This post is from our demo environment to configure Segregation of Duties (SoD) in Oracle eBusiness Suite (R12) using GRC/OAACG/OIM. Contact Us if you are interested in demo of GRC/OAACG/OIM/EBS integration for SoD.
I discussed about Oracle EBS (R12/11i) integration with Oracle Identity Manager(OIM) here, and two type of connectors available for EBS integration are
a) EBS UM Connector : User Management to provisioning Accounts in EBS (FND_USER)
b) EBS ER Connector : Employee Reconciliation to create users in OIM from EBS EMployee record (PER_ALL_PEOPLE_F).
Before EBS Responsibility (treated as entitlement in OIM) can be provisioned via OIM, these responsibility must be visible in OIM as lookup. Schedule Job lookup of EBS Responsibility fethches these responsibility from EBS and store them as lookup in OIM. In this post I am going to share an issue I encountered in EBS-UM connector while running schedule job lookup of EBS Responsibility.
.
Schedule job failed with error in OIM logs as
_______
<Apr 22, 2014 11:26:22 PM BST> <Error> <OIMCP.EBSUM> <BEA-000000> <====================================================>
<Apr 22, 2014 11:26:22 PM BST> <Error> <OIMCP.EBSUM> <BEA-000000> <oracle.iam.connectors.ebs.usermgmt.tasks.UserMgmtLookupReconciliationTask : initializeAndValidateTaskParams : Please provide a valid value to Scheduled Task attribute: IT Resource Name>
<Apr 22, 2014 11:26:22 PM BST> <Error> <OIMCP.EBSUM> <BEA-000000> <====================================================
>
<Apr 22, 2014 11:26:22 PM BST> <Error> <OIMCP.EBSUM> <BEA-000000> <================= Start Stack Trace =======================>
<Apr 22, 2014 11:26:22 PM BST> <Error> <OIMCP.EBSUM> <BEA-000000> <oracle.iam.connectors.ebs.usermgmt.tasks.UserMgmtLookupReconciliationTask : init>
<Apr 22, 2014 11:26:22 PM BST> <Error> <OIMCP.EBSUM> <BEA-000000> <Invalid Schedule Task Parameter>
<Apr 22, 2014 11:26:22 PM BST> <Error> <OIMCP.EBSUM> <BEA-000000> <Description : Invalid Schedule Task Parameter>
<Apr 22, 2014 11:26:22 PM BST> <Error> <OIMCP.EBSUM> <BEA-000000> <oracle.iam.connectors.common.ConnectorException: Invalid Schedule Task Parameter
at oracle.iam.connectors.ebs.usermgmt.tasks.UserMgmtLookupReconciliationTask.init(Unknown Source)
at com.thortech.xl.scheduler.tasks.SchedulerBaseTask.execute(SchedulerBaseTask.java:382)
Caused By: oracle.iam.connectors.common.ConnectorException: Invalid Schedule Task Parameter
at oracle.iam.connectors.ebs.usermgmt.tasks.UserMgmtLookupReconciliationTask.init(Unknown Source)
_______
Fix is to populate two parameters of scheduled job (IT Resource Name and Query Property File)
This schedule job uses a properties file ebsUMLookupQuery.properties (that comes as part of EBS-UM connector). This properties file has entry like below to get list of all the responsibility in EBS
____
Lookup.EBS.Application=SELECT fa.application_id AS CODE, fa.application_short_name AS DECODE FROM fnd_application fa
Lookup.EBS.UMX.Roles=SELECT (CONCAT(fa.application_id || ‘~’, b.name)) AS CODE, (b.display_name) AS DECODE FROM fnd_application fa, wf_local_roles b WHERE b.orig_system = ‘UMX’ AND b.status = ‘ACTIVE’ AND fa.application_short_name = b.owner_tag
Lookup.EBS.Responsibility=SELECT (CONCAT(fa.application_id || ‘~’, fr.responsibility_id)) AS CODE, fr.responsibility_name AS DECODE FROM fnd_application fa, fnd_responsibility_tl fr WHERE fa.application_id = fr.application_id
Lookup.EBS.SecurityGroup=SELECT security_group_id AS CODE, security_group_key AS DECODE FROM fnd_security_groups
_____
Fix is to populate two parameters of scheduled job (IT Resource Name and Query Property File)
Contact Us if you are interested in demo of OIM/EBS integration or integration of OIM/EBS/GRC.
