downloads/)

b.       Tomcat Application Server6.0.29 (http://tomcat.apache.org/download-70.cgi)

c.       MySQL 5.1 Database (http://dev.mysql.com/downloads/mysql/)

d.     OIA Setup (http://www.oracle.com/technetwork/middleware/downloads/oid-11g-161194.html

4.      Installation Startup :

·        JAVA SETUP

1.      Install Java JDK on your machine

2.      Set   PATH in your environment variables

PATH=%JAVA_HOME%;%PATH%;C:\Windows;C:\Windows\system32;C:\Program Files\Java\jdk1.6.0_21\bin

3.      Set  JAVA_HOME = C:\Program Files\Java\jdk1.6.0_21

4.      Go to Command Prompt and java –version to verify everything is correct.

·         APPLICATION  SERVER SETUP (TOMCAT)

1.      Unzip Tomcat. Unzip tomcat-6.0.28-preconfigured.zip into your C/D/E drive.

2.      E.g. Location is : E:\apache-tomcat-6.0.29

3.      Set CLASSPATH in your environment variables

CLASSPATH = .;C:\apache-tomcat-6.0.29\lib\servlet-api.jar;C:\apache-tomcat-6.0.29\lib\jsp-api.jar;C:\apache-tomcat-6.0.29\lib\el-api.jar;C:\Servlets+JSP;..;..\..

4.      Test the Server: Go to E:\apache-tomcat-6.0.29\bin and click on startup –Serve r should be started.

5.      Check  http://localhost:8080

·         SETUP MYSQL  DATABASE

1.      Download the installation setup from the link provided above.

2.      Typical Setup

3.      Skip Sign-Up

4.      Make sure "Configure the MySQL Server now" is checked

5.      "Detailed Configuration"

6.      "Developer Machine"

7.      "Multifunctional Database"

8.      "InnoDB Tablespace Settings" - leave everything default

9.      "Decision Support (DSS)/OLAP"

10.   Make sure "Enable TCP/IP Networking" is checked and leave the port number at 3306 (at this point, if you have a firewall, it will usually try to access itself on the localhost)
Leave "Enable Strict Mode" checked

11.  "Standard Character Set"

12.  Check "Install as Windows Service" and I would recommend leaving "Launch the MySQL Server automatically" checked.

13.  Enter a root password (and remember/write it down) and I would recommend leaving "Enable root access from remote machines" unchecked

14.  Then hit "execute" and it'll install and set it up.

·         SETUP   ORACLE  IDENTITY ANALYTICS

1. Create a folder E:\OIA and copy the download installation from the link above and extract it. It should look like below:

db

sample

conf

reports

legal

rbacx.war

2. This will be your RBACX_HOME, set the environment variable.

                       3. From sample folder, copy import and export directories and paste it to RBACX_HOME.

4. Setup database for OIA, use the schema script from RBACX_HOME\db folder.

For e.g. to load schema on mySQL database, use script named rbacx11.1.1.3.0_mysql_schema.sql

Go to mySQL folder on your drive through command prompt.

5.      mysql> \.rbacx-11.1.1.3.0_mysql_schema.sql

6.      Go to RBACX_HOME\conf folder and copy jdbc.properties from folder of name of your db to conf folder.

For e.g in case of mysql, copy jdbc.properties file from RBACX_HOME\conf\mysql folder and paste it to conf folder.Edit this properties file as per your database details. For instance, in case of mysql, replace $SERVER_NAME with host name of your database and port with 3306 (default for mysql)

7.      Edit iam.properties  file in RBACX_HOME\conf folder by replacing $RBACX_HOME with path of RBACX_HOME (so for our eg. it will be E:/OIA)

Extract rbacx.war from RBACX_HOME into temp folder.(e.g. C:\temp) [What we will do is to make some changes, add couple of jars and repack it again and deploy on server]

Now navigate to C:\temp\WEB-INF directory and edit below entry in log4j.properties file

log4j.appender.file.file=logs/rbacx.log (default)

log4j.appender.file.file=E:/OIA/logs/rbacx.log

8.      Similarly make changes to conf-context.xml file in C:\temp\WEB-INF folder. Replace $RBACX_HOME with path of RBACX_HOME

            9.  Copy below jars to C:\temp\WEB-INF\lib folder

1. jasper-jdt.jar (http://dlc.sun.com/rolemanager/Certification_And_Reporting)

2. jdbc driver for your database(mysql drivers are already included in lib folder so no need to add them ) For Oracle it would be ojdbc5.jar or ojdbc6.jar

3. Jars for the connectivity of the provisioning server, you will integrate with OIA.

(If OIM is provisioning server then get jars from ext and lib folder of your OIM_HOME)

(They are also available at http://dlc.sun.com/rolemanager/Provisioning_Server_Connectivity/)

10: Pack the folder C:\temp

C:\> cd C:\temp

C:\> jar -cvfm rbacx.war .

Step12: Use this war to deploy on your application server. Copy rbacx.war in WebApps folder of Tomcat and start the server.

Start the server and access the console using url

http://hostname:port/rbacx/

Default user name is rbacxadmin and password is password.

 

Customizing OIM 11g Logo (Oracle identity Manager 11g)

1. Shutdown the OIM Server and Console

2. Navigate to \OIM_HOME\server\apps\oim.ear\iam-consoles-faces.war\images directory

3. Copy the demo.png file to this directory (this will change OIM logo to whatever logo we will give in this file)

4. Using the text editor , open the Admin.jspx file, located in the OIM_HOME\server\apps\oim.ear\admin.war\pages directory.

5. Locate the following line of code :

6. Below this line add the following code:





7. Locate the following line of code : 

8.Below this line add the following code






9. Save your changes to the Admin.jspx file.Close the file.

10. Restart OIM, you can see the change logo in the homepage of the console.

Field added in Lookup.USR_PROCESS_TRIGGERS are missing (Changes in GTC)

Task in Lookup.USR_PROCESS_TRIGGERS is missing if any modifications in GTC.

Solution :

When you add a UDF to Lookup.USR_PROCESS_TRIGGERS you also need to create a field type lookup for that field.
Please see the below example:
1. Create two UDF fields USR_UDF_1 and USR_UDF_2
2. Add the following in Lookup.USR_PROCESS_TRIGGERS
USR_UDF_1 - TaskUDF1
USR_UDF_2 - TaskUDF2
3. Created a new lookup
Code: LookupUDF1
Field: USR_UDF_1
Field Type radio checked
Group: Users
data:
UDF1 - TestUDF1
4. Created a new GTC connector
Results for Lookup.USR_PROCESS_TRIGGERS:
USR_UDF_1 - TaskUDF1 -> remains after the GTC creation
USR_UDF_2 - TaskUDF2 -> is deleted because it has no field type lookup

So please note that the added new row in Lookup.USR_PROCESS_TRIGGERS must be a valid usr table column. If this newly added row doesn't exist as field type lookup, it will be filtered out in OIM code.