Thursday, April 27, 2017

OIM SOA - Callback Server URL location


  1. Login into EM console.
  2. Right click on SOA -> SOA_INFRA -> SOA Administration -> Common Properties
  3. The callback server url will be inside Server URLs section

Callback server URL location

Friday, April 21, 2017

OIM: Connector List and Downloads

The list of all OIM connectors and the download links can be found at the following location:
http://www.oracle.com/technetwork/middleware/id-mgmt/downloads/connectors-101674.html

Oracle Identity Manager Connector
Version Number
BMC Remedy Ticket Management
9.0.4.12
BMC Remedy User Management
11.1.1.6.0
BOX
11.1.1.5.0
CA ACF2 Advanced
9.0.4.20
CA Top Secret Advanced
9.0.4.20
Concur
11.1.1.5.0
Connector Server
This version is backward compatible with earlier versions of the Connector server and therefore can be used for all ICF Connectors.
11.1.2.1.0
Database Applications Table
11.1.1.6.0
Database User Management
11.1.1.8.0
Flat File
11.1.1.6.0
Fusion Applications
11.1.1.5.0
Generic SCIM
11.1.1.5.0
Generic REST
11.1.1.5.0
Generic Script
11.1.1.5.0
GoogleApps
11.1.1.7.0
Go To Meeting
11.1.1.5.0
IBM Lotus Notes/Domino
11.1.1.6.0
IBM OS/400 Advanced
11.1.1.6.0
IBM RACF Advanced
9.0.4.25
IBM RACF Standard
9.0.4.12
Identity Cloud Service
11.1.1.5.0
JDEdwards EnterpriseOne
11.1.1.6.0
Microsoft Active Directory User Management
11.1.1.6.0
Microsoft Active Directory Password Synchronization
Please apply AD Password Sync connector patch 25028999 (9.1.1.5.15) after downloading from MOS (My Oracle Support).
9.1.1.5
Microsoft Exchange
11.1.1.6.0
Microsoft Windows
9.0.4.12
Novell eDirectory
9.0.4.14
Novell GroupWise
9.0.4.12
Office365
11.1.1.5.0
Oracle CRM OnDemand
11.1.1.5.0
Oracle e-Business Employee Reconciliation
11.1.1.5.0
Oracle e-Business User Management
11.1.1.5.0
Oracle Internet Directory
11.1.1.6.0
Oracle Retail Warehouse Management System
9.0.4.12
PeopleSoft Campus Solutions
11.1.1.5.0
PeopleSoft Employee Reconciliation
11.1.1.5.0
PeopleSoft User Management
11.1.1.6.0
RSA Authentication Manager
11.1.1.5.0
RSA ClearTrust
9.0.4.12
Salesforce
11.1.1.5.0
SAP Employee Reconciliation
9.1.2.6
SAP Success Factor
11.1.1.5.0
SAP User Management Engine
11.1.1.9.0
SAP User Management
11.1.1.7.0
ServiceNow
11.1.1.5.0
Siebel User Management
11.1.1.6.0
Sun Java System Directory
9.0.4.15
UNIX
11.1.1.7.0
WebEx
11.1.1.5.0
WebServices
11.1.1.5.0

Wednesday, April 19, 2017

Quick Tip#1: Azure v/s On-premise AD

Both Azure Active Directory (Azure AD) and on-premises Active Directory (Active Directory Domain Services or AD DS) are systems that store directory data and manage communication between users and resources, including user logon processes, authentication, and directory searches.+
AD DS is a server role on Windows Server, which means that it can be deployed on physical or virtual machines. It has a hierarchical structure based on X.500. It uses DNS for locating objects, can be interacted with using LDAP, and it primarily uses Kerberos for authentication. Active Directory enables organizational units (OUs) and Group Policy Objects (GPOs) in addition to joining machines to the domain, and trusts are created between domains.
Azure AD is a multi-customer public directory service, which means that within Azure AD you can create a tenant for your cloud servers and applications such as Office 365. Users and groups are created in a flat structure without OUs or GPOs. Authentication is performed through protocols such as SAML, WS-Federation, and OAuth. It's possible to query Azure AD, but instead of using LDAP you must use a REST API called AD Graph API. These all work over HTTP and HTTPS