Related Posts for Identity Manager
- Oracle Identity Manager (User Provisioning – Thor)
- Installing Oracle Identity Manager (Thor Xellerate)
- Oracle Identity Manager 9.1 released
- Oracle Identity Manager (Thor Xellerate) Architecture
- Resource, Reconciliation, Provisioning and Connector in Oracle Identity Manager #OIM
- Oracle Identity Manager (OIM) Connector for Oracle Internet Directory (OID) : Architecture and Overview
- Step by Step Installation of OIM Design Console 9.1.0
- Error while running PurgeCache in OIM 11g : LoginException unable to find LoginModule class : WebLogic Full Clinet
- Integrate OIM 11g with OID using connector for Provisioning / Reconcilliation – Installation
- PurgeCache in OIM 11g : CategoryName
- OIM LDAP Sync : Overview and Key Points
- OIM 11g : How to export/import/delete Files from MDS
- Where are OAM details stored in OIM (account unlock, password reset)
- libOVD adapters in OIM LDAP Integration : LDAPsync – view and modify Adapter settings (bindDN and bindPassword)
- Error Starting OIM Design Console (xlclient.sh) on Linux java.lang. NoClassDefFoundError
- OIM 11g Challenge Questions (PCQ) for forgot password
- Oracle EBS Integration with OIM (Identity Manager) : Things you should know
- Users not synced from OID to OIM : Debug Scheduled Job
- OIM Connector for Microsoft : AD, Exchange, Windows, Password Management
- Connector Server for OIM connectors : .NET or JAVA
- OIM 11g Challenge Questions – Everything you must know
- OIM 11g How to add Challenge Questions
- OIM : Assign AD resource : An error occurred because the Adapters are not compiled : How to compile adapters in OIM
- OIM User Creation : An Error occurred while performing create user operation. Unable to get LDAP connection
- OIM – AD integration : Active Directory Group Lookup Recon failed with error Remote Framework Key is invalid
- Microsoft Active Directory (AD) to Oracle Identity Manager (OIM) Password Synchronization: Things you must know : Part I
- Provision resource “Microsoft Exchange” to user in OIM : Status remains in Provisioning : Part I
- Target Resource (or Managed Resource) vs Trusted Source (or Authoritative Source) Mode : OIM integration with applications (AD, OID, OVD, EBS, SAP, HR, LDAP)
- 500 Internal server accessing OIM application : com.bea. security.MicroSM. getInstance oracle.iam. platform. authz.impl
- Your account is locked. You can unlock your account by going to Forgot Password
- OIM 11g : How to find User and Manager details : USR table
- OIM 11g : User Detail/Attribute (Description) not visible in OIM User screen : EBS / OID / OIM integration
- OIM 11g: The add proxy operation for user XXXXX failed with following error oracle. bpel. services. workflow. client. workflowservieclientException javax.xml.ws.WebServiceException could not determine wsdl ports
- Oracle Identity Manager BP07 for 11gR1 PS1 11.1.1.5.7 (16097399) is now available – (Part of Identity Management SUite BP03 16209876)
- OIM 11g : SQL to List User’s Manager
- OIM integrated with OAM (SSO) showing OIM login screen : User Soft Locked
- OIM 11g: Beware if you are applying WebLogic patch !
- Help Me : Microsoft Active Directory Password Sync version and latest patch for Oracle Identity Manager 9.1.1.5
- Upgrade OIM connector for Microsoft Exchange to 11.1.1.6 Part I
- OIM Administrators : Is your OIM database Growing ? Do you purge enough ?
- EBS Integration with OIM : Employee Reconciliation : NumberFormatException: “BUSINESS_GROUP_ID”
- OIM EBS User Management : eBusiness UM Lookup Definition Reconciliation failed with Invalid Schedule Task Parameter