More Reading: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-whatis

OIM: How to Change the Date Format

OIM is showing date in format MM/DD/YYYY for example on searching the user using Advanced option, if one put Start Date or End Date in criteria, It is set with US Date format (MM/DD/YYYY) but if one need these dates in DD/MM/YYYY format rather than US Format,  how this use case can be implemented ?


Displaying the date format of the "Start Date" and "End Date" fields on the user search using Advance search criteria depends on the browser date format setting.

Below are the steps to change the browser date format.

Steps provided for chrome browser and it may vary depends on the browser.

1. go to Chrome Browser

2. Click "Settings" of the browser

3. Click on "Show advanced settings" link

4. Click on "Language and input settings" button under Language section

5. Click on "Add" Button and select your country language (for example Australia)  from the language drop down list.

6. Select the added language and move it to first and Click on "Done" button.

7. Restart the Browser and verify selected country language date format is displayed for "Start Date" and "End Date" fields on the user search using Advance search criteria

Source: Oracle Doc ID: Doc ID 2204296.1 

OIM: EntityManager v/s UserManager API

In Event handlers when to use entity manager api and when to use user manager API.

  • Updating an attribute via event manager API is like a database insert or update. Thus no new orchestration event is created. Simply put this means that if an attribute updated on OIM user profile had to flow in a downstream system then event manager API is of no use.
  • However, if this (downstream flow) is not the case, then use event manager API, as it inherently takes care of infinite loop prevention in event handler code.
More details can be found at:

OIM PS3 Re-branding: Change Custom Logo


  1. Convert your custom logo to 119px x 40px (OIM default logo size). There are multiple websites to help you change the image resolution.
  2. Navigate to $MW_HOME/Oracle_IDM1/server/apps/oim.ear.
  3. Make a backup of the file 'iam-consoles-faces.war'.
  4. Copy you custom logo (my_logo.png) in the directory: '$MW_HOME/Oracle_IDM1/server/apps/oim.ear/iam-consoles-faces.war/images'.
  5. Create and Activate a sandbox in OIM.
  6. Click on Customize on the top-right corner.
  7. Click on Structure.
  8. Click on the Oracle Logo and edit the property 'commandImageLink'.
  9. Provide the following value in the 'icon' property
    • /../oim/images/my_logo.png
  10. Click on 'Apply' and then 'OK'.
  11. Publish the sandbox.
  12. Restart OIM managed server

Monday, April 17, 2017

OIM: Copy design console to Windows

·        Copy Design Console Folder to Windows from OIM_HOME
·        Edit xlclient.cmd
o   Provide Java Location: "C:\Program Files\Java\jdk1.6.0_24\bin\java"
o   Design Console Location(HomeDir): “C:\Rohit\designconsole”
o   Edit path of auth.login.config: config\authwl.conf
·        Navigate to the config folder
·        Edit xlconfig.xml
o   Give hostname and port at two places.
o   <java.naming.provider.url>t3://<OIM_HOST>:<OIM_PORT>/oim</java.naming.provider.url>
·        jrf-api.jar will also be required in ext folder of design console for resolving portability error.

·        Add the entry(for jrf-api.jar) in classpath file(classpath.bat).

Thursday, April 6, 2017

OIM: Lookup Query

SELECT LKU.LKU_TYPE_STRING_KEY AS "Lookup Name", LKV.LKV_ENCODED AS "Code Key", LKV.LKV_DECODED AS "Decode Key" from LKV, LKU 
WHERE lower(LKU.LKU_TYPE_STRING_KEY) like '<your_lookup_name_in_lower_case>' and 
LKV.lku_key = LKU.lku_key 

order by LKU.LKU_TYPE_STRING_KEY